./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor481193115 <...> DUID 00:04:76:8b:f6:84:a4:3b:36:39:6c:68:e7:10:38:dd:b7:2c forked to background, child pid 4659 [ 29.225727][ T4660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.235526][ T4660] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.187' (ECDSA) to the list of known hosts. execve("./syz-executor481193115", ["./syz-executor481193115"], 0x7fff62c14960 /* 10 vars */) = 0 brk(NULL) = 0x555556741000 brk(0x555556741c40) = 0x555556741c40 arch_prctl(ARCH_SET_FS, 0x555556741300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 set_tid_address(0x5555567415d0) = 4992 set_robust_list(0x5555567415e0, 24) = 0 rt_sigaction(SIGRTMIN, {sa_handler=0x7ff6876cea20, sa_mask=[], sa_flags=SA_RESTORER|SA_SIGINFO, sa_restorer=0x7ff6876cf0f0}, NULL, 8) = 0 rt_sigaction(SIGRT_1, {sa_handler=0x7ff6876ceac0, sa_mask=[], sa_flags=SA_RESTORER|SA_RESTART|SA_SIGINFO, sa_restorer=0x7ff6876cf0f0}, NULL, 8) = 0 rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor481193115", 4096) = 27 brk(0x555556762c40) = 0x555556762c40 brk(0x555556763000) = 0x555556763000 mprotect(0x7ff6877b5000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567415d0) = 4993 ./strace-static-x86_64: Process 4993 attached [pid 4992] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4993] set_robust_list(0x5555567415e0, 24) = 0 [pid 4993] getpid(./strace-static-x86_64: Process 4994 attached [pid 4992] <... clone resumed>, child_tidptr=0x5555567415d0) = 4994 [pid 4992] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4993] <... getpid resumed>) = 4993 [pid 4994] set_robust_list(0x5555567415e0, 24 [pid 4993] mkdir("./syzkaller.lVUVkM", 0700./strace-static-x86_64: Process 4995 attached [pid 4994] <... set_robust_list resumed>) = 0 [pid 4992] <... clone resumed>, child_tidptr=0x5555567415d0) = 4995 [pid 4992] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4993] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 4996 attached [pid 4992] <... clone resumed>, child_tidptr=0x5555567415d0) = 4996 [pid 4992] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4996] set_robust_list(0x5555567415e0, 24 [pid 4995] set_robust_list(0x5555567415e0, 24 [pid 4994] getpid( [pid 4993] chmod("./syzkaller.lVUVkM", 0777./strace-static-x86_64: Process 4997 attached [pid 4992] <... clone resumed>, child_tidptr=0x5555567415d0) = 4997 [pid 4993] <... chmod resumed>) = 0 [pid 4993] chdir("./syzkaller.lVUVkM") = 0 [pid 4993] mkdir("./0", 0777 [pid 4992] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4997] set_robust_list(0x5555567415e0, 24 [pid 4996] <... set_robust_list resumed>) = 0 [pid 4993] <... mkdir resumed>) = 0 [pid 4995] <... set_robust_list resumed>) = 0 [pid 4993] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4993] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4993] close(3) = 0 [pid 4993] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567415d0) = 4999 ./strace-static-x86_64: Process 4998 attached [pid 4998] set_robust_list(0x5555567415e0, 24) = 0 [pid 4998] getpid() = 4998 [pid 4998] mkdir("./syzkaller.PL7eda", 0700./strace-static-x86_64: Process 4999 attached [pid 4999] set_robust_list(0x5555567415e0, 24 [pid 4998] <... mkdir resumed>) = 0 [pid 4999] <... set_robust_list resumed>) = 0 [pid 4998] chmod("./syzkaller.PL7eda", 0777 [pid 4999] chdir("./0" [pid 4998] <... chmod resumed>) = 0 [pid 4999] <... chdir resumed>) = 0 [pid 4999] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4998] chdir("./syzkaller.PL7eda" [pid 4999] setpgid(0, 0 [pid 4998] <... chdir resumed>) = 0 [pid 4999] <... setpgid resumed>) = 0 [pid 4998] mkdir("./0", 0777 [pid 4999] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4992] <... clone resumed>, child_tidptr=0x5555567415d0) = 4998 [pid 4999] write(3, "1000", 4) = 4 [pid 4999] close(3) = 0 [pid 4999] symlink("/dev/binderfs", "./binderfs" [pid 4998] <... mkdir resumed>) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 4999] <... symlink resumed>) = 0 [pid 4999] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4999] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 4999] <... mmap resumed>) = 0x7ff68769d000 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] close(3 [pid 4999] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE [pid 4995] getpid( [pid 4998] <... close resumed>) = 0 [pid 4999] <... mprotect resumed>) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4997] <... set_robust_list resumed>) = 0 [pid 4994] <... getpid resumed>) = 4994 [pid 4996] getpid( [pid 4997] getpid( [pid 4999] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4995] <... getpid resumed>) = 4995 [pid 4994] mkdir("./syzkaller.20fUYQ", 0700 [pid 4995] mkdir("./syzkaller.txkbmS", 0700 [pid 4996] <... getpid resumed>) = 4996 [pid 4999] <... clone resumed>, parent_tid=[5000], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5000 [pid 4999] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4999] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4994] <... mkdir resumed>) = 0 [pid 4996] mkdir("./syzkaller.crriMX", 0700 [pid 4998] <... clone resumed>, child_tidptr=0x5555567415d0) = 5001 [pid 4995] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 5001 attached [pid 5001] set_robust_list(0x5555567415e0, 24) = 0 [pid 4996] <... mkdir resumed>) = 0 [pid 4997] <... getpid resumed>) = 4997 [pid 5001] chdir("./0") = 0 [pid 4997] mkdir("./syzkaller.hTAWL1", 0700 [pid 5001] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5001] setpgid(0, 0) = 0 [pid 5001] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 5000 attached [pid 5000] set_robust_list(0x7ff6876bd9e0, 24 [pid 4997] <... mkdir resumed>) = 0 [pid 4996] chmod("./syzkaller.crriMX", 0777 [pid 4995] chmod("./syzkaller.txkbmS", 0777 [pid 5000] <... set_robust_list resumed>) = 0 [pid 5001] <... openat resumed>) = 3 [pid 5001] write(3, "1000", 4 [pid 5000] memfd_create("syzkaller", 0 [pid 4996] <... chmod resumed>) = 0 [pid 5001] <... write resumed>) = 4 [pid 5001] close(3 [pid 4995] <... chmod resumed>) = 0 [pid 4994] chmod("./syzkaller.20fUYQ", 0777 [pid 5001] <... close resumed>) = 0 [pid 5001] symlink("/dev/binderfs", "./binderfs" [pid 4997] chmod("./syzkaller.hTAWL1", 0777 [pid 4996] chdir("./syzkaller.crriMX" [pid 4995] chdir("./syzkaller.txkbmS" [pid 4994] <... chmod resumed>) = 0 [pid 4997] <... chmod resumed>) = 0 [pid 4996] <... chdir resumed>) = 0 [pid 4995] <... chdir resumed>) = 0 [pid 4994] chdir("./syzkaller.20fUYQ" [pid 5001] <... symlink resumed>) = 0 [pid 4996] mkdir("./0", 0777 [pid 4997] chdir("./syzkaller.hTAWL1" [pid 4995] mkdir("./0", 0777 [pid 4994] <... chdir resumed>) = 0 [pid 5001] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5001] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5001] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE [pid 4994] mkdir("./0", 0777 [pid 5001] <... mprotect resumed>) = 0 [pid 5001] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4996] <... mkdir resumed>) = 0 [pid 5001] <... clone resumed>, parent_tid=[5003], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5003 [pid 5001] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] <... mkdir resumed>) = 0 [pid 5001] <... futex resumed>) = 0 [pid 5001] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5003 attached [pid 5003] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 4994] <... mkdir resumed>) = 0 [pid 4997] <... chdir resumed>) = 0 [pid 4996] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4995] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4994] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 4997] mkdir("./0", 0777 [pid 5003] memfd_create("syzkaller", 0 [pid 4994] <... openat resumed>) = 3 [pid 5003] <... memfd_create resumed>) = 3 [pid 5003] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 4997] <... mkdir resumed>) = 0 [pid 4995] <... openat resumed>) = 3 [pid 4996] <... openat resumed>) = 3 [pid 4994] ioctl(3, LOOP_CLR_FD [pid 4997] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4995] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4994] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4996] ioctl(3, LOOP_CLR_FD [pid 4995] close(3 [pid 4997] <... openat resumed>) = 3 [pid 4994] close(3 [pid 4996] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4994] <... close resumed>) = 0 [pid 4995] <... close resumed>) = 0 [pid 4994] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4997] ioctl(3, LOOP_CLR_FD [pid 4996] close(3 [pid 4995] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4996] <... close resumed>) = 0 [pid 4997] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4996] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4995] <... clone resumed>, child_tidptr=0x5555567415d0) = 5004 [pid 4997] close(3 [pid 4994] <... clone resumed>, child_tidptr=0x5555567415d0) = 5005 [pid 5000] <... memfd_create resumed>) = 3 [pid 5000] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4997] <... close resumed>) = 0 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] <... mmap resumed>) = 0x7ff67f29d000 [pid 4996] <... clone resumed>, child_tidptr=0x5555567415d0) = 5006 [pid 4997] <... clone resumed>, child_tidptr=0x5555567415d0) = 5007 ./strace-static-x86_64: Process 5006 attached [pid 5006] set_robust_list(0x5555567415e0, 24./strace-static-x86_64: Process 5004 attached ) = 0 [pid 5006] chdir("./0") = 0 [pid 5006] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5004] set_robust_list(0x5555567415e0, 24./strace-static-x86_64: Process 5007 attached ./strace-static-x86_64: Process 5005 attached [pid 5006] setpgid(0, 0 [pid 5004] <... set_robust_list resumed>) = 0 syzkaller login: [ 56.269652][ T5000] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5000 'syz-executor481' [pid 5007] set_robust_list(0x5555567415e0, 24 [pid 5006] <... setpgid resumed>) = 0 [pid 5005] set_robust_list(0x5555567415e0, 24 [pid 5004] chdir("./0" [pid 5007] <... set_robust_list resumed>) = 0 [pid 5006] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5005] <... set_robust_list resumed>) = 0 [pid 5004] <... chdir resumed>) = 0 [pid 5005] chdir("./0" [pid 5007] chdir("./0" [pid 5005] <... chdir resumed>) = 0 [pid 5004] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5006] <... openat resumed>) = 3 [pid 5004] <... prctl resumed>) = 0 [pid 5007] <... chdir resumed>) = 0 [pid 5004] setpgid(0, 0 [pid 5005] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5007] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5006] write(3, "1000", 4 [pid 5005] <... prctl resumed>) = 0 [pid 5004] <... setpgid resumed>) = 0 [pid 5004] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5007] <... prctl resumed>) = 0 [pid 5005] setpgid(0, 0 [pid 5004] <... openat resumed>) = 3 [pid 5007] setpgid(0, 0 [pid 5006] <... write resumed>) = 4 [pid 5005] <... setpgid resumed>) = 0 [pid 5004] write(3, "1000", 4 [pid 5007] <... setpgid resumed>) = 0 [pid 5005] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5007] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5006] close(3 [pid 5007] <... openat resumed>) = 3 [pid 5006] <... close resumed>) = 0 [pid 5005] <... openat resumed>) = 3 [pid 5007] write(3, "1000", 4 [pid 5006] symlink("/dev/binderfs", "./binderfs" [pid 5005] write(3, "1000", 4 [pid 5004] <... write resumed>) = 4 [pid 5006] <... symlink resumed>) = 0 [pid 5007] <... write resumed>) = 4 [pid 5006] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] <... write resumed>) = 4 [pid 5004] close(3) = 0 [pid 5007] close(3 [pid 5005] close(3 [pid 5007] <... close resumed>) = 0 [pid 5006] <... futex resumed>) = 0 [pid 5004] symlink("/dev/binderfs", "./binderfs" [pid 5005] <... close resumed>) = 0 [pid 5004] <... symlink resumed>) = 0 [pid 5007] symlink("/dev/binderfs", "./binderfs" [pid 5006] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5005] symlink("/dev/binderfs", "./binderfs" [pid 5004] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5007] <... symlink resumed>) = 0 [pid 5006] <... mmap resumed>) = 0x7ff68769d000 [pid 5005] <... symlink resumed>) = 0 [pid 5004] <... futex resumed>) = 0 [pid 5007] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5006] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE [pid 5005] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5006] <... mprotect resumed>) = 0 [pid 5004] <... mmap resumed>) = 0x7ff68769d000 [pid 5005] <... futex resumed>) = 0 [pid 5007] <... futex resumed>) = 0 [pid 5005] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5007] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5004] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE [pid 5006] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5005] <... mmap resumed>) = 0x7ff68769d000 [pid 5007] <... mmap resumed>) = 0x7ff68769d000 [pid 5004] <... mprotect resumed>) = 0 [pid 5007] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE [pid 5005] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE [pid 5007] <... mprotect resumed>) = 0 [pid 5005] <... mprotect resumed>) = 0 [pid 5004] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5005] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5007] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5006] <... clone resumed>, parent_tid=[5008], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5008 [pid 5007] <... clone resumed>, parent_tid=[5011], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5011 [pid 5005] <... clone resumed>, parent_tid=[5010], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5010 [pid 5004] <... clone resumed>, parent_tid=[5009], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5009 [pid 5006] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5007] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5007] <... futex resumed>) = 0 [pid 5006] <... futex resumed>) = 0 [pid 5005] <... futex resumed>) = 0 [pid 5006] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5007] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5005] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5004] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5011 attached [pid 5011] set_robust_list(0x7ff6876bd9e0, 24) = 0 ./strace-static-x86_64: Process 5008 attached [pid 5008] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5011] memfd_create("syzkaller", 0./strace-static-x86_64: Process 5010 attached ./strace-static-x86_64: Process 5009 attached [pid 5008] memfd_create("syzkaller", 0 [pid 5011] <... memfd_create resumed>) = 3 [pid 5010] set_robust_list(0x7ff6876bd9e0, 24 [pid 5009] set_robust_list(0x7ff6876bd9e0, 24 [pid 5008] <... memfd_create resumed>) = 3 [pid 5010] <... set_robust_list resumed>) = 0 [pid 5009] <... set_robust_list resumed>) = 0 [pid 5008] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5011] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5010] memfd_create("syzkaller", 0 [pid 5009] memfd_create("syzkaller", 0 [pid 5008] <... mmap resumed>) = 0x7ff67f29d000 [pid 5011] <... mmap resumed>) = 0x7ff67f29d000 [pid 5010] <... memfd_create resumed>) = 3 [pid 5009] <... memfd_create resumed>) = 3 [pid 5010] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5009] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5010] <... mmap resumed>) = 0x7ff67f29d000 [pid 5009] <... mmap resumed>) = 0x7ff67f29d000 [pid 5000] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5003] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5011] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5009] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5010] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5008] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5000] <... write resumed>) = 16777216 [pid 5000] munmap(0x7ff67f29d000, 16777216) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5000] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5000] close(3) = 0 [pid 5000] mkdir("./bus", 0777) = 0 [ 57.181533][ T5000] loop0: detected capacity change from 0 to 32768 [pid 5000] mount("/dev/loop0", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "") = 0 [pid 5000] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5000] chdir("./bus") = 0 [pid 5000] ioctl(4, LOOP_CLR_FD) = 0 [pid 5000] close(4) = 0 [pid 5000] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4999] <... futex resumed>) = 0 [pid 4999] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4999] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5000] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5000] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4999] <... futex resumed>) = 0 [pid 4999] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4999] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5000] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5011] <... write resumed>) = 16777216 [pid 5003] <... write resumed>) = 16777216 [pid 5000] <... open resumed>) = 5 [pid 5011] munmap(0x7ff67f29d000, 16777216 [pid 5003] munmap(0x7ff67f29d000, 16777216 [pid 5000] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4999] <... futex resumed>) = 0 [pid 5000] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 4999] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4999] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5000] <... mmap resumed>) = 0x20000000 [pid 5000] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4999] <... futex resumed>) = 0 [pid 4999] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] ftruncate(4, 33587199 [pid 4999] <... futex resumed>) = 0 [pid 4999] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5000] <... ftruncate resumed>) = 0 [pid 5000] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4999] <... futex resumed>) = 0 [pid 4999] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4999] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5000] open("./bus", O_RDONLY) = 6 [pid 5000] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5011] <... munmap resumed>) = 0 [pid 5008] <... write resumed>) = 16777216 [pid 5000] <... futex resumed>) = 1 [pid 4999] <... futex resumed>) = 0 [pid 4999] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4999] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5009] <... write resumed>) = 16777216 [pid 5009] munmap(0x7ff67f29d000, 16777216 [pid 5000] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5011] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5000] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4999] <... futex resumed>) = 0 [pid 4999] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4999] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5000] dup(7 [pid 5011] <... openat resumed>) = 4 [pid 5000] <... dup resumed>) = 8 [pid 5000] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4999] <... futex resumed>) = 0 [pid 4999] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4999] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5011] ioctl(4, LOOP_SET_FD, 3 [pid 5000] memfd_create("syzkaller", 0) = 9 [ 57.323577][ T27] audit: type=1804 audit(1686284862.167:2): pid=5000 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor481" name="/root/syzkaller.lVUVkM/0/bus/bus" dev="loop0" ino=7 res=1 errno=0 [pid 5009] <... munmap resumed>) = 0 [pid 5008] munmap(0x7ff67f29d000, 16777216 [pid 5000] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5011] <... ioctl resumed>) = 0 [pid 5008] <... munmap resumed>) = 0 [pid 5003] <... munmap resumed>) = 0 [pid 5000] <... mmap resumed>) = 0x7ff677e9d000 [pid 5011] close(3 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5009] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5009] ioctl(4, LOOP_SET_FD, 3 [pid 5011] <... close resumed>) = 0 [pid 5010] <... write resumed>) = 16777216 [pid 5003] <... openat resumed>) = 4 [pid 5011] mkdir("./bus", 0777 [pid 5010] munmap(0x7ff67f29d000, 16777216 [pid 5003] ioctl(4, LOOP_SET_FD, 3 [pid 5011] <... mkdir resumed>) = 0 [pid 5008] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5008] ioctl(4, LOOP_SET_FD, 3 [ 57.375770][ T5011] loop4: detected capacity change from 0 to 32768 [ 57.398871][ T5009] loop2: detected capacity change from 0 to 32768 [ 57.407345][ T5003] loop5: detected capacity change from 0 to 32768 [ 57.409946][ T5008] loop3: detected capacity change from 0 to 32768 [pid 5011] mount("/dev/loop4", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "") = 0 [pid 5010] <... munmap resumed>) = 0 [pid 5009] <... ioctl resumed>) = 0 [pid 5008] <... ioctl resumed>) = 0 [pid 5003] <... ioctl resumed>) = 0 [pid 5000] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5011] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5010] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5003] close(3 [pid 5011] <... openat resumed>) = 3 [pid 5010] <... openat resumed>) = 4 [pid 5003] <... close resumed>) = 0 [pid 5011] chdir("./bus" [pid 5010] ioctl(4, LOOP_SET_FD, 3 [pid 5003] mkdir("./bus", 0777 [pid 5011] <... chdir resumed>) = 0 [pid 5009] close(3 [pid 5008] close(3 [pid 5003] <... mkdir resumed>) = 0 [pid 5011] ioctl(4, LOOP_CLR_FD [pid 5009] <... close resumed>) = 0 [pid 5008] <... close resumed>) = 0 [pid 5003] mount("/dev/loop5", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5011] <... ioctl resumed>) = 0 [pid 5010] <... ioctl resumed>) = 0 [pid 5009] mkdir("./bus", 0777 [pid 5008] mkdir("./bus", 0777 [pid 5000] <... write resumed>) = 2097152 [pid 5011] close(4 [pid 5010] close(3 [pid 5009] <... mkdir resumed>) = 0 [pid 5003] <... mount resumed>) = 0 [pid 5000] munmap(0x7ff677e9d000, 2097152 [pid 5008] <... mkdir resumed>) = 0 [pid 5011] <... close resumed>) = 0 [pid 5009] mount("/dev/loop2", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5011] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5008] mount("/dev/loop3", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5000] <... munmap resumed>) = 0 [pid 5011] <... futex resumed>) = 1 [pid 5007] <... futex resumed>) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5011] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5007] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5011] <... open resumed>) = 4 [pid 5007] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5000] <... openat resumed>) = 10 [pid 5011] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] ioctl(10, LOOP_SET_FD, 9 [pid 5011] <... futex resumed>) = 1 [pid 5007] <... futex resumed>) = 0 [pid 5000] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5011] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5007] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] ioctl(10, LOOP_CLR_FD [pid 5011] <... open resumed>) = 5 [pid 5007] <... futex resumed>) = 0 [pid 5000] <... ioctl resumed>) = 0 [pid 5011] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5009] <... mount resumed>) = 0 [pid 5008] <... mount resumed>) = 0 [pid 5007] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5003] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5011] <... futex resumed>) = 0 [pid 5010] <... close resumed>) = 0 [pid 5009] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5008] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5007] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5003] <... openat resumed>) = 3 [ 57.421736][ T27] audit: type=1804 audit(1686284862.207:3): pid=5000 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor481" name="/root/syzkaller.lVUVkM/0/bus/bus" dev="loop0" ino=7 res=1 errno=0 [ 57.443923][ T5010] loop1: detected capacity change from 0 to 32768 [pid 5011] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5010] mkdir("./bus", 0777 [pid 5009] <... openat resumed>) = 3 [pid 5008] <... openat resumed>) = 3 [pid 5007] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5003] chdir("./bus" [pid 5011] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5009] chdir("./bus" [pid 5008] chdir("./bus" [pid 5007] <... futex resumed>) = 0 [pid 5003] <... chdir resumed>) = 0 [pid 5000] ioctl(10, LOOP_SET_FD, 9 [pid 5010] <... mkdir resumed>) = 0 [pid 5011] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5009] <... chdir resumed>) = 0 [pid 5008] <... chdir resumed>) = 0 [pid 5007] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5003] ioctl(4, LOOP_CLR_FD [pid 5000] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5009] ioctl(4, LOOP_CLR_FD [pid 5000] close(10 [pid 5009] <... ioctl resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 5009] close(4 [pid 5000] close(9 [pid 5011] <... mmap resumed>) = 0x20000000 [pid 5010] mount("/dev/loop1", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5009] <... close resumed>) = 0 [pid 5008] ioctl(4, LOOP_CLR_FD [pid 5003] <... ioctl resumed>) = 0 [pid 5011] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5009] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5008] <... ioctl resumed>) = 0 [pid 5003] close(4 [pid 5000] <... close resumed>) = 0 [pid 5011] <... futex resumed>) = 1 [pid 5009] <... futex resumed>) = 1 [pid 5008] close(4 [pid 5007] <... futex resumed>) = 0 [pid 5004] <... futex resumed>) = 0 [pid 5003] <... close resumed>) = 0 [pid 5011] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5009] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5008] <... close resumed>) = 0 [pid 5007] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5003] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5011] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5009] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5008] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5007] <... futex resumed>) = 0 [pid 5004] <... futex resumed>) = 0 [pid 5003] <... futex resumed>) = 1 [pid 5001] <... futex resumed>) = 0 [pid 5011] ftruncate(4, 33587199 [pid 5010] <... mount resumed>) = 0 [pid 5009] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5008] <... futex resumed>) = 1 [pid 5007] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5006] <... futex resumed>) = 0 [pid 5004] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5003] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5001] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5011] <... ftruncate resumed>) = 0 [pid 5010] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5008] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5006] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5011] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5010] <... openat resumed>) = 3 [pid 5009] <... open resumed>) = 4 [pid 5008] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5006] <... futex resumed>) = 0 [pid 5003] <... open resumed>) = 4 [pid 5001] <... futex resumed>) = 0 [pid 5000] <... futex resumed>) = 1 [pid 4999] <... futex resumed>) = 0 [pid 5011] <... futex resumed>) = 1 [pid 5010] chdir("./bus" [pid 5008] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5007] <... futex resumed>) = 0 [pid 5006] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5003] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5011] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5010] <... chdir resumed>) = 0 [pid 5009] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5000] sendfile(8, 6, NULL, 281474978811908 [pid 4999] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5011] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5010] ioctl(4, LOOP_CLR_FD [pid 5009] <... futex resumed>) = 1 [pid 5008] <... open resumed>) = 4 [pid 5007] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] <... futex resumed>) = 0 [pid 5003] <... futex resumed>) = 0 [pid 5001] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4999] <... futex resumed>) = 0 [pid 5011] open("./bus", O_RDONLY [pid 5010] <... ioctl resumed>) = 0 [pid 5009] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5008] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5007] <... futex resumed>) = 0 [pid 5004] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5003] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5001] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5011] <... open resumed>) = 6 [pid 5010] close(4 [pid 5009] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5001] <... futex resumed>) = 0 [pid 5011] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5010] <... close resumed>) = 0 [pid 5009] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5008] <... futex resumed>) = 1 [pid 5007] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5006] <... futex resumed>) = 0 [pid 5004] <... futex resumed>) = 0 [pid 5003] <... open resumed>) = 5 [pid 5001] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5011] <... futex resumed>) = 0 [pid 5010] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5009] <... open resumed>) = 5 [pid 5008] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5007] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5006] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5003] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5011] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5010] <... futex resumed>) = 1 [pid 5009] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5008] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5007] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5006] <... futex resumed>) = 0 [pid 5005] <... futex resumed>) = 0 [pid 5004] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5003] <... futex resumed>) = 0 [pid 5001] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5011] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5010] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5009] <... futex resumed>) = 0 [pid 5008] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5007] <... futex resumed>) = 0 [pid 5006] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5005] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5003] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5001] <... futex resumed>) = 0 [pid 5011] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5010] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5009] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5008] <... open resumed>) = 5 [pid 5007] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5005] <... futex resumed>) = 0 [pid 5004] <... futex resumed>) = 0 [pid 5001] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5011] <... open resumed>) = 7 [pid 5010] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5009] <... mmap resumed>) = 0x20000000 [pid 5008] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5004] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5003] <... mmap resumed>) = 0x20000000 [pid 5011] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5009] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5010] <... open resumed>) = 4 [pid 5008] <... futex resumed>) = 1 [pid 5011] <... futex resumed>) = 1 [pid 5010] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5009] <... futex resumed>) = 0 [pid 5007] <... futex resumed>) = 0 [pid 5006] <... futex resumed>) = 0 [pid 5004] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5003] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5008] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5011] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5010] <... futex resumed>) = 1 [pid 5009] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5008] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5007] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5006] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] <... futex resumed>) = 0 [pid 5004] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5003] <... futex resumed>) = 1 [pid 5001] <... futex resumed>) = 0 [pid 5011] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5010] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5009] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5008] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5007] <... futex resumed>) = 0 [pid 5006] <... futex resumed>) = 0 [pid 5005] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] <... futex resumed>) = 0 [pid 5003] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5001] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5011] dup(7 [pid 5010] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5009] ftruncate(4, 33587199 [pid 5011] <... dup resumed>) = 8 [pid 5010] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5009] <... ftruncate resumed>) = 0 [pid 5008] <... mmap resumed>) = 0x20000000 [pid 5007] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5006] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5005] <... futex resumed>) = 0 [pid 5004] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5003] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5001] <... futex resumed>) = 0 [pid 5011] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5010] <... open resumed>) = 5 [pid 5009] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5008] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5007] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5005] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5004] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5003] ftruncate(4, 33587199 [pid 5001] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5011] <... futex resumed>) = 0 [pid 5010] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5009] <... futex resumed>) = 0 [pid 5008] <... futex resumed>) = 1 [pid 5007] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5006] <... futex resumed>) = 0 [pid 5005] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5004] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5003] <... ftruncate resumed>) = 0 [ 57.528663][ T27] audit: type=1804 audit(1686284862.367:4): pid=5011 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor481" name="/root/syzkaller.hTAWL1/0/bus/bus" dev="loop4" ino=7 res=1 errno=0 [pid 5009] open("./bus", O_RDONLY [pid 5011] memfd_create("syzkaller", 0 [pid 5010] <... futex resumed>) = 0 [pid 5009] <... open resumed>) = 6 [pid 5008] ftruncate(4, 33587199 [pid 5007] <... futex resumed>) = 0 [pid 5006] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] <... futex resumed>) = 0 [pid 5003] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5011] <... memfd_create resumed>) = 9 [pid 5010] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5009] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5008] <... ftruncate resumed>) = 0 [pid 5007] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5006] <... futex resumed>) = 0 [pid 5005] <... futex resumed>) = 0 [pid 5004] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5003] <... futex resumed>) = 1 [pid 5001] <... futex resumed>) = 0 [pid 5010] <... mmap resumed>) = 0x20000000 [pid 5009] <... futex resumed>) = 0 [pid 5006] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5005] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5004] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5001] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5011] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5010] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5009] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5008] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5003] open("./bus", O_RDONLY [pid 5001] <... futex resumed>) = 0 [pid 5011] <... mmap resumed>) = 0x7ff677e9d000 [pid 5010] <... futex resumed>) = 1 [pid 5009] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5008] <... futex resumed>) = 1 [pid 5006] <... futex resumed>) = 0 [pid 5005] <... futex resumed>) = 0 [pid 5004] <... futex resumed>) = 0 [pid 5001] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5010] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5009] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5008] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5006] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5003] <... open resumed>) = 6 [pid 4999] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5010] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5009] <... open resumed>) = 7 [pid 5008] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5006] <... futex resumed>) = 0 [pid 5005] <... futex resumed>) = 0 [pid 5003] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... futex resumed>) = 0 [pid 5010] ftruncate(4, 33587199 [pid 5009] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5008] open("./bus", O_RDONLY [pid 5006] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5005] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5003] <... futex resumed>) = 1 [pid 5001] <... futex resumed>) = 0 [pid 4999] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5010] <... ftruncate resumed>) = 0 [pid 5009] <... futex resumed>) = 1 [pid 5008] <... open resumed>) = 6 [pid 5004] <... futex resumed>) = 0 [pid 5003] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5001] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... mmap resumed>) = 0x7ff67807c000 [pid 5010] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5009] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5008] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5003] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5001] <... futex resumed>) = 0 [pid 4999] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5010] <... futex resumed>) = 1 [pid 5009] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5008] <... futex resumed>) = 1 [pid 5006] <... futex resumed>) = 0 [pid 5005] <... futex resumed>) = 0 [pid 5004] <... futex resumed>) = 0 [pid 5003] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5001] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] <... mprotect resumed>) = 0 [pid 5010] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5009] dup(7 [pid 5008] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5006] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5010] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5009] <... dup resumed>) = 8 [pid 5008] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5006] <... futex resumed>) = 0 [pid 5005] <... futex resumed>) = 0 [pid 5003] <... open resumed>) = 7 [pid 5009] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... clone resumed>, parent_tid=[5014], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5014 [pid 5009] <... futex resumed>) = 1 [pid 4999] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5010] open("./bus", O_RDONLY) = 6 [pid 5009] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5008] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5006] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5005] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5004] <... futex resumed>) = 0 [pid 5003] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5014 attached [pid 5010] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5008] <... open resumed>) = 7 [pid 5005] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5004] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5003] <... futex resumed>) = 1 [pid 5001] <... futex resumed>) = 0 [pid 4999] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5014] set_robust_list(0x7ff67809c9e0, 24 [pid 5010] <... futex resumed>) = 0 [pid 5009] <... futex resumed>) = 0 [pid 5008] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] <... futex resumed>) = 1 [pid 5003] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5001] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5014] <... set_robust_list resumed>) = 0 [ 57.612436][ T27] audit: type=1804 audit(1686284862.407:5): pid=5011 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor481" name="/root/syzkaller.hTAWL1/0/bus/bus" dev="loop4" ino=7 res=1 errno=0 [pid 5010] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5009] memfd_create("syzkaller", 0 [pid 5014] sync( [pid 5010] <... open resumed>) = 7 [pid 5009] <... memfd_create resumed>) = 9 [pid 5008] <... futex resumed>) = 1 [pid 5006] <... futex resumed>) = 0 [pid 5005] <... futex resumed>) = 0 [pid 5004] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5003] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5001] <... futex resumed>) = 0 [pid 5010] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5009] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5008] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5006] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5003] dup(7 [pid 5001] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5010] <... futex resumed>) = 0 [pid 5009] <... mmap resumed>) = 0x7ff677e9d000 [pid 5008] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5006] <... futex resumed>) = 0 [pid 5005] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5003] <... dup resumed>) = 8 [pid 5011] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5010] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5008] dup(7 [pid 5006] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5005] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5003] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5010] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 57.687215][ T27] audit: type=1804 audit(1686284862.427:6): pid=5009 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor481" name="/root/syzkaller.txkbmS/0/bus/bus" dev="loop2" ino=7 res=1 errno=0 [pid 5008] <... dup resumed>) = 8 [pid 5005] <... futex resumed>) = 0 [pid 5003] <... futex resumed>) = 1 [pid 5001] <... futex resumed>) = 0 [pid 4999] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5011] <... write resumed>) = 2097152 [pid 5010] dup(7 [pid 5008] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5003] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5001] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5011] munmap(0x7ff677e9d000, 2097152 [pid 5010] <... dup resumed>) = 8 [pid 5008] <... futex resumed>) = 1 [pid 5003] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5001] <... futex resumed>) = 0 [pid 5011] <... munmap resumed>) = 0 [pid 5010] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5006] <... futex resumed>) = 0 [pid 5001] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5010] <... futex resumed>) = 1 [pid 5008] memfd_create("syzkaller", 0 [pid 5006] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] <... futex resumed>) = 0 [pid 5011] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5010] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5008] <... memfd_create resumed>) = 9 [pid 5006] <... futex resumed>) = 0 [pid 5005] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5003] memfd_create("syzkaller", 0 [pid 5011] <... openat resumed>) = 10 [pid 5010] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5009] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5008] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5006] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5005] <... futex resumed>) = 0 [pid 5003] <... memfd_create resumed>) = 9 [pid 5011] ioctl(10, LOOP_SET_FD, 9 [pid 5010] memfd_create("syzkaller", 0 [pid 5008] <... mmap resumed>) = 0x7ff677e9d000 [pid 5005] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5003] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [ 57.731072][ T27] audit: type=1804 audit(1686284862.447:7): pid=5003 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor481" name="/root/syzkaller.PL7eda/0/bus/bus" dev="loop5" ino=7 res=1 errno=0 [ 57.754474][ T27] audit: type=1804 audit(1686284862.447:8): pid=5009 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor481" name="/root/syzkaller.txkbmS/0/bus/bus" dev="loop2" ino=7 res=1 errno=0 [pid 5011] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5010] <... memfd_create resumed>) = 9 [pid 5003] <... mmap resumed>) = 0x7ff677e9d000 [pid 5011] ioctl(10, LOOP_CLR_FD [pid 5010] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5011] <... ioctl resumed>) = 0 [pid 5010] <... mmap resumed>) = 0x7ff677e9d000 [pid 5011] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5011] close(10) = 0 [pid 5011] close(9) = 0 [pid 5011] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5009] <... write resumed>) = 2097152 [pid 5007] <... futex resumed>) = 0 [pid 5011] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5007] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5011] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5009] munmap(0x7ff677e9d000, 2097152 [pid 5007] <... futex resumed>) = 0 [pid 5011] sendfile(8, 6, NULL, 281474978811908 [pid 5007] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5009] <... munmap resumed>) = 0 [pid 5009] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 10 [pid 5009] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5009] ioctl(10, LOOP_CLR_FD) = 0 [pid 5008] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5010] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5009] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5007] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5009] close(10) = 0 [pid 5009] close(9) = 0 [pid 5003] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5007] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5007] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff67807c000 [pid 5007] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5007] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5017], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5017 [pid 5007] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 57.922674][ T27] audit: type=1804 audit(1686284862.457:9): pid=5008 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor481" name="/root/syzkaller.crriMX/0/bus/bus" dev="loop3" ino=7 res=1 errno=0 [pid 5007] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5017 attached [pid 5017] set_robust_list(0x7ff67809c9e0, 24 [pid 5009] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5017] <... set_robust_list resumed>) = 0 [pid 5009] <... futex resumed>) = 1 [pid 5004] <... futex resumed>) = 0 [pid 5009] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5004] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5009] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5004] <... futex resumed>) = 0 [pid 5009] sendfile(8, 6, NULL, 281474978811908 [pid 5004] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5017] sync( [pid 5010] <... write resumed>) = 2097152 [pid 5008] <... write resumed>) = 2097152 [pid 5007] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5010] munmap(0x7ff677e9d000, 2097152 [pid 5008] munmap(0x7ff677e9d000, 2097152 [pid 5010] <... munmap resumed>) = 0 [pid 5008] <... munmap resumed>) = 0 [pid 5010] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5008] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5010] <... openat resumed>) = 10 [pid 5008] <... openat resumed>) = 10 [pid 5010] ioctl(10, LOOP_SET_FD, 9 [pid 5008] ioctl(10, LOOP_SET_FD, 9 [pid 5010] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5008] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5004] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5010] ioctl(10, LOOP_CLR_FD [pid 5008] ioctl(10, LOOP_CLR_FD [pid 5004] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5010] <... ioctl resumed>) = 0 [pid 5008] <... ioctl resumed>) = 0 [pid 5004] <... futex resumed>) = 0 [pid 5004] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff67807c000 [pid 5010] ioctl(10, LOOP_SET_FD, 9 [pid 5008] ioctl(10, LOOP_SET_FD, 9 [pid 5004] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5010] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5008] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5004] <... mprotect resumed>) = 0 [pid 5010] close(10 [pid 5008] close(10 [pid 5004] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5010] <... close resumed>) = 0 [pid 5008] <... close resumed>) = 0 [pid 5003] <... write resumed>) = 2097152 [pid 5010] close(9 [pid 5008] close(9) = 0 [pid 5004] <... clone resumed>, parent_tid=[5018], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5018 [pid 5004] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5004] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5010] <... close resumed>) = 0 [pid 5003] munmap(0x7ff677e9d000, 2097152./strace-static-x86_64: Process 5018 attached [pid 5018] set_robust_list(0x7ff67809c9e0, 24 [pid 5008] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5018] <... set_robust_list resumed>) = 0 [pid 5010] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5008] <... futex resumed>) = 1 [pid 5006] <... futex resumed>) = 0 [pid 5018] sync( [pid 5010] <... futex resumed>) = 1 [pid 5008] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5006] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] <... futex resumed>) = 0 [pid 5010] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5008] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5006] <... futex resumed>) = 0 [pid 5005] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5003] <... munmap resumed>) = 0 [pid 5010] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5008] sendfile(8, 6, NULL, 281474978811908 [pid 5006] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5005] <... futex resumed>) = 0 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5010] sendfile(8, 6, NULL, 281474978811908 [pid 5005] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5004] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5003] <... openat resumed>) = 10 [pid 5003] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5003] ioctl(10, LOOP_CLR_FD) = 0 [pid 5003] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5003] close(10) = 0 [ 58.131283][ T27] audit: type=1804 audit(1686284862.487:10): pid=5003 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor481" name="/root/syzkaller.PL7eda/0/bus/bus" dev="loop5" ino=7 res=1 errno=0 [pid 5003] close(9) = 0 [pid 5003] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5001] <... futex resumed>) = 0 [pid 5003] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5001] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5006] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5003] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5001] <... futex resumed>) = 0 [pid 5006] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5003] sendfile(8, 6, NULL, 281474978811908 [pid 5001] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5006] <... futex resumed>) = 0 [pid 5005] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5006] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5005] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5006] <... mmap resumed>) = 0x7ff67807c000 [pid 5005] <... futex resumed>) = 0 [pid 5006] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5005] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5006] <... mprotect resumed>) = 0 [pid 5005] <... mmap resumed>) = 0x7ff67807c000 [pid 5006] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5005] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5006] <... clone resumed>, parent_tid=[5019], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5019 [pid 5005] <... mprotect resumed>) = 0 [pid 5006] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5019 attached [pid 5006] <... futex resumed>) = 0 [pid 5019] set_robust_list(0x7ff67809c9e0, 24 [pid 5006] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5005] <... clone resumed>, parent_tid=[5020], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5020 ./strace-static-x86_64: Process 5020 attached [pid 5019] <... set_robust_list resumed>) = 0 [pid 5005] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5020] set_robust_list(0x7ff67809c9e0, 24 [pid 5019] sync( [pid 5005] <... futex resumed>) = 0 [pid 5001] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5020] <... set_robust_list resumed>) = 0 [pid 5005] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5001] <... futex resumed>) = 0 [pid 5020] sync( [pid 5001] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff67807c000 [pid 5006] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5001] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5005] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5001] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5021], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5021 [ 58.316319][ T27] audit: type=1804 audit(1686284862.507:11): pid=5010 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor481" name="/root/syzkaller.20fUYQ/0/bus/bus" dev="loop1" ino=7 res=1 errno=0 [pid 5001] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5021 attached ) = 0 [pid 5021] set_robust_list(0x7ff67809c9e0, 24 [pid 5001] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5021] <... set_robust_list resumed>) = 0 [pid 5021] sync( [pid 4999] exit_group(0 [pid 5000] <... sendfile resumed>) = ? [pid 4999] <... exit_group resumed>) = ? [pid 5000] +++ exited with 0 +++ [pid 5001] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5007] exit_group(0 [pid 5011] <... sendfile resumed>) = ? [pid 5007] <... exit_group resumed>) = ? [pid 5011] +++ exited with 0 +++ [pid 5004] exit_group(0) = ? [pid 5009] <... sendfile resumed>) = ? [pid 5009] +++ exited with 0 +++ [pid 5006] exit_group(0) = ? [pid 5008] <... sendfile resumed>) = ? [pid 5008] +++ exited with 0 +++ [pid 5005] exit_group(0) = ? [pid 5010] <... sendfile resumed>) = ? [pid 5010] +++ exited with 0 +++ [pid 5021] <... sync resumed>) = 0 [pid 5020] <... sync resumed>) = ? [pid 5019] <... sync resumed>) = ? [pid 5018] <... sync resumed>) = ? [pid 5017] <... sync resumed>) = ? [pid 5014] <... sync resumed>) = ? [pid 5021] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5020] +++ exited with 0 +++ [pid 5017] +++ exited with 0 +++ [pid 5007] +++ exited with 0 +++ [pid 5005] +++ exited with 0 +++ [pid 5021] <... futex resumed>) = 0 [pid 5019] +++ exited with 0 +++ [pid 5014] +++ exited with 0 +++ [pid 5006] +++ exited with 0 +++ [pid 4999] +++ exited with 0 +++ [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5007, si_uid=0, si_status=0, si_utime=12 /* 0.12 s */, si_stime=33 /* 0.33 s */} --- [pid 4994] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5005, si_uid=0, si_status=0, si_utime=13 /* 0.13 s */, si_stime=38 /* 0.38 s */} --- [pid 5018] +++ exited with 0 +++ [pid 5004] +++ exited with 0 +++ [pid 5021] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4995] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5004, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=37 /* 0.37 s */} --- [pid 4997] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5006, si_uid=0, si_status=0, si_utime=12 /* 0.12 s */, si_stime=27 /* 0.27 s */} --- [pid 4994] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4993] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4999, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=40 /* 0.40 s */} --- [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4996] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4993] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4993] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4996] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4993] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] <... openat resumed>) = 3 [pid 4996] <... openat resumed>) = 3 [pid 4994] <... openat resumed>) = 3 [pid 4993] <... openat resumed>) = 3 [pid 4997] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] fstat(3, [pid 4994] fstat(3, [pid 4993] fstat(3, [pid 4997] getdents64(3, [pid 4996] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4993] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] <... getdents64 resumed>0x555556742620 /* 4 entries */, 32768) = 104 [pid 4996] getdents64(3, [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] getdents64(3, [pid 4993] getdents64(3, [pid 4997] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] <... getdents64 resumed>0x555556742620 /* 4 entries */, 32768) = 104 [pid 4995] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4994] <... getdents64 resumed>0x555556742620 /* 4 entries */, 32768) = 104 [pid 4993] <... getdents64 resumed>0x555556742620 /* 4 entries */, 32768) = 104 [pid 4996] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] <... openat resumed>) = 3 [pid 4994] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4993] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] getdents64(3, 0x555556742620 /* 4 entries */, 32768) = 104 [pid 4995] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] exit_group(0 [pid 5021] <... futex resumed>) = ? [pid 5001] <... exit_group resumed>) = ? [pid 5021] +++ exited with 0 +++ [pid 5003] <... sendfile resumed>) = ? [pid 5003] +++ exited with 0 +++ [pid 5001] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5001, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=41 /* 0.41 s */} --- [pid 4998] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x555556742620 /* 4 entries */, 32768) = 104 [pid 4998] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... umount2 resumed>) = 0 [pid 4997] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./0/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./0/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4997] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4997] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4997] close(4) = 0 [pid 4997] rmdir("./0/bus") = 0 [pid 4997] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] unlink("./0/binderfs") = 0 [pid 4997] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4997] close(3) = 0 [pid 4997] rmdir("./0") = 0 [pid 4997] mkdir("./1", 0777) = 0 [pid 4997] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 4997] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4997] close(3) = 0 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567415d0) = 5023 ./strace-static-x86_64: Process 5023 attached [pid 5023] set_robust_list(0x5555567415e0, 24) = 0 [pid 5023] chdir("./1") = 0 [pid 5023] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5023] setpgid(0, 0) = 0 [pid 5023] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5023] write(3, "1000", 4) = 4 [pid 5023] close(3) = 0 [pid 5023] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5023] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5023] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5023] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5023] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5024], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5024 [pid 5023] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5023] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5024 attached [pid 5024] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 4994] <... umount2 resumed>) = 0 [pid 5024] memfd_create("syzkaller", 0 [pid 4994] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] lstat("./0/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5024] <... memfd_create resumed>) = 3 [pid 5024] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4994] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] openat(AT_FDCWD, "./0/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4994] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] getdents64(4, [pid 5024] <... mmap resumed>) = 0x7ff67f29d000 [pid 4994] <... getdents64 resumed>0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4996] <... umount2 resumed>) = 0 [pid 4993] <... umount2 resumed>) = 0 [pid 4996] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4994] close(4) = 0 [pid 4994] rmdir("./0/bus") = 0 [pid 4994] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4994] unlink("./0/binderfs") = 0 [pid 4994] getdents64(3, [pid 4993] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] <... getdents64 resumed>0x555556742620 /* 0 entries */, 32768) = 0 [pid 4994] close(3 [pid 4993] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] <... close resumed>) = 0 [pid 4993] lstat("./0/bus", [pid 4994] rmdir("./0" [pid 4993] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] <... rmdir resumed>) = 0 [pid 4994] mkdir("./1", 0777 [pid 4993] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4993] openat(AT_FDCWD, "./0/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4993] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] <... mkdir resumed>) = 0 [pid 4993] getdents64(4, [pid 4994] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 4993] <... getdents64 resumed>0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4993] getdents64(4, [pid 4994] <... openat resumed>) = 3 [pid 4993] <... getdents64 resumed>0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4993] close(4) = 0 [pid 4993] rmdir("./0/bus" [pid 4994] ioctl(3, LOOP_CLR_FD [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4996] lstat("./0/bus", [pid 4994] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4993] <... rmdir resumed>) = 0 [pid 4994] close(3) = 0 [pid 4994] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567415d0) = 5025 [pid 4996] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] openat(AT_FDCWD, "./0/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4993] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] fstat(4, [pid 4993] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5025 attached [pid 4996] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4993] lstat("./0/binderfs", [pid 5025] set_robust_list(0x5555567415e0, 24) = 0 [pid 4996] getdents64(4, [pid 4993] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5025] chdir("./1" [pid 4996] <... getdents64 resumed>0x55555674a660 /* 2 entries */, 32768) = 48 [pid 5025] <... chdir resumed>) = 0 [pid 4996] getdents64(4, [pid 4993] unlink("./0/binderfs" [pid 5025] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4996] <... getdents64 resumed>0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4993] <... unlink resumed>) = 0 [pid 5025] setpgid(0, 0 [pid 4996] close(4 [pid 5025] <... setpgid resumed>) = 0 [pid 4996] <... close resumed>) = 0 [pid 4993] getdents64(3, [pid 5025] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4996] rmdir("./0/bus" [pid 4993] <... getdents64 resumed>0x555556742620 /* 0 entries */, 32768) = 0 [pid 5025] <... openat resumed>) = 3 [pid 4996] <... rmdir resumed>) = 0 [pid 4993] close(3 [pid 5025] write(3, "1000", 4 [pid 4996] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4993] <... close resumed>) = 0 [pid 5025] <... write resumed>) = 4 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4993] rmdir("./0" [pid 5025] close(3 [pid 4996] lstat("./0/binderfs", [pid 4993] <... rmdir resumed>) = 0 [pid 5025] <... close resumed>) = 0 [pid 4996] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4993] mkdir("./1", 0777 [pid 5025] symlink("/dev/binderfs", "./binderfs" [pid 4996] unlink("./0/binderfs" [pid 4993] <... mkdir resumed>) = 0 [pid 5025] <... symlink resumed>) = 0 [pid 4996] <... unlink resumed>) = 0 [pid 4993] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5025] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] getdents64(3, [pid 4993] <... openat resumed>) = 3 [pid 5025] <... futex resumed>) = 0 [pid 4996] <... getdents64 resumed>0x555556742620 /* 0 entries */, 32768) = 0 [pid 4993] ioctl(3, LOOP_CLR_FD [pid 5025] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4996] close(3 [pid 4993] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5025] <... mmap resumed>) = 0x7ff68769d000 [pid 4996] <... close resumed>) = 0 [pid 4993] close(3 [pid 5025] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE [pid 4996] rmdir("./0" [pid 4993] <... close resumed>) = 0 [pid 5025] <... mprotect resumed>) = 0 [pid 4996] <... rmdir resumed>) = 0 [pid 4993] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5025] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4996] mkdir("./1", 0777) = 0 [pid 4993] <... clone resumed>, child_tidptr=0x5555567415d0) = 5026 [pid 5025] <... clone resumed>, parent_tid=[5027], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5027 [pid 4996] openat(AT_FDCWD, "/dev/loop3", O_RDWR./strace-static-x86_64: Process 5027 attached ./strace-static-x86_64: Process 5026 attached [pid 5025] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... openat resumed>) = 3 [pid 5027] set_robust_list(0x7ff6876bd9e0, 24 [pid 5026] set_robust_list(0x5555567415e0, 24 [pid 5025] <... futex resumed>) = 0 [pid 4996] ioctl(3, LOOP_CLR_FD [pid 5027] <... set_robust_list resumed>) = 0 [pid 5026] <... set_robust_list resumed>) = 0 [pid 5025] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4996] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5027] memfd_create("syzkaller", 0 [pid 4996] close(3 [pid 5027] <... memfd_create resumed>) = 3 [pid 5026] chdir("./1" [pid 4996] <... close resumed>) = 0 [pid 4996] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567415d0) = 5028 [pid 5027] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5026] <... chdir resumed>) = 0 [pid 5027] <... mmap resumed>) = 0x7ff67f29d000 [pid 5026] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5026] setpgid(0, 0) = 0 [pid 5026] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5026] write(3, "1000", 4) = 4 [pid 5026] close(3) = 0 [pid 5026] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5026] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5026] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5026] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5026] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5029], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5029 ./strace-static-x86_64: Process 5028 attached [pid 5026] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5028] set_robust_list(0x5555567415e0, 24 [pid 5026] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5028] <... set_robust_list resumed>) = 0 [pid 5028] chdir("./1"./strace-static-x86_64: Process 5029 attached [pid 5029] set_robust_list(0x7ff6876bd9e0, 24 [pid 5028] <... chdir resumed>) = 0 [pid 5029] <... set_robust_list resumed>) = 0 [pid 5029] memfd_create("syzkaller", 0) = 3 [pid 5029] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 5028] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5028] setpgid(0, 0) = 0 [pid 5028] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5028] write(3, "1000", 4) = 4 [pid 5028] close(3) = 0 [pid 5028] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5028] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5028] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5028] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5028] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5030], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5030 [pid 5028] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5028] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5024] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216./strace-static-x86_64: Process 5030 attached [pid 5030] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5030] memfd_create("syzkaller", 0) = 3 [pid 5030] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 4998] <... umount2 resumed>) = 0 [pid 4998] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./0/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./0/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./0/bus") = 0 [pid 4998] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./0/binderfs") = 0 [pid 4998] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./0") = 0 [pid 4998] mkdir("./1", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567415d0) = 5031 ./strace-static-x86_64: Process 5031 attached [pid 5031] set_robust_list(0x5555567415e0, 24 [pid 5027] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5031] <... set_robust_list resumed>) = 0 [pid 5031] chdir("./1") = 0 [pid 5031] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5031] setpgid(0, 0) = 0 [pid 5031] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5031] write(3, "1000", 4) = 4 [pid 5031] close(3) = 0 [pid 5031] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5031] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5031] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5030] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5031] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5031] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5032], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5032 [pid 5031] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5031] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5032 attached [pid 5032] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5032] memfd_create("syzkaller", 0) = 3 [pid 5032] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 4995] <... umount2 resumed>) = 0 [pid 4995] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4995] lstat("./0/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4995] openat(AT_FDCWD, "./0/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4995] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4995] getdents64(4, [pid 5029] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 4995] <... getdents64 resumed>0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4995] close(4) = 0 [pid 4995] rmdir("./0/bus") = 0 [pid 4995] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4995] lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4995] unlink("./0/binderfs") = 0 [pid 4995] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4995] close(3) = 0 [pid 4995] rmdir("./0") = 0 [pid 4995] mkdir("./1", 0777) = 0 [pid 4995] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 4995] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4995] close(3) = 0 [pid 4995] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567415d0) = 5033 ./strace-static-x86_64: Process 5033 attached [pid 5033] set_robust_list(0x5555567415e0, 24) = 0 [pid 5033] chdir("./1") = 0 [pid 5033] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5033] setpgid(0, 0) = 0 [pid 5033] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5033] write(3, "1000", 4) = 4 [pid 5033] close(3) = 0 [pid 5033] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5033] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5033] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5033] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE [pid 5024] <... write resumed>) = 16777216 [pid 5033] <... mprotect resumed>) = 0 [pid 5033] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5024] munmap(0x7ff67f29d000, 16777216 [pid 5033] <... clone resumed>, parent_tid=[5034], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5034 [pid 5033] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5033] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5034 attached [pid 5034] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5034] memfd_create("syzkaller", 0) = 3 [pid 5034] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 5024] <... munmap resumed>) = 0 [pid 5024] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5024] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5024] close(3) = 0 [pid 5024] mkdir("./bus", 0777) = 0 [pid 5024] mount("/dev/loop4", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "") = 0 [pid 5024] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5024] chdir("./bus") = 0 [pid 5024] ioctl(4, LOOP_CLR_FD) = 0 [pid 5024] close(4) = 0 [ 59.921874][ T5024] loop4: detected capacity change from 0 to 32768 [pid 5024] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5023] <... futex resumed>) = 0 [pid 5024] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5023] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5024] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5023] <... futex resumed>) = 0 [pid 5024] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5023] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5024] <... open resumed>) = 4 [pid 5024] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5023] <... futex resumed>) = 0 [pid 5027] <... write resumed>) = 16777216 [pid 5024] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5023] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5027] munmap(0x7ff67f29d000, 16777216 [pid 5024] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5023] <... futex resumed>) = 0 [pid 5023] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5027] <... munmap resumed>) = 0 [pid 5024] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5027] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5024] <... open resumed>) = 5 [pid 5027] <... openat resumed>) = 4 [pid 5024] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5027] ioctl(4, LOOP_SET_FD, 3 [pid 5024] <... futex resumed>) = 1 [pid 5023] <... futex resumed>) = 0 [pid 5023] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5023] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5024] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 0 [pid 5024] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5023] <... futex resumed>) = 0 [pid 5027] close(3 [pid 5024] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5023] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5027] <... close resumed>) = 0 [pid 5024] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5023] <... futex resumed>) = 0 [pid 5027] mkdir("./bus", 0777 [pid 5024] ftruncate(4, 33587199 [pid 5023] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5024] <... ftruncate resumed>) = 0 [pid 5027] <... mkdir resumed>) = 0 [pid 5024] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5027] mount("/dev/loop1", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5024] <... futex resumed>) = 1 [pid 5023] <... futex resumed>) = 0 [pid 5024] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5023] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5030] <... write resumed>) = 16777216 [pid 5024] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5023] <... futex resumed>) = 0 [pid 5023] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5030] munmap(0x7ff67f29d000, 16777216 [pid 5024] open("./bus", O_RDONLY [pid 5027] <... mount resumed>) = 0 [pid 5024] <... open resumed>) = 6 [pid 5027] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5024] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5032] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5027] <... openat resumed>) = 3 [pid 5024] <... futex resumed>) = 1 [pid 5023] <... futex resumed>) = 0 [pid 5023] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5023] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5027] chdir("./bus" [pid 5024] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5030] <... munmap resumed>) = 0 [pid 5030] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5027] <... chdir resumed>) = 0 [pid 5024] <... open resumed>) = 7 [pid 5030] <... openat resumed>) = 4 [pid 5027] ioctl(4, LOOP_CLR_FD [pid 5024] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5030] ioctl(4, LOOP_SET_FD, 3 [pid 5027] <... ioctl resumed>) = 0 [pid 5024] <... futex resumed>) = 1 [pid 5023] <... futex resumed>) = 0 [ 60.047779][ T5027] loop1: detected capacity change from 0 to 32768 [pid 5023] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5023] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5027] close(4 [pid 5024] dup(7 [pid 5027] <... close resumed>) = 0 [pid 5027] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5030] <... ioctl resumed>) = 0 [pid 5024] <... dup resumed>) = 8 [pid 5030] close(3 [pid 5027] <... futex resumed>) = 1 [pid 5025] <... futex resumed>) = 0 [pid 5024] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5030] <... close resumed>) = 0 [pid 5027] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5025] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5024] <... futex resumed>) = 1 [pid 5023] <... futex resumed>) = 0 [pid 5030] mkdir("./bus", 0777 [pid 5027] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5025] <... futex resumed>) = 0 [pid 5024] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5023] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5030] <... mkdir resumed>) = 0 [pid 5027] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5025] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5024] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5023] <... futex resumed>) = 0 [pid 5030] mount("/dev/loop3", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5023] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5027] <... open resumed>) = 4 [pid 5024] memfd_create("syzkaller", 0 [pid 5027] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5025] <... futex resumed>) = 0 [pid 5027] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5025] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5027] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5025] <... futex resumed>) = 0 [pid 5027] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5025] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5027] <... open resumed>) = 5 [pid 5027] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5025] <... futex resumed>) = 0 [pid 5030] <... mount resumed>) = 0 [pid 5024] <... memfd_create resumed>) = 9 [pid 5030] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5027] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5025] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5024] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5030] <... openat resumed>) = 3 [ 60.107679][ T5030] loop3: detected capacity change from 0 to 32768 [pid 5027] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5025] <... futex resumed>) = 0 [pid 5024] <... mmap resumed>) = 0x7ff677e9d000 [pid 5030] chdir("./bus" [pid 5027] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5025] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5027] <... mmap resumed>) = 0x20000000 [pid 5030] <... chdir resumed>) = 0 [pid 5027] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5030] ioctl(4, LOOP_CLR_FD [pid 5027] <... futex resumed>) = 1 [pid 5025] <... futex resumed>) = 0 [pid 5030] <... ioctl resumed>) = 0 [pid 5030] close(4 [pid 5027] ftruncate(4, 33587199 [pid 5025] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5030] <... close resumed>) = 0 [pid 5030] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5025] <... futex resumed>) = 0 [pid 5030] <... futex resumed>) = 1 [pid 5028] <... futex resumed>) = 0 [pid 5027] <... ftruncate resumed>) = 0 [pid 5025] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5030] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5028] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5027] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5025] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5030] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5028] <... futex resumed>) = 0 [pid 5027] <... futex resumed>) = 0 [pid 5025] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5030] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5028] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5030] <... open resumed>) = 4 [pid 5027] open("./bus", O_RDONLY [pid 5025] <... futex resumed>) = 0 [pid 5030] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5027] <... open resumed>) = 6 [pid 5025] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5030] <... futex resumed>) = 1 [pid 5028] <... futex resumed>) = 0 [pid 5027] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5025] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5030] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5028] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5027] <... futex resumed>) = 0 [pid 5025] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5030] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5028] <... futex resumed>) = 0 [pid 5027] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5025] <... futex resumed>) = 0 [pid 5030] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5028] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5027] <... open resumed>) = 7 [pid 5025] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5030] <... open resumed>) = 5 [pid 5027] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5025] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5030] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5027] <... futex resumed>) = 0 [pid 5025] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5030] <... futex resumed>) = 1 [pid 5028] <... futex resumed>) = 0 [pid 5027] dup(7 [pid 5025] <... futex resumed>) = 0 [pid 5030] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5028] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5027] <... dup resumed>) = 8 [pid 5025] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5030] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5028] <... futex resumed>) = 0 [pid 5027] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5025] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5030] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5028] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5027] <... futex resumed>) = 0 [pid 5025] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5024] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5030] <... mmap resumed>) = 0x20000000 [pid 5027] memfd_create("syzkaller", 0 [pid 5030] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5025] <... futex resumed>) = 0 [pid 5030] <... futex resumed>) = 1 [pid 5028] <... futex resumed>) = 0 [pid 5025] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5030] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5028] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5027] <... memfd_create resumed>) = 9 [pid 5030] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5028] <... futex resumed>) = 0 [pid 5027] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5030] ftruncate(4, 33587199 [pid 5028] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5030] <... ftruncate resumed>) = 0 [pid 5027] <... mmap resumed>) = 0x7ff677e9d000 [pid 5030] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5028] <... futex resumed>) = 0 [pid 5030] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5028] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5030] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5028] <... futex resumed>) = 0 [pid 5030] open("./bus", O_RDONLY [pid 5028] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5030] <... open resumed>) = 6 [pid 5030] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5028] <... futex resumed>) = 0 [pid 5030] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5028] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5030] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5028] <... futex resumed>) = 0 [pid 5030] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5028] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5030] <... open resumed>) = 7 [pid 5030] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5028] <... futex resumed>) = 0 [pid 5030] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5028] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5030] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5028] <... futex resumed>) = 0 [pid 5030] dup(7 [pid 5028] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5030] <... dup resumed>) = 8 [pid 5030] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5028] <... futex resumed>) = 0 [pid 5024] <... write resumed>) = 2097152 [pid 5030] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5028] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5024] munmap(0x7ff677e9d000, 2097152 [pid 5030] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5028] <... futex resumed>) = 0 [pid 5030] memfd_create("syzkaller", 0 [pid 5028] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5027] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5030] <... memfd_create resumed>) = 9 [pid 5030] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff677e9d000 [pid 5024] <... munmap resumed>) = 0 [pid 5024] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 10 [pid 5024] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5024] ioctl(10, LOOP_CLR_FD) = 0 [pid 5024] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5024] close(10) = 0 [pid 5024] close(9) = 0 [pid 5030] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5024] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5023] <... futex resumed>) = 0 [pid 5024] sendfile(8, 6, NULL, 281474978811908 [pid 5023] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5027] <... write resumed>) = 2097152 [pid 5023] <... futex resumed>) = 0 [pid 5023] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5027] munmap(0x7ff677e9d000, 2097152) = 0 [pid 5027] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 10 [pid 5027] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5034] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5027] ioctl(10, LOOP_CLR_FD) = 0 [pid 5029] <... write resumed>) = 16777216 [pid 5027] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5029] munmap(0x7ff67f29d000, 16777216 [pid 5027] close(10 [pid 5030] <... write resumed>) = 2097152 [pid 5029] <... munmap resumed>) = 0 [pid 5027] <... close resumed>) = 0 [pid 5027] close(9 [pid 5023] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5023] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5023] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff67807c000 [pid 5023] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5023] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5035], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5035 [pid 5023] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5023] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5035 attached [pid 5035] set_robust_list(0x7ff67809c9e0, 24) = 0 [pid 5027] <... close resumed>) = 0 [pid 5035] sync( [pid 5029] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5027] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5029] <... openat resumed>) = 4 [pid 5027] <... futex resumed>) = 1 [pid 5025] <... futex resumed>) = 0 [pid 5029] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5025] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5030] munmap(0x7ff677e9d000, 2097152 [pid 5027] sendfile(8, 6, NULL, 281474978811908 [pid 5025] <... futex resumed>) = 0 [pid 5025] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5035] <... sync resumed>) = 0 [pid 5035] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5023] <... futex resumed>) = 0 [pid 5035] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5030] <... munmap resumed>) = 0 [pid 5030] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 10 [pid 5030] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5030] ioctl(10, LOOP_CLR_FD) = 0 [pid 5032] <... write resumed>) = 16777216 [ 60.483563][ T5029] loop0: detected capacity change from 0 to 32768 [pid 5029] close(3 [pid 5030] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5029] <... close resumed>) = 0 [pid 5030] close(10) = 0 [pid 5029] mkdir("./bus", 0777) = 0 [pid 5029] mount("/dev/loop0", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5025] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5030] close(9 [pid 5025] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5025] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff67807c000 [pid 5025] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5029] <... mount resumed>) = 0 [pid 5025] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5029] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5025] <... clone resumed>, parent_tid=[5036], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5036 [pid 5029] chdir("./bus" [pid 5025] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5029] <... chdir resumed>) = 0 [pid 5025] <... futex resumed>) = 0 [pid 5032] munmap(0x7ff67f29d000, 16777216 [pid 5030] <... close resumed>) = 0 [pid 5029] ioctl(4, LOOP_CLR_FD [pid 5025] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5029] <... ioctl resumed>) = 0 [pid 5029] close(4 [pid 5030] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5029] <... close resumed>) = 0 ./strace-static-x86_64: Process 5036 attached [pid 5030] <... futex resumed>) = 1 [pid 5029] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5028] <... futex resumed>) = 0 [pid 5036] set_robust_list(0x7ff67809c9e0, 24 [pid 5030] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5029] <... futex resumed>) = 1 [pid 5028] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5026] <... futex resumed>) = 0 [pid 5036] <... set_robust_list resumed>) = 0 [pid 5030] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5029] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5028] <... futex resumed>) = 0 [pid 5026] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5036] sync( [pid 5030] sendfile(8, 6, NULL, 281474978811908 [pid 5029] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5028] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5026] <... futex resumed>) = 0 [pid 5029] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5026] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5029] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5026] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5029] <... futex resumed>) = 0 [pid 5026] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5029] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5026] <... futex resumed>) = 0 [pid 5036] <... sync resumed>) = 0 [pid 5029] <... open resumed>) = 5 [pid 5026] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5036] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5029] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5026] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5036] <... futex resumed>) = 1 [pid 5029] <... futex resumed>) = 0 [pid 5026] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5025] <... futex resumed>) = 0 [pid 5036] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5029] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5026] <... futex resumed>) = 0 [pid 5029] <... mmap resumed>) = 0x20000000 [pid 5026] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5029] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5026] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5029] <... futex resumed>) = 0 [pid 5026] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5029] ftruncate(4, 33587199 [pid 5028] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5026] <... futex resumed>) = 0 [pid 5029] <... ftruncate resumed>) = 0 [pid 5028] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5026] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5029] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5028] <... futex resumed>) = 0 [pid 5026] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5029] <... futex resumed>) = 0 [pid 5028] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5026] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5032] <... munmap resumed>) = 0 [pid 5029] open("./bus", O_RDONLY [pid 5028] <... mmap resumed>) = 0x7ff67807c000 [pid 5026] <... futex resumed>) = 0 [pid 5029] <... open resumed>) = 6 [pid 5028] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5026] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5029] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5028] <... mprotect resumed>) = 0 [pid 5026] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5032] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5029] <... futex resumed>) = 0 [pid 5028] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5026] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5032] <... openat resumed>) = 4 [pid 5029] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5026] <... futex resumed>) = 0 [pid 5032] ioctl(4, LOOP_SET_FD, 3 [pid 5029] <... open resumed>) = 7 [pid 5028] <... clone resumed>, parent_tid=[5037], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5037 [pid 5026] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5029] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5037 attached ) = 0 [pid 5037] set_robust_list(0x7ff67809c9e0, 24 [pid 5029] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5037] <... set_robust_list resumed>) = 0 [pid 5037] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5028] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5026] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5037] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5028] <... futex resumed>) = 0 [pid 5026] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5037] sync( [pid 5029] <... futex resumed>) = 0 [pid 5028] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5026] <... futex resumed>) = 1 [pid 5029] dup(7 [pid 5026] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5029] <... dup resumed>) = 8 [pid 5029] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5037] <... sync resumed>) = 0 [pid 5032] <... ioctl resumed>) = 0 [pid 5029] <... futex resumed>) = 1 [pid 5026] <... futex resumed>) = 0 [pid 5037] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5032] close(3 [pid 5029] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5026] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5037] <... futex resumed>) = 1 [pid 5032] <... close resumed>) = 0 [pid 5029] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5028] <... futex resumed>) = 0 [pid 5026] <... futex resumed>) = 0 [pid 5037] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5032] mkdir("./bus", 0777 [pid 5029] memfd_create("syzkaller", 0 [pid 5026] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5032] <... mkdir resumed>) = 0 [pid 5029] <... memfd_create resumed>) = 9 [pid 5032] mount("/dev/loop5", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5029] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff677e9d000 [ 60.665751][ T5032] loop5: detected capacity change from 0 to 32768 [pid 5032] <... mount resumed>) = 0 [pid 5032] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5032] chdir("./bus") = 0 [pid 5032] ioctl(4, LOOP_CLR_FD) = 0 [pid 5029] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5032] close(4) = 0 [pid 5032] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5031] <... futex resumed>) = 0 [pid 5032] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5031] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5032] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5031] <... futex resumed>) = 0 [pid 5032] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5031] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5032] <... open resumed>) = 4 [pid 5032] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5031] <... futex resumed>) = 0 [pid 5032] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5031] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5032] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5031] <... futex resumed>) = 0 [pid 5032] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5031] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5032] <... open resumed>) = 5 [pid 5032] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5031] <... futex resumed>) = 0 [pid 5032] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5031] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5032] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5031] <... futex resumed>) = 0 [pid 5032] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5031] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5032] <... mmap resumed>) = 0x20000000 [pid 5032] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5031] <... futex resumed>) = 0 [pid 5032] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5031] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5032] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5031] <... futex resumed>) = 0 [pid 5032] ftruncate(4, 33587199 [pid 5031] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5032] <... ftruncate resumed>) = 0 [pid 5032] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5031] <... futex resumed>) = 0 [pid 5032] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5031] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5032] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5031] <... futex resumed>) = 0 [pid 5032] open("./bus", O_RDONLY [pid 5031] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5032] <... open resumed>) = 6 [pid 5032] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5031] <... futex resumed>) = 0 [pid 5032] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5031] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5032] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5031] <... futex resumed>) = 0 [pid 5032] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5031] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5032] <... open resumed>) = 7 [pid 5032] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5031] <... futex resumed>) = 0 [pid 5032] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5031] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5032] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5031] <... futex resumed>) = 0 [pid 5032] dup(7 [pid 5031] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5032] <... dup resumed>) = 8 [pid 5032] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5029] <... write resumed>) = 2097152 [pid 5032] <... futex resumed>) = 1 [pid 5031] <... futex resumed>) = 0 [pid 5032] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5031] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5032] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5031] <... futex resumed>) = 0 [pid 5029] munmap(0x7ff677e9d000, 2097152 [pid 5032] memfd_create("syzkaller", 0 [pid 5031] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5032] <... memfd_create resumed>) = 9 [pid 5029] <... munmap resumed>) = 0 [pid 5032] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5029] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5032] <... mmap resumed>) = 0x7ff677e9d000 [pid 5029] <... openat resumed>) = 10 [pid 5029] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5029] ioctl(10, LOOP_CLR_FD) = 0 [pid 5029] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5029] close(10) = 0 [pid 5029] close(9) = 0 [pid 5029] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5026] <... futex resumed>) = 0 [pid 5029] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5026] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5029] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5026] <... futex resumed>) = 0 [pid 5029] sendfile(8, 6, NULL, 281474978811908 [pid 5026] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5032] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5034] <... write resumed>) = 16777216 [pid 5026] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5026] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5026] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff67807c000 [pid 5026] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5026] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5038], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5038 [pid 5026] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5026] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5038 attached [pid 5038] set_robust_list(0x7ff67809c9e0, 24) = 0 [pid 5038] sync( [pid 5034] munmap(0x7ff67f29d000, 16777216 [pid 5038] <... sync resumed>) = 0 [pid 5038] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5026] <... futex resumed>) = 0 [pid 5038] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5034] <... munmap resumed>) = 0 [pid 5034] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5034] ioctl(4, LOOP_SET_FD, 3 [pid 5023] exit_group(0 [pid 5035] <... futex resumed>) = ? [pid 5023] <... exit_group resumed>) = ? [pid 5035] +++ exited with 0 +++ [pid 5024] <... sendfile resumed>) = ? [pid 5034] <... ioctl resumed>) = 0 [pid 5034] close(3) = 0 [pid 5034] mkdir("./bus", 0777) = 0 [pid 5034] mount("/dev/loop2", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5032] <... write resumed>) = 2097152 [pid 5024] +++ exited with 0 +++ [pid 5023] +++ exited with 0 +++ [pid 5032] munmap(0x7ff677e9d000, 2097152 [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5023, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=36 /* 0.36 s */} --- [pid 5032] <... munmap resumed>) = 0 [pid 5034] <... mount resumed>) = 0 [pid 5034] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 4997] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5034] <... openat resumed>) = 3 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5034] chdir("./bus" [pid 4997] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5034] <... chdir resumed>) = 0 [pid 4997] <... openat resumed>) = 3 [pid 5034] ioctl(4, LOOP_CLR_FD [pid 4997] fstat(3, [pid 5034] <... ioctl resumed>) = 0 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 61.100479][ T5034] loop2: detected capacity change from 0 to 32768 [pid 5034] close(4 [pid 5032] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 4997] getdents64(3, [pid 5034] <... close resumed>) = 0 [pid 5032] <... openat resumed>) = 10 [pid 4997] <... getdents64 resumed>0x555556742620 /* 4 entries */, 32768) = 104 [pid 5034] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5032] ioctl(10, LOOP_SET_FD, 9 [pid 4997] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5034] <... futex resumed>) = 1 [pid 5033] <... futex resumed>) = 0 [pid 5032] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5034] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5033] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5032] ioctl(10, LOOP_CLR_FD [pid 5025] exit_group(0 [pid 5036] <... futex resumed>) = ? [pid 5034] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5033] <... futex resumed>) = 0 [pid 5032] <... ioctl resumed>) = 0 [pid 5025] <... exit_group resumed>) = ? [pid 5036] +++ exited with 0 +++ [pid 5034] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5033] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5034] <... open resumed>) = 4 [pid 5034] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5027] <... sendfile resumed>) = ? [pid 5034] <... futex resumed>) = 1 [pid 5033] <... futex resumed>) = 0 [pid 5032] ioctl(10, LOOP_SET_FD, 9 [pid 5034] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5033] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5032] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5027] +++ exited with 0 +++ [pid 5025] +++ exited with 0 +++ [pid 5034] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5033] <... futex resumed>) = 0 [pid 5032] close(10 [pid 4994] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5025, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=28 /* 0.28 s */} --- [pid 5034] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5033] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5032] <... close resumed>) = 0 [pid 4994] restart_syscall(<... resuming interrupted clone ...> [pid 5034] <... open resumed>) = 5 [pid 5032] close(9 [pid 4994] <... restart_syscall resumed>) = 0 [pid 5034] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5033] <... futex resumed>) = 0 [pid 5034] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5033] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5034] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5033] <... futex resumed>) = 0 [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5034] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5033] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5032] <... close resumed>) = 0 [pid 4994] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5034] <... mmap resumed>) = 0x20000000 [pid 4994] <... openat resumed>) = 3 [pid 5034] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] fstat(3, [pid 5034] <... futex resumed>) = 1 [pid 5033] <... futex resumed>) = 0 [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5034] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5033] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5032] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] getdents64(3, [pid 5034] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5033] <... futex resumed>) = 0 [pid 5032] <... futex resumed>) = 1 [pid 5031] <... futex resumed>) = 0 [pid 4994] <... getdents64 resumed>0x555556742620 /* 4 entries */, 32768) = 104 [pid 5034] ftruncate(4, 33587199 [pid 5033] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5032] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5031] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5034] <... ftruncate resumed>) = 0 [pid 5032] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5031] <... futex resumed>) = 0 [pid 5034] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5032] sendfile(8, 6, NULL, 281474978811908 [pid 5031] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5034] <... futex resumed>) = 1 [pid 5033] <... futex resumed>) = 0 [pid 5034] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5033] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5034] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5033] <... futex resumed>) = 0 [pid 5034] open("./bus", O_RDONLY [pid 5033] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5034] <... open resumed>) = 6 [pid 5034] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5033] <... futex resumed>) = 0 [pid 5034] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5033] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5034] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5033] <... futex resumed>) = 0 [pid 5034] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5033] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5034] <... open resumed>) = 7 [pid 5034] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5033] <... futex resumed>) = 0 [pid 5034] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5033] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5034] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5033] <... futex resumed>) = 0 [pid 5034] dup(7 [pid 5033] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5034] <... dup resumed>) = 8 [pid 5034] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5033] <... futex resumed>) = 0 [pid 5034] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5033] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5034] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5033] <... futex resumed>) = 0 [pid 5034] memfd_create("syzkaller", 0 [pid 5033] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5034] <... memfd_create resumed>) = 9 [pid 5034] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff677e9d000 [pid 5031] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5031] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5031] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff67807c000 [pid 5031] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5028] exit_group(0 [pid 5037] <... futex resumed>) = ? [pid 5031] <... mprotect resumed>) = 0 [pid 5030] <... sendfile resumed>) = ? [pid 5028] <... exit_group resumed>) = ? [pid 5037] +++ exited with 0 +++ [pid 5031] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5039], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5039 [pid 5031] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5031] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5039 attached [pid 5030] +++ exited with 0 +++ [pid 5028] +++ exited with 0 +++ [pid 5039] set_robust_list(0x7ff67809c9e0, 24) = 0 [pid 4996] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5028, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=44 /* 0.44 s */} --- [pid 5039] sync( [pid 4996] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4996] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4996] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] getdents64(3, 0x555556742620 /* 4 entries */, 32768) = 104 [pid 4996] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5034] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5031] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5034] <... write resumed>) = 2097152 [pid 5034] munmap(0x7ff677e9d000, 2097152) = 0 [pid 5034] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 10 [pid 5034] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5034] ioctl(10, LOOP_CLR_FD) = 0 [pid 5034] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5034] close(10) = 0 [pid 5034] close(9) = 0 [pid 5026] exit_group(0 [pid 5038] <... futex resumed>) = ? [pid 5026] <... exit_group resumed>) = ? [pid 5038] +++ exited with 0 +++ [pid 5029] <... sendfile resumed>) = ? [pid 5029] +++ exited with 0 +++ [pid 5026] +++ exited with 0 +++ [pid 4993] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5026, si_uid=0, si_status=0, si_utime=11 /* 0.11 s */, si_stime=37 /* 0.37 s */} --- [pid 5034] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 4993] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5034] <... futex resumed>) = 1 [pid 5033] <... futex resumed>) = 0 [pid 4993] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5034] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5033] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4993] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5034] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5033] <... futex resumed>) = 0 [pid 4993] <... openat resumed>) = 3 [pid 5034] sendfile(8, 6, NULL, 281474978811908 [pid 5033] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4993] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4993] getdents64(3, 0x555556742620 /* 4 entries */, 32768) = 104 [pid 4994] <... umount2 resumed>) = 0 [pid 4993] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] lstat("./1/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] openat(AT_FDCWD, "./1/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4994] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4994] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 5033] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4994] close(4 [pid 5033] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] <... close resumed>) = 0 [pid 5033] <... futex resumed>) = 0 [pid 4994] rmdir("./1/bus" [pid 5033] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff67807c000 [pid 4994] <... rmdir resumed>) = 0 [pid 5033] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 4994] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5033] <... mprotect resumed>) = 0 [pid 5033] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5033] <... clone resumed>, parent_tid=[5040], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5040 [pid 4994] lstat("./1/binderfs", [pid 5033] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4994] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5033] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4994] unlink("./1/binderfs") = 0 [pid 4994] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4994] close(3./strace-static-x86_64: Process 5040 attached [pid 5040] set_robust_list(0x7ff67809c9e0, 24 [pid 4994] <... close resumed>) = 0 [pid 5040] <... set_robust_list resumed>) = 0 [pid 4994] rmdir("./1" [pid 5040] sync( [pid 4994] <... rmdir resumed>) = 0 [pid 4994] mkdir("./2", 0777) = 0 [pid 4994] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4994] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4994] close(3) = 0 [pid 5039] <... sync resumed>) = 0 [pid 4994] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5040] <... sync resumed>) = 0 [pid 5039] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5040] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5039] <... futex resumed>) = 0 [pid 5039] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5040] <... futex resumed>) = 1 [pid 5033] <... futex resumed>) = 0 [pid 4994] <... clone resumed>, child_tidptr=0x5555567415d0) = 5041 [pid 5040] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 5041 attached [pid 5041] set_robust_list(0x5555567415e0, 24) = 0 [pid 5041] chdir("./2") = 0 [pid 5041] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5041] setpgid(0, 0) = 0 [pid 5041] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5041] write(3, "1000", 4) = 4 [pid 5041] close(3) = 0 [pid 5041] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5041] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5041] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5041] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5041] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5042], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5042 [pid 5041] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5041] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5042 attached [pid 5042] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5042] memfd_create("syzkaller", 0) = 3 [pid 5042] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 5031] exit_group(0) = ? [pid 5039] <... futex resumed>) = ? [pid 5039] +++ exited with 0 +++ [pid 5032] <... sendfile resumed>) = ? [pid 5032] +++ exited with 0 +++ [pid 5031] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5031, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=38 /* 0.38 s */} --- [pid 4998] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x555556742620 /* 4 entries */, 32768) = 104 [pid 4998] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... umount2 resumed>) = 0 [pid 4997] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./1/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4993] <... umount2 resumed>) = 0 [pid 4997] openat(AT_FDCWD, "./1/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4993] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] fstat(4, [pid 4993] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4993] lstat("./1/bus", [pid 4997] getdents64(4, [pid 4993] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] <... getdents64 resumed>0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4997] getdents64(4, [pid 4993] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... getdents64 resumed>0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4997] close(4 [pid 4993] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] <... close resumed>) = 0 [pid 4993] openat(AT_FDCWD, "./1/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] rmdir("./1/bus" [pid 4993] <... openat resumed>) = 4 [pid 4997] <... rmdir resumed>) = 0 [pid 4993] fstat(4, [pid 4997] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4993] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4993] getdents64(4, [pid 4997] lstat("./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4993] <... getdents64 resumed>0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4997] unlink("./1/binderfs" [pid 4993] getdents64(4, [pid 4997] <... unlink resumed>) = 0 [pid 4997] getdents64(3, [pid 4993] <... getdents64 resumed>0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4997] <... getdents64 resumed>0x555556742620 /* 0 entries */, 32768) = 0 [pid 4993] close(4 [pid 4997] close(3) = 0 [pid 4993] <... close resumed>) = 0 [pid 4997] rmdir("./1" [pid 4993] rmdir("./1/bus" [pid 4997] <... rmdir resumed>) = 0 [pid 4997] mkdir("./2", 0777 [pid 4993] <... rmdir resumed>) = 0 [pid 4997] <... mkdir resumed>) = 0 [pid 4997] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4993] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... openat resumed>) = 3 [pid 4993] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] ioctl(3, LOOP_CLR_FD [pid 4993] lstat("./1/binderfs", [pid 4997] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4997] close(3 [pid 4993] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] <... close resumed>) = 0 [pid 4993] unlink("./1/binderfs" [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4993] <... unlink resumed>) = 0 [pid 4997] <... clone resumed>, child_tidptr=0x5555567415d0) = 5043 [pid 4993] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4993] close(3) = 0 [pid 4993] rmdir("./1") = 0 [pid 4993] mkdir("./2", 0777) = 0 [pid 4993] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4993] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4993] close(3) = 0 [pid 4993] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567415d0) = 5044 [pid 4996] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 5044 attached [pid 5044] set_robust_list(0x5555567415e0, 24 [pid 4996] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5044] <... set_robust_list resumed>) = 0 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5043 attached [pid 5044] chdir("./2" [pid 4996] lstat("./1/bus", [pid 5044] <... chdir resumed>) = 0 [pid 5043] set_robust_list(0x5555567415e0, 24 [pid 4996] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5044] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5043] <... set_robust_list resumed>) = 0 [pid 4996] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5044] <... prctl resumed>) = 0 [pid 5043] chdir("./2" [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5044] setpgid(0, 0 [pid 5043] <... chdir resumed>) = 0 [pid 5033] exit_group(0 [pid 4996] openat(AT_FDCWD, "./1/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5044] <... setpgid resumed>) = 0 [pid 5043] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5040] <... futex resumed>) = ? [pid 5033] <... exit_group resumed>) = ? [pid 4996] <... openat resumed>) = 4 [pid 5044] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5043] <... prctl resumed>) = 0 [pid 5040] +++ exited with 0 +++ [pid 4996] fstat(4, [pid 5044] <... openat resumed>) = 3 [pid 5043] setpgid(0, 0 [pid 4996] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5044] write(3, "1000", 4 [pid 5043] <... setpgid resumed>) = 0 [pid 4996] getdents64(4, [pid 5044] <... write resumed>) = 4 [pid 5043] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4996] <... getdents64 resumed>0x55555674a660 /* 2 entries */, 32768) = 48 [pid 5044] close(3 [pid 5043] <... openat resumed>) = 3 [pid 5034] <... sendfile resumed>) = ? [pid 4996] getdents64(4, [pid 5044] <... close resumed>) = 0 [pid 5043] write(3, "1000", 4 [pid 5034] +++ exited with 0 +++ [pid 5033] +++ exited with 0 +++ [pid 4996] <... getdents64 resumed>0x55555674a660 /* 0 entries */, 32768) = 0 [pid 5044] symlink("/dev/binderfs", "./binderfs" [pid 5043] <... write resumed>) = 4 [pid 4996] close(4 [pid 5044] <... symlink resumed>) = 0 [pid 5043] close(3 [pid 4996] <... close resumed>) = 0 [pid 4995] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5033, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=31 /* 0.31 s */} --- [pid 5044] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5043] <... close resumed>) = 0 [pid 4996] rmdir("./1/bus" [pid 4995] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5044] <... futex resumed>) = 0 [pid 5043] symlink("/dev/binderfs", "./binderfs" [pid 4996] <... rmdir resumed>) = 0 [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5044] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5043] <... symlink resumed>) = 0 [pid 4996] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5044] <... mmap resumed>) = 0x7ff68769d000 [pid 5043] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] <... openat resumed>) = 3 [pid 5044] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE [pid 5043] <... futex resumed>) = 0 [pid 4996] lstat("./1/binderfs", [pid 4995] fstat(3, [pid 5044] <... mprotect resumed>) = 0 [pid 5043] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4996] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5044] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5043] <... mmap resumed>) = 0x7ff68769d000 [pid 4996] unlink("./1/binderfs" [pid 4995] getdents64(3, [pid 5043] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE [pid 4996] <... unlink resumed>) = 0 [pid 4995] <... getdents64 resumed>0x555556742620 /* 4 entries */, 32768) = 104 [pid 5044] <... clone resumed>, parent_tid=[5045], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5045 [pid 5043] <... mprotect resumed>) = 0 [pid 4996] getdents64(3, [pid 4995] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5044] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5043] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4996] <... getdents64 resumed>0x555556742620 /* 0 entries */, 32768) = 0 [pid 5044] <... futex resumed>) = 0 [pid 4996] close(3 [pid 5044] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5043] <... clone resumed>, parent_tid=[5046], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5046 [pid 4996] <... close resumed>) = 0 [pid 5043] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] rmdir("./1" [pid 5043] <... futex resumed>) = 0 [pid 4996] <... rmdir resumed>) = 0 [pid 5043] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4996] mkdir("./2", 0777) = 0 [pid 4996] openat(AT_FDCWD, "/dev/loop3", O_RDWR./strace-static-x86_64: Process 5045 attached ) = 3 [pid 5045] set_robust_list(0x7ff6876bd9e0, 24 [pid 4996] ioctl(3, LOOP_CLR_FD [pid 5045] <... set_robust_list resumed>) = 0 [pid 4996] <... ioctl resumed>) = -1 ENXIO (No such device or address) ./strace-static-x86_64: Process 5046 attached [pid 5045] memfd_create("syzkaller", 0 [pid 4996] close(3 [pid 5046] set_robust_list(0x7ff6876bd9e0, 24 [pid 5045] <... memfd_create resumed>) = 3 [pid 4996] <... close resumed>) = 0 [pid 5046] <... set_robust_list resumed>) = 0 [pid 5045] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4996] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5046] memfd_create("syzkaller", 0 [pid 5045] <... mmap resumed>) = 0x7ff67f29d000 [pid 5046] <... memfd_create resumed>) = 3 [pid 4996] <... clone resumed>, child_tidptr=0x5555567415d0) = 5047 [pid 5046] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 ./strace-static-x86_64: Process 5047 attached [pid 5047] set_robust_list(0x5555567415e0, 24) = 0 [pid 5047] chdir("./2") = 0 [pid 5047] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5047] setpgid(0, 0) = 0 [pid 5047] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5047] write(3, "1000", 4) = 4 [pid 5047] close(3) = 0 [pid 5047] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5047] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5047] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5047] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5047] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5048], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5048 [pid 5047] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5047] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5048 attached [pid 5048] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5048] memfd_create("syzkaller", 0) = 3 [pid 5048] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5042] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5048] <... mmap resumed>) = 0x7ff67f29d000 [pid 4998] <... umount2 resumed>) = 0 [pid 4998] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./1/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./1/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./1/bus") = 0 [pid 4998] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./1/binderfs") = 0 [pid 4998] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./1") = 0 [pid 4998] mkdir("./2", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567415d0) = 5049 ./strace-static-x86_64: Process 5049 attached [pid 5049] set_robust_list(0x5555567415e0, 24) = 0 [pid 5049] chdir("./2") = 0 [pid 5049] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5049] setpgid(0, 0) = 0 [pid 5049] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5049] write(3, "1000", 4) = 4 [pid 5049] close(3) = 0 [pid 5049] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5049] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5049] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5049] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5049] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5050], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5050 [pid 5049] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5049] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5050 attached [pid 5050] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5050] memfd_create("syzkaller", 0) = 3 [pid 5050] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 5046] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5045] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5048] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 4995] <... umount2 resumed>) = 0 [pid 4995] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4995] lstat("./1/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4995] openat(AT_FDCWD, "./1/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5042] <... write resumed>) = 16777216 [pid 4995] <... openat resumed>) = 4 [pid 4995] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 5042] munmap(0x7ff67f29d000, 16777216 [pid 4995] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4995] close(4) = 0 [pid 4995] rmdir("./1/bus") = 0 [pid 4995] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4995] lstat("./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4995] unlink("./1/binderfs") = 0 [pid 4995] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4995] close(3) = 0 [pid 4995] rmdir("./1") = 0 [pid 4995] mkdir("./2", 0777) = 0 [pid 4995] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 4995] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4995] close(3) = 0 [pid 4995] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5042] <... munmap resumed>) = 0 [pid 4995] <... clone resumed>, child_tidptr=0x5555567415d0) = 5051 [pid 5042] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5042] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 5051 attached [pid 5051] set_robust_list(0x5555567415e0, 24) = 0 [pid 5042] <... ioctl resumed>) = 0 [pid 5051] chdir("./2") = 0 [pid 5051] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5051] setpgid(0, 0) = 0 [pid 5051] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5051] write(3, "1000", 4) = 4 [pid 5051] close(3 [pid 5042] close(3 [pid 5051] <... close resumed>) = 0 [pid 5051] symlink("/dev/binderfs", "./binderfs" [pid 5042] <... close resumed>) = 0 [pid 5051] <... symlink resumed>) = 0 [pid 5042] mkdir("./bus", 0777 [pid 5051] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5042] <... mkdir resumed>) = 0 [pid 5051] <... futex resumed>) = 0 [pid 5042] mount("/dev/loop1", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5051] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5050] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5051] <... mmap resumed>) = 0x7ff68769d000 [pid 5051] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5051] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5052], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5052 [ 62.600587][ T5042] loop1: detected capacity change from 0 to 32768 [pid 5042] <... mount resumed>) = 0 [pid 5051] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5042] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5051] <... futex resumed>) = 0 [pid 5042] <... openat resumed>) = 3 [pid 5051] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5042] chdir("./bus") = 0 ./strace-static-x86_64: Process 5052 attached [pid 5042] ioctl(4, LOOP_CLR_FD [pid 5052] set_robust_list(0x7ff6876bd9e0, 24 [pid 5042] <... ioctl resumed>) = 0 [pid 5052] <... set_robust_list resumed>) = 0 [pid 5042] close(4 [pid 5052] memfd_create("syzkaller", 0 [pid 5042] <... close resumed>) = 0 [pid 5052] <... memfd_create resumed>) = 3 [pid 5042] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5052] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5042] <... futex resumed>) = 1 [pid 5041] <... futex resumed>) = 0 [pid 5052] <... mmap resumed>) = 0x7ff67f29d000 [pid 5042] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5041] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5042] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5041] <... futex resumed>) = 0 [pid 5042] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5041] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5042] <... open resumed>) = 4 [pid 5042] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5041] <... futex resumed>) = 0 [pid 5042] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5041] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5042] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5041] <... futex resumed>) = 0 [pid 5042] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5041] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5042] <... open resumed>) = 5 [pid 5042] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5041] <... futex resumed>) = 0 [pid 5042] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5041] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5042] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5041] <... futex resumed>) = 0 [pid 5042] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5041] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5042] <... mmap resumed>) = 0x20000000 [pid 5042] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5041] <... futex resumed>) = 0 [pid 5042] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5041] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5042] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5041] <... futex resumed>) = 0 [pid 5042] ftruncate(4, 33587199 [pid 5041] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5042] <... ftruncate resumed>) = 0 [pid 5042] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5041] <... futex resumed>) = 0 [pid 5042] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5041] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5042] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5041] <... futex resumed>) = 0 [pid 5042] open("./bus", O_RDONLY [pid 5041] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5042] <... open resumed>) = 6 [pid 5042] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5041] <... futex resumed>) = 0 [pid 5042] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5041] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5042] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5041] <... futex resumed>) = 0 [pid 5042] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5041] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5042] <... open resumed>) = 7 [pid 5042] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5041] <... futex resumed>) = 0 [pid 5042] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5041] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5042] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5041] <... futex resumed>) = 0 [pid 5042] dup(7 [pid 5041] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5042] <... dup resumed>) = 8 [pid 5042] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5041] <... futex resumed>) = 0 [pid 5042] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5041] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5042] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5041] <... futex resumed>) = 0 [pid 5042] memfd_create("syzkaller", 0 [pid 5041] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5042] <... memfd_create resumed>) = 9 [pid 5042] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff677e9d000 [ 62.697394][ T27] kauditd_printk_skb: 14 callbacks suppressed [ 62.697408][ T27] audit: type=1804 audit(1686284867.537:26): pid=5042 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor481" name="/root/syzkaller.20fUYQ/2/bus/bus" dev="loop1" ino=7 res=1 errno=0 [ 62.779671][ T27] audit: type=1804 audit(1686284867.547:27): pid=5042 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor481" name="/root/syzkaller.20fUYQ/2/bus/bus" dev="loop1" ino=7 res=1 errno=0 [pid 5042] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5042] munmap(0x7ff677e9d000, 2097152) = 0 [pid 5042] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 10 [pid 5042] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5042] ioctl(10, LOOP_CLR_FD) = 0 [pid 5042] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5042] close(10) = 0 [pid 5042] close(9) = 0 [pid 5042] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5041] <... futex resumed>) = 0 [pid 5041] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5041] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5042] <... futex resumed>) = 1 [pid 5042] sendfile(8, 6, NULL, 281474978811908 [pid 5048] <... write resumed>) = 16777216 [pid 5048] munmap(0x7ff67f29d000, 16777216 [pid 5046] <... write resumed>) = 16777216 [pid 5048] <... munmap resumed>) = 0 [pid 5046] munmap(0x7ff67f29d000, 16777216 [pid 5041] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5041] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5041] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff67807c000 [pid 5041] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5041] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5053], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5053 [pid 5041] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5041] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5048] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5048] ioctl(4, LOOP_SET_FD, 3) = 0 ./strace-static-x86_64: Process 5053 attached [pid 5053] set_robust_list(0x7ff67809c9e0, 24) = 0 [pid 5048] close(3 [pid 5053] sync( [pid 5048] <... close resumed>) = 0 [pid 5048] mkdir("./bus", 0777 [pid 5045] <... write resumed>) = 16777216 [pid 5045] munmap(0x7ff67f29d000, 16777216 [pid 5053] <... sync resumed>) = 0 [pid 5053] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5041] <... futex resumed>) = 0 [pid 5053] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5048] <... mkdir resumed>) = 0 [pid 5048] mount("/dev/loop3", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5046] <... munmap resumed>) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5046] ioctl(4, LOOP_SET_FD, 3 [pid 5048] <... mount resumed>) = 0 [pid 5048] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5046] <... ioctl resumed>) = 0 [pid 5048] <... openat resumed>) = 3 [pid 5048] chdir("./bus") = 0 [pid 5048] ioctl(4, LOOP_CLR_FD [pid 5045] <... munmap resumed>) = 0 [pid 5048] <... ioctl resumed>) = 0 [ 63.012642][ T5048] loop3: detected capacity change from 0 to 32768 [ 63.047581][ T5046] loop4: detected capacity change from 0 to 32768 [pid 5048] close(4 [pid 5045] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5048] <... close resumed>) = 0 [pid 5045] <... openat resumed>) = 4 [pid 5045] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5045] close(3) = 0 [pid 5045] mkdir("./bus", 0777 [pid 5048] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5045] <... mkdir resumed>) = 0 [pid 5045] mount("/dev/loop0", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5048] <... futex resumed>) = 1 [pid 5047] <... futex resumed>) = 0 [pid 5047] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5048] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5047] <... futex resumed>) = 0 [pid 5048] <... open resumed>) = 4 [pid 5047] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5048] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5047] <... futex resumed>) = 0 [pid 5047] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5048] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 5047] <... futex resumed>) = 0 [pid 5047] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5048] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5047] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5048] <... futex resumed>) = 0 [pid 5047] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5048] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5047] <... futex resumed>) = 0 [pid 5048] <... mmap resumed>) = 0x20000000 [pid 5048] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5047] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5048] <... futex resumed>) = 0 [pid 5047] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5048] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5047] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5048] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5047] <... futex resumed>) = 0 [pid 5048] ftruncate(4, 33587199 [pid 5047] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5048] <... ftruncate resumed>) = 0 [pid 5046] close(3 [ 63.072534][ T5045] loop0: detected capacity change from 0 to 32768 [pid 5048] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5046] <... close resumed>) = 0 [pid 5048] <... futex resumed>) = 1 [pid 5047] <... futex resumed>) = 0 [pid 5047] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5048] open("./bus", O_RDONLY) = 6 [pid 5047] <... futex resumed>) = 0 [pid 5047] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5048] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5047] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5048] <... futex resumed>) = 0 [pid 5047] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5046] mkdir("./bus", 0777 [pid 5045] <... mount resumed>) = 0 [pid 5050] <... write resumed>) = 16777216 [pid 5048] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5047] <... futex resumed>) = 0 [pid 5046] <... mkdir resumed>) = 0 [pid 5045] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5052] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5048] <... open resumed>) = 7 [pid 5047] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5046] mount("/dev/loop4", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5045] <... openat resumed>) = 3 [pid 5048] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5047] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5045] chdir("./bus" [pid 5048] <... futex resumed>) = 0 [pid 5047] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5045] <... chdir resumed>) = 0 [pid 5048] dup(7 [pid 5047] <... futex resumed>) = 0 [pid 5045] ioctl(4, LOOP_CLR_FD [pid 5048] <... dup resumed>) = 8 [pid 5047] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5046] <... mount resumed>) = 0 [pid 5045] <... ioctl resumed>) = 0 [pid 5048] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5047] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5046] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5045] close(4 [pid 5048] <... futex resumed>) = 0 [pid 5047] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5046] <... openat resumed>) = 3 [pid 5045] <... close resumed>) = 0 [pid 5045] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 63.116157][ T27] audit: type=1804 audit(1686284867.957:28): pid=5048 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor481" name="/root/syzkaller.crriMX/2/bus/bus" dev="loop3" ino=7 res=1 errno=0 [pid 5045] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5048] memfd_create("syzkaller", 0 [pid 5047] <... futex resumed>) = 0 [pid 5046] chdir("./bus" [pid 5044] <... futex resumed>) = 0 [pid 5048] <... memfd_create resumed>) = 9 [pid 5047] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5046] <... chdir resumed>) = 0 [pid 5044] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5048] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5046] ioctl(4, LOOP_CLR_FD [pid 5045] <... futex resumed>) = 0 [pid 5044] <... futex resumed>) = 1 [pid 5048] <... mmap resumed>) = 0x7ff677e9d000 [pid 5046] <... ioctl resumed>) = 0 [pid 5045] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5044] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5045] <... open resumed>) = 4 [pid 5045] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5045] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5050] munmap(0x7ff67f29d000, 16777216 [pid 5046] close(4 [pid 5044] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5046] <... close resumed>) = 0 [pid 5044] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5046] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5045] <... futex resumed>) = 0 [pid 5044] <... futex resumed>) = 1 [pid 5046] <... futex resumed>) = 1 [pid 5045] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5044] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5043] <... futex resumed>) = 0 [pid 5046] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5045] <... open resumed>) = 5 [pid 5043] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5046] <... open resumed>) = 4 [pid 5045] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5043] <... futex resumed>) = 0 [pid 5045] <... futex resumed>) = 1 [pid 5043] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5045] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5046] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5044] <... futex resumed>) = 0 [pid 5046] <... futex resumed>) = 1 [pid 5044] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5043] <... futex resumed>) = 0 [pid 5046] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5045] <... futex resumed>) = 0 [pid 5044] <... futex resumed>) = 1 [pid 5043] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5046] <... open resumed>) = 5 [pid 5045] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5044] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5043] <... futex resumed>) = 0 [pid 5046] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5045] <... mmap resumed>) = 0x20000000 [pid 5043] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5046] <... futex resumed>) = 0 [pid 5045] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5043] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5046] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5045] <... futex resumed>) = 1 [pid 5044] <... futex resumed>) = 0 [pid 5043] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5046] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5045] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5044] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5043] <... futex resumed>) = 0 [pid 5048] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5046] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5045] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5044] <... futex resumed>) = 0 [pid 5043] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5050] <... munmap resumed>) = 0 [pid 5046] <... mmap resumed>) = 0x20000000 [pid 5045] ftruncate(4, 33587199 [pid 5044] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5050] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5046] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5045] <... ftruncate resumed>) = 0 [pid 5050] <... openat resumed>) = 4 [pid 5046] <... futex resumed>) = 1 [pid 5045] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5043] <... futex resumed>) = 0 [pid 5050] ioctl(4, LOOP_SET_FD, 3 [pid 5046] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5045] <... futex resumed>) = 1 [pid 5044] <... futex resumed>) = 0 [pid 5043] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5046] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5045] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5044] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5043] <... futex resumed>) = 0 [pid 5046] ftruncate(4, 33587199 [pid 5045] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5044] <... futex resumed>) = 0 [pid 5043] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5046] <... ftruncate resumed>) = 0 [pid 5045] open("./bus", O_RDONLY [pid 5044] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5046] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5045] <... open resumed>) = 6 [pid 5046] <... futex resumed>) = 1 [pid 5045] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5043] <... futex resumed>) = 0 [pid 5046] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5045] <... futex resumed>) = 1 [pid 5044] <... futex resumed>) = 0 [pid 5043] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5046] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5045] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5044] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5043] <... futex resumed>) = 0 [pid 5045] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5043] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5045] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5046] open("./bus", O_RDONLY [pid 5045] <... open resumed>) = 7 [pid 5044] <... futex resumed>) = 0 [pid 5046] <... open resumed>) = 6 [pid 5045] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5044] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5046] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5045] <... futex resumed>) = 0 [pid 5044] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5046] <... futex resumed>) = 1 [pid 5045] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5044] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5043] <... futex resumed>) = 0 [pid 5046] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5045] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5044] <... futex resumed>) = 0 [pid 5043] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5046] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5045] dup(7 [pid 5044] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5043] <... futex resumed>) = 0 [pid 5050] <... ioctl resumed>) = 0 [pid 5046] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5045] <... dup resumed>) = 8 [pid 5043] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5050] close(3 [pid 5046] <... open resumed>) = 7 [pid 5045] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5050] <... close resumed>) = 0 [pid 5046] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5045] <... futex resumed>) = 1 [pid 5044] <... futex resumed>) = 0 [pid 5050] mkdir("./bus", 0777 [pid 5046] <... futex resumed>) = 1 [pid 5045] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5044] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5043] <... futex resumed>) = 0 [pid 5050] <... mkdir resumed>) = 0 [pid 5046] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5045] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5044] <... futex resumed>) = 0 [pid 5043] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5050] mount("/dev/loop5", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5046] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5045] memfd_create("syzkaller", 0 [pid 5044] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5043] <... futex resumed>) = 0 [pid 5046] dup(7 [pid 5045] <... memfd_create resumed>) = 9 [pid 5043] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5046] <... dup resumed>) = 8 [pid 5045] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5050] <... mount resumed>) = 0 [pid 5046] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5045] <... mmap resumed>) = 0x7ff677e9d000 [ 63.241225][ T27] audit: type=1804 audit(1686284867.987:29): pid=5048 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor481" name="/root/syzkaller.crriMX/2/bus/bus" dev="loop3" ino=7 res=1 errno=0 [ 63.267873][ T5050] loop5: detected capacity change from 0 to 32768 [pid 5050] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5046] <... futex resumed>) = 1 [pid 5043] <... futex resumed>) = 0 [pid 5050] <... openat resumed>) = 3 [pid 5043] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5050] chdir("./bus" [pid 5046] memfd_create("syzkaller", 0 [pid 5043] <... futex resumed>) = 0 [pid 5050] <... chdir resumed>) = 0 [pid 5046] <... memfd_create resumed>) = 9 [pid 5043] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5050] ioctl(4, LOOP_CLR_FD [pid 5046] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5050] <... ioctl resumed>) = 0 [pid 5050] close(4) = 0 [pid 5046] <... mmap resumed>) = 0x7ff677e9d000 [pid 5050] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5050] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5049] <... futex resumed>) = 0 [pid 5048] <... write resumed>) = 2097152 [pid 5049] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5048] munmap(0x7ff677e9d000, 2097152 [pid 5050] <... futex resumed>) = 0 [pid 5049] <... futex resumed>) = 1 [pid 5050] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5049] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5050] <... open resumed>) = 4 [pid 5050] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5049] <... futex resumed>) = 0 [pid 5050] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5049] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5050] <... futex resumed>) = 0 [pid 5049] <... futex resumed>) = 1 [pid 5050] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5049] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5050] <... open resumed>) = 5 [pid 5050] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5049] <... futex resumed>) = 0 [pid 5050] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5049] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5050] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5049] <... futex resumed>) = 0 [pid 5050] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5049] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5050] <... mmap resumed>) = 0x20000000 [pid 5050] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5049] <... futex resumed>) = 0 [pid 5050] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5049] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5050] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5049] <... futex resumed>) = 0 [pid 5050] ftruncate(4, 33587199 [pid 5049] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5050] <... ftruncate resumed>) = 0 [pid 5050] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5049] <... futex resumed>) = 0 [pid 5050] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5049] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5050] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5049] <... futex resumed>) = 0 [pid 5050] open("./bus", O_RDONLY [pid 5049] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5048] <... munmap resumed>) = 0 [pid 5050] <... open resumed>) = 6 [pid 5048] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5050] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5049] <... futex resumed>) = 0 [pid 5048] <... openat resumed>) = 10 [pid 5050] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5049] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5048] ioctl(10, LOOP_SET_FD, 9 [pid 5050] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5049] <... futex resumed>) = 0 [pid 5050] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5049] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5048] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [ 63.347109][ T27] audit: type=1804 audit(1686284868.117:30): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor481" name="/root/syzkaller.lVUVkM/2/bus/bus" dev="loop0" ino=7 res=1 errno=0 [pid 5050] <... open resumed>) = 7 [pid 5048] ioctl(10, LOOP_CLR_FD [pid 5045] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5050] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5048] <... ioctl resumed>) = 0 [pid 5050] <... futex resumed>) = 1 [pid 5049] <... futex resumed>) = 0 [pid 5050] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5049] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5050] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5049] <... futex resumed>) = 0 [pid 5050] dup(7) = 8 [pid 5049] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5050] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5049] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5048] ioctl(10, LOOP_SET_FD, 9 [pid 5050] <... futex resumed>) = 0 [pid 5049] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5050] memfd_create("syzkaller", 0 [pid 5049] <... futex resumed>) = 0 [pid 5048] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5050] <... memfd_create resumed>) = 9 [pid 5049] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5048] close(10 [pid 5050] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5048] <... close resumed>) = 0 [pid 5050] <... mmap resumed>) = 0x7ff677e9d000 [pid 5048] close(9) = 0 [pid 5046] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5048] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5047] <... futex resumed>) = 0 [pid 5048] <... futex resumed>) = 1 [pid 5048] sendfile(8, 6, NULL, 281474978811908 [pid 5047] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5047] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5045] <... write resumed>) = 2097152 [pid 5045] munmap(0x7ff677e9d000, 2097152) = 0 [pid 5041] exit_group(0 [pid 5053] <... futex resumed>) = ? [pid 5041] <... exit_group resumed>) = ? [pid 5053] +++ exited with 0 +++ [pid 5045] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 10 [pid 5045] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5050] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5045] ioctl(10, LOOP_CLR_FD) = 0 [pid 5045] ioctl(10, LOOP_SET_FD, 9 [pid 5042] <... sendfile resumed>) = ? [pid 5045] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5045] close(10 [pid 5047] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5045] <... close resumed>) = 0 [pid 5047] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5045] close(9 [pid 5047] <... futex resumed>) = 0 [pid 5045] <... close resumed>) = 0 [pid 5042] +++ exited with 0 +++ [pid 5041] +++ exited with 0 +++ [ 63.486539][ T27] audit: type=1804 audit(1686284868.127:31): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor481" name="/root/syzkaller.lVUVkM/2/bus/bus" dev="loop0" ino=7 res=1 errno=0 [pid 5047] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4994] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5041, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=25 /* 0.25 s */} --- [pid 5047] <... mmap resumed>) = 0x7ff67807c000 [pid 5047] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4994] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5047] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5047] <... clone resumed>, parent_tid=[5054], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5054 [pid 4994] <... openat resumed>) = 3 [pid 5047] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] fstat(3, [pid 5047] <... futex resumed>) = 0 [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5047] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4994] getdents64(3, 0x555556742620 /* 4 entries */, 32768) = 104 [pid 4994] umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5045] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5044] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5054 attached [pid 5045] sendfile(8, 6, NULL, 281474978811908 [pid 5044] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5044] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5054] set_robust_list(0x7ff67809c9e0, 24) = 0 [pid 5054] sync( [pid 5050] <... write resumed>) = 2097152 [pid 5046] <... write resumed>) = 2097152 [pid 5046] munmap(0x7ff677e9d000, 2097152 [pid 5047] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5050] munmap(0x7ff677e9d000, 2097152 [pid 5046] <... munmap resumed>) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 10 [pid 5046] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5050] <... munmap resumed>) = 0 [pid 5046] ioctl(10, LOOP_CLR_FD [pid 5044] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5050] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5046] <... ioctl resumed>) = 0 [pid 5044] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5050] <... openat resumed>) = 10 [pid 5044] <... futex resumed>) = 0 [pid 5050] ioctl(10, LOOP_SET_FD, 9 [pid 5044] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5050] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5044] <... mmap resumed>) = 0x7ff67807c000 [pid 5050] ioctl(10, LOOP_CLR_FD [pid 5046] ioctl(10, LOOP_SET_FD, 9 [pid 5044] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5050] <... ioctl resumed>) = 0 [pid 5046] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5044] <... mprotect resumed>) = 0 [pid 5046] close(10 [pid 5044] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5046] <... close resumed>) = 0 [pid 5050] ioctl(10, LOOP_SET_FD, 9 [ 63.615327][ T27] audit: type=1804 audit(1686284868.127:32): pid=5046 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor481" name="/root/syzkaller.hTAWL1/2/bus/bus" dev="loop4" ino=7 res=1 errno=0 [pid 5046] close(9 [pid 5044] <... clone resumed>, parent_tid=[5055], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5055 [pid 5050] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5046] <... close resumed>) = 0 [pid 5044] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5050] close(10 [pid 5044] <... futex resumed>) = 0 [pid 5050] <... close resumed>) = 0 [pid 5044] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5050] close(9./strace-static-x86_64: Process 5055 attached [pid 5055] set_robust_list(0x7ff67809c9e0, 24) = 0 [pid 5055] sync( [pid 5046] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5046] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5043] <... futex resumed>) = 0 [pid 5050] <... close resumed>) = 0 [pid 5043] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5046] <... futex resumed>) = 0 [pid 5043] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5046] sendfile(8, 6, NULL, 281474978811908 [pid 5050] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5049] <... futex resumed>) = 0 [pid 5050] sendfile(8, 6, NULL, 281474978811908 [pid 5049] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5049] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5044] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5043] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5043] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5043] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff67807c000 [pid 5043] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5043] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5056 attached [pid 5049] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5056] set_robust_list(0x7ff67809c9e0, 24 [pid 5049] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5043] <... clone resumed>, parent_tid=[5056], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5056 [pid 5056] <... set_robust_list resumed>) = 0 [pid 5049] <... futex resumed>) = 0 [pid 5043] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5056] sync( [pid 5049] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5043] <... futex resumed>) = 0 [pid 5049] <... mmap resumed>) = 0x7ff67807c000 [pid 5043] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5049] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5049] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5057], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5057 [pid 5049] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5049] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5057 attached [pid 5057] set_robust_list(0x7ff67809c9e0, 24) = 0 [ 63.761555][ T27] audit: type=1804 audit(1686284868.137:33): pid=5046 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor481" name="/root/syzkaller.hTAWL1/2/bus/bus" dev="loop4" ino=7 res=1 errno=0 [pid 5057] sync( [pid 5043] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5049] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5052] <... write resumed>) = 16777216 [pid 5052] munmap(0x7ff67f29d000, 16777216) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5052] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5052] close(3) = 0 [pid 5052] mkdir("./bus", 0777) = 0 [pid 5052] mount("/dev/loop2", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "") = 0 [pid 5052] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5052] chdir("./bus") = 0 [ 63.852878][ T27] audit: type=1804 audit(1686284868.247:34): pid=5050 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor481" name="/root/syzkaller.PL7eda/2/bus/bus" dev="loop5" ino=7 res=1 errno=0 [ 63.882830][ T5052] loop2: detected capacity change from 0 to 32768 [ 63.893385][ T27] audit: type=1804 audit(1686284868.247:35): pid=5050 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor481" name="/root/syzkaller.PL7eda/2/bus/bus" dev="loop5" ino=7 res=1 errno=0 [pid 5052] ioctl(4, LOOP_CLR_FD) = 0 [pid 5052] close(4) = 0 [pid 5052] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5052] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5051] <... futex resumed>) = 0 [pid 5051] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5052] <... futex resumed>) = 0 [pid 5051] <... futex resumed>) = 1 [pid 5052] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5051] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5052] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5051] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5052] <... futex resumed>) = 0 [pid 5051] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5052] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5051] <... futex resumed>) = 0 [pid 5052] <... open resumed>) = 5 [pid 5051] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5052] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5051] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5052] <... futex resumed>) = 0 [pid 5051] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5052] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5051] <... futex resumed>) = 0 [pid 5052] <... mmap resumed>) = 0x20000000 [pid 5051] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5052] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5051] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5052] <... futex resumed>) = 0 [pid 5051] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5052] ftruncate(4, 33587199 [pid 5051] <... futex resumed>) = 0 [pid 5052] <... ftruncate resumed>) = 0 [pid 5051] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5052] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5051] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5052] <... futex resumed>) = 0 [pid 5051] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5052] open("./bus", O_RDONLY [pid 5051] <... futex resumed>) = 0 [pid 5052] <... open resumed>) = 6 [pid 5051] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5052] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5051] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5052] <... futex resumed>) = 0 [pid 5051] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5052] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5051] <... futex resumed>) = 0 [pid 5052] <... open resumed>) = 7 [pid 5051] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5052] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5051] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5052] <... futex resumed>) = 0 [pid 5051] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5052] dup(7 [pid 5051] <... futex resumed>) = 0 [pid 5052] <... dup resumed>) = 8 [pid 5051] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5052] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5051] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5052] <... futex resumed>) = 0 [pid 5051] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5052] memfd_create("syzkaller", 0 [pid 5051] <... futex resumed>) = 0 [pid 5052] <... memfd_create resumed>) = 9 [pid 5051] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5052] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff677e9d000 [pid 5047] exit_group(0) = ? [pid 5048] <... sendfile resumed>) = ? [pid 5048] +++ exited with 0 +++ [pid 5052] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5057] <... sync resumed>) = 0 [pid 5056] <... sync resumed>) = 0 [pid 5055] <... sync resumed>) = 0 [pid 5054] <... sync resumed>) = ? [pid 5057] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5056] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5055] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5057] <... futex resumed>) = 0 [pid 5055] <... futex resumed>) = 0 [pid 5056] <... futex resumed>) = 0 [pid 5057] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5056] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5055] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5054] +++ exited with 0 +++ [pid 5047] +++ exited with 0 +++ [pid 4996] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5047, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=32 /* 0.32 s */} --- [pid 4996] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5044] exit_group(0 [pid 5055] <... futex resumed>) = ? [pid 5044] <... exit_group resumed>) = ? [pid 5055] +++ exited with 0 +++ [pid 4996] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5045] <... sendfile resumed>) = ? [pid 4996] <... openat resumed>) = 3 [pid 4996] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] getdents64(3, [pid 5045] +++ exited with 0 +++ [pid 5044] +++ exited with 0 +++ [pid 4996] <... getdents64 resumed>0x555556742620 /* 4 entries */, 32768) = 104 [pid 4996] umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4993] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5044, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=36 /* 0.36 s */} --- [pid 4993] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4993] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4993] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4993] getdents64(3, 0x555556742620 /* 4 entries */, 32768) = 104 [pid 5052] <... write resumed>) = 2097152 [pid 4993] umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5052] munmap(0x7ff677e9d000, 2097152) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 10 [pid 5052] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5052] ioctl(10, LOOP_CLR_FD) = 0 [pid 5052] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5052] close(10) = 0 [pid 5052] close(9) = 0 [pid 5052] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5052] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5051] <... futex resumed>) = 0 [pid 5051] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5052] <... futex resumed>) = 0 [pid 5052] sendfile(8, 6, NULL, 281474978811908 [pid 5051] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5049] exit_group(0 [pid 5057] <... futex resumed>) = ? [pid 5049] <... exit_group resumed>) = ? [pid 5057] +++ exited with 0 +++ [pid 5043] exit_group(0 [pid 5056] <... futex resumed>) = ? [pid 5046] <... sendfile resumed>) = ? [pid 5043] <... exit_group resumed>) = ? [pid 5056] +++ exited with 0 +++ [pid 5050] <... sendfile resumed>) = ? [pid 5046] +++ exited with 0 +++ [pid 5043] +++ exited with 0 +++ [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5043, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=37 /* 0.37 s */} --- [pid 5051] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5051] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5051] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4997] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5050] +++ exited with 0 +++ [pid 5049] +++ exited with 0 +++ [pid 5051] <... mmap resumed>) = 0x7ff67807c000 [pid 5051] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5049, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=39 /* 0.39 s */} --- [pid 5051] <... mprotect resumed>) = 0 [pid 4998] restart_syscall(<... resuming interrupted clone ...> [pid 4997] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5051] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4998] <... restart_syscall resumed>) = 0 [pid 4997] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5058 attached [pid 4997] fstat(3, [pid 5051] <... clone resumed>, parent_tid=[5058], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5058 [pid 4998] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5058] set_robust_list(0x7ff67809c9e0, 24 [pid 5051] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] getdents64(3, [pid 5058] <... set_robust_list resumed>) = 0 [pid 5051] <... futex resumed>) = 0 [pid 4998] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] <... getdents64 resumed>0x555556742620 /* 4 entries */, 32768) = 104 [pid 5058] sync( [pid 5051] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] <... openat resumed>) = 3 [pid 4997] umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x555556742620 /* 4 entries */, 32768) = 104 [pid 4998] umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5058] <... sync resumed>) = 0 [pid 5058] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5051] <... futex resumed>) = 0 [pid 5058] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4996] <... umount2 resumed>) = 0 [pid 4996] umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] lstat("./2/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] openat(AT_FDCWD, "./2/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4996] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4996] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4996] close(4) = 0 [pid 4996] rmdir("./2/bus") = 0 [pid 4996] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] lstat("./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4996] unlink("./2/binderfs") = 0 [pid 4996] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4996] close(3) = 0 [pid 4996] rmdir("./2") = 0 [pid 4996] mkdir("./3", 0777) = 0 [pid 4996] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 4996] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4996] close(3) = 0 [pid 4996] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567415d0) = 5059 ./strace-static-x86_64: Process 5059 attached [pid 5059] set_robust_list(0x5555567415e0, 24) = 0 [pid 5059] chdir("./3") = 0 [pid 5059] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5059] setpgid(0, 0) = 0 [pid 5059] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5059] write(3, "1000", 4) = 4 [pid 4994] <... umount2 resumed>) = 0 [pid 4994] umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] lstat("./2/bus", [pid 5059] close(3) = 0 [pid 5059] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4994] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5059] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5059] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4994] umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] <... mmap resumed>) = 0x7ff68769d000 [pid 4994] openat(AT_FDCWD, "./2/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4994] <... openat resumed>) = 4 [pid 5059] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4994] fstat(4, [pid 5059] <... clone resumed>, parent_tid=[5060], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5060 [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5059] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5059] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4994] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 5060 attached [pid 5060] set_robust_list(0x7ff6876bd9e0, 24 [pid 4994] getdents64(4, [pid 5060] <... set_robust_list resumed>) = 0 [pid 4994] <... getdents64 resumed>0x55555674a660 /* 0 entries */, 32768) = 0 [pid 5060] memfd_create("syzkaller", 0 [pid 4994] close(4 [pid 5060] <... memfd_create resumed>) = 3 [pid 4998] <... umount2 resumed>) = 0 [pid 4994] <... close resumed>) = 0 [pid 5060] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4994] rmdir("./2/bus") = 0 [pid 5060] <... mmap resumed>) = 0x7ff67f29d000 [pid 4994] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] lstat("./2/binderfs", [pid 4998] umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4994] unlink("./2/binderfs" [pid 4998] lstat("./2/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] <... unlink resumed>) = 0 [pid 4998] umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./2/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4994] close(3) = 0 [pid 4994] rmdir("./2" [pid 4998] <... openat resumed>) = 4 [pid 4994] <... rmdir resumed>) = 0 [pid 4998] fstat(4, [pid 4994] mkdir("./3", 0777) = 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, [pid 4994] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 4998] <... getdents64 resumed>0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, [pid 4994] <... openat resumed>) = 3 [pid 4998] <... getdents64 resumed>0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4994] ioctl(3, LOOP_CLR_FD [pid 4998] close(4 [pid 4994] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] <... close resumed>) = 0 [pid 4994] close(3 [pid 4998] rmdir("./2/bus" [pid 4994] <... close resumed>) = 0 [pid 4997] <... umount2 resumed>) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 4994] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] <... clone resumed>, child_tidptr=0x5555567415d0) = 5061 [pid 4998] lstat("./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5051] exit_group(0 [pid 5058] <... futex resumed>) = ? [pid 5051] <... exit_group resumed>) = ? [pid 5058] +++ exited with 0 +++ [pid 4998] unlink("./2/binderfs") = 0 [pid 5052] <... sendfile resumed>) = ? [pid 4998] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./2" [pid 5052] +++ exited with 0 +++ [pid 5051] +++ exited with 0 +++ [pid 4998] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 5061 attached [pid 4998] mkdir("./3", 0777 [pid 4995] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5051, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=29 /* 0.29 s */} --- [pid 5061] set_robust_list(0x5555567415e0, 24 [pid 4998] <... mkdir resumed>) = 0 [pid 5061] <... set_robust_list resumed>) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 4995] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] chdir("./3" [pid 4998] <... openat resumed>) = 3 [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... chdir resumed>) = 0 [pid 4995] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 4995] <... openat resumed>) = 3 [pid 5061] setpgid(0, 0 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4995] fstat(3, [pid 5061] <... setpgid resumed>) = 0 [pid 4998] close(3 [pid 5061] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4998] <... close resumed>) = 0 [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5061] <... openat resumed>) = 3 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] write(3, "1000", 4 [pid 4997] umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] getdents64(3, [pid 4998] <... clone resumed>, child_tidptr=0x5555567415d0) = 5062 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./2/bus", [pid 4995] <... getdents64 resumed>0x555556742620 /* 4 entries */, 32768) = 104 [pid 4995] umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5061] <... write resumed>) = 4 [pid 4997] umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4993] <... umount2 resumed>) = 0 [pid 5061] close(3 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./2/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4997] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(4, [pid 5061] <... close resumed>) = 0 [pid 4997] <... getdents64 resumed>0x55555674a660 /* 2 entries */, 32768) = 48 [pid 5061] symlink("/dev/binderfs", "./binderfs" [pid 4997] getdents64(4, [pid 5061] <... symlink resumed>) = 0 [pid 4997] <... getdents64 resumed>0x55555674a660 /* 0 entries */, 32768) = 0 [pid 5061] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] close(4 [pid 5061] <... futex resumed>) = 0 [pid 4997] <... close resumed>) = 0 [pid 5061] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4997] rmdir("./2/bus" [pid 4993] umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... mmap resumed>) = 0x7ff68769d000 [pid 4997] <... rmdir resumed>) = 0 [pid 5061] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE [pid 4997] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4993] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... mprotect resumed>) = 0 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4997] lstat("./2/binderfs", [pid 4993] lstat("./2/bus", [pid 4997] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 ./strace-static-x86_64: Process 5062 attached [pid 5061] <... clone resumed>, parent_tid=[5063], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5063 [pid 4997] unlink("./2/binderfs" [pid 4993] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] set_robust_list(0x5555567415e0, 24 [pid 5061] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] <... unlink resumed>) = 0 [pid 5062] <... set_robust_list resumed>) = 0 [pid 5061] <... futex resumed>) = 0 [pid 4997] getdents64(3, [pid 4993] umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] chdir("./3" [pid 5061] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4997] <... getdents64 resumed>0x555556742620 /* 0 entries */, 32768) = 0 [pid 4993] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5063 attached [pid 5062] <... chdir resumed>) = 0 [pid 4997] close(3 [pid 4993] openat(AT_FDCWD, "./2/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] set_robust_list(0x7ff6876bd9e0, 24 [pid 5062] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4997] <... close resumed>) = 0 [pid 4993] <... openat resumed>) = 4 [pid 5063] <... set_robust_list resumed>) = 0 [pid 5062] <... prctl resumed>) = 0 [pid 4997] rmdir("./2" [pid 4993] fstat(4, [pid 5063] memfd_create("syzkaller", 0 [pid 5062] setpgid(0, 0 [pid 4997] <... rmdir resumed>) = 0 [pid 4993] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... memfd_create resumed>) = 3 [pid 5062] <... setpgid resumed>) = 0 [pid 4997] mkdir("./3", 0777 [pid 4993] getdents64(4, [pid 5063] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5062] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4997] <... mkdir resumed>) = 0 [pid 4993] <... getdents64 resumed>0x55555674a660 /* 2 entries */, 32768) = 48 [pid 5063] <... mmap resumed>) = 0x7ff67f29d000 [pid 5062] <... openat resumed>) = 3 [pid 4997] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4993] getdents64(4, [pid 5062] write(3, "1000", 4 [pid 4997] <... openat resumed>) = 3 [pid 4993] <... getdents64 resumed>0x55555674a660 /* 0 entries */, 32768) = 0 [pid 5062] <... write resumed>) = 4 [pid 4997] ioctl(3, LOOP_CLR_FD [pid 4993] close(4 [pid 5062] close(3 [pid 4997] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4993] <... close resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 4997] close(3 [pid 4993] rmdir("./2/bus" [pid 5062] symlink("/dev/binderfs", "./binderfs" [pid 4997] <... close resumed>) = 0 [pid 4993] <... rmdir resumed>) = 0 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4993] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] <... clone resumed>, child_tidptr=0x5555567415d0) = 5064 [pid 4993] lstat("./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5062] <... symlink resumed>) = 0 [pid 4993] unlink("./2/binderfs" [pid 5062] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 4993] <... unlink resumed>) = 0 [pid 5062] <... futex resumed>) = 0 [pid 4993] getdents64(3, [pid 5062] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4993] <... getdents64 resumed>0x555556742620 /* 0 entries */, 32768) = 0 [pid 5062] <... mmap resumed>) = 0x7ff68769d000 [pid 4993] close(3./strace-static-x86_64: Process 5064 attached [pid 5062] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE [pid 4993] <... close resumed>) = 0 [pid 5064] set_robust_list(0x5555567415e0, 24 [pid 5062] <... mprotect resumed>) = 0 [pid 4993] rmdir("./2" [pid 5064] <... set_robust_list resumed>) = 0 [pid 5062] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4993] <... rmdir resumed>) = 0 [pid 5064] chdir("./3" [pid 4993] mkdir("./3", 0777 [pid 5064] <... chdir resumed>) = 0 [pid 5062] <... clone resumed>, parent_tid=[5065], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5065 [pid 4993] <... mkdir resumed>) = 0 [pid 5064] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5062] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4993] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5064] <... prctl resumed>) = 0 [pid 5062] <... futex resumed>) = 0 [pid 4993] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5065 attached [pid 5064] setpgid(0, 0 [pid 5062] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4993] ioctl(3, LOOP_CLR_FD [pid 5065] set_robust_list(0x7ff6876bd9e0, 24 [pid 5064] <... setpgid resumed>) = 0 [pid 4993] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5065] <... set_robust_list resumed>) = 0 [pid 5064] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4993] close(3 [pid 5065] memfd_create("syzkaller", 0 [pid 5064] <... openat resumed>) = 3 [pid 4993] <... close resumed>) = 0 [pid 5065] <... memfd_create resumed>) = 3 [pid 5064] write(3, "1000", 4 [pid 4993] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5064] <... write resumed>) = 4 [pid 5065] <... mmap resumed>) = 0x7ff67f29d000 [pid 5064] close(3 [pid 4993] <... clone resumed>, child_tidptr=0x5555567415d0) = 5066 [pid 5064] <... close resumed>) = 0 [pid 5064] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5064] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5064] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 5066 attached ) = 0x7ff68769d000 [pid 5066] set_robust_list(0x5555567415e0, 24 [pid 5064] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE [pid 5066] <... set_robust_list resumed>) = 0 [pid 5064] <... mprotect resumed>) = 0 [pid 5066] chdir("./3" [pid 5064] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5066] <... chdir resumed>) = 0 [pid 5066] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5064] <... clone resumed>, parent_tid=[5067], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5067 [pid 5066] <... prctl resumed>) = 0 [pid 5064] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] setpgid(0, 0 [pid 5064] <... futex resumed>) = 0 [pid 5066] <... setpgid resumed>) = 0 [pid 5064] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5066] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 ./strace-static-x86_64: Process 5067 attached [pid 5066] write(3, "1000", 4 [pid 5067] set_robust_list(0x7ff6876bd9e0, 24 [pid 5066] <... write resumed>) = 4 [pid 5066] close(3 [pid 5067] <... set_robust_list resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 5066] symlink("/dev/binderfs", "./binderfs" [pid 5067] memfd_create("syzkaller", 0 [pid 5066] <... symlink resumed>) = 0 [pid 5066] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... memfd_create resumed>) = 3 [pid 5066] <... futex resumed>) = 0 [pid 5067] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5066] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5067] <... mmap resumed>) = 0x7ff67f29d000 [pid 5066] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5066] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5068], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5068 [pid 5066] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5066] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5068 attached [pid 5068] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5068] memfd_create("syzkaller", 0) = 3 [pid 5068] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 4995] <... umount2 resumed>) = 0 [pid 4995] umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4995] lstat("./2/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4995] openat(AT_FDCWD, "./2/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4995] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4995] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4995] close(4) = 0 [pid 4995] rmdir("./2/bus") = 0 [pid 4995] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4995] lstat("./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4995] unlink("./2/binderfs") = 0 [pid 4995] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4995] close(3) = 0 [pid 4995] rmdir("./2") = 0 [pid 4995] mkdir("./3", 0777) = 0 [pid 4995] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 4995] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4995] close(3) = 0 [pid 4995] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567415d0) = 5069 [pid 5060] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216./strace-static-x86_64: Process 5069 attached [pid 5069] set_robust_list(0x5555567415e0, 24) = 0 [pid 5069] chdir("./3") = 0 [pid 5069] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5069] setpgid(0, 0) = 0 [pid 5069] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5069] write(3, "1000", 4) = 4 [pid 5069] close(3) = 0 [pid 5069] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5069] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5069] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5069] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5069] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5070], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5070 [pid 5069] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5069] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5070 attached [pid 5070] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5070] memfd_create("syzkaller", 0) = 3 [pid 5070] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 5065] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5063] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5067] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5068] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5070] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5060] <... write resumed>) = 16777216 [pid 5060] munmap(0x7ff67f29d000, 16777216) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5060] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5060] close(3) = 0 [pid 5060] mkdir("./bus", 0777) = 0 [pid 5060] mount("/dev/loop3", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "") = 0 [pid 5060] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5060] chdir("./bus") = 0 [pid 5060] ioctl(4, LOOP_CLR_FD) = 0 [ 65.542764][ T5060] loop3: detected capacity change from 0 to 32768 [pid 5060] close(4) = 0 [pid 5060] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5059] <... futex resumed>) = 0 [pid 5060] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5059] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5059] <... futex resumed>) = 0 [pid 5060] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5059] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5060] <... open resumed>) = 4 [pid 5060] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5059] <... futex resumed>) = 0 [pid 5060] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5059] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5059] <... futex resumed>) = 0 [pid 5060] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5059] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5060] <... open resumed>) = 5 [pid 5060] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5059] <... futex resumed>) = 0 [pid 5060] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5059] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5059] <... futex resumed>) = 0 [pid 5060] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5059] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5060] <... mmap resumed>) = 0x20000000 [pid 5060] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5059] <... futex resumed>) = 0 [pid 5060] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5059] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5059] <... futex resumed>) = 0 [pid 5060] ftruncate(4, 33587199 [pid 5059] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5060] <... ftruncate resumed>) = 0 [pid 5060] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5059] <... futex resumed>) = 0 [pid 5060] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5059] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5059] <... futex resumed>) = 0 [pid 5060] open("./bus", O_RDONLY [pid 5059] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5060] <... open resumed>) = 6 [pid 5060] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5059] <... futex resumed>) = 0 [pid 5060] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5059] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5059] <... futex resumed>) = 0 [pid 5060] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5059] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5060] <... open resumed>) = 7 [pid 5060] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5059] <... futex resumed>) = 0 [pid 5060] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5059] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5059] <... futex resumed>) = 0 [pid 5060] dup(7 [pid 5059] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5060] <... dup resumed>) = 8 [pid 5060] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5059] <... futex resumed>) = 0 [pid 5060] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5059] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5059] <... futex resumed>) = 0 [pid 5060] memfd_create("syzkaller", 0 [pid 5059] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5060] <... memfd_create resumed>) = 9 [pid 5060] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff677e9d000 [pid 5065] <... write resumed>) = 16777216 [pid 5063] <... write resumed>) = 16777216 [pid 5065] munmap(0x7ff67f29d000, 16777216 [pid 5063] munmap(0x7ff67f29d000, 16777216 [pid 5060] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5067] <... write resumed>) = 16777216 [pid 5067] munmap(0x7ff67f29d000, 16777216 [pid 5065] <... munmap resumed>) = 0 [pid 5063] <... munmap resumed>) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5063] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5065] <... openat resumed>) = 4 [pid 5065] ioctl(4, LOOP_SET_FD, 3 [pid 5063] ioctl(4, LOOP_SET_FD, 3 [pid 5068] <... write resumed>) = 16777216 [pid 5068] munmap(0x7ff67f29d000, 16777216 [pid 5065] <... ioctl resumed>) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 5065] close(3 [pid 5063] close(3 [pid 5065] <... close resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5068] <... munmap resumed>) = 0 [pid 5067] <... munmap resumed>) = 0 [pid 5065] mkdir("./bus", 0777 [pid 5063] mkdir("./bus", 0777 [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5065] <... mkdir resumed>) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5067] <... openat resumed>) = 4 [pid 5065] mount("/dev/loop5", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5063] mount("/dev/loop1", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5060] <... write resumed>) = 2097152 [pid 5060] munmap(0x7ff677e9d000, 2097152 [ 65.741980][ T5065] loop5: detected capacity change from 0 to 32768 [ 65.748866][ T5063] loop1: detected capacity change from 0 to 32768 [pid 5067] ioctl(4, LOOP_SET_FD, 3 [pid 5068] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5060] <... munmap resumed>) = 0 [pid 5068] <... openat resumed>) = 4 [pid 5068] ioctl(4, LOOP_SET_FD, 3 [pid 5063] <... mount resumed>) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5065] <... mount resumed>) = 0 [pid 5067] <... ioctl resumed>) = 0 [pid 5060] <... openat resumed>) = 10 [pid 5060] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5060] ioctl(10, LOOP_CLR_FD) = 0 [pid 5068] <... ioctl resumed>) = 0 [pid 5068] close(3 [pid 5065] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5063] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5067] close(3 [pid 5065] <... openat resumed>) = 3 [pid 5063] <... openat resumed>) = 3 [pid 5067] <... close resumed>) = 0 [pid 5065] chdir("./bus" [pid 5063] chdir("./bus" [pid 5060] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5067] mkdir("./bus", 0777 [pid 5065] <... chdir resumed>) = 0 [pid 5063] <... chdir resumed>) = 0 [pid 5060] close(10 [pid 5067] <... mkdir resumed>) = 0 [pid 5065] ioctl(4, LOOP_CLR_FD [pid 5063] ioctl(4, LOOP_CLR_FD [pid 5060] <... close resumed>) = 0 [pid 5067] mount("/dev/loop4", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5065] <... ioctl resumed>) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 5060] close(9 [pid 5067] <... mount resumed>) = 0 [pid 5065] close(4 [pid 5063] close(4 [pid 5060] <... close resumed>) = 0 [pid 5067] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5065] <... close resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5067] <... openat resumed>) = 3 [pid 5065] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] chdir("./bus" [pid 5065] <... futex resumed>) = 1 [pid 5063] <... futex resumed>) = 1 [pid 5062] <... futex resumed>) = 0 [pid 5061] <... futex resumed>) = 0 [pid 5067] <... chdir resumed>) = 0 [pid 5065] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5063] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5062] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] ioctl(4, LOOP_CLR_FD [pid 5065] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5063] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5062] <... futex resumed>) = 0 [pid 5061] <... futex resumed>) = 0 [pid 5067] <... ioctl resumed>) = 0 [pid 5065] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5063] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5062] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5061] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] <... close resumed>) = 0 [pid 5067] close(4 [pid 5068] mkdir("./bus", 0777 [pid 5065] <... open resumed>) = 4 [pid 5068] <... mkdir resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5065] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... open resumed>) = 4 [pid 5068] mount("/dev/loop0", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5067] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] <... futex resumed>) = 1 [pid 5063] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... futex resumed>) = 0 [pid 5067] <... futex resumed>) = 1 [pid 5065] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5064] <... futex resumed>) = 0 [pid 5063] <... futex resumed>) = 1 [pid 5062] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] <... futex resumed>) = 0 [pid 5067] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5065] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5064] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5062] <... futex resumed>) = 0 [ 65.782617][ T5067] loop4: detected capacity change from 0 to 32768 [ 65.784719][ T5068] loop0: detected capacity change from 0 to 32768 [pid 5061] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5065] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5064] <... futex resumed>) = 0 [pid 5063] <... open resumed>) = 5 [pid 5062] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5061] <... futex resumed>) = 0 [pid 5060] <... futex resumed>) = 1 [pid 5059] <... futex resumed>) = 0 [pid 5067] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5065] <... open resumed>) = 5 [pid 5064] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5063] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5060] sendfile(8, 6, NULL, 281474978811908 [pid 5059] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... mount resumed>) = 0 [pid 5067] <... open resumed>) = 4 [pid 5065] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... futex resumed>) = 0 [pid 5061] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5059] <... futex resumed>) = 0 [pid 5068] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5067] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] <... futex resumed>) = 1 [pid 5063] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5062] <... futex resumed>) = 0 [pid 5061] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] <... openat resumed>) = 3 [pid 5067] <... futex resumed>) = 1 [pid 5065] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5064] <... futex resumed>) = 0 [pid 5063] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5062] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] <... futex resumed>) = 0 [pid 5068] chdir("./bus" [pid 5067] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5065] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5064] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5062] <... futex resumed>) = 0 [pid 5061] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] <... chdir resumed>) = 0 [pid 5067] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5065] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5064] <... futex resumed>) = 0 [pid 5063] <... mmap resumed>) = 0x20000000 [pid 5062] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] ioctl(4, LOOP_CLR_FD [pid 5067] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5065] <... mmap resumed>) = 0x20000000 [pid 5064] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5063] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... write resumed>) = 16777216 [pid 5068] <... ioctl resumed>) = 0 [pid 5067] <... open resumed>) = 5 [pid 5065] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... futex resumed>) = 1 [pid 5061] <... futex resumed>) = 0 [pid 5070] munmap(0x7ff67f29d000, 16777216 [pid 5068] close(4 [pid 5067] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] <... futex resumed>) = 1 [pid 5063] ftruncate(4, 33587199 [pid 5062] <... futex resumed>) = 0 [pid 5061] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... close resumed>) = 0 [pid 5067] <... futex resumed>) = 1 [pid 5065] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5064] <... futex resumed>) = 0 [pid 5063] <... ftruncate resumed>) = 0 [pid 5062] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] <... futex resumed>) = 0 [pid 5068] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5065] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5064] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... futex resumed>) = 0 [pid 5061] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] <... futex resumed>) = 1 [pid 5067] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5066] <... futex resumed>) = 0 [pid 5065] ftruncate(4, 33587199 [pid 5064] <... futex resumed>) = 0 [pid 5063] <... futex resumed>) = 0 [pid 5062] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5061] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5068] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5067] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5066] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] <... ftruncate resumed>) = 0 [pid 5064] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5061] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5063] open("./bus", O_RDONLY [pid 5061] <... futex resumed>) = 0 [pid 5068] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5067] <... mmap resumed>) = 0x20000000 [pid 5066] <... futex resumed>) = 0 [pid 5065] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... open resumed>) = 6 [pid 5061] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] <... open resumed>) = 4 [pid 5066] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5065] <... futex resumed>) = 1 [pid 5062] <... futex resumed>) = 0 [pid 5067] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... munmap resumed>) = 0 [pid 5068] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... futex resumed>) = 1 [pid 5066] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5065] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5064] <... futex resumed>) = 0 [pid 5063] <... futex resumed>) = 1 [pid 5062] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] <... futex resumed>) = 0 [pid 5068] <... futex resumed>) = 0 [pid 5067] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5066] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5064] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5062] <... futex resumed>) = 0 [pid 5061] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5068] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5067] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5066] <... futex resumed>) = 0 [pid 5061] <... futex resumed>) = 0 [pid 5068] <... open resumed>) = 5 [pid 5067] ftruncate(4, 33587199 [pid 5066] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5065] open("./bus", O_RDONLY [pid 5064] <... futex resumed>) = 0 [pid 5063] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5062] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5061] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] <... openat resumed>) = 4 [pid 5068] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... ftruncate resumed>) = 0 [pid 5066] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5065] <... open resumed>) = 6 [pid 5064] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5063] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5070] ioctl(4, LOOP_SET_FD, 3 [pid 5068] <... futex resumed>) = 0 [pid 5067] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5064] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5063] <... open resumed>) = 7 [pid 5068] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5067] <... futex resumed>) = 0 [pid 5066] <... futex resumed>) = 0 [pid 5065] <... futex resumed>) = 1 [pid 5064] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... futex resumed>) = 0 [pid 5059] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5059] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... mmap resumed>) = 0x20000000 [pid 5059] <... futex resumed>) = 0 [pid 5068] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] open("./bus", O_RDONLY [pid 5066] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5065] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5064] <... futex resumed>) = 0 [pid 5063] <... futex resumed>) = 1 [pid 5062] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] <... futex resumed>) = 0 [pid 5059] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5070] <... ioctl resumed>) = 0 [pid 5068] <... futex resumed>) = 0 [pid 5067] <... open resumed>) = 6 [pid 5066] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5065] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5064] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5063] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5062] <... futex resumed>) = 0 [pid 5061] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] close(3 [pid 5068] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5067] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5064] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5063] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5062] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5061] <... futex resumed>) = 0 [pid 5059] <... mmap resumed>) = 0x7ff67807c000 [pid 5070] <... close resumed>) = 0 [pid 5068] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5067] <... futex resumed>) = 0 [pid 5066] <... futex resumed>) = 0 [pid 5065] <... open resumed>) = 7 [pid 5064] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] dup(7 [pid 5061] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5059] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5070] mkdir("./bus", 0777 [pid 5068] ftruncate(4, 33587199 [pid 5067] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5066] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5065] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5064] <... futex resumed>) = 0 [pid 5063] <... dup resumed>) = 8 [pid 5059] <... mprotect resumed>) = 0 [pid 5070] <... mkdir resumed>) = 0 [pid 5068] <... ftruncate resumed>) = 0 [pid 5067] <... open resumed>) = 7 [pid 5065] <... futex resumed>) = 1 [pid 5064] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5063] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... futex resumed>) = 0 [pid 5059] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5070] mount("/dev/loop2", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5068] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5064] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5063] <... futex resumed>) = 1 [pid 5062] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... futex resumed>) = 1 [pid 5067] <... futex resumed>) = 0 [pid 5066] <... futex resumed>) = 0 [pid 5065] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5064] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5062] <... futex resumed>) = 0 [pid 5068] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5067] dup(7 [pid 5066] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] dup(7 [pid 5064] <... futex resumed>) = 0 [pid 5062] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5067] <... dup resumed>) = 8 [pid 5066] <... futex resumed>) = 0 [pid 5065] <... dup resumed>) = 8 [pid 5064] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5061] <... futex resumed>) = 0 [pid 5070] <... mount resumed>) = 0 [pid 5068] open("./bus", O_RDONLY [pid 5067] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5065] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5064] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5061] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] <... clone resumed>, parent_tid=[5071], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5071 ./strace-static-x86_64: Process 5071 attached [pid 5070] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5068] <... open resumed>) = 6 [pid 5067] <... futex resumed>) = 0 [pid 5065] <... futex resumed>) = 1 [pid 5064] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... futex resumed>) = 0 [pid 5062] <... futex resumed>) = 0 [pid 5061] <... futex resumed>) = 1 [pid 5059] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5071] set_robust_list(0x7ff67809c9e0, 24 [pid 5070] <... openat resumed>) = 3 [pid 5068] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] memfd_create("syzkaller", 0 [pid 5065] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5064] <... futex resumed>) = 0 [pid 5063] memfd_create("syzkaller", 0 [pid 5062] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] chdir("./bus" [pid 5068] <... futex resumed>) = 1 [pid 5067] <... memfd_create resumed>) = 9 [pid 5066] <... futex resumed>) = 0 [pid 5065] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 65.909144][ T5070] loop2: detected capacity change from 0 to 32768 [pid 5064] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5063] <... memfd_create resumed>) = 9 [pid 5062] <... futex resumed>) = 0 [pid 5061] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5059] <... futex resumed>) = 0 [pid 5071] <... set_robust_list resumed>) = 0 [pid 5070] <... chdir resumed>) = 0 [pid 5068] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5067] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5066] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] memfd_create("syzkaller", 0 [pid 5063] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5062] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5059] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5071] sync( [pid 5070] ioctl(4, LOOP_CLR_FD [pid 5068] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5067] <... mmap resumed>) = 0x7ff677e9d000 [pid 5066] <... futex resumed>) = 0 [pid 5065] <... memfd_create resumed>) = 9 [pid 5063] <... mmap resumed>) = 0x7ff677e9d000 [pid 5070] <... ioctl resumed>) = 0 [pid 5068] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5066] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5065] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5071] <... sync resumed>) = 0 [pid 5070] close(4 [pid 5068] <... open resumed>) = 7 [pid 5065] <... mmap resumed>) = 0x7ff677e9d000 [pid 5071] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... close resumed>) = 0 [pid 5068] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5070] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... futex resumed>) = 1 [pid 5066] <... futex resumed>) = 0 [pid 5070] <... futex resumed>) = 1 [pid 5069] <... futex resumed>) = 0 [pid 5068] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5066] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5069] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5066] <... futex resumed>) = 0 [pid 5070] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5069] <... futex resumed>) = 0 [pid 5068] dup(7 [pid 5066] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5069] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] <... dup resumed>) = 8 [pid 5071] <... futex resumed>) = 0 [pid 5070] <... open resumed>) = 4 [pid 5068] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5071] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5070] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... futex resumed>) = 1 [pid 5066] <... futex resumed>) = 0 [pid 5070] <... futex resumed>) = 1 [pid 5069] <... futex resumed>) = 0 [pid 5068] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5066] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5069] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5066] <... futex resumed>) = 0 [pid 5070] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5069] <... futex resumed>) = 0 [pid 5068] memfd_create("syzkaller", 0 [pid 5066] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5070] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5069] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] <... memfd_create resumed>) = 9 [pid 5070] <... open resumed>) = 5 [pid 5068] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5070] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... mmap resumed>) = 0x7ff677e9d000 [pid 5070] <... futex resumed>) = 1 [pid 5069] <... futex resumed>) = 0 [pid 5070] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5069] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5069] <... futex resumed>) = 0 [pid 5070] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5069] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5067] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5070] <... mmap resumed>) = 0x20000000 [pid 5070] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5069] <... futex resumed>) = 0 [pid 5070] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5069] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5069] <... futex resumed>) = 0 [pid 5070] ftruncate(4, 33587199 [pid 5069] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] <... ftruncate resumed>) = 0 [pid 5068] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5063] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5070] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5069] <... futex resumed>) = 0 [pid 5070] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5069] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5069] <... futex resumed>) = 0 [pid 5070] open("./bus", O_RDONLY [pid 5069] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] <... open resumed>) = 6 [pid 5070] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5069] <... futex resumed>) = 0 [pid 5070] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5069] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5069] <... futex resumed>) = 0 [pid 5070] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5069] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] <... open resumed>) = 7 [pid 5070] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5069] <... futex resumed>) = 0 [pid 5070] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5069] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5069] <... futex resumed>) = 0 [pid 5070] dup(7 [pid 5069] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] <... dup resumed>) = 8 [pid 5070] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5070] <... futex resumed>) = 1 [pid 5069] <... futex resumed>) = 0 [pid 5070] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5069] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5069] <... futex resumed>) = 0 [pid 5070] memfd_create("syzkaller", 0 [pid 5069] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5070] <... memfd_create resumed>) = 9 [pid 5070] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff677e9d000 [pid 5068] <... write resumed>) = 2097152 [pid 5067] <... write resumed>) = 2097152 [pid 5068] munmap(0x7ff677e9d000, 2097152) = 0 [pid 5067] munmap(0x7ff677e9d000, 2097152 [pid 5068] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 10 [pid 5068] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5068] ioctl(10, LOOP_CLR_FD) = 0 [pid 5067] <... munmap resumed>) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 10 [pid 5068] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5067] ioctl(10, LOOP_SET_FD, 9 [pid 5068] close(10 [pid 5067] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5068] <... close resumed>) = 0 [pid 5065] <... write resumed>) = 2097152 [pid 5067] ioctl(10, LOOP_CLR_FD [pid 5068] close(9 [pid 5067] <... ioctl resumed>) = 0 [pid 5067] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5067] close(10) = 0 [pid 5067] close(9 [pid 5065] munmap(0x7ff677e9d000, 2097152) = 0 [pid 5068] <... close resumed>) = 0 [pid 5063] <... write resumed>) = 2097152 [pid 5065] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 10 [pid 5068] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] ioctl(10, LOOP_SET_FD, 9 [pid 5068] <... futex resumed>) = 1 [pid 5066] <... futex resumed>) = 0 [pid 5065] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] munmap(0x7ff677e9d000, 2097152 [pid 5070] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5068] sendfile(8, 6, NULL, 281474978811908 [pid 5067] <... close resumed>) = 0 [pid 5066] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] ioctl(10, LOOP_CLR_FD [pid 5063] <... munmap resumed>) = 0 [pid 5067] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] <... futex resumed>) = 0 [pid 5065] <... ioctl resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5066] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5065] ioctl(10, LOOP_SET_FD, 9 [pid 5063] <... openat resumed>) = 10 [pid 5067] <... futex resumed>) = 1 [pid 5065] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5064] <... futex resumed>) = 0 [pid 5063] ioctl(10, LOOP_SET_FD, 9 [pid 5067] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5065] close(10 [pid 5064] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5067] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5065] <... close resumed>) = 0 [pid 5064] <... futex resumed>) = 0 [pid 5063] ioctl(10, LOOP_CLR_FD [pid 5067] sendfile(8, 6, NULL, 281474978811908 [pid 5065] close(9 [pid 5064] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5063] <... ioctl resumed>) = 0 [pid 5063] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5063] close(10) = 0 [pid 5065] <... close resumed>) = 0 [pid 5063] close(9 [pid 5065] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... futex resumed>) = 0 [pid 5062] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5062] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5065] <... futex resumed>) = 1 [pid 5066] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5065] sendfile(8, 6, NULL, 281474978811908 [pid 5063] <... close resumed>) = 0 [pid 5066] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] <... futex resumed>) = 0 [pid 5061] <... futex resumed>) = 0 [pid 5063] <... futex resumed>) = 1 [pid 5066] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff67807c000 [pid 5063] sendfile(8, 6, NULL, 281474978811908 [pid 5061] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5061] <... futex resumed>) = 0 [pid 5066] <... mprotect resumed>) = 0 [pid 5061] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5066] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5072], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5072 [pid 5064] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5066] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5064] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] <... futex resumed>) = 0 [pid 5064] <... futex resumed>) = 0 [pid 5066] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5064] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 5072 attached ) = 0x7ff67807c000 [pid 5064] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5072] set_robust_list(0x7ff67809c9e0, 24 [pid 5064] <... mprotect resumed>) = 0 [pid 5072] <... set_robust_list resumed>) = 0 [pid 5064] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5072] sync( [pid 5062] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5064] <... clone resumed>, parent_tid=[5073], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5073 [pid 5062] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5064] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... futex resumed>) = 0 [pid 5064] <... futex resumed>) = 0 [pid 5062] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5072] <... sync resumed>) = 0 [pid 5070] <... write resumed>) = 2097152 [pid 5064] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5062] <... mmap resumed>) = 0x7ff67807c000 ./strace-static-x86_64: Process 5073 attached [pid 5072] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] munmap(0x7ff677e9d000, 2097152 [pid 5062] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5061] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5073] set_robust_list(0x7ff67809c9e0, 24 [pid 5072] <... futex resumed>) = 1 [pid 5066] <... futex resumed>) = 0 [pid 5062] <... mprotect resumed>) = 0 [pid 5061] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] <... set_robust_list resumed>) = 0 [pid 5072] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5062] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5061] <... futex resumed>) = 0 [pid 5073] sync( [pid 5070] <... munmap resumed>) = 0 [pid 5062] <... clone resumed>, parent_tid=[5074], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5074 [pid 5061] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 5074 attached [pid 5070] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5062] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] set_robust_list(0x7ff67809c9e0, 24 [pid 5070] <... openat resumed>) = 10 [pid 5062] <... futex resumed>) = 0 [pid 5074] <... set_robust_list resumed>) = 0 [pid 5070] ioctl(10, LOOP_SET_FD, 9 [pid 5062] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] sync( [pid 5070] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5061] <... mmap resumed>) = 0x7ff67807c000 [pid 5073] <... sync resumed>) = 0 [pid 5070] ioctl(10, LOOP_CLR_FD [pid 5061] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5073] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... ioctl resumed>) = 0 [pid 5061] <... mprotect resumed>) = 0 [pid 5074] <... sync resumed>) = 0 [pid 5073] <... futex resumed>) = 1 [pid 5064] <... futex resumed>) = 0 [pid 5061] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5074] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5074] <... futex resumed>) = 1 [pid 5062] <... futex resumed>) = 0 [pid 5074] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5061] <... clone resumed>, parent_tid=[5075], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5075 [pid 5070] ioctl(10, LOOP_SET_FD, 9 [pid 5061] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5061] <... futex resumed>) = 0 [pid 5070] close(10 [pid 5061] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] <... close resumed>) = 0 [pid 5070] close(9./strace-static-x86_64: Process 5075 attached [pid 5075] set_robust_list(0x7ff67809c9e0, 24) = 0 [pid 5075] sync( [pid 5070] <... close resumed>) = 0 [pid 5070] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5069] <... futex resumed>) = 0 [pid 5070] sendfile(8, 6, NULL, 281474978811908 [pid 5069] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... sync resumed>) = 0 [pid 5069] <... futex resumed>) = 0 [pid 5075] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5061] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5075] <... futex resumed>) = 0 [pid 5075] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5069] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5069] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5069] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff67807c000 [pid 5069] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5069] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5076], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5076 [pid 5069] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5069] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5076 attached [pid 5076] set_robust_list(0x7ff67809c9e0, 24) = 0 [pid 5076] sync() = 0 [pid 5076] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5069] <... futex resumed>) = 0 [pid 5076] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5059] exit_group(0 [pid 5071] <... futex resumed>) = ? [pid 5059] <... exit_group resumed>) = ? [pid 5071] +++ exited with 0 +++ [pid 5060] <... sendfile resumed>) = ? [pid 5060] +++ exited with 0 +++ [pid 5059] +++ exited with 0 +++ [pid 4996] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5059, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=39 /* 0.39 s */} --- [pid 4996] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4996] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4996] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] getdents64(3, 0x555556742620 /* 4 entries */, 32768) = 104 [pid 4996] umount2("./3/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] exit_group(0 [pid 5072] <... futex resumed>) = ? [pid 5068] <... sendfile resumed>) = ? [pid 5066] <... exit_group resumed>) = ? [pid 5072] +++ exited with 0 +++ [pid 5064] exit_group(0 [pid 5073] <... futex resumed>) = ? [pid 5064] <... exit_group resumed>) = ? [pid 5073] +++ exited with 0 +++ [pid 5068] +++ exited with 0 +++ [pid 5067] <... sendfile resumed>) = ? [pid 5066] +++ exited with 0 +++ [pid 4993] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5066, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=36 /* 0.36 s */} --- [pid 5067] +++ exited with 0 +++ [pid 5064] +++ exited with 0 +++ [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5064, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=36 /* 0.36 s */} --- [pid 4993] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4993] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4993] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4993] getdents64(3, [pid 4997] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4993] <... getdents64 resumed>0x555556742620 /* 4 entries */, 32768) = 104 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4993] umount2("./3/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4997] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(3, [pid 5062] exit_group(0 [pid 4997] <... getdents64 resumed>0x555556742620 /* 4 entries */, 32768) = 104 [pid 5074] <... futex resumed>) = ? [pid 5062] <... exit_group resumed>) = ? [pid 4997] umount2("./3/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] +++ exited with 0 +++ [pid 5065] <... sendfile resumed>) = ? [pid 5065] +++ exited with 0 +++ [pid 5062] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5062, si_uid=0, si_status=0, si_utime=16 /* 0.16 s */, si_stime=32 /* 0.32 s */} --- [pid 4998] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4998] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x555556742620 /* 4 entries */, 32768) = 104 [pid 4998] umount2("./3/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] exit_group(0 [pid 5076] <... futex resumed>) = ? [pid 5069] <... exit_group resumed>) = ? [pid 5076] +++ exited with 0 +++ [pid 5061] exit_group(0 [pid 5075] <... futex resumed>) = ? [pid 5061] <... exit_group resumed>) = ? [pid 5075] +++ exited with 0 +++ [pid 5070] <... sendfile resumed>) = ? [pid 5070] +++ exited with 0 +++ [pid 5069] +++ exited with 0 +++ [pid 5063] <... sendfile resumed>) = ? [pid 5063] +++ exited with 0 +++ [pid 5061] +++ exited with 0 +++ [pid 4995] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5069, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=35 /* 0.35 s */} --- [pid 4995] restart_syscall(<... resuming interrupted clone ...> [pid 4994] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5061, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=38 /* 0.38 s */} --- [pid 4995] <... restart_syscall resumed>) = 0 [pid 4994] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4995] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4994] <... openat resumed>) = 3 [pid 4995] <... openat resumed>) = 3 [pid 4994] fstat(3, [pid 4995] fstat(3, [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] getdents64(3, [pid 4995] getdents64(3, [pid 4994] <... getdents64 resumed>0x555556742620 /* 4 entries */, 32768) = 104 [pid 4995] <... getdents64 resumed>0x555556742620 /* 4 entries */, 32768) = 104 [pid 4994] umount2("./3/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] umount2("./3/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... umount2 resumed>) = 0 [pid 4997] umount2("./3/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./3/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./3/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./3/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4997] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4997] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4997] close(4) = 0 [pid 4997] rmdir("./3/bus") = 0 [pid 4997] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] unlink("./3/binderfs") = 0 [pid 4997] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4997] close(3) = 0 [pid 4997] rmdir("./3") = 0 [pid 4997] mkdir("./4", 0777) = 0 [pid 4997] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 4997] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4997] close(3) = 0 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567415d0) = 5077 [pid 4996] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 5077 attached [pid 5077] set_robust_list(0x5555567415e0, 24 [pid 4996] umount2("./3/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... set_robust_list resumed>) = 0 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] chdir("./4" [pid 4996] lstat("./3/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] <... chdir resumed>) = 0 [pid 4996] umount2("./3/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] setpgid(0, 0 [pid 4996] openat(AT_FDCWD, "./3/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5077] <... setpgid resumed>) = 0 [pid 4996] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] getdents64(4, [pid 5077] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4996] <... getdents64 resumed>0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4996] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4996] close(4 [pid 5077] <... openat resumed>) = 3 [pid 4996] <... close resumed>) = 0 [pid 4996] rmdir("./3/bus" [pid 5077] write(3, "1000", 4 [pid 4996] <... rmdir resumed>) = 0 [pid 5077] <... write resumed>) = 4 [pid 5077] close(3 [pid 4996] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... close resumed>) = 0 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] symlink("/dev/binderfs", "./binderfs" [pid 4996] lstat("./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5077] <... symlink resumed>) = 0 [pid 4996] unlink("./3/binderfs") = 0 [pid 5077] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] getdents64(3, [pid 5077] <... futex resumed>) = 0 [pid 4996] <... getdents64 resumed>0x555556742620 /* 0 entries */, 32768) = 0 [pid 5077] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4996] close(3) = 0 [pid 4996] rmdir("./3") = 0 [pid 5077] <... mmap resumed>) = 0x7ff68769d000 [pid 4996] mkdir("./4", 0777 [pid 5077] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE [pid 4996] <... mkdir resumed>) = 0 [pid 5077] <... mprotect resumed>) = 0 [pid 4996] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5077] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4996] <... openat resumed>) = 3 [pid 4996] ioctl(3, LOOP_CLR_FD [pid 4993] <... umount2 resumed>) = 0 [pid 5077] <... clone resumed>, parent_tid=[5078], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5078 [pid 5077] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5077] <... futex resumed>) = 0 [pid 4996] close(3 [pid 5077] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4996] <... close resumed>) = 0 [pid 4993] umount2("./3/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4993] lstat("./3/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4993] umount2("./3/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4993] openat(AT_FDCWD, "./3/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4993] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4993] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4993] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4993] close(4) = 0 [pid 4993] rmdir("./3/bus" [pid 4996] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4993] <... rmdir resumed>) = 0 [pid 4993] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] <... clone resumed>, child_tidptr=0x5555567415d0) = 5079 [pid 4993] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4993] lstat("./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4993] unlink("./3/binderfs") = 0 [pid 4993] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4993] close(3) = 0 [pid 4993] rmdir("./3") = 0 [pid 4993] mkdir("./4", 0777./strace-static-x86_64: Process 5078 attached [pid 5078] set_robust_list(0x7ff6876bd9e0, 24./strace-static-x86_64: Process 5079 attached ) = 0 [pid 4993] <... mkdir resumed>) = 0 [pid 4993] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4993] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4993] close(3) = 0 [pid 4993] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5078] memfd_create("syzkaller", 0 [pid 5079] set_robust_list(0x5555567415e0, 24 [pid 5078] <... memfd_create resumed>) = 3 [pid 4998] <... umount2 resumed>) = 0 [pid 5079] <... set_robust_list resumed>) = 0 [pid 5078] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5079] chdir("./4" [pid 4993] <... clone resumed>, child_tidptr=0x5555567415d0) = 5080 [pid 5079] <... chdir resumed>) = 0 [pid 5078] <... mmap resumed>) = 0x7ff67f29d000 [pid 5079] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 5080 attached [pid 5080] set_robust_list(0x5555567415e0, 24) = 0 [pid 5080] chdir("./4") = 0 [pid 5080] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5080] setpgid(0, 0) = 0 [pid 5080] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5080] write(3, "1000", 4) = 4 [pid 5080] close(3) = 0 [pid 5080] symlink("/dev/binderfs", "./binderfs" [pid 5079] <... prctl resumed>) = 0 [pid 5080] <... symlink resumed>) = 0 [pid 5079] setpgid(0, 0 [pid 5080] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... setpgid resumed>) = 0 [pid 5080] <... futex resumed>) = 0 [pid 5079] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5080] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5079] <... openat resumed>) = 3 [pid 5080] <... mmap resumed>) = 0x7ff68769d000 [pid 5079] write(3, "1000", 4 [pid 5080] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE [pid 5079] <... write resumed>) = 4 [pid 5080] <... mprotect resumed>) = 0 [pid 5079] close(3 [pid 5080] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5079] <... close resumed>) = 0 [pid 5079] symlink("/dev/binderfs", "./binderfs" [pid 5080] <... clone resumed>, parent_tid=[5081], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5081 [pid 5080] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5079] <... symlink resumed>) = 0 [pid 4998] umount2("./3/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5079] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] <... futex resumed>) = 0 [pid 4998] lstat("./3/bus", [pid 5079] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] <... mmap resumed>) = 0x7ff68769d000 [pid 4998] umount2("./3/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] <... mprotect resumed>) = 0 [pid 4998] openat(AT_FDCWD, "./3/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 5081 attached [pid 5079] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4998] <... openat resumed>) = 4 [pid 5081] set_robust_list(0x7ff6876bd9e0, 24 [pid 4998] fstat(4, [pid 5081] <... set_robust_list resumed>) = 0 [pid 5079] <... clone resumed>, parent_tid=[5082], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5082 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] memfd_create("syzkaller", 0 [pid 5079] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] getdents64(4, [pid 5081] <... memfd_create resumed>) = 3 [pid 5079] <... futex resumed>) = 0 [pid 4998] <... getdents64 resumed>0x55555674a660 /* 2 entries */, 32768) = 48 [pid 5081] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5079] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4998] getdents64(4, [pid 5081] <... mmap resumed>) = 0x7ff67f29d000 [pid 4998] <... getdents64 resumed>0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 ./strace-static-x86_64: Process 5082 attached [pid 4998] rmdir("./3/bus") = 0 [pid 5082] set_robust_list(0x7ff6876bd9e0, 24 [pid 4998] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5082] <... set_robust_list resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./3/binderfs", [pid 5082] memfd_create("syzkaller", 0 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5082] <... memfd_create resumed>) = 3 [pid 4998] unlink("./3/binderfs" [pid 5082] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4998] <... unlink resumed>) = 0 [pid 5082] <... mmap resumed>) = 0x7ff67f29d000 [pid 4998] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./3") = 0 [pid 4994] <... umount2 resumed>) = 0 [pid 4998] mkdir("./4", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4994] umount2("./3/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] <... clone resumed>, child_tidptr=0x5555567415d0) = 5083 [pid 4994] lstat("./3/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] umount2("./3/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] openat(AT_FDCWD, "./3/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4994] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 5083 attached [pid 4994] getdents64(4, [pid 5083] set_robust_list(0x5555567415e0, 24 [pid 4994] <... getdents64 resumed>0x55555674a660 /* 0 entries */, 32768) = 0 [pid 5083] <... set_robust_list resumed>) = 0 [pid 4994] close(4 [pid 5083] chdir("./4" [pid 4994] <... close resumed>) = 0 [pid 5083] <... chdir resumed>) = 0 [pid 4994] rmdir("./3/bus" [pid 5083] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4994] <... rmdir resumed>) = 0 [pid 5083] <... prctl resumed>) = 0 [pid 4994] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] setpgid(0, 0 [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] <... setpgid resumed>) = 0 [pid 4994] lstat("./3/binderfs", [pid 5083] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4994] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5083] <... openat resumed>) = 3 [pid 4994] unlink("./3/binderfs" [pid 5083] write(3, "1000", 4 [pid 4995] <... umount2 resumed>) = 0 [pid 4994] <... unlink resumed>) = 0 [pid 5083] <... write resumed>) = 4 [pid 4995] umount2("./3/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] getdents64(3, [pid 5083] close(3 [pid 4994] <... getdents64 resumed>0x555556742620 /* 0 entries */, 32768) = 0 [pid 5083] <... close resumed>) = 0 [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] close(3 [pid 5083] symlink("/dev/binderfs", "./binderfs" [pid 4994] <... close resumed>) = 0 [pid 5083] <... symlink resumed>) = 0 [pid 4995] lstat("./3/bus", [pid 4994] rmdir("./3" [pid 5083] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] <... rmdir resumed>) = 0 [pid 5083] <... futex resumed>) = 0 [pid 4995] umount2("./3/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] mkdir("./4", 0777 [pid 5083] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] <... mkdir resumed>) = 0 [pid 5083] <... mmap resumed>) = 0x7ff68769d000 [pid 4995] openat(AT_FDCWD, "./3/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4994] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5083] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE [pid 4995] <... openat resumed>) = 4 [pid 4994] <... openat resumed>) = 3 [pid 5083] <... mprotect resumed>) = 0 [pid 4995] fstat(4, [pid 4994] ioctl(3, LOOP_CLR_FD [pid 5083] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4994] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] close(3 [pid 5083] <... clone resumed>, parent_tid=[5084], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5084 [pid 4995] getdents64(4, [pid 4994] <... close resumed>) = 0 [pid 5083] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5083] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4994] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4995] <... getdents64 resumed>0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4995] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4995] close(4) = 0 [pid 4994] <... clone resumed>, child_tidptr=0x5555567415d0) = 5085 ./strace-static-x86_64: Process 5084 attached [pid 4995] rmdir("./3/bus" [pid 5084] set_robust_list(0x7ff6876bd9e0, 24 [pid 4995] <... rmdir resumed>) = 0 [pid 5084] <... set_robust_list resumed>) = 0 [pid 4995] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] memfd_create("syzkaller", 0 [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] <... memfd_create resumed>) = 3 [pid 4995] lstat("./3/binderfs", [pid 5084] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4995] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5084] <... mmap resumed>) = 0x7ff67f29d000 [pid 4995] unlink("./3/binderfs") = 0 ./strace-static-x86_64: Process 5085 attached [pid 4995] getdents64(3, [pid 5085] set_robust_list(0x5555567415e0, 24 [pid 4995] <... getdents64 resumed>0x555556742620 /* 0 entries */, 32768) = 0 [pid 5085] <... set_robust_list resumed>) = 0 [pid 4995] close(3 [pid 5085] chdir("./4" [pid 4995] <... close resumed>) = 0 [pid 5085] <... chdir resumed>) = 0 [pid 4995] rmdir("./3" [pid 5085] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4995] <... rmdir resumed>) = 0 [pid 5085] <... prctl resumed>) = 0 [pid 5085] setpgid(0, 0 [pid 4995] mkdir("./4", 0777 [pid 5085] <... setpgid resumed>) = 0 [pid 4995] <... mkdir resumed>) = 0 [pid 5085] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4995] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5085] <... openat resumed>) = 3 [pid 4995] <... openat resumed>) = 3 [pid 5085] write(3, "1000", 4 [pid 4995] ioctl(3, LOOP_CLR_FD [pid 5085] <... write resumed>) = 4 [pid 4995] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5085] close(3 [pid 4995] close(3 [pid 5085] <... close resumed>) = 0 [pid 4995] <... close resumed>) = 0 [pid 5085] symlink("/dev/binderfs", "./binderfs" [pid 4995] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5085] <... symlink resumed>) = 0 [pid 5085] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4995] <... clone resumed>, child_tidptr=0x5555567415d0) = 5086 [pid 5085] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5085] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5085] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5087], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5087 [pid 5085] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5085] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5086 attached [pid 5086] set_robust_list(0x5555567415e0, 24./strace-static-x86_64: Process 5087 attached ) = 0 [pid 5087] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5086] chdir("./4" [pid 5087] memfd_create("syzkaller", 0 [pid 5086] <... chdir resumed>) = 0 [pid 5087] <... memfd_create resumed>) = 3 [pid 5086] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5087] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5086] <... prctl resumed>) = 0 [pid 5087] <... mmap resumed>) = 0x7ff67f29d000 [pid 5086] setpgid(0, 0) = 0 [pid 5086] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5086] write(3, "1000", 4) = 4 [pid 5086] close(3) = 0 [pid 5086] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5086] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5086] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5086] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5086] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5088], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5088 [pid 5086] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5086] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5088 attached [pid 5088] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5088] memfd_create("syzkaller", 0) = 3 [pid 5088] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 5078] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5082] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5081] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5084] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5088] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5087] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5078] <... write resumed>) = 16777216 [pid 5078] munmap(0x7ff67f29d000, 16777216) = 0 [pid 5078] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5078] ioctl(4, LOOP_SET_FD, 3 [pid 5082] <... write resumed>) = 16777216 [pid 5078] <... ioctl resumed>) = 0 [pid 5078] close(3) = 0 [pid 5078] mkdir("./bus", 0777 [pid 5082] munmap(0x7ff67f29d000, 16777216 [pid 5078] <... mkdir resumed>) = 0 [pid 5078] mount("/dev/loop4", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "") = 0 [pid 5078] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5078] chdir("./bus") = 0 [pid 5078] ioctl(4, LOOP_CLR_FD) = 0 [ 68.198483][ T5078] loop4: detected capacity change from 0 to 32768 [pid 5078] close(4) = 0 [pid 5078] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5077] <... futex resumed>) = 0 [pid 5078] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5077] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5077] <... futex resumed>) = 0 [pid 5078] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5077] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] <... open resumed>) = 4 [pid 5078] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5077] <... futex resumed>) = 0 [pid 5078] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 5077] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5078] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 5077] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5078] <... futex resumed>) = 0 [pid 5077] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5077] <... futex resumed>) = 0 [pid 5077] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] <... mmap resumed>) = 0x20000000 [pid 5078] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5077] <... futex resumed>) = 0 [pid 5078] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5077] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5077] <... futex resumed>) = 0 [pid 5078] ftruncate(4, 33587199 [pid 5077] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5082] <... munmap resumed>) = 0 [pid 5078] <... ftruncate resumed>) = 0 [pid 5082] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5078] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] <... openat resumed>) = 4 [pid 5078] <... futex resumed>) = 1 [pid 5077] <... futex resumed>) = 0 [pid 5082] ioctl(4, LOOP_SET_FD, 3 [pid 5078] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5077] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5077] <... futex resumed>) = 0 [pid 5078] open("./bus", O_RDONLY [pid 5077] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] <... open resumed>) = 6 [pid 5081] <... write resumed>) = 16777216 [pid 5081] munmap(0x7ff67f29d000, 16777216 [pid 5078] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] <... ioctl resumed>) = 0 [pid 5078] <... futex resumed>) = 1 [pid 5077] <... futex resumed>) = 0 [pid 5082] close(3) = 0 [pid 5078] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5077] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5077] <... futex resumed>) = 0 [pid 5082] mkdir("./bus", 0777 [pid 5078] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5077] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] <... open resumed>) = 7 [pid 5078] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5077] <... futex resumed>) = 0 [pid 5082] <... mkdir resumed>) = 0 [pid 5078] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5077] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] mount("/dev/loop3", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5078] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5077] <... futex resumed>) = 0 [pid 5078] dup(7 [pid 5077] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] <... dup resumed>) = 8 [pid 5078] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5077] <... futex resumed>) = 0 [pid 5078] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5077] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5077] <... futex resumed>) = 0 [pid 5082] <... mount resumed>) = 0 [pid 5082] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5078] memfd_create("syzkaller", 0 [pid 5077] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5082] <... openat resumed>) = 3 [pid 5081] <... munmap resumed>) = 0 [pid 5078] <... memfd_create resumed>) = 9 [pid 5082] chdir("./bus" [pid 5078] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5082] <... chdir resumed>) = 0 [pid 5078] <... mmap resumed>) = 0x7ff677e9d000 [pid 5082] ioctl(4, LOOP_CLR_FD) = 0 [ 68.295915][ T5082] loop3: detected capacity change from 0 to 32768 [ 68.315317][ T27] kauditd_printk_skb: 14 callbacks suppressed [ 68.315331][ T27] audit: type=1804 audit(1686284873.157:50): pid=5078 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor481" name="/root/syzkaller.hTAWL1/4/bus/bus" dev="loop4" ino=7 res=1 errno=0 [pid 5082] close(4) = 0 [pid 5082] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5079] <... futex resumed>) = 0 [pid 5082] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5079] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5079] <... futex resumed>) = 0 [pid 5082] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5079] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5082] <... open resumed>) = 4 [pid 5081] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5082] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... openat resumed>) = 4 [pid 5088] <... write resumed>) = 16777216 [pid 5082] <... futex resumed>) = 1 [pid 5081] ioctl(4, LOOP_SET_FD, 3 [pid 5079] <... futex resumed>) = 0 [pid 5078] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5088] munmap(0x7ff67f29d000, 16777216 [pid 5082] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5079] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5082] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 5082] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5082] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5081] <... ioctl resumed>) = 0 [pid 5081] close(3) = 0 [pid 5081] mkdir("./bus", 0777 [pid 5088] <... munmap resumed>) = 0 [pid 5082] <... futex resumed>) = 0 [pid 5079] <... futex resumed>) = 1 [pid 5082] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5079] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5088] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5084] <... write resumed>) = 16777216 [pid 5079] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5079] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] munmap(0x7ff67f29d000, 16777216 [pid 5088] <... openat resumed>) = 4 [pid 5082] <... futex resumed>) = 0 [pid 5079] <... futex resumed>) = 1 [pid 5088] ioctl(4, LOOP_SET_FD, 3 [pid 5082] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5079] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5082] <... mmap resumed>) = 0x20000000 [pid 5081] <... mkdir resumed>) = 0 [pid 5082] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] mount("/dev/loop0", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5082] <... futex resumed>) = 1 [ 68.422270][ T27] audit: type=1804 audit(1686284873.187:51): pid=5078 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor481" name="/root/syzkaller.hTAWL1/4/bus/bus" dev="loop4" ino=7 res=1 errno=0 [ 68.445722][ T5081] loop0: detected capacity change from 0 to 32768 [pid 5082] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5079] <... futex resumed>) = 0 [pid 5079] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] <... futex resumed>) = 0 [pid 5079] <... futex resumed>) = 1 [pid 5082] ftruncate(4, 33587199 [pid 5081] <... mount resumed>) = 0 [pid 5079] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5082] <... ftruncate resumed>) = 0 [pid 5081] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5082] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... openat resumed>) = 3 [pid 5088] <... ioctl resumed>) = 0 [pid 5082] <... futex resumed>) = 1 [pid 5081] chdir("./bus" [pid 5079] <... futex resumed>) = 0 [pid 5088] close(3 [pid 5084] <... munmap resumed>) = 0 [pid 5082] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5081] <... chdir resumed>) = 0 [pid 5079] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5088] <... close resumed>) = 0 [pid 5084] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5082] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5081] ioctl(4, LOOP_CLR_FD [pid 5079] <... futex resumed>) = 0 [pid 5078] <... write resumed>) = 2097152 [pid 5088] mkdir("./bus", 0777 [pid 5084] <... openat resumed>) = 4 [pid 5082] open("./bus", O_RDONLY [pid 5081] <... ioctl resumed>) = 0 [pid 5079] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 68.469848][ T5088] loop2: detected capacity change from 0 to 32768 [pid 5078] munmap(0x7ff677e9d000, 2097152 [pid 5088] <... mkdir resumed>) = 0 [pid 5084] ioctl(4, LOOP_SET_FD, 3 [pid 5082] <... open resumed>) = 6 [pid 5081] close(4 [pid 5082] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... close resumed>) = 0 [pid 5082] <... futex resumed>) = 0 [pid 5081] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5081] <... futex resumed>) = 1 [pid 5080] <... futex resumed>) = 0 [pid 5081] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5080] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5080] <... futex resumed>) = 0 [pid 5081] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5080] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... open resumed>) = 4 [pid 5081] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5080] <... futex resumed>) = 0 [pid 5081] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5080] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5080] <... futex resumed>) = 0 [pid 5081] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5080] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... open resumed>) = 5 [pid 5081] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5080] <... futex resumed>) = 0 [pid 5081] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5080] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5080] <... futex resumed>) = 0 [pid 5081] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5080] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... mmap resumed>) = 0x20000000 [pid 5081] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5080] <... futex resumed>) = 0 [pid 5081] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5080] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5080] <... futex resumed>) = 0 [pid 5081] ftruncate(4, 33587199 [pid 5080] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... ftruncate resumed>) = 0 [pid 5081] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5080] <... futex resumed>) = 0 [pid 5081] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5080] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5080] <... futex resumed>) = 0 [pid 5081] open("./bus", O_RDONLY [pid 5080] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... open resumed>) = 6 [pid 5079] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5081] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5080] <... futex resumed>) = 0 [pid 5081] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5080] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5080] <... futex resumed>) = 0 [pid 5081] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5080] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] <... munmap resumed>) = 0 [pid 5087] <... write resumed>) = 16777216 [pid 5081] <... open resumed>) = 7 [pid 5081] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5080] <... futex resumed>) = 0 [pid 5079] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5080] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5080] <... futex resumed>) = 0 [pid 5081] dup(7 [pid 5080] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... dup resumed>) = 8 [pid 5081] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5080] <... futex resumed>) = 0 [pid 5081] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5080] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5080] <... futex resumed>) = 0 [pid 5088] mount("/dev/loop2", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5084] <... ioctl resumed>) = 0 [pid 5082] <... futex resumed>) = 0 [pid 5081] memfd_create("syzkaller", 0 [pid 5080] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5079] <... futex resumed>) = 1 [pid 5078] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5082] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5081] <... memfd_create resumed>) = 9 [pid 5079] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] <... openat resumed>) = 10 [pid 5082] <... open resumed>) = 7 [ 68.496247][ T27] audit: type=1804 audit(1686284873.337:52): pid=5082 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor481" name="/root/syzkaller.crriMX/4/bus/bus" dev="loop3" ino=7 res=1 errno=0 [ 68.530770][ T5084] loop5: detected capacity change from 0 to 32768 [pid 5081] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] ioctl(10, LOOP_SET_FD, 9 [pid 5088] <... mount resumed>) = 0 [pid 5084] close(3 [pid 5082] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... mmap resumed>) = 0x7ff677e9d000 [pid 5082] <... futex resumed>) = 1 [pid 5082] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5088] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5084] <... close resumed>) = 0 [pid 5079] <... futex resumed>) = 0 [pid 5078] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5088] <... openat resumed>) = 3 [pid 5084] mkdir("./bus", 0777 [pid 5079] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] ioctl(10, LOOP_CLR_FD [pid 5087] munmap(0x7ff67f29d000, 16777216) = 0 [pid 5088] chdir("./bus" [pid 5084] <... mkdir resumed>) = 0 [pid 5082] <... futex resumed>) = 0 [ 68.546785][ T27] audit: type=1804 audit(1686284873.357:53): pid=5081 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor481" name="/root/syzkaller.lVUVkM/4/bus/bus" dev="loop0" ino=7 res=1 errno=0 [ 68.569693][ T27] audit: type=1804 audit(1686284873.357:54): pid=5081 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor481" name="/root/syzkaller.lVUVkM/4/bus/bus" dev="loop0" ino=7 res=1 errno=0 [pid 5079] <... futex resumed>) = 1 [pid 5078] <... ioctl resumed>) = 0 [pid 5088] <... chdir resumed>) = 0 [pid 5082] dup(7) = 8 [pid 5082] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5082] <... futex resumed>) = 0 [pid 5082] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5087] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5087] ioctl(4, LOOP_SET_FD, 3 [pid 5088] ioctl(4, LOOP_CLR_FD [pid 5084] mount("/dev/loop5", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5079] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5088] <... ioctl resumed>) = 0 [pid 5084] <... mount resumed>) = 0 [pid 5079] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5088] close(4 [pid 5084] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5079] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] ioctl(10, LOOP_SET_FD, 9 [pid 5088] <... close resumed>) = 0 [pid 5087] <... ioctl resumed>) = 0 [pid 5082] <... futex resumed>) = 0 [pid 5081] <... write resumed>) = 2097152 [pid 5079] <... futex resumed>) = 1 [pid 5078] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5084] <... openat resumed>) = 3 [pid 5088] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5087] close(3 [pid 5081] munmap(0x7ff677e9d000, 2097152 [pid 5079] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5078] close(10 [pid 5088] <... futex resumed>) = 1 [pid 5087] <... close resumed>) = 0 [pid 5086] <... futex resumed>) = 0 [pid 5084] chdir("./bus" [pid 5082] memfd_create("syzkaller", 0 [pid 5081] <... munmap resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 5088] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5087] mkdir("./bus", 0777 [pid 5086] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... chdir resumed>) = 0 [pid 5082] <... memfd_create resumed>) = 9 [pid 5081] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5078] close(9 [pid 5088] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5087] <... mkdir resumed>) = 0 [pid 5086] <... futex resumed>) = 0 [pid 5084] ioctl(4, LOOP_CLR_FD [pid 5082] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5081] <... openat resumed>) = 10 [pid 5084] <... ioctl resumed>) = 0 [pid 5082] <... mmap resumed>) = 0x7ff677e9d000 [pid 5088] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5087] mount("/dev/loop1", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5086] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] close(4 [pid 5081] ioctl(10, LOOP_SET_FD, 9 [pid 5078] <... close resumed>) = 0 [pid 5084] <... close resumed>) = 0 [ 68.593103][ T27] audit: type=1804 audit(1686284873.387:55): pid=5082 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor481" name="/root/syzkaller.crriMX/4/bus/bus" dev="loop3" ino=7 res=1 errno=0 [ 68.613530][ T5087] loop1: detected capacity change from 0 to 32768 [pid 5084] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5083] <... futex resumed>) = 0 [pid 5084] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5083] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5083] <... futex resumed>) = 0 [pid 5084] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5083] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] <... open resumed>) = 4 [pid 5088] <... open resumed>) = 4 [pid 5084] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5088] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5087] <... mount resumed>) = 0 [pid 5084] <... futex resumed>) = 1 [pid 5083] <... futex resumed>) = 0 [pid 5081] ioctl(10, LOOP_CLR_FD [pid 5078] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5088] <... futex resumed>) = 1 [pid 5087] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5086] <... futex resumed>) = 0 [pid 5084] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5083] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5088] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5087] <... openat resumed>) = 3 [pid 5086] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5083] <... futex resumed>) = 0 [pid 5081] <... ioctl resumed>) = 0 [pid 5078] <... futex resumed>) = 1 [pid 5077] <... futex resumed>) = 0 [pid 5088] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5087] chdir("./bus" [pid 5086] <... futex resumed>) = 0 [pid 5084] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5083] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5088] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5087] <... chdir resumed>) = 0 [pid 5086] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] <... open resumed>) = 5 [pid 5078] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5077] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5088] <... open resumed>) = 5 [pid 5087] ioctl(4, LOOP_CLR_FD [pid 5084] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5077] <... futex resumed>) = 0 [pid 5088] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5087] <... ioctl resumed>) = 0 [pid 5084] <... futex resumed>) = 1 [pid 5083] <... futex resumed>) = 0 [pid 5081] ioctl(10, LOOP_SET_FD, 9 [pid 5078] sendfile(8, 6, NULL, 281474978811908 [pid 5077] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5088] <... futex resumed>) = 1 [pid 5087] close(4 [pid 5086] <... futex resumed>) = 0 [pid 5084] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5083] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5088] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5087] <... close resumed>) = 0 [pid 5086] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5083] <... futex resumed>) = 0 [pid 5081] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5088] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5087] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5086] <... futex resumed>) = 0 [pid 5084] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5083] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] close(10 [pid 5088] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5087] <... futex resumed>) = 1 [pid 5086] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5085] <... futex resumed>) = 0 [pid 5084] <... mmap resumed>) = 0x20000000 [pid 5081] <... close resumed>) = 0 [pid 5087] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5084] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5087] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5084] <... futex resumed>) = 1 [pid 5083] <... futex resumed>) = 0 [pid 5088] <... mmap resumed>) = 0x20000000 [pid 5087] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5085] <... futex resumed>) = 0 [pid 5084] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5083] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5088] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5087] <... open resumed>) = 4 [pid 5085] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5083] <... futex resumed>) = 0 [pid 5081] close(9 [pid 5088] <... futex resumed>) = 1 [pid 5087] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5086] <... futex resumed>) = 0 [pid 5085] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5084] ftruncate(4, 33587199 [pid 5083] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5087] <... futex resumed>) = 0 [pid 5084] <... ftruncate resumed>) = 0 [pid 5087] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5084] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5083] <... futex resumed>) = 0 [pid 5084] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5083] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5083] <... futex resumed>) = 0 [pid 5084] open("./bus", O_RDONLY [pid 5083] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] <... open resumed>) = 6 [pid 5084] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5083] <... futex resumed>) = 0 [pid 5084] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5083] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5083] <... futex resumed>) = 0 [pid 5084] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5083] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] <... open resumed>) = 7 [pid 5084] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5083] <... futex resumed>) = 0 [pid 5084] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5083] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5084] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5083] <... futex resumed>) = 0 [pid 5084] dup(7 [pid 5083] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] <... dup resumed>) = 8 [pid 5084] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5083] <... futex resumed>) = 0 [pid 5084] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5083] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5083] <... futex resumed>) = 0 [pid 5084] memfd_create("syzkaller", 0 [pid 5083] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5084] <... memfd_create resumed>) = 9 [pid 5084] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff677e9d000 [pid 5088] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5086] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5088] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5087] <... futex resumed>) = 0 [pid 5086] <... futex resumed>) = 0 [pid 5085] <... futex resumed>) = 1 [pid 5081] <... close resumed>) = 0 [pid 5077] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5087] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 5088] ftruncate(4, 33587199 [pid 5087] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5088] <... ftruncate resumed>) = 0 [pid 5087] <... futex resumed>) = 0 [pid 5086] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5085] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... futex resumed>) = 0 [pid 5087] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5088] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5081] <... futex resumed>) = 1 [pid 5080] <... futex resumed>) = 0 [pid 5077] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5088] <... futex resumed>) = 1 [pid 5086] <... futex resumed>) = 0 [pid 5085] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] sendfile(8, 6, NULL, 281474978811908 [pid 5080] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5088] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5087] <... futex resumed>) = 0 [pid 5086] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] <... futex resumed>) = 1 [pid 5080] <... futex resumed>) = 0 [pid 5077] <... mmap resumed>) = 0x7ff67807c000 [pid 5088] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5087] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5086] <... futex resumed>) = 0 [pid 5085] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5077] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5088] open("./bus", O_RDONLY [pid 5087] <... mmap resumed>) = 0x20000000 [pid 5086] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5087] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... mprotect resumed>) = 0 [pid 5088] <... open resumed>) = 6 [pid 5088] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5087] <... futex resumed>) = 1 [pid 5085] <... futex resumed>) = 0 [pid 5077] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5088] <... futex resumed>) = 1 [pid 5087] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5086] <... futex resumed>) = 0 [pid 5088] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5085] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5088] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5087] <... futex resumed>) = 0 [pid 5086] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] <... futex resumed>) = 1 [pid 5088] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5087] ftruncate(4, 33587199 [pid 5086] <... futex resumed>) = 0 [pid 5088] <... open resumed>) = 7 [pid 5087] <... ftruncate resumed>) = 0 [ 68.720274][ T27] audit: type=1804 audit(1686284873.557:56): pid=5084 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor481" name="/root/syzkaller.PL7eda/4/bus/bus" dev="loop5" ino=7 res=1 errno=0 [pid 5086] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5085] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5077] <... clone resumed>, parent_tid=[5089], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5089 [pid 5088] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5087] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5086] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5085] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5077] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5089 attached [pid 5088] <... futex resumed>) = 0 [pid 5087] <... futex resumed>) = 0 [pid 5086] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... futex resumed>) = 0 [pid 5088] dup(7 [pid 5087] open("./bus", O_RDONLY [pid 5086] <... futex resumed>) = 0 [pid 5085] <... futex resumed>) = 0 [pid 5088] <... dup resumed>) = 8 [pid 5087] <... open resumed>) = 6 [pid 5077] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5085] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5087] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5086] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5087] <... futex resumed>) = 0 [pid 5087] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5085] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5088] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5088] <... futex resumed>) = 1 [pid 5087] <... futex resumed>) = 0 [pid 5086] <... futex resumed>) = 0 [pid 5085] <... futex resumed>) = 1 [pid 5088] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5087] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5086] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5089] set_robust_list(0x7ff67809c9e0, 24 [pid 5088] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5087] <... open resumed>) = 7 [pid 5086] <... futex resumed>) = 0 [pid 5089] <... set_robust_list resumed>) = 0 [pid 5088] memfd_create("syzkaller", 0 [pid 5087] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5086] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5084] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5089] sync( [pid 5088] <... memfd_create resumed>) = 9 [pid 5087] <... futex resumed>) = 1 [pid 5085] <... futex resumed>) = 0 [pid 5087] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5085] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5087] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5087] dup(7 [pid 5085] <... futex resumed>) = 0 [pid 5087] <... dup resumed>) = 8 [pid 5087] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5087] <... futex resumed>) = 0 [pid 5085] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5087] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5085] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5088] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5087] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5082] <... write resumed>) = 2097152 [pid 5080] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5088] <... mmap resumed>) = 0x7ff677e9d000 [pid 5087] memfd_create("syzkaller", 0 [pid 5085] <... futex resumed>) = 0 [pid 5080] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5087] <... memfd_create resumed>) = 9 [pid 5085] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5082] munmap(0x7ff677e9d000, 2097152 [pid 5080] <... futex resumed>) = 0 [pid 5089] <... sync resumed>) = 0 [pid 5087] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5082] <... munmap resumed>) = 0 [pid 5080] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5089] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5087] <... mmap resumed>) = 0x7ff677e9d000 [ 68.820505][ T27] audit: type=1804 audit(1686284873.567:57): pid=5084 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor481" name="/root/syzkaller.PL7eda/4/bus/bus" dev="loop5" ino=7 res=1 errno=0 [pid 5080] <... mmap resumed>) = 0x7ff67807c000 [pid 5089] <... futex resumed>) = 0 [pid 5080] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5082] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 10 [pid 5080] <... mprotect resumed>) = 0 [pid 5082] ioctl(10, LOOP_SET_FD, 9 [pid 5080] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5090], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5090 [pid 5089] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5080] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5080] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5090 attached [pid 5082] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5090] set_robust_list(0x7ff67809c9e0, 24) = 0 [pid 5082] ioctl(10, LOOP_CLR_FD) = 0 [pid 5090] sync( [pid 5082] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5082] close(10) = 0 [pid 5082] close(9 [pid 5090] <... sync resumed>) = 0 [pid 5090] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] <... close resumed>) = 0 [pid 5090] <... futex resumed>) = 1 [pid 5080] <... futex resumed>) = 0 [pid 5090] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5084] <... write resumed>) = 2097152 [pid 5082] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5082] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5079] <... futex resumed>) = 0 [pid 5079] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5079] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5082] <... futex resumed>) = 0 [pid 5082] sendfile(8, 6, NULL, 281474978811908 [pid 5087] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5084] munmap(0x7ff677e9d000, 2097152 [pid 5088] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5084] <... munmap resumed>) = 0 [pid 5079] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5084] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 10 [pid 5084] ioctl(10, LOOP_SET_FD, 9 [pid 5079] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5079] <... futex resumed>) = 0 [pid 5084] ioctl(10, LOOP_CLR_FD) = 0 [pid 5079] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5084] ioctl(10, LOOP_SET_FD, 9 [pid 5079] <... mmap resumed>) = 0x7ff67807c000 [pid 5084] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5084] close(10) = 0 [pid 5084] close(9) = 0 [pid 5079] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5079] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5091], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5091 [pid 5079] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5079] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5083] <... futex resumed>) = 0 [pid 5084] sendfile(8, 6, NULL, 281474978811908 [pid 5083] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5087] <... write resumed>) = 2097152 [pid 5083] <... futex resumed>) = 0 [ 68.999399][ T27] audit: type=1804 audit(1686284873.617:58): pid=5088 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor481" name="/root/syzkaller.txkbmS/4/bus/bus" dev="loop2" ino=7 res=1 errno=0 [pid 5083] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5091 attached [pid 5091] set_robust_list(0x7ff67809c9e0, 24 [pid 5087] munmap(0x7ff677e9d000, 2097152 [pid 5091] <... set_robust_list resumed>) = 0 [pid 5091] sync( [pid 5087] <... munmap resumed>) = 0 [pid 5091] <... sync resumed>) = 0 [pid 5091] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... futex resumed>) = 0 [pid 5091] <... futex resumed>) = 1 [pid 5091] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5087] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 10 [pid 5088] <... write resumed>) = 2097152 [pid 5087] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5087] ioctl(10, LOOP_CLR_FD) = 0 [pid 5087] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5087] close(10) = 0 [pid 5087] close(9 [pid 5083] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5083] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5088] munmap(0x7ff677e9d000, 2097152 [pid 5083] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff67807c000 [pid 5088] <... munmap resumed>) = 0 [pid 5087] <... close resumed>) = 0 [pid 5083] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5083] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5092], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5092 [pid 5088] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5083] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5083] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5092 attached [pid 5088] <... openat resumed>) = 10 [pid 5087] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5092] set_robust_list(0x7ff67809c9e0, 24 [pid 5087] <... futex resumed>) = 1 [pid 5092] <... set_robust_list resumed>) = 0 [pid 5087] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5092] sync( [pid 5085] <... futex resumed>) = 0 [pid 5092] <... sync resumed>) = 0 [pid 5088] ioctl(10, LOOP_SET_FD, 9 [pid 5085] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5092] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5088] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5087] <... futex resumed>) = 0 [pid 5085] <... futex resumed>) = 1 [pid 5092] <... futex resumed>) = 1 [pid 5087] sendfile(8, 6, NULL, 281474978811908 [pid 5083] <... futex resumed>) = 0 [pid 5092] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5088] ioctl(10, LOOP_CLR_FD [pid 5085] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5088] <... ioctl resumed>) = 0 [ 69.124185][ T27] audit: type=1804 audit(1686284873.617:59): pid=5088 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor481" name="/root/syzkaller.txkbmS/4/bus/bus" dev="loop2" ino=7 res=1 errno=0 [pid 5088] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5088] close(10) = 0 [pid 5088] close(9) = 0 [pid 5088] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5086] <... futex resumed>) = 0 [pid 5086] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5085] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5088] sendfile(8, 6, NULL, 281474978811908 [pid 5086] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5085] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5085] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff67807c000 [pid 5085] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5085] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5093], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5093 [pid 5085] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5085] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5093 attached [pid 5093] set_robust_list(0x7ff67809c9e0, 24) = 0 [pid 5093] sync( [pid 5086] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5086] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5086] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff67807c000 [pid 5086] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5086] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5093] <... sync resumed>) = 0 [pid 5086] <... clone resumed>, parent_tid=[5094], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5094 [pid 5093] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5086] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5094 attached [pid 5093] <... futex resumed>) = 1 [pid 5086] <... futex resumed>) = 0 [pid 5085] <... futex resumed>) = 0 [pid 5094] set_robust_list(0x7ff67809c9e0, 24 [pid 5093] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5086] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5094] <... set_robust_list resumed>) = 0 [pid 5094] sync() = 0 [pid 5094] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5086] <... futex resumed>) = 0 [pid 5094] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5077] exit_group(0 [pid 5089] <... futex resumed>) = ? [pid 5077] <... exit_group resumed>) = ? [pid 5089] +++ exited with 0 +++ [pid 5078] <... sendfile resumed>) = ? [pid 5078] +++ exited with 0 +++ [pid 5077] +++ exited with 0 +++ [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5077, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=30 /* 0.30 s */} --- [pid 4997] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4997] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(3, 0x555556742620 /* 4 entries */, 32768) = 104 [pid 4997] umount2("./4/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] exit_group(0 [pid 5090] <... futex resumed>) = ? [pid 5080] <... exit_group resumed>) = ? [pid 5090] +++ exited with 0 +++ [pid 5081] <... sendfile resumed>) = ? [pid 5081] +++ exited with 0 +++ [pid 5080] +++ exited with 0 +++ [pid 4993] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5080, si_uid=0, si_status=0, si_utime=14 /* 0.14 s */, si_stime=35 /* 0.35 s */} --- [pid 4993] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4993] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4993] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4993] getdents64(3, 0x555556742620 /* 4 entries */, 32768) = 104 [pid 4993] umount2("./4/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] exit_group(0 [pid 5092] <... futex resumed>) = ? [pid 5083] <... exit_group resumed>) = ? [pid 5092] +++ exited with 0 +++ [pid 5084] <... sendfile resumed>) = ? [pid 5084] +++ exited with 0 +++ [pid 5083] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5083, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=37 /* 0.37 s */} --- [pid 4998] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x555556742620 /* 4 entries */, 32768) = 104 [pid 4998] umount2("./4/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] exit_group(0 [pid 5091] <... futex resumed>) = ? [pid 5082] <... sendfile resumed>) = ? [pid 5079] <... exit_group resumed>) = ? [pid 5091] +++ exited with 0 +++ [pid 5082] +++ exited with 0 +++ [pid 5079] +++ exited with 0 +++ [pid 4996] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5079, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=28 /* 0.28 s */} --- [pid 4996] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4996] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4996] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] getdents64(3, 0x555556742620 /* 4 entries */, 32768) = 104 [pid 4996] umount2("./4/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5085] exit_group(0 [pid 5093] <... futex resumed>) = ? [pid 5085] <... exit_group resumed>) = ? [pid 5093] +++ exited with 0 +++ [pid 5087] <... sendfile resumed>) = ? [pid 5086] exit_group(0 [pid 5094] <... futex resumed>) = ? [pid 5086] <... exit_group resumed>) = ? [pid 5094] +++ exited with 0 +++ [pid 5088] <... sendfile resumed>) = ? [pid 5087] +++ exited with 0 +++ [pid 5085] +++ exited with 0 +++ [pid 5088] +++ exited with 0 +++ [pid 5086] +++ exited with 0 +++ [pid 4994] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5085, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=42 /* 0.42 s */} --- [pid 4995] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5086, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=30 /* 0.30 s */} --- [pid 4995] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4995] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4995] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4995] fstat(3, [pid 4994] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] getdents64(3, [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] <... getdents64 resumed>0x555556742620 /* 4 entries */, 32768) = 104 [pid 4995] umount2("./4/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4994] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] getdents64(3, 0x555556742620 /* 4 entries */, 32768) = 104 [pid 4994] umount2("./4/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] <... umount2 resumed>) = 0 [pid 4996] umount2("./4/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] lstat("./4/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] umount2("./4/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] openat(AT_FDCWD, "./4/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4996] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4996] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4996] close(4) = 0 [pid 4996] rmdir("./4/bus") = 0 [pid 4996] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] lstat("./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4996] unlink("./4/binderfs") = 0 [pid 4996] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4996] close(3) = 0 [pid 4996] rmdir("./4") = 0 [pid 4996] mkdir("./5", 0777) = 0 [pid 4996] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 4996] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4996] close(3) = 0 [pid 4996] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567415d0) = 5095 ./strace-static-x86_64: Process 5095 attached [pid 5095] set_robust_list(0x5555567415e0, 24) = 0 [pid 5095] chdir("./5") = 0 [pid 5095] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5095] setpgid(0, 0) = 0 [pid 5095] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5095] write(3, "1000", 4) = 4 [pid 5095] close(3) = 0 [pid 5095] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5095] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5095] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5095] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5095] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5096], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5096 [pid 5095] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5095] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5096 attached [pid 5096] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5096] memfd_create("syzkaller", 0) = 3 [pid 5096] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 4995] <... umount2 resumed>) = 0 [pid 4995] umount2("./4/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4995] lstat("./4/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] umount2("./4/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4995] openat(AT_FDCWD, "./4/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4995] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4995] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4995] close(4) = 0 [pid 4994] <... umount2 resumed>) = 0 [pid 4995] rmdir("./4/bus") = 0 [pid 4995] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4995] lstat("./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4995] unlink("./4/binderfs") = 0 [pid 4995] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4995] close(3) = 0 [pid 4995] rmdir("./4") = 0 [pid 4995] mkdir("./5", 0777) = 0 [pid 4995] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 4995] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4995] close(3) = 0 [pid 4995] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567415d0) = 5097 [pid 4994] umount2("./4/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] lstat("./4/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] umount2("./4/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] openat(AT_FDCWD, "./4/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4994] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4994] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4994] close(4) = 0 [pid 4994] rmdir("./4/bus") = 0 [pid 4994] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] lstat("./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4994] unlink("./4/binderfs") = 0 [pid 4994] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 5097 attached [pid 4994] close(3 [pid 5097] set_robust_list(0x5555567415e0, 24 [pid 4994] <... close resumed>) = 0 [pid 4994] rmdir("./4" [pid 5097] <... set_robust_list resumed>) = 0 [pid 5097] chdir("./5" [pid 4994] <... rmdir resumed>) = 0 [pid 5097] <... chdir resumed>) = 0 [pid 5097] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4994] mkdir("./5", 0777 [pid 5097] <... prctl resumed>) = 0 [pid 5097] setpgid(0, 0 [pid 4994] <... mkdir resumed>) = 0 [pid 5097] <... setpgid resumed>) = 0 [pid 5097] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4994] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5097] <... openat resumed>) = 3 [pid 5097] write(3, "1000", 4 [pid 4994] <... openat resumed>) = 3 [pid 5097] <... write resumed>) = 4 [pid 4994] ioctl(3, LOOP_CLR_FD [pid 5097] close(3 [pid 4994] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5097] <... close resumed>) = 0 [pid 5097] symlink("/dev/binderfs", "./binderfs" [pid 4994] close(3 [pid 5097] <... symlink resumed>) = 0 [pid 5097] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] <... close resumed>) = 0 [pid 5097] <... futex resumed>) = 0 [pid 5097] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4994] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5097] <... mmap resumed>) = 0x7ff68769d000 [pid 5097] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4994] <... clone resumed>, child_tidptr=0x5555567415d0) = 5098 [pid 5097] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5099], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5099 [pid 5097] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5097] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5098 attached [pid 5098] set_robust_list(0x5555567415e0, 24) = 0 [pid 5098] chdir("./5") = 0 [pid 5098] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5098] setpgid(0, 0) = 0 [pid 5098] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5098] write(3, "1000", 4) = 4 [pid 5098] close(3) = 0 [pid 5098] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5098] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5098] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5098] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5098] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5100], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5100 [pid 5098] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5098] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5100 attached [pid 5100] set_robust_list(0x7ff6876bd9e0, 24) = 0 ./strace-static-x86_64: Process 5099 attached [pid 5099] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5100] memfd_create("syzkaller", 0) = 3 [pid 5100] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 5099] memfd_create("syzkaller", 0) = 3 [pid 5099] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 4993] <... umount2 resumed>) = 0 [pid 4993] umount2("./4/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4993] lstat("./4/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4993] umount2("./4/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4993] openat(AT_FDCWD, "./4/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4993] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4993] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4993] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4993] close(4) = 0 [pid 4993] rmdir("./4/bus") = 0 [pid 4993] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4993] lstat("./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4993] unlink("./4/binderfs") = 0 [pid 4993] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4993] close(3) = 0 [pid 4993] rmdir("./4") = 0 [pid 4993] mkdir("./5", 0777) = 0 [pid 4993] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4993] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4993] close(3) = 0 [pid 4993] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567415d0) = 5101 ./strace-static-x86_64: Process 5101 attached [pid 5101] set_robust_list(0x5555567415e0, 24) = 0 [pid 5101] chdir("./5") = 0 [pid 5101] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5101] setpgid(0, 0) = 0 [pid 5101] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5101] write(3, "1000", 4) = 4 [pid 5101] close(3) = 0 [pid 5101] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5101] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5101] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5101] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5101] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5102], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5102 [pid 5101] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5101] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5102 attached [pid 5102] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 4998] <... umount2 resumed>) = 0 [pid 5102] memfd_create("syzkaller", 0 [pid 4998] umount2("./4/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5102] <... memfd_create resumed>) = 3 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5102] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 4998] lstat("./4/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./4/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./4/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./4/bus") = 0 [pid 4998] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./4/binderfs") = 0 [pid 4998] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./4") = 0 [pid 4998] mkdir("./5", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567415d0) = 5103 ./strace-static-x86_64: Process 5103 attached [pid 5103] set_robust_list(0x5555567415e0, 24) = 0 [pid 5103] chdir("./5") = 0 [pid 5103] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5103] setpgid(0, 0) = 0 [pid 5103] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5103] write(3, "1000", 4) = 4 [pid 5103] close(3) = 0 [pid 5103] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5103] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5103] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5103] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5103] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5104], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5104 [pid 5103] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5103] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5104 attached [pid 5104] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5104] memfd_create("syzkaller", 0) = 3 [pid 5104] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 5096] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5100] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 4997] <... umount2 resumed>) = 0 [pid 4997] umount2("./4/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./4/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./4/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./4/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4997] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4997] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4997] close(4) = 0 [pid 4997] rmdir("./4/bus") = 0 [pid 4997] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] unlink("./4/binderfs") = 0 [pid 4997] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4997] close(3) = 0 [pid 4997] rmdir("./4") = 0 [pid 4997] mkdir("./5", 0777) = 0 [pid 4997] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 4997] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4997] close(3 [pid 5099] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 4997] <... close resumed>) = 0 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567415d0) = 5105 ./strace-static-x86_64: Process 5105 attached [pid 5105] set_robust_list(0x5555567415e0, 24) = 0 [pid 5105] chdir("./5") = 0 [pid 5105] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5105] setpgid(0, 0) = 0 [pid 5105] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5105] write(3, "1000", 4) = 4 [pid 5105] close(3) = 0 [pid 5105] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5105] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5105] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5105] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5105] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5106], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5106 [pid 5105] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5105] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5106 attached [pid 5106] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5106] memfd_create("syzkaller", 0) = 3 [pid 5106] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 5102] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5104] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5096] <... write resumed>) = 16777216 [pid 5096] munmap(0x7ff67f29d000, 16777216) = 0 [pid 5096] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5096] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5096] close(3) = 0 [pid 5096] mkdir("./bus", 0777) = 0 [pid 5096] mount("/dev/loop3", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5100] <... write resumed>) = 16777216 [pid 5100] munmap(0x7ff67f29d000, 16777216 [pid 5099] <... write resumed>) = 16777216 [pid 5096] <... mount resumed>) = 0 [pid 5100] <... munmap resumed>) = 0 [pid 5099] munmap(0x7ff67f29d000, 16777216 [ 70.893863][ T5096] loop3: detected capacity change from 0 to 32768 [pid 5096] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5099] <... munmap resumed>) = 0 [pid 5096] chdir("./bus") = 0 [pid 5096] ioctl(4, LOOP_CLR_FD) = 0 [pid 5096] close(4) = 0 [pid 5106] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5100] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5099] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5096] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5100] <... openat resumed>) = 4 [pid 5099] <... openat resumed>) = 4 [pid 5100] ioctl(4, LOOP_SET_FD, 3 [pid 5099] ioctl(4, LOOP_SET_FD, 3 [pid 5096] <... futex resumed>) = 1 [pid 5095] <... futex resumed>) = 0 [pid 5100] <... ioctl resumed>) = 0 [pid 5096] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5095] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5096] <... open resumed>) = 4 [pid 5095] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5096] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5100] close(3 [pid 5099] <... ioctl resumed>) = 0 [pid 5096] <... futex resumed>) = 1 [pid 5095] <... futex resumed>) = 0 [pid 5100] <... close resumed>) = 0 [pid 5099] close(3 [pid 5096] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5095] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5100] mkdir("./bus", 0777 [pid 5099] <... close resumed>) = 0 [pid 5096] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5096] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5095] <... futex resumed>) = 0 [pid 5100] <... mkdir resumed>) = 0 [pid 5095] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5096] <... open resumed>) = 5 [pid 5100] mount("/dev/loop1", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5099] mkdir("./bus", 0777) = 0 [pid 5096] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5099] mount("/dev/loop2", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5096] <... futex resumed>) = 1 [pid 5095] <... futex resumed>) = 0 [pid 5096] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5095] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5096] <... mmap resumed>) = 0x20000000 [pid 5095] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5096] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5095] <... futex resumed>) = 0 [pid 5096] ftruncate(4, 33587199 [pid 5095] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5096] <... ftruncate resumed>) = 0 [pid 5095] <... futex resumed>) = 0 [pid 5096] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5095] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5096] <... futex resumed>) = 0 [pid 5095] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5095] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5096] open("./bus", O_RDONLY [pid 5095] <... futex resumed>) = 0 [pid 5095] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5096] <... open resumed>) = 6 [pid 5096] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5095] <... futex resumed>) = 0 [pid 5096] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5095] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5095] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5100] <... mount resumed>) = 0 [pid 5096] <... open resumed>) = 7 [pid 5100] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5096] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5100] <... openat resumed>) = 3 [pid 5095] <... futex resumed>) = 0 [pid 5100] chdir("./bus" [pid 5096] <... futex resumed>) = 1 [ 70.993812][ T5100] loop1: detected capacity change from 0 to 32768 [ 71.000492][ T5099] loop2: detected capacity change from 0 to 32768 [pid 5095] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5100] <... chdir resumed>) = 0 [pid 5099] <... mount resumed>) = 0 [pid 5096] dup(7 [pid 5095] <... futex resumed>) = 0 [pid 5100] ioctl(4, LOOP_CLR_FD [pid 5099] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5096] <... dup resumed>) = 8 [pid 5095] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5100] <... ioctl resumed>) = 0 [pid 5099] <... openat resumed>) = 3 [pid 5096] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5100] close(4 [pid 5096] <... futex resumed>) = 1 [pid 5095] <... futex resumed>) = 0 [pid 5100] <... close resumed>) = 0 [pid 5099] chdir("./bus" [pid 5096] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5100] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5099] <... chdir resumed>) = 0 [pid 5096] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5095] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5100] <... futex resumed>) = 1 [pid 5099] ioctl(4, LOOP_CLR_FD [pid 5098] <... futex resumed>) = 0 [pid 5098] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5098] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5096] memfd_create("syzkaller", 0 [pid 5095] <... futex resumed>) = 0 [pid 5100] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5099] <... ioctl resumed>) = 0 [pid 5095] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5099] close(4 [pid 5100] <... open resumed>) = 4 [pid 5100] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5099] <... close resumed>) = 0 [pid 5100] <... futex resumed>) = 1 [pid 5099] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5098] <... futex resumed>) = 0 [pid 5098] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5096] <... memfd_create resumed>) = 9 [pid 5098] <... futex resumed>) = 0 [pid 5098] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5100] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5099] <... futex resumed>) = 1 [pid 5097] <... futex resumed>) = 0 [pid 5099] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5097] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5096] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5100] <... open resumed>) = 5 [pid 5099] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5097] <... futex resumed>) = 0 [pid 5100] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5099] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5097] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5100] <... futex resumed>) = 1 [pid 5099] <... open resumed>) = 4 [pid 5098] <... futex resumed>) = 0 [pid 5096] <... mmap resumed>) = 0x7ff677e9d000 [pid 5100] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5099] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5098] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5100] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5099] <... futex resumed>) = 1 [pid 5098] <... futex resumed>) = 0 [pid 5097] <... futex resumed>) = 0 [pid 5098] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5097] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5097] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5100] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5099] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5100] <... mmap resumed>) = 0x20000000 [pid 5099] <... open resumed>) = 5 [pid 5100] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5099] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5098] <... futex resumed>) = 0 [pid 5098] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5098] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5100] ftruncate(4, 33587199 [pid 5099] <... futex resumed>) = 1 [pid 5097] <... futex resumed>) = 0 [pid 5099] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5097] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5100] <... ftruncate resumed>) = 0 [pid 5099] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5097] <... futex resumed>) = 0 [pid 5100] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5099] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5097] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5100] <... futex resumed>) = 1 [pid 5099] <... mmap resumed>) = 0x20000000 [pid 5098] <... futex resumed>) = 0 [pid 5098] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5098] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5100] open("./bus", O_RDONLY [pid 5099] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5097] <... futex resumed>) = 0 [pid 5099] ftruncate(4, 33587199 [pid 5097] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5100] <... open resumed>) = 6 [pid 5099] <... ftruncate resumed>) = 0 [pid 5097] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5100] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5099] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5097] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5100] <... futex resumed>) = 1 [pid 5099] <... futex resumed>) = 0 [pid 5098] <... futex resumed>) = 0 [pid 5097] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5100] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5099] open("./bus", O_RDONLY [pid 5098] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5097] <... futex resumed>) = 0 [pid 5100] <... open resumed>) = 7 [pid 5098] <... futex resumed>) = 0 [pid 5097] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5100] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5099] <... open resumed>) = 6 [pid 5098] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5100] <... futex resumed>) = 0 [pid 5099] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5098] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5100] dup(7 [pid 5099] <... futex resumed>) = 1 [pid 5098] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5097] <... futex resumed>) = 0 [pid 5100] <... dup resumed>) = 8 [pid 5099] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5098] <... futex resumed>) = 0 [pid 5097] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5100] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5099] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5098] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5097] <... futex resumed>) = 0 [pid 5100] <... futex resumed>) = 0 [pid 5099] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5098] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5097] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5100] memfd_create("syzkaller", 0 [pid 5099] <... open resumed>) = 7 [pid 5098] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5098] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5099] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5100] <... memfd_create resumed>) = 9 [pid 5099] <... futex resumed>) = 1 [pid 5097] <... futex resumed>) = 0 [pid 5100] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5099] dup(7 [pid 5097] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5100] <... mmap resumed>) = 0x7ff677e9d000 [pid 5099] <... dup resumed>) = 8 [pid 5097] <... futex resumed>) = 0 [pid 5097] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5099] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5097] <... futex resumed>) = 0 [pid 5097] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5097] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5099] memfd_create("syzkaller", 0) = 9 [pid 5096] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5099] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff677e9d000 [pid 5102] <... write resumed>) = 16777216 [pid 5102] munmap(0x7ff67f29d000, 16777216) = 0 [pid 5102] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5102] ioctl(4, LOOP_SET_FD, 3 [pid 5100] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5096] <... write resumed>) = 2097152 [pid 5096] munmap(0x7ff677e9d000, 2097152 [pid 5102] <... ioctl resumed>) = 0 [pid 5102] close(3) = 0 [pid 5102] mkdir("./bus", 0777) = 0 [pid 5102] mount("/dev/loop0", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5099] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5096] <... munmap resumed>) = 0 [pid 5096] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 10 [pid 5096] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5096] ioctl(10, LOOP_CLR_FD) = 0 [pid 5102] <... mount resumed>) = 0 [pid 5102] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5102] chdir("./bus" [pid 5096] ioctl(10, LOOP_SET_FD, 9 [pid 5102] <... chdir resumed>) = 0 [pid 5102] ioctl(4, LOOP_CLR_FD) = 0 [pid 5096] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5102] close(4) = 0 [ 71.227127][ T5102] loop0: detected capacity change from 0 to 32768 [pid 5102] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5101] <... futex resumed>) = 0 [pid 5102] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5101] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5102] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5101] <... futex resumed>) = 0 [pid 5102] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5101] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5096] close(10 [pid 5102] <... open resumed>) = 4 [pid 5102] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5101] <... futex resumed>) = 0 [pid 5102] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5101] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5102] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5101] <... futex resumed>) = 0 [pid 5102] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5101] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5102] <... open resumed>) = 5 [pid 5102] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5101] <... futex resumed>) = 0 [pid 5102] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5101] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5100] <... write resumed>) = 2097152 [pid 5096] <... close resumed>) = 0 [pid 5102] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5101] <... futex resumed>) = 0 [pid 5100] munmap(0x7ff677e9d000, 2097152 [pid 5096] close(9 [pid 5102] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5101] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5102] <... mmap resumed>) = 0x20000000 [pid 5102] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5096] <... close resumed>) = 0 [pid 5104] <... write resumed>) = 16777216 [pid 5102] <... futex resumed>) = 1 [pid 5101] <... futex resumed>) = 0 [pid 5102] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5101] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5102] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5101] <... futex resumed>) = 0 [pid 5102] ftruncate(4, 33587199 [pid 5101] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5104] munmap(0x7ff67f29d000, 16777216 [pid 5102] <... ftruncate resumed>) = 0 [pid 5102] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5101] <... futex resumed>) = 0 [pid 5102] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5101] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5102] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5101] <... futex resumed>) = 0 [pid 5102] open("./bus", O_RDONLY [pid 5101] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5099] <... write resumed>) = 2097152 [pid 5102] <... open resumed>) = 6 [pid 5102] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5101] <... futex resumed>) = 0 [pid 5102] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5101] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5102] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5101] <... futex resumed>) = 0 [pid 5102] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5101] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5102] <... open resumed>) = 7 [pid 5102] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5101] <... futex resumed>) = 0 [pid 5102] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5101] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5102] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5101] <... futex resumed>) = 0 [pid 5102] dup(7 [pid 5101] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5102] <... dup resumed>) = 8 [pid 5102] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5101] <... futex resumed>) = 0 [pid 5102] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5101] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5102] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5101] <... futex resumed>) = 0 [pid 5102] memfd_create("syzkaller", 0 [pid 5101] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5100] <... munmap resumed>) = 0 [pid 5096] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5102] <... memfd_create resumed>) = 9 [pid 5100] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5099] munmap(0x7ff677e9d000, 2097152 [pid 5096] <... futex resumed>) = 1 [pid 5095] <... futex resumed>) = 0 [pid 5104] <... munmap resumed>) = 0 [pid 5102] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5100] <... openat resumed>) = 10 [pid 5096] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5095] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5104] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5102] <... mmap resumed>) = 0x7ff677e9d000 [pid 5100] ioctl(10, LOOP_SET_FD, 9 [pid 5099] <... munmap resumed>) = 0 [pid 5096] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5095] <... futex resumed>) = 0 [pid 5106] <... write resumed>) = 16777216 [pid 5104] <... openat resumed>) = 4 [pid 5100] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5099] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5096] sendfile(8, 6, NULL, 281474978811908 [pid 5095] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5106] munmap(0x7ff67f29d000, 16777216 [pid 5104] ioctl(4, LOOP_SET_FD, 3 [pid 5102] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5100] ioctl(10, LOOP_CLR_FD [pid 5099] <... openat resumed>) = 10 [pid 5100] <... ioctl resumed>) = 0 [pid 5099] ioctl(10, LOOP_SET_FD, 9 [pid 5104] <... ioctl resumed>) = 0 [pid 5100] ioctl(10, LOOP_SET_FD, 9 [pid 5099] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5104] close(3 [pid 5100] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5104] <... close resumed>) = 0 [pid 5099] ioctl(10, LOOP_CLR_FD [pid 5104] mkdir("./bus", 0777 [pid 5100] close(10 [pid 5099] <... ioctl resumed>) = 0 [pid 5104] <... mkdir resumed>) = 0 [pid 5100] <... close resumed>) = 0 [pid 5100] close(9 [pid 5104] mount("/dev/loop5", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5100] <... close resumed>) = 0 [pid 5106] <... munmap resumed>) = 0 [pid 5095] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5099] ioctl(10, LOOP_SET_FD, 9 [pid 5095] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5099] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5095] <... futex resumed>) = 0 [pid 5104] <... mount resumed>) = 0 [pid 5099] close(10 [pid 5095] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5104] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5100] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5099] <... close resumed>) = 0 [pid 5095] <... mmap resumed>) = 0x7ff67807c000 [pid 5104] <... openat resumed>) = 3 [pid 5100] <... futex resumed>) = 1 [pid 5099] close(9 [pid 5098] <... futex resumed>) = 0 [pid 5095] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5104] chdir("./bus" [pid 5100] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5095] <... mprotect resumed>) = 0 [pid 5106] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5098] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5095] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5106] <... openat resumed>) = 4 [pid 5104] <... chdir resumed>) = 0 [pid 5100] <... futex resumed>) = 0 [ 71.399298][ T5104] loop5: detected capacity change from 0 to 32768 [pid 5098] <... futex resumed>) = 1 [pid 5106] ioctl(4, LOOP_SET_FD, 3 [pid 5104] ioctl(4, LOOP_CLR_FD [pid 5102] <... write resumed>) = 2097152 [pid 5100] sendfile(8, 6, NULL, 281474978811908 [pid 5099] <... close resumed>) = 0 [pid 5098] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5095] <... clone resumed>, parent_tid=[5107], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5107 [pid 5104] <... ioctl resumed>) = 0 [pid 5102] munmap(0x7ff677e9d000, 2097152 [pid 5099] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5095] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5104] close(4 [pid 5099] <... futex resumed>) = 1 [pid 5097] <... futex resumed>) = 0 [pid 5095] <... futex resumed>) = 0 [pid 5104] <... close resumed>) = 0 [pid 5099] sendfile(8, 6, NULL, 281474978811908 [pid 5097] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5095] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5107 attached [pid 5104] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5097] <... futex resumed>) = 0 [pid 5107] set_robust_list(0x7ff67809c9e0, 24 [pid 5104] <... futex resumed>) = 1 [pid 5103] <... futex resumed>) = 0 [pid 5097] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5107] <... set_robust_list resumed>) = 0 [pid 5104] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5103] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5107] sync( [pid 5104] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5103] <... futex resumed>) = 0 [pid 5104] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5103] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5102] <... munmap resumed>) = 0 [pid 5104] <... open resumed>) = 4 [pid 5102] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5104] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5103] <... futex resumed>) = 0 [pid 5102] <... openat resumed>) = 10 [pid 5104] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5103] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5102] ioctl(10, LOOP_SET_FD, 9 [pid 5104] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5103] <... futex resumed>) = 0 [pid 5102] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5106] <... ioctl resumed>) = 0 [pid 5104] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5103] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5102] ioctl(10, LOOP_CLR_FD [pid 5106] close(3 [pid 5104] <... open resumed>) = 5 [pid 5102] <... ioctl resumed>) = 0 [pid 5106] <... close resumed>) = 0 [pid 5104] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5106] mkdir("./bus", 0777 [pid 5104] <... futex resumed>) = 1 [pid 5103] <... futex resumed>) = 0 [pid 5104] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5103] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5102] ioctl(10, LOOP_SET_FD, 9 [pid 5104] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5103] <... futex resumed>) = 0 [pid 5102] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5104] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5103] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5102] close(10 [pid 5104] <... mmap resumed>) = 0x20000000 [pid 5102] <... close resumed>) = 0 [pid 5104] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5102] close(9 [pid 5106] <... mkdir resumed>) = 0 [ 71.466356][ T5106] loop4: detected capacity change from 0 to 32768 [pid 5106] mount("/dev/loop4", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5104] <... futex resumed>) = 1 [pid 5103] <... futex resumed>) = 0 [pid 5106] <... mount resumed>) = 0 [pid 5104] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5103] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5098] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5106] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5103] <... futex resumed>) = 0 [pid 5095] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5106] <... openat resumed>) = 3 [pid 5103] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5106] chdir("./bus" [pid 5104] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5098] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5097] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5107] <... sync resumed>) = 0 [pid 5106] <... chdir resumed>) = 0 [pid 5104] ftruncate(4, 33587199 [pid 5098] <... futex resumed>) = 0 [pid 5097] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5107] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5106] ioctl(4, LOOP_CLR_FD [pid 5104] <... ftruncate resumed>) = 0 [pid 5098] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5097] <... futex resumed>) = 0 [pid 5107] <... futex resumed>) = 0 [pid 5106] <... ioctl resumed>) = 0 [pid 5104] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5098] <... mmap resumed>) = 0x7ff67807c000 [pid 5097] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5107] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5106] close(4 [pid 5104] <... futex resumed>) = 1 [pid 5103] <... futex resumed>) = 0 [pid 5098] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5097] <... mmap resumed>) = 0x7ff67807c000 [pid 5106] <... close resumed>) = 0 [pid 5104] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5103] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5098] <... mprotect resumed>) = 0 [pid 5097] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5106] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5104] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5103] <... futex resumed>) = 0 [pid 5102] <... close resumed>) = 0 [pid 5098] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5097] <... mprotect resumed>) = 0 [pid 5106] <... futex resumed>) = 1 [pid 5105] <... futex resumed>) = 0 [pid 5104] open("./bus", O_RDONLY [pid 5103] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5106] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5105] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5104] <... open resumed>) = 6 [pid 5102] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5097] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5106] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5105] <... futex resumed>) = 0 [pid 5104] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5102] <... futex resumed>) = 1 [pid 5101] <... futex resumed>) = 0 [pid 5098] <... clone resumed>, parent_tid=[5108], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5108 ./strace-static-x86_64: Process 5108 attached [pid 5106] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5105] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5104] <... futex resumed>) = 1 [pid 5103] <... futex resumed>) = 0 [pid 5102] sendfile(8, 6, NULL, 281474978811908 [pid 5101] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5098] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5097] <... clone resumed>, parent_tid=[5109], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5109 ./strace-static-x86_64: Process 5109 attached [pid 5108] set_robust_list(0x7ff67809c9e0, 24 [pid 5106] <... open resumed>) = 4 [pid 5104] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5103] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5101] <... futex resumed>) = 0 [pid 5098] <... futex resumed>) = 0 [pid 5097] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5109] set_robust_list(0x7ff67809c9e0, 24 [pid 5108] <... set_robust_list resumed>) = 0 [pid 5106] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5104] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5103] <... futex resumed>) = 0 [pid 5101] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5098] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5097] <... futex resumed>) = 0 [pid 5109] <... set_robust_list resumed>) = 0 [pid 5108] sync( [pid 5106] <... futex resumed>) = 1 [pid 5105] <... futex resumed>) = 0 [pid 5104] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5103] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5097] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5109] sync( [pid 5106] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5105] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5104] <... open resumed>) = 7 [pid 5108] <... sync resumed>) = 0 [pid 5106] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5105] <... futex resumed>) = 0 [pid 5104] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5109] <... sync resumed>) = 0 [pid 5108] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5106] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5105] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5104] <... futex resumed>) = 1 [pid 5103] <... futex resumed>) = 0 [pid 5109] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5108] <... futex resumed>) = 1 [pid 5106] <... open resumed>) = 5 [pid 5104] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5103] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5098] <... futex resumed>) = 0 [pid 5109] <... futex resumed>) = 1 [pid 5108] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5106] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5104] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5103] <... futex resumed>) = 0 [pid 5097] <... futex resumed>) = 0 [pid 5109] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5106] <... futex resumed>) = 1 [pid 5105] <... futex resumed>) = 0 [pid 5104] dup(7 [pid 5103] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5106] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5105] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5104] <... dup resumed>) = 8 [pid 5106] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5105] <... futex resumed>) = 0 [pid 5104] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5106] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5105] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5104] <... futex resumed>) = 1 [pid 5103] <... futex resumed>) = 0 [pid 5106] <... mmap resumed>) = 0x20000000 [pid 5104] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5103] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5101] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5106] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5104] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5103] <... futex resumed>) = 0 [pid 5101] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5106] <... futex resumed>) = 1 [pid 5105] <... futex resumed>) = 0 [pid 5103] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5106] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5105] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5101] <... futex resumed>) = 0 [pid 5106] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5105] <... futex resumed>) = 0 [pid 5101] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5106] ftruncate(4, 33587199 [pid 5105] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5104] memfd_create("syzkaller", 0 [pid 5101] <... mmap resumed>) = 0x7ff67807c000 [pid 5106] <... ftruncate resumed>) = 0 [pid 5104] <... memfd_create resumed>) = 9 [pid 5101] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5106] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5104] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5101] <... mprotect resumed>) = 0 [pid 5106] <... futex resumed>) = 1 [pid 5105] <... futex resumed>) = 0 [pid 5104] <... mmap resumed>) = 0x7ff677e9d000 [pid 5101] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5106] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5105] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5106] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5105] <... futex resumed>) = 0 [pid 5101] <... clone resumed>, parent_tid=[5110], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5110 [pid 5106] open("./bus", O_RDONLY [pid 5105] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5101] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5106] <... open resumed>) = 6 [pid 5101] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5110 attached [pid 5106] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5101] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5110] set_robust_list(0x7ff67809c9e0, 24 [pid 5106] <... futex resumed>) = 1 [pid 5105] <... futex resumed>) = 0 [pid 5110] <... set_robust_list resumed>) = 0 [pid 5106] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5105] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5110] sync( [pid 5106] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5105] <... futex resumed>) = 0 [pid 5106] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5105] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5106] <... open resumed>) = 7 [pid 5106] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5105] <... futex resumed>) = 0 [pid 5110] <... sync resumed>) = 0 [pid 5106] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5105] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5110] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5106] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5105] <... futex resumed>) = 0 [pid 5110] <... futex resumed>) = 1 [pid 5106] dup(7 [pid 5105] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5101] <... futex resumed>) = 0 [pid 5110] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5106] <... dup resumed>) = 8 [pid 5106] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5105] <... futex resumed>) = 0 [pid 5106] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5105] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5106] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5105] <... futex resumed>) = 0 [pid 5106] memfd_create("syzkaller", 0 [pid 5105] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5106] <... memfd_create resumed>) = 9 [pid 5104] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5106] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff677e9d000 [pid 5106] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5104] <... write resumed>) = 2097152 [pid 5104] munmap(0x7ff677e9d000, 2097152) = 0 [pid 5104] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 10 [pid 5104] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5104] ioctl(10, LOOP_CLR_FD) = 0 [pid 5104] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5104] close(10) = 0 [pid 5104] close(9 [pid 5106] <... write resumed>) = 2097152 [pid 5106] munmap(0x7ff677e9d000, 2097152) = 0 [pid 5106] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5104] <... close resumed>) = 0 [pid 5106] <... openat resumed>) = 10 [pid 5104] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5106] ioctl(10, LOOP_SET_FD, 9 [pid 5104] <... futex resumed>) = 1 [pid 5103] <... futex resumed>) = 0 [pid 5106] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5104] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5103] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5106] ioctl(10, LOOP_CLR_FD [pid 5104] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5103] <... futex resumed>) = 0 [pid 5106] <... ioctl resumed>) = 0 [pid 5104] sendfile(8, 6, NULL, 281474978811908 [pid 5103] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5106] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5106] close(10) = 0 [pid 5106] close(9) = 0 [pid 5106] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5105] <... futex resumed>) = 0 [pid 5106] sendfile(8, 6, NULL, 281474978811908 [pid 5105] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5103] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5105] <... futex resumed>) = 0 [pid 5103] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5105] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5103] <... futex resumed>) = 0 [pid 5103] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff67807c000 [pid 5103] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5103] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5111], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5111 [pid 5103] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 5111 attached [pid 5103] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5111] set_robust_list(0x7ff67809c9e0, 24) = 0 [pid 5111] sync() = 0 [pid 5111] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5103] <... futex resumed>) = 0 [pid 5111] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5105] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5105] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5105] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff67807c000 [pid 5105] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5105] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5112], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5112 [pid 5105] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5105] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5112 attached [pid 5112] set_robust_list(0x7ff67809c9e0, 24) = 0 [pid 5112] sync() = 0 [pid 5112] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5105] <... futex resumed>) = 0 [pid 5112] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5098] exit_group(0 [pid 5108] <... futex resumed>) = ? [pid 5098] <... exit_group resumed>) = ? [pid 5108] +++ exited with 0 +++ [pid 5100] <... sendfile resumed>) = ? [pid 5095] exit_group(0 [pid 5107] <... futex resumed>) = ? [pid 5095] <... exit_group resumed>) = ? [pid 5107] +++ exited with 0 +++ [pid 5100] +++ exited with 0 +++ [pid 5098] +++ exited with 0 +++ [pid 5096] <... sendfile resumed>) = ? [pid 5096] +++ exited with 0 +++ [pid 5095] +++ exited with 0 +++ [pid 4996] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5095, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=40 /* 0.40 s */} --- [pid 4994] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5098, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=37 /* 0.37 s */} --- [pid 4994] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4996] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4996] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4994] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4996] <... openat resumed>) = 3 [pid 4994] <... openat resumed>) = 3 [pid 4996] fstat(3, [pid 4994] fstat(3, [pid 4996] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] getdents64(3, [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] <... getdents64 resumed>0x555556742620 /* 4 entries */, 32768) = 104 [pid 4994] getdents64(3, [pid 4996] umount2("./5/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] <... getdents64 resumed>0x555556742620 /* 4 entries */, 32768) = 104 [pid 4994] umount2("./5/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5101] exit_group(0 [pid 5097] exit_group(0 [pid 5110] <... futex resumed>) = ? [pid 5109] <... futex resumed>) = ? [pid 5101] <... exit_group resumed>) = ? [pid 5097] <... exit_group resumed>) = ? [pid 5110] +++ exited with 0 +++ [pid 5109] +++ exited with 0 +++ [pid 5099] <... sendfile resumed>) = ? [pid 5102] <... sendfile resumed>) = ? [pid 5099] +++ exited with 0 +++ [pid 5097] +++ exited with 0 +++ [pid 4995] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5097, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=39 /* 0.39 s */} --- [pid 4995] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5102] +++ exited with 0 +++ [pid 5101] +++ exited with 0 +++ [pid 4995] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4995] fstat(3, [pid 4993] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5101, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=35 /* 0.35 s */} --- [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4993] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] getdents64(3, [pid 4993] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] <... getdents64 resumed>0x555556742620 /* 4 entries */, 32768) = 104 [pid 4993] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4995] umount2("./5/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4993] <... openat resumed>) = 3 [pid 4993] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4993] getdents64(3, 0x555556742620 /* 4 entries */, 32768) = 104 [pid 4993] umount2("./5/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5103] exit_group(0) = ? [pid 5111] <... futex resumed>) = ? [pid 5111] +++ exited with 0 +++ [pid 5104] <... sendfile resumed>) = ? [pid 5105] exit_group(0) = ? [pid 5112] <... futex resumed>) = ? [pid 5106] <... sendfile resumed>) = ? [pid 5112] +++ exited with 0 +++ [pid 5104] +++ exited with 0 +++ [pid 5103] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5103, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=37 /* 0.37 s */} --- [pid 4998] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4998] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5106] +++ exited with 0 +++ [pid 5105] +++ exited with 0 +++ [pid 4998] <... openat resumed>) = 3 [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5105, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=36 /* 0.36 s */} --- [pid 4998] fstat(3, [pid 4997] restart_syscall(<... resuming interrupted clone ...> [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] <... restart_syscall resumed>) = 0 [pid 4998] getdents64(3, 0x555556742620 /* 4 entries */, 32768) = 104 [pid 4997] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] umount2("./5/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4997] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(3, 0x555556742620 /* 4 entries */, 32768) = 104 [pid 4997] umount2("./5/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] <... umount2 resumed>) = 0 [pid 4994] umount2("./5/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] lstat("./5/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] umount2("./5/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] openat(AT_FDCWD, "./5/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4994] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4994] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4994] close(4) = 0 [pid 4994] rmdir("./5/bus") = 0 [pid 4994] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] lstat("./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4994] unlink("./5/binderfs") = 0 [pid 4994] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4994] close(3) = 0 [pid 4994] rmdir("./5") = 0 [pid 4994] mkdir("./6", 0777) = 0 [pid 4994] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4994] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4994] close(3) = 0 [pid 4994] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567415d0) = 5113 ./strace-static-x86_64: Process 5113 attached [pid 5113] set_robust_list(0x5555567415e0, 24) = 0 [pid 5113] chdir("./6") = 0 [pid 5113] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5113] setpgid(0, 0) = 0 [pid 5113] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5113] write(3, "1000", 4) = 4 [pid 5113] close(3) = 0 [pid 5113] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5113] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5113] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5113] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5113] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5114], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5114 [pid 5113] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5113] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5114 attached [pid 5114] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5114] memfd_create("syzkaller", 0) = 3 [pid 5114] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 4996] <... umount2 resumed>) = 0 [pid 4996] umount2("./5/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] lstat("./5/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] umount2("./5/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] openat(AT_FDCWD, "./5/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4996] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4996] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4996] close(4) = 0 [pid 4996] rmdir("./5/bus") = 0 [pid 4996] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] lstat("./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4996] unlink("./5/binderfs") = 0 [pid 4996] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4996] close(3) = 0 [pid 4996] rmdir("./5") = 0 [pid 4996] mkdir("./6", 0777) = 0 [pid 4996] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 4996] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4996] close(3) = 0 [pid 4996] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567415d0) = 5115 ./strace-static-x86_64: Process 5115 attached [pid 5115] set_robust_list(0x5555567415e0, 24) = 0 [pid 5115] chdir("./6") = 0 [pid 5115] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5115] setpgid(0, 0) = 0 [pid 5115] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5115] write(3, "1000", 4) = 4 [pid 5115] close(3) = 0 [pid 5115] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5115] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5115] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5115] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5115] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5116], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5116 [pid 5115] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5115] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5116 attached [pid 5116] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5116] memfd_create("syzkaller", 0) = 3 [pid 5116] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 4998] <... umount2 resumed>) = 0 [pid 4998] umount2("./5/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./5/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./5/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./5/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./5/bus") = 0 [pid 4998] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./5/binderfs") = 0 [pid 4998] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./5") = 0 [pid 4998] mkdir("./6", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567415d0) = 5117 ./strace-static-x86_64: Process 5117 attached [pid 5117] set_robust_list(0x5555567415e0, 24) = 0 [pid 5117] chdir("./6") = 0 [pid 5117] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5117] setpgid(0, 0) = 0 [pid 5117] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5117] write(3, "1000", 4) = 4 [pid 5117] close(3) = 0 [pid 5117] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5117] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5117] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5117] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5117] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5118], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5118 [pid 5117] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5117] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5118 attached [pid 5118] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5118] memfd_create("syzkaller", 0) = 3 [pid 5118] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 4993] <... umount2 resumed>) = 0 [pid 4993] umount2("./5/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4993] lstat("./5/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4993] umount2("./5/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4993] openat(AT_FDCWD, "./5/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4993] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4993] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4993] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4995] <... umount2 resumed>) = 0 [pid 4993] close(4) = 0 [pid 4993] rmdir("./5/bus") = 0 [pid 4993] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4993] lstat("./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4995] umount2("./5/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4993] unlink("./5/binderfs" [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] lstat("./5/bus", [pid 4993] <... unlink resumed>) = 0 [pid 4995] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] umount2("./5/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4995] openat(AT_FDCWD, "./5/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4993] getdents64(3, [pid 4995] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4993] <... getdents64 resumed>0x555556742620 /* 0 entries */, 32768) = 0 [pid 4995] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4995] close(4) = 0 [pid 4995] rmdir("./5/bus") = 0 [pid 4993] close(3 [pid 4995] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4995] lstat("./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4995] unlink("./5/binderfs" [pid 4993] <... close resumed>) = 0 [pid 4995] <... unlink resumed>) = 0 [pid 4993] rmdir("./5" [pid 4995] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4995] close(3) = 0 [pid 4993] <... rmdir resumed>) = 0 [pid 4995] rmdir("./5") = 0 [pid 4993] mkdir("./6", 0777 [pid 4995] mkdir("./6", 0777) = 0 [pid 4995] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 4993] <... mkdir resumed>) = 0 [pid 4995] ioctl(3, LOOP_CLR_FD [pid 4993] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 4995] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4993] <... openat resumed>) = 3 [pid 4995] close(3 [pid 4993] ioctl(3, LOOP_CLR_FD [pid 4995] <... close resumed>) = 0 [pid 4995] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4993] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4995] <... clone resumed>, child_tidptr=0x5555567415d0) = 5119 [pid 4993] close(3) = 0 [pid 4993] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567415d0) = 5120 ./strace-static-x86_64: Process 5119 attached [pid 5119] set_robust_list(0x5555567415e0, 24) = 0 [pid 5119] chdir("./6") = 0 [pid 5119] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5119] setpgid(0, 0) = 0 [pid 5119] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5119] write(3, "1000", 4) = 4 [pid 5119] close(3) = 0 [pid 5119] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 5120 attached ) = 0 [pid 5119] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5120] set_robust_list(0x5555567415e0, 24 [pid 5119] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5119] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5120] <... set_robust_list resumed>) = 0 [pid 5119] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5120] chdir("./6") = 0 [pid 5119] <... clone resumed>, parent_tid=[5121], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5121 [pid 5119] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5119] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5121 attached [pid 5120] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5121] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5120] <... prctl resumed>) = 0 [pid 5121] memfd_create("syzkaller", 0 [pid 5120] setpgid(0, 0 [pid 5121] <... memfd_create resumed>) = 3 [pid 5120] <... setpgid resumed>) = 0 [pid 5121] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 5120] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5120] write(3, "1000", 4) = 4 [pid 5120] close(3) = 0 [pid 5120] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5120] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5120] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5120] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5120] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5122], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5122 [pid 5120] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5114] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5120] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5122 attached [pid 5122] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5122] memfd_create("syzkaller", 0) = 3 [pid 5122] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 4997] <... umount2 resumed>) = 0 [pid 4997] umount2("./5/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./5/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./5/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./5/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4997] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4997] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4997] close(4) = 0 [pid 4997] rmdir("./5/bus") = 0 [pid 4997] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] unlink("./5/binderfs") = 0 [pid 4997] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4997] close(3) = 0 [pid 4997] rmdir("./5") = 0 [pid 4997] mkdir("./6", 0777) = 0 [pid 4997] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 4997] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4997] close(3) = 0 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567415d0) = 5123 ./strace-static-x86_64: Process 5123 attached [pid 5123] set_robust_list(0x5555567415e0, 24) = 0 [pid 5123] chdir("./6") = 0 [pid 5123] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5123] setpgid(0, 0) = 0 [pid 5123] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5116] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5123] <... openat resumed>) = 3 [pid 5123] write(3, "1000", 4) = 4 [pid 5123] close(3) = 0 [pid 5123] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5123] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5123] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5123] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5123] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5124], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5124 [pid 5123] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5123] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5124 attached [pid 5124] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5124] memfd_create("syzkaller", 0) = 3 [pid 5124] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 5118] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5121] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5122] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5114] <... write resumed>) = 16777216 [pid 5114] munmap(0x7ff67f29d000, 16777216) = 0 [pid 5114] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5114] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5124] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5114] close(3) = 0 [pid 5114] mkdir("./bus", 0777) = 0 [pid 5114] mount("/dev/loop1", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "") = 0 [pid 5114] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5114] chdir("./bus") = 0 [pid 5114] ioctl(4, LOOP_CLR_FD) = 0 [pid 5114] close(4) = 0 [pid 5114] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5113] <... futex resumed>) = 0 [pid 5114] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [ 73.775373][ T5114] loop1: detected capacity change from 0 to 32768 [pid 5113] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5114] <... open resumed>) = 4 [pid 5113] <... futex resumed>) = 0 [pid 5114] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5113] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5114] <... futex resumed>) = 0 [pid 5113] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5114] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5113] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5114] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5113] <... futex resumed>) = 0 [pid 5114] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5113] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5114] <... open resumed>) = 5 [pid 5114] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5113] <... futex resumed>) = 0 [pid 5114] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5113] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5114] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5113] <... futex resumed>) = 0 [pid 5114] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5113] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5114] <... mmap resumed>) = 0x20000000 [pid 5114] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5113] <... futex resumed>) = 0 [pid 5113] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5114] ftruncate(4, 33587199 [pid 5113] <... futex resumed>) = 0 [pid 5114] <... ftruncate resumed>) = 0 [pid 5113] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5114] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5113] <... futex resumed>) = 0 [pid 5113] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5114] open("./bus", O_RDONLY [pid 5113] <... futex resumed>) = 0 [pid 5113] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5114] <... open resumed>) = 6 [pid 5116] <... write resumed>) = 16777216 [pid 5114] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5116] munmap(0x7ff67f29d000, 16777216 [pid 5114] <... futex resumed>) = 1 [pid 5113] <... futex resumed>) = 0 [pid 5116] <... munmap resumed>) = 0 [pid 5114] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5113] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5114] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5113] <... futex resumed>) = 0 [pid 5114] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5113] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5114] <... open resumed>) = 7 [pid 5114] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5113] <... futex resumed>) = 0 [pid 5116] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5114] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5113] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5114] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5113] <... futex resumed>) = 0 [pid 5116] <... openat resumed>) = 4 [pid 5113] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5114] dup(7) = 8 [pid 5114] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [ 73.880328][ T27] kauditd_printk_skb: 14 callbacks suppressed [ 73.880342][ T27] audit: type=1804 audit(1686284878.717:74): pid=5114 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor481" name="/root/syzkaller.20fUYQ/6/bus/bus" dev="loop1" ino=7 res=1 errno=0 [pid 5116] ioctl(4, LOOP_SET_FD, 3 [pid 5114] <... futex resumed>) = 1 [pid 5113] <... futex resumed>) = 0 [pid 5114] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5113] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5114] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5113] <... futex resumed>) = 0 [pid 5114] memfd_create("syzkaller", 0 [pid 5113] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5114] <... memfd_create resumed>) = 9 [pid 5114] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff677e9d000 [pid 5116] <... ioctl resumed>) = 0 [pid 5116] close(3) = 0 [pid 5116] mkdir("./bus", 0777) = 0 [pid 5116] mount("/dev/loop3", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "") = 0 [pid 5116] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5116] chdir("./bus") = 0 [pid 5116] ioctl(4, LOOP_CLR_FD) = 0 [pid 5116] close(4 [pid 5118] <... write resumed>) = 16777216 [pid 5116] <... close resumed>) = 0 [pid 5118] munmap(0x7ff67f29d000, 16777216 [pid 5116] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5115] <... futex resumed>) = 0 [ 73.935488][ T5116] loop3: detected capacity change from 0 to 32768 [pid 5116] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5115] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5118] <... munmap resumed>) = 0 [pid 5116] <... open resumed>) = 4 [pid 5115] <... futex resumed>) = 0 [pid 5116] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5115] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5116] <... futex resumed>) = 0 [pid 5115] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5116] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5115] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5116] <... open resumed>) = 5 [pid 5115] <... futex resumed>) = 0 [pid 5116] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5115] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5116] <... futex resumed>) = 0 [pid 5115] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5116] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5115] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5116] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5115] <... futex resumed>) = 0 [pid 5116] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5115] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5116] <... mmap resumed>) = 0x20000000 [pid 5116] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5115] <... futex resumed>) = 0 [pid 5116] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5115] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5116] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5115] <... futex resumed>) = 0 [pid 5116] ftruncate(4, 33587199 [pid 5115] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5116] <... ftruncate resumed>) = 0 [pid 5116] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5115] <... futex resumed>) = 0 [pid 5116] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5115] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5116] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5115] <... futex resumed>) = 0 [pid 5116] open("./bus", O_RDONLY [pid 5115] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5116] <... open resumed>) = 6 [pid 5116] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5115] <... futex resumed>) = 0 [pid 5116] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5115] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5116] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5115] <... futex resumed>) = 0 [pid 5116] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5115] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5116] <... open resumed>) = 7 [pid 5116] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5115] <... futex resumed>) = 0 [pid 5116] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5115] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5116] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5115] <... futex resumed>) = 0 [pid 5118] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5116] dup(7 [pid 5115] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5114] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5116] <... dup resumed>) = 8 [pid 5116] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5115] <... futex resumed>) = 0 [pid 5116] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5115] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5116] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5115] <... futex resumed>) = 0 [pid 5118] <... openat resumed>) = 4 [pid 5116] memfd_create("syzkaller", 0 [pid 5115] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5116] <... memfd_create resumed>) = 9 [pid 5116] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5118] ioctl(4, LOOP_SET_FD, 3 [pid 5116] <... mmap resumed>) = 0x7ff677e9d000 [pid 5118] <... ioctl resumed>) = 0 [pid 5118] close(3) = 0 [pid 5118] mkdir("./bus", 0777) = 0 [pid 5118] mount("/dev/loop5", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "") = 0 [pid 5118] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5118] chdir("./bus") = 0 [pid 5118] ioctl(4, LOOP_CLR_FD) = 0 [ 74.028881][ T27] audit: type=1804 audit(1686284878.767:75): pid=5114 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor481" name="/root/syzkaller.20fUYQ/6/bus/bus" dev="loop1" ino=7 res=1 errno=0 [ 74.058892][ T5118] loop5: detected capacity change from 0 to 32768 [pid 5118] close(4) = 0 [pid 5118] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5117] <... futex resumed>) = 0 [pid 5118] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5117] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5114] <... write resumed>) = 2097152 [pid 5118] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5117] <... futex resumed>) = 0 [pid 5114] munmap(0x7ff677e9d000, 2097152 [pid 5118] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5117] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5118] <... open resumed>) = 4 [pid 5114] <... munmap resumed>) = 0 [pid 5118] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5116] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5118] <... futex resumed>) = 1 [pid 5117] <... futex resumed>) = 0 [pid 5117] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5118] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5117] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5118] <... open resumed>) = 5 [pid 5114] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5118] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5117] <... futex resumed>) = 0 [pid 5118] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5117] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5118] <... mmap resumed>) = 0x20000000 [pid 5117] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5118] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5117] <... futex resumed>) = 0 [pid 5118] ftruncate(4, 33587199 [pid 5117] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5118] <... ftruncate resumed>) = 0 [pid 5117] <... futex resumed>) = 0 [pid 5118] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5117] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5118] <... futex resumed>) = 0 [pid 5117] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5118] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5117] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5118] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5117] <... futex resumed>) = 0 [pid 5114] <... openat resumed>) = 10 [pid 5122] <... write resumed>) = 16777216 [pid 5121] <... write resumed>) = 16777216 [pid 5118] open("./bus", O_RDONLY [pid 5117] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5116] <... write resumed>) = 2097152 [pid 5114] ioctl(10, LOOP_SET_FD, 9 [pid 5122] munmap(0x7ff67f29d000, 16777216 [pid 5121] munmap(0x7ff67f29d000, 16777216 [pid 5118] <... open resumed>) = 6 [pid 5116] munmap(0x7ff677e9d000, 2097152 [pid 5114] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [ 74.172710][ T27] audit: type=1804 audit(1686284878.867:76): pid=5116 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor481" name="/root/syzkaller.crriMX/6/bus/bus" dev="loop3" ino=7 res=1 errno=0 [ 74.196129][ T27] audit: type=1804 audit(1686284878.867:77): pid=5116 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor481" name="/root/syzkaller.crriMX/6/bus/bus" dev="loop3" ino=7 res=1 errno=0 [pid 5122] <... munmap resumed>) = 0 [pid 5121] <... munmap resumed>) = 0 [pid 5118] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5116] <... munmap resumed>) = 0 [pid 5114] ioctl(10, LOOP_CLR_FD [pid 5118] <... futex resumed>) = 1 [pid 5116] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5114] <... ioctl resumed>) = 0 [pid 5117] <... futex resumed>) = 0 [pid 5117] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5118] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5117] <... futex resumed>) = 0 [pid 5116] <... openat resumed>) = 10 [pid 5118] <... open resumed>) = 7 [pid 5117] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5116] ioctl(10, LOOP_SET_FD, 9 [pid 5114] ioctl(10, LOOP_SET_FD, 9 [pid 5116] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5114] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5118] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5117] <... futex resumed>) = 0 [pid 5114] close(10 [pid 5116] ioctl(10, LOOP_CLR_FD [pid 5117] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5114] <... close resumed>) = 0 [ 74.219140][ T27] audit: type=1804 audit(1686284879.037:78): pid=5118 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor481" name="/root/syzkaller.PL7eda/6/bus/bus" dev="loop5" ino=7 res=1 errno=0 [ 74.243527][ T27] audit: type=1804 audit(1686284879.087:79): pid=5118 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor481" name="/root/syzkaller.PL7eda/6/bus/bus" dev="loop5" ino=7 res=1 errno=0 [pid 5117] <... futex resumed>) = 0 [pid 5114] close(9 [pid 5116] <... ioctl resumed>) = 0 [pid 5118] dup(7 [pid 5117] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5121] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5122] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5121] <... openat resumed>) = 4 [pid 5122] <... openat resumed>) = 4 [pid 5121] ioctl(4, LOOP_SET_FD, 3 [pid 5122] ioctl(4, LOOP_SET_FD, 3 [pid 5121] <... ioctl resumed>) = 0 [pid 5118] <... dup resumed>) = 8 [pid 5114] <... close resumed>) = 0 [pid 5118] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5114] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5124] <... write resumed>) = 16777216 [pid 5122] <... ioctl resumed>) = 0 [pid 5121] close(3 [pid 5118] <... futex resumed>) = 1 [pid 5117] <... futex resumed>) = 0 [pid 5116] ioctl(10, LOOP_SET_FD, 9 [pid 5114] <... futex resumed>) = 1 [pid 5113] <... futex resumed>) = 0 [pid 5117] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5117] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5118] memfd_create("syzkaller", 0 [pid 5116] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5114] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5113] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5116] close(10 [pid 5114] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5113] <... futex resumed>) = 0 [pid 5124] munmap(0x7ff67f29d000, 16777216 [pid 5113] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5114] sendfile(8, 6, NULL, 281474978811908 [pid 5116] <... close resumed>) = 0 [pid 5116] close(9 [pid 5124] <... munmap resumed>) = 0 [pid 5122] close(3 [pid 5121] <... close resumed>) = 0 [pid 5118] <... memfd_create resumed>) = 9 [pid 5122] <... close resumed>) = 0 [pid 5121] mkdir("./bus", 0777 [ 74.275099][ T5121] loop2: detected capacity change from 0 to 32768 [ 74.282588][ T5122] loop0: detected capacity change from 0 to 32768 [pid 5118] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5124] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5122] mkdir("./bus", 0777 [pid 5121] <... mkdir resumed>) = 0 [pid 5118] <... mmap resumed>) = 0x7ff677e9d000 [pid 5116] <... close resumed>) = 0 [pid 5124] <... openat resumed>) = 4 [pid 5122] <... mkdir resumed>) = 0 [pid 5121] mount("/dev/loop2", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5116] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5124] ioctl(4, LOOP_SET_FD, 3 [pid 5122] mount("/dev/loop0", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5116] <... futex resumed>) = 1 [pid 5115] <... futex resumed>) = 0 [pid 5121] <... mount resumed>) = 0 [pid 5116] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5113] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5115] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5122] <... mount resumed>) = 0 [pid 5121] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5116] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5115] <... futex resumed>) = 0 [pid 5113] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5122] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5121] <... openat resumed>) = 3 [pid 5116] sendfile(8, 6, NULL, 281474978811908 [pid 5115] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5113] <... futex resumed>) = 0 [pid 5122] <... openat resumed>) = 3 [pid 5121] chdir("./bus" [pid 5113] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5122] chdir("./bus" [pid 5121] <... chdir resumed>) = 0 [pid 5113] <... mmap resumed>) = 0x7ff67807c000 [pid 5122] <... chdir resumed>) = 0 [pid 5121] ioctl(4, LOOP_CLR_FD [pid 5113] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5122] ioctl(4, LOOP_CLR_FD [pid 5121] <... ioctl resumed>) = 0 [pid 5113] <... mprotect resumed>) = 0 [pid 5124] <... ioctl resumed>) = 0 [pid 5122] <... ioctl resumed>) = 0 [pid 5121] close(4 [pid 5113] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5124] close(3 [pid 5122] close(4 [pid 5121] <... close resumed>) = 0 [pid 5124] <... close resumed>) = 0 [pid 5122] <... close resumed>) = 0 [pid 5113] <... clone resumed>, parent_tid=[5125], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5125 [pid 5124] mkdir("./bus", 0777 [pid 5122] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5113] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5124] <... mkdir resumed>) = 0 [pid 5122] <... futex resumed>) = 1 [pid 5120] <... futex resumed>) = 0 [pid 5113] <... futex resumed>) = 0 [pid 5124] mount("/dev/loop4", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5122] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5120] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5113] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5122] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5121] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5120] <... futex resumed>) = 0 [pid 5122] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5121] <... futex resumed>) = 1 [pid 5120] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5119] <... futex resumed>) = 0 [pid 5122] <... open resumed>) = 4 [pid 5121] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5119] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5125 attached [pid 5122] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5121] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5119] <... futex resumed>) = 0 [pid 5125] set_robust_list(0x7ff67809c9e0, 24 [pid 5124] <... mount resumed>) = 0 [pid 5122] <... futex resumed>) = 1 [pid 5121] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5120] <... futex resumed>) = 0 [pid 5119] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5125] <... set_robust_list resumed>) = 0 [pid 5124] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5122] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5121] <... open resumed>) = 4 [pid 5120] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5125] sync( [pid 5124] <... openat resumed>) = 3 [pid 5122] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5121] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5120] <... futex resumed>) = 0 [pid 5124] chdir("./bus" [pid 5122] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5121] <... futex resumed>) = 1 [pid 5120] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5119] <... futex resumed>) = 0 [pid 5124] <... chdir resumed>) = 0 [pid 5122] <... open resumed>) = 5 [pid 5121] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [ 74.357096][ T5124] loop4: detected capacity change from 0 to 32768 [pid 5119] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5124] ioctl(4, LOOP_CLR_FD [pid 5122] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5121] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5119] <... futex resumed>) = 0 [pid 5124] <... ioctl resumed>) = 0 [pid 5122] <... futex resumed>) = 1 [pid 5121] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5120] <... futex resumed>) = 0 [pid 5119] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5124] close(4 [pid 5122] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5121] <... open resumed>) = 5 [pid 5120] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5125] <... sync resumed>) = 0 [pid 5124] <... close resumed>) = 0 [pid 5122] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5121] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5120] <... futex resumed>) = 0 [pid 5118] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5115] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5125] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5124] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5122] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5121] <... futex resumed>) = 1 [pid 5120] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5119] <... futex resumed>) = 0 [pid 5115] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5113] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5125] <... futex resumed>) = 0 [pid 5124] <... futex resumed>) = 1 [pid 5123] <... futex resumed>) = 0 [pid 5122] <... mmap resumed>) = 0x20000000 [pid 5121] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5119] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5115] <... futex resumed>) = 0 [pid 5125] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5124] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5123] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5122] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5121] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5119] <... futex resumed>) = 0 [pid 5115] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5124] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5123] <... futex resumed>) = 0 [pid 5122] <... futex resumed>) = 1 [pid 5121] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5120] <... futex resumed>) = 0 [pid 5119] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5115] <... mmap resumed>) = 0x7ff67807c000 [pid 5124] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5123] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5122] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5121] <... mmap resumed>) = 0x20000000 [pid 5120] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5115] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5124] <... open resumed>) = 4 [pid 5122] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5121] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5120] <... futex resumed>) = 0 [pid 5115] <... mprotect resumed>) = 0 [pid 5124] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5122] ftruncate(4, 33587199 [pid 5121] <... futex resumed>) = 1 [pid 5120] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5119] <... futex resumed>) = 0 [pid 5115] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5124] <... futex resumed>) = 1 [pid 5123] <... futex resumed>) = 0 [pid 5122] <... ftruncate resumed>) = 0 [pid 5121] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5119] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5124] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5123] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5122] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5121] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5119] <... futex resumed>) = 0 [pid 5115] <... clone resumed>, parent_tid=[5126], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5126 [pid 5124] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5123] <... futex resumed>) = 0 [pid 5122] <... futex resumed>) = 1 [pid 5121] ftruncate(4, 33587199 [pid 5120] <... futex resumed>) = 0 [pid 5119] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5115] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5124] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5123] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5122] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5121] <... ftruncate resumed>) = 0 [pid 5120] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5115] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5126 attached [pid 5124] <... open resumed>) = 5 [pid 5122] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5121] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5120] <... futex resumed>) = 0 [pid 5115] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5126] set_robust_list(0x7ff67809c9e0, 24 [pid 5124] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5122] open("./bus", O_RDONLY [pid 5121] <... futex resumed>) = 1 [pid 5120] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5119] <... futex resumed>) = 0 [pid 5126] <... set_robust_list resumed>) = 0 [pid 5124] <... futex resumed>) = 1 [pid 5123] <... futex resumed>) = 0 [pid 5122] <... open resumed>) = 6 [pid 5124] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5123] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5122] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5124] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5123] <... futex resumed>) = 0 [pid 5122] <... futex resumed>) = 1 [pid 5120] <... futex resumed>) = 0 [pid 5124] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5123] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5122] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5120] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5124] <... mmap resumed>) = 0x20000000 [pid 5122] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5120] <... futex resumed>) = 0 [pid 5124] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5122] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5120] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5124] <... futex resumed>) = 1 [pid 5123] <... futex resumed>) = 0 [pid 5122] <... open resumed>) = 7 [pid 5124] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5123] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5122] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5124] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5123] <... futex resumed>) = 0 [pid 5122] <... futex resumed>) = 1 [pid 5120] <... futex resumed>) = 0 [pid 5124] ftruncate(4, 33587199 [pid 5123] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5122] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5120] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5124] <... ftruncate resumed>) = 0 [pid 5122] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5120] <... futex resumed>) = 0 [pid 5124] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5122] dup(7 [pid 5120] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5124] <... futex resumed>) = 1 [pid 5123] <... futex resumed>) = 0 [pid 5122] <... dup resumed>) = 8 [pid 5124] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5123] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5122] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5124] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5123] <... futex resumed>) = 0 [pid 5122] <... futex resumed>) = 1 [pid 5120] <... futex resumed>) = 0 [pid 5124] open("./bus", O_RDONLY [pid 5123] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5122] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5120] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5124] <... open resumed>) = 6 [pid 5122] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5120] <... futex resumed>) = 0 [pid 5126] sync( [pid 5124] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5122] memfd_create("syzkaller", 0 [pid 5121] open("./bus", O_RDONLY [pid 5120] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5119] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5126] <... sync resumed>) = 0 [pid 5124] <... futex resumed>) = 1 [pid 5123] <... futex resumed>) = 0 [pid 5122] <... memfd_create resumed>) = 9 [pid 5121] <... open resumed>) = 6 [pid 5119] <... futex resumed>) = 0 [pid 5126] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5124] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5123] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5122] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5121] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5119] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5126] <... futex resumed>) = 1 [pid 5124] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 74.485958][ T27] audit: type=1804 audit(1686284879.327:80): pid=5122 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor481" name="/root/syzkaller.lVUVkM/6/bus/bus" dev="loop0" ino=7 res=1 errno=0 [pid 5123] <... futex resumed>) = 0 [pid 5122] <... mmap resumed>) = 0x7ff677e9d000 [pid 5121] <... futex resumed>) = 0 [pid 5119] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5115] <... futex resumed>) = 0 [pid 5126] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5124] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5123] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5121] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5119] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5118] <... write resumed>) = 2097152 [pid 5124] <... open resumed>) = 7 [pid 5121] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5119] <... futex resumed>) = 0 [pid 5118] munmap(0x7ff677e9d000, 2097152 [pid 5124] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5121] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5119] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5124] <... futex resumed>) = 1 [pid 5123] <... futex resumed>) = 0 [pid 5121] <... open resumed>) = 7 [pid 5118] <... munmap resumed>) = 0 [pid 5124] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5123] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5121] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5118] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5124] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5123] <... futex resumed>) = 0 [pid 5121] <... futex resumed>) = 1 [pid 5119] <... futex resumed>) = 0 [pid 5124] dup(7 [pid 5123] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5121] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5119] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5118] <... openat resumed>) = 10 [pid 5124] <... dup resumed>) = 8 [pid 5121] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5119] <... futex resumed>) = 0 [pid 5124] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5121] dup(7 [pid 5119] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5118] ioctl(10, LOOP_SET_FD, 9 [pid 5124] <... futex resumed>) = 1 [pid 5123] <... futex resumed>) = 0 [pid 5121] <... dup resumed>) = 8 [pid 5118] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5124] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5123] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5121] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5118] ioctl(10, LOOP_CLR_FD [pid 5124] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5123] <... futex resumed>) = 0 [pid 5121] <... futex resumed>) = 1 [pid 5119] <... futex resumed>) = 0 [pid 5118] <... ioctl resumed>) = 0 [pid 5124] memfd_create("syzkaller", 0 [pid 5123] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5121] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5119] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5124] <... memfd_create resumed>) = 9 [pid 5121] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5119] <... futex resumed>) = 0 [pid 5124] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff677e9d000 [pid 5121] memfd_create("syzkaller", 0 [pid 5119] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5121] <... memfd_create resumed>) = 9 [pid 5118] ioctl(10, LOOP_SET_FD, 9 [pid 5121] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5118] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5121] <... mmap resumed>) = 0x7ff677e9d000 [pid 5118] close(10) = 0 [pid 5118] close(9 [pid 5122] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [ 74.612094][ T27] audit: type=1804 audit(1686284879.327:81): pid=5122 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor481" name="/root/syzkaller.lVUVkM/6/bus/bus" dev="loop0" ino=7 res=1 errno=0 [pid 5118] <... close resumed>) = 0 [pid 5124] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5118] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5117] <... futex resumed>) = 0 [pid 5118] <... futex resumed>) = 1 [pid 5118] sendfile(8, 6, NULL, 281474978811908 [pid 5117] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5117] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5122] <... write resumed>) = 2097152 [pid 5122] munmap(0x7ff677e9d000, 2097152 [pid 5121] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5122] <... munmap resumed>) = 0 [pid 5117] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5117] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5122] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5117] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5122] <... openat resumed>) = 10 [pid 5117] <... mmap resumed>) = 0x7ff67807c000 [pid 5122] ioctl(10, LOOP_SET_FD, 9 [pid 5117] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5122] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5122] ioctl(10, LOOP_CLR_FD [pid 5117] <... mprotect resumed>) = 0 [pid 5122] <... ioctl resumed>) = 0 [pid 5117] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5124] <... write resumed>) = 2097152 [pid 5117] <... clone resumed>, parent_tid=[5127], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5127 [pid 5117] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5122] ioctl(10, LOOP_SET_FD, 9 [pid 5117] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5127 attached [pid 5122] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5117] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5127] set_robust_list(0x7ff67809c9e0, 24 [pid 5122] close(10 [pid 5127] <... set_robust_list resumed>) = 0 [pid 5122] <... close resumed>) = 0 [pid 5127] sync( [ 74.734241][ T27] audit: type=1804 audit(1686284879.327:82): pid=5124 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor481" name="/root/syzkaller.hTAWL1/6/bus/bus" dev="loop4" ino=7 res=1 errno=0 [pid 5122] close(9) = 0 [pid 5124] munmap(0x7ff677e9d000, 2097152 [pid 5127] <... sync resumed>) = 0 [pid 5117] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5127] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5121] <... write resumed>) = 2097152 [pid 5127] <... futex resumed>) = 0 [pid 5124] <... munmap resumed>) = 0 [pid 5121] munmap(0x7ff677e9d000, 2097152 [pid 5127] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5124] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5122] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5124] <... openat resumed>) = 10 [pid 5122] <... futex resumed>) = 1 [pid 5121] <... munmap resumed>) = 0 [pid 5120] <... futex resumed>) = 0 [pid 5124] ioctl(10, LOOP_SET_FD, 9 [pid 5122] sendfile(8, 6, NULL, 281474978811908 [pid 5120] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5124] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5120] <... futex resumed>) = 0 [pid 5124] ioctl(10, LOOP_CLR_FD [pid 5120] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5124] <... ioctl resumed>) = 0 [pid 5124] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5124] close(10 [pid 5121] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5124] <... close resumed>) = 0 [pid 5121] <... openat resumed>) = 10 [pid 5124] close(9 [pid 5121] ioctl(10, LOOP_SET_FD, 9 [pid 5124] <... close resumed>) = 0 [pid 5124] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5123] <... futex resumed>) = 0 [pid 5123] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5124] <... futex resumed>) = 1 [pid 5123] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5124] sendfile(8, 6, NULL, 281474978811908 [pid 5120] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5120] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5121] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5120] <... futex resumed>) = 0 [pid 5121] ioctl(10, LOOP_CLR_FD [pid 5120] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5121] <... ioctl resumed>) = 0 [pid 5120] <... mmap resumed>) = 0x7ff67807c000 [pid 5120] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5121] ioctl(10, LOOP_SET_FD, 9 [ 74.882504][ T27] audit: type=1804 audit(1686284879.357:83): pid=5121 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor481" name="/root/syzkaller.txkbmS/6/bus/bus" dev="loop2" ino=7 res=1 errno=0 [pid 5120] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5121] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5123] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5121] close(10 [pid 5120] <... clone resumed>, parent_tid=[5128], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5128 ./strace-static-x86_64: Process 5128 attached [pid 5123] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5121] <... close resumed>) = 0 [pid 5120] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5128] set_robust_list(0x7ff67809c9e0, 24 [pid 5123] <... futex resumed>) = 0 [pid 5121] close(9 [pid 5120] <... futex resumed>) = 0 [pid 5128] <... set_robust_list resumed>) = 0 [pid 5123] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5120] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5123] <... mmap resumed>) = 0x7ff67807c000 [pid 5123] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5128] sync( [pid 5121] <... close resumed>) = 0 [pid 5123] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5128] <... sync resumed>) = 0 [pid 5123] <... clone resumed>, parent_tid=[5129], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5129 [pid 5128] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5123] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5121] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5129 attached [pid 5128] <... futex resumed>) = 1 [pid 5123] <... futex resumed>) = 0 [pid 5121] <... futex resumed>) = 1 [pid 5120] <... futex resumed>) = 0 [pid 5119] <... futex resumed>) = 0 [pid 5129] set_robust_list(0x7ff67809c9e0, 24 [pid 5128] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5123] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5121] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5119] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5129] <... set_robust_list resumed>) = 0 [pid 5121] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5119] <... futex resumed>) = 0 [pid 5129] sync( [pid 5121] sendfile(8, 6, NULL, 281474978811908 [pid 5119] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5129] <... sync resumed>) = 0 [pid 5129] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5123] <... futex resumed>) = 0 [pid 5129] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5119] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5119] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5119] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff67807c000 [pid 5119] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5119] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5130], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5130 ./strace-static-x86_64: Process 5130 attached [pid 5119] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5130] set_robust_list(0x7ff67809c9e0, 24 [pid 5119] <... futex resumed>) = 0 [pid 5130] <... set_robust_list resumed>) = 0 [pid 5119] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5130] sync() = 0 [pid 5130] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5119] <... futex resumed>) = 0 [pid 5130] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5113] exit_group(0 [pid 5125] <... futex resumed>) = ? [pid 5113] <... exit_group resumed>) = ? [pid 5125] +++ exited with 0 +++ [pid 5114] <... sendfile resumed>) = ? [pid 5114] +++ exited with 0 +++ [pid 5113] +++ exited with 0 +++ [pid 4994] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5113, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=37 /* 0.37 s */} --- [pid 4994] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4994] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] getdents64(3, 0x555556742620 /* 4 entries */, 32768) = 104 [pid 4994] umount2("./6/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5115] exit_group(0 [pid 5126] <... futex resumed>) = ? [pid 5116] <... sendfile resumed>) = ? [pid 5115] <... exit_group resumed>) = ? [pid 5126] +++ exited with 0 +++ [pid 5116] +++ exited with 0 +++ [pid 5115] +++ exited with 0 +++ [pid 4996] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5115, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=36 /* 0.36 s */} --- [pid 4996] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4996] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] getdents64(3, 0x555556742620 /* 4 entries */, 32768) = 104 [pid 4996] umount2("./6/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5117] exit_group(0 [pid 5127] <... futex resumed>) = ? [pid 5117] <... exit_group resumed>) = ? [pid 5127] +++ exited with 0 +++ [pid 5118] <... sendfile resumed>) = ? [pid 5118] +++ exited with 0 +++ [pid 5117] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5117, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=48 /* 0.48 s */} --- [pid 4998] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4998] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x555556742620 /* 4 entries */, 32768) = 104 [pid 4998] umount2("./6/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5123] exit_group(0 [pid 5129] <... futex resumed>) = ? [pid 5123] <... exit_group resumed>) = ? [pid 5129] +++ exited with 0 +++ [pid 5124] <... sendfile resumed>) = ? [pid 5124] +++ exited with 0 +++ [pid 5123] +++ exited with 0 +++ [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5123, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=41 /* 0.41 s */} --- [pid 4997] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5120] exit_group(0 [pid 5128] <... futex resumed>) = ? [pid 5120] <... exit_group resumed>) = ? [pid 4997] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5128] +++ exited with 0 +++ [pid 5122] <... sendfile resumed>) = ? [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4997] fstat(3, [pid 5122] +++ exited with 0 +++ [pid 5120] +++ exited with 0 +++ [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(3, 0x555556742620 /* 4 entries */, 32768) = 104 [pid 4993] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5120, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=34 /* 0.34 s */} --- [pid 4997] umount2("./6/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4993] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4993] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4993] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4993] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4993] getdents64(3, 0x555556742620 /* 4 entries */, 32768) = 104 [pid 4993] umount2("./6/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5119] exit_group(0 [pid 5130] <... futex resumed>) = ? [pid 5119] <... exit_group resumed>) = ? [pid 5130] +++ exited with 0 +++ [pid 5121] <... sendfile resumed>) = ? [pid 5121] +++ exited with 0 +++ [pid 5119] +++ exited with 0 +++ [pid 4995] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5119, si_uid=0, si_status=0, si_utime=11 /* 0.11 s */, si_stime=42 /* 0.42 s */} --- [pid 4995] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4995] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4995] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] getdents64(3, 0x555556742620 /* 4 entries */, 32768) = 104 [pid 4995] umount2("./6/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4993] <... umount2 resumed>) = 0 [pid 4997] <... umount2 resumed>) = 0 [pid 4993] umount2("./6/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4993] lstat("./6/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4993] umount2("./6/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4993] openat(AT_FDCWD, "./6/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4993] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4993] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4993] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4993] close(4) = 0 [pid 4993] rmdir("./6/bus") = 0 [pid 4993] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4993] lstat("./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4993] unlink("./6/binderfs") = 0 [pid 4993] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4993] close(3) = 0 [pid 4993] rmdir("./6" [pid 4997] umount2("./6/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4993] <... rmdir resumed>) = 0 [pid 4993] mkdir("./7", 0777 [pid 4997] lstat("./6/bus", [pid 4993] <... mkdir resumed>) = 0 [pid 4993] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 4997] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4993] <... openat resumed>) = 3 [pid 4993] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4993] close(3) = 0 [pid 4997] umount2("./6/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./6/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4997] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4997] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4997] close(4) = 0 [pid 4997] rmdir("./6/bus") = 0 [pid 4997] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./6/binderfs", [pid 4993] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4997] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] unlink("./6/binderfs") = 0 [pid 4997] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4997] close(3) = 0 [pid 4993] <... clone resumed>, child_tidptr=0x5555567415d0) = 5131 [pid 4997] rmdir("./6") = 0 [pid 4997] mkdir("./7", 0777) = 0 [pid 4997] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 4997] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4997] close(3) = 0 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5131 attached [pid 5131] set_robust_list(0x5555567415e0, 24) = 0 [pid 5131] chdir("./7") = 0 [pid 5131] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5131] setpgid(0, 0 [pid 4997] <... clone resumed>, child_tidptr=0x5555567415d0) = 5132 [pid 5131] <... setpgid resumed>) = 0 [pid 5131] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5131] write(3, "1000", 4 [pid 4995] <... umount2 resumed>) = 0 [pid 5131] <... write resumed>) = 4 [pid 5131] close(3) = 0 [pid 5131] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4995] umount2("./6/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5132 attached [pid 4995] lstat("./6/bus", [pid 5132] set_robust_list(0x5555567415e0, 24) = 0 [pid 4995] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5132] chdir("./7" [pid 4995] umount2("./6/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5132] <... chdir resumed>) = 0 [pid 4995] openat(AT_FDCWD, "./6/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5132] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5131] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] <... openat resumed>) = 4 [pid 5131] <... futex resumed>) = 0 [pid 5132] <... prctl resumed>) = 0 [pid 5131] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4995] fstat(4, [pid 5132] setpgid(0, 0 [pid 5131] <... mmap resumed>) = 0x7ff68769d000 [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5132] <... setpgid resumed>) = 0 [pid 5131] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE [pid 4995] getdents64(4, [pid 4994] <... umount2 resumed>) = 0 [pid 5132] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5131] <... mprotect resumed>) = 0 [pid 4995] <... getdents64 resumed>0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4995] getdents64(4, [pid 5132] <... openat resumed>) = 3 [pid 5131] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4995] <... getdents64 resumed>0x55555674a660 /* 0 entries */, 32768) = 0 [pid 5132] write(3, "1000", 4 [pid 4995] close(4 [pid 5132] <... write resumed>) = 4 [pid 5132] close(3 [pid 4995] <... close resumed>) = 0 [pid 5132] <... close resumed>) = 0 [pid 5131] <... clone resumed>, parent_tid=[5133], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5133 [pid 4995] rmdir("./6/bus" [pid 5132] symlink("/dev/binderfs", "./binderfs" [pid 5131] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4995] <... rmdir resumed>) = 0 [pid 5131] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4995] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5132] <... symlink resumed>) = 0 [pid 4995] lstat("./6/binderfs", [pid 5132] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 ./strace-static-x86_64: Process 5133 attached [pid 5132] <... futex resumed>) = 0 [pid 4995] unlink("./6/binderfs" [pid 5133] set_robust_list(0x7ff6876bd9e0, 24 [pid 5132] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5133] <... set_robust_list resumed>) = 0 [pid 4995] <... unlink resumed>) = 0 [pid 5133] memfd_create("syzkaller", 0 [pid 5132] <... mmap resumed>) = 0x7ff68769d000 [pid 4995] getdents64(3, [pid 5133] <... memfd_create resumed>) = 3 [pid 5132] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE [pid 4995] <... getdents64 resumed>0x555556742620 /* 0 entries */, 32768) = 0 [pid 5133] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5132] <... mprotect resumed>) = 0 [pid 4995] close(3 [pid 4994] umount2("./6/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5133] <... mmap resumed>) = 0x7ff67f29d000 [pid 5132] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4995] <... close resumed>) = 0 [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5134 attached [pid 4996] <... umount2 resumed>) = 0 [pid 4995] rmdir("./6" [pid 5134] set_robust_list(0x7ff6876bd9e0, 24 [pid 5132] <... clone resumed>, parent_tid=[5134], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5134 [pid 4996] umount2("./6/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] lstat("./6/bus", [pid 5132] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5134] <... set_robust_list resumed>) = 0 [pid 4995] <... rmdir resumed>) = 0 [pid 4994] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5134] memfd_create("syzkaller", 0 [pid 5132] <... futex resumed>) = 0 [pid 4996] lstat("./6/bus", [pid 4995] mkdir("./7", 0777 [pid 5134] <... memfd_create resumed>) = 3 [pid 5132] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4994] umount2("./6/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5134] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4996] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] <... mkdir resumed>) = 0 [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5134] <... mmap resumed>) = 0x7ff67f29d000 [pid 4996] umount2("./6/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4994] openat(AT_FDCWD, "./6/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] <... openat resumed>) = 3 [pid 4994] <... openat resumed>) = 4 [pid 4996] openat(AT_FDCWD, "./6/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4995] ioctl(3, LOOP_CLR_FD [pid 4994] fstat(4, [pid 4996] <... openat resumed>) = 4 [pid 4995] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] fstat(4, [pid 4995] close(3 [pid 4994] getdents64(4, [pid 4996] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] <... close resumed>) = 0 [pid 4994] <... getdents64 resumed>0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4994] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4994] close(4) = 0 [pid 4994] rmdir("./6/bus") = 0 [pid 4994] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] lstat("./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4994] unlink("./6/binderfs" [pid 4996] getdents64(4, [pid 4995] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4994] <... unlink resumed>) = 0 [pid 4996] <... getdents64 resumed>0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4994] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4996] getdents64(4, [pid 4994] close(3 [pid 4996] <... getdents64 resumed>0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4995] <... clone resumed>, child_tidptr=0x5555567415d0) = 5135 [pid 4994] <... close resumed>) = 0 [pid 4996] close(4 [pid 4994] rmdir("./6" [pid 4996] <... close resumed>) = 0 [pid 4994] <... rmdir resumed>) = 0 [pid 4996] rmdir("./6/bus" [pid 4994] mkdir("./7", 0777 [pid 4996] <... rmdir resumed>) = 0 [pid 4994] <... mkdir resumed>) = 0 [pid 4994] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4994] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4996] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] close(3 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] <... close resumed>) = 0 [pid 4996] lstat("./6/binderfs", [pid 4994] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4996] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 ./strace-static-x86_64: Process 5135 attached [pid 4996] unlink("./6/binderfs" [pid 4994] <... clone resumed>, child_tidptr=0x5555567415d0) = 5136 [pid 4996] <... unlink resumed>) = 0 [pid 5135] set_robust_list(0x5555567415e0, 24 [pid 4996] getdents64(3, [pid 5135] <... set_robust_list resumed>) = 0 [pid 4996] <... getdents64 resumed>0x555556742620 /* 0 entries */, 32768) = 0 [pid 5135] chdir("./7" [pid 4996] close(3 [pid 5135] <... chdir resumed>) = 0 [pid 5135] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4996] <... close resumed>) = 0 ./strace-static-x86_64: Process 5136 attached [pid 5135] <... prctl resumed>) = 0 [pid 4996] rmdir("./6" [pid 5136] set_robust_list(0x5555567415e0, 24) = 0 [pid 5135] setpgid(0, 0 [pid 4996] <... rmdir resumed>) = 0 [pid 5136] chdir("./7" [pid 5135] <... setpgid resumed>) = 0 [pid 4996] mkdir("./7", 0777 [pid 5136] <... chdir resumed>) = 0 [pid 5136] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5135] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4996] <... mkdir resumed>) = 0 [pid 5136] setpgid(0, 0 [pid 5135] <... openat resumed>) = 3 [pid 4996] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5136] <... setpgid resumed>) = 0 [pid 5135] write(3, "1000", 4 [pid 4996] <... openat resumed>) = 3 [pid 5136] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5135] <... write resumed>) = 4 [pid 4996] ioctl(3, LOOP_CLR_FD [pid 5136] <... openat resumed>) = 3 [pid 5135] close(3 [pid 4996] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5136] write(3, "1000", 4 [pid 5135] <... close resumed>) = 0 [pid 4996] close(3 [pid 5136] <... write resumed>) = 4 [pid 5135] symlink("/dev/binderfs", "./binderfs" [pid 4996] <... close resumed>) = 0 [pid 5136] close(3 [pid 5135] <... symlink resumed>) = 0 [pid 4996] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5136] <... close resumed>) = 0 [pid 5135] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5136] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5135] <... futex resumed>) = 0 [pid 5136] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5135] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4996] <... clone resumed>, child_tidptr=0x5555567415d0) = 5137 [pid 5136] <... futex resumed>) = 0 [pid 5136] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5135] <... mmap resumed>) = 0x7ff68769d000 ./strace-static-x86_64: Process 5137 attached [pid 5136] <... mmap resumed>) = 0x7ff68769d000 [pid 5135] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE [pid 5137] set_robust_list(0x5555567415e0, 24 [pid 5136] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE [pid 5135] <... mprotect resumed>) = 0 [pid 5137] <... set_robust_list resumed>) = 0 [pid 5136] <... mprotect resumed>) = 0 [pid 5135] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5137] chdir("./7" [pid 5136] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5137] <... chdir resumed>) = 0 [pid 5135] <... clone resumed>, parent_tid=[5138], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5138 [pid 5137] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5136] <... clone resumed>, parent_tid=[5139], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5139 [pid 5135] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5136] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5136] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5139 attached [pid 5139] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5137] <... prctl resumed>) = 0 [pid 5135] <... futex resumed>) = 0 [pid 5139] memfd_create("syzkaller", 0 [pid 5137] setpgid(0, 0 [pid 5135] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5139] <... memfd_create resumed>) = 3 [pid 5137] <... setpgid resumed>) = 0 ./strace-static-x86_64: Process 5138 attached [pid 5139] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5137] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5139] <... mmap resumed>) = 0x7ff67f29d000 [pid 5138] set_robust_list(0x7ff6876bd9e0, 24 [pid 5137] <... openat resumed>) = 3 [pid 5138] <... set_robust_list resumed>) = 0 [pid 5137] write(3, "1000", 4 [pid 5138] memfd_create("syzkaller", 0 [pid 5137] <... write resumed>) = 4 [pid 5138] <... memfd_create resumed>) = 3 [pid 5137] close(3 [pid 5138] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5137] <... close resumed>) = 0 [pid 5138] <... mmap resumed>) = 0x7ff67f29d000 [pid 5137] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5137] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5137] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5137] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5137] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5140], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5140 [pid 5137] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5137] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5140 attached [pid 5140] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5140] memfd_create("syzkaller", 0) = 3 [pid 5140] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 4998] <... umount2 resumed>) = 0 [pid 4998] umount2("./6/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./6/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./6/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./6/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./6/bus") = 0 [pid 4998] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./6/binderfs") = 0 [pid 4998] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./6") = 0 [pid 4998] mkdir("./7", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5134] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567415d0) = 5141 ./strace-static-x86_64: Process 5141 attached [pid 5141] set_robust_list(0x5555567415e0, 24) = 0 [pid 5141] chdir("./7") = 0 [pid 5141] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5141] setpgid(0, 0) = 0 [pid 5141] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5141] write(3, "1000", 4) = 4 [pid 5141] close(3) = 0 [pid 5141] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5141] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5141] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5141] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5141] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5142], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5142 [pid 5141] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5141] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5142 attached [pid 5142] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5142] memfd_create("syzkaller", 0) = 3 [pid 5142] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 5133] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5139] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5138] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5140] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [ 76.514597][ T2550] cfg80211: failed to load regulatory.db [pid 5142] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5134] <... write resumed>) = 16777216 [pid 5134] munmap(0x7ff67f29d000, 16777216) = 0 [pid 5134] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5134] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5134] close(3) = 0 [pid 5134] mkdir("./bus", 0777) = 0 [pid 5134] mount("/dev/loop4", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "") = 0 [pid 5134] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5134] chdir("./bus") = 0 [pid 5134] ioctl(4, LOOP_CLR_FD) = 0 [pid 5134] close(4) = 0 [pid 5134] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5132] <... futex resumed>) = 0 [pid 5134] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5132] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5134] <... open resumed>) = 4 [pid 5132] <... futex resumed>) = 0 [pid 5134] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5132] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5134] <... futex resumed>) = 0 [pid 5132] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5134] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5132] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5134] <... open resumed>) = 5 [pid 5132] <... futex resumed>) = 0 [pid 5134] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5132] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5134] <... futex resumed>) = 0 [pid 5132] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5134] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [ 76.636155][ T5134] loop4: detected capacity change from 0 to 32768 [pid 5132] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5134] <... mmap resumed>) = 0x20000000 [pid 5132] <... futex resumed>) = 0 [pid 5134] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5132] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5134] <... futex resumed>) = 0 [pid 5132] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5134] ftruncate(4, 33587199 [pid 5132] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5134] <... ftruncate resumed>) = 0 [pid 5132] <... futex resumed>) = 0 [pid 5134] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5132] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5134] <... futex resumed>) = 0 [pid 5132] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5134] open("./bus", O_RDONLY [pid 5132] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5134] <... open resumed>) = 6 [pid 5132] <... futex resumed>) = 0 [pid 5134] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5132] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5134] <... futex resumed>) = 0 [pid 5132] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5134] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5132] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5134] <... open resumed>) = 7 [pid 5132] <... futex resumed>) = 0 [pid 5134] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5132] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5134] <... futex resumed>) = 0 [pid 5132] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5134] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5133] <... write resumed>) = 16777216 [pid 5132] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5134] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5132] <... futex resumed>) = 0 [pid 5134] dup(7 [pid 5132] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5134] <... dup resumed>) = 8 [pid 5134] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5132] <... futex resumed>) = 0 [pid 5134] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5132] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5134] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5132] <... futex resumed>) = 0 [pid 5134] memfd_create("syzkaller", 0 [pid 5132] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5134] <... memfd_create resumed>) = 9 [pid 5134] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff677e9d000 [pid 5133] munmap(0x7ff67f29d000, 16777216) = 0 [pid 5133] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5134] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5133] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5133] close(3) = 0 [pid 5133] mkdir("./bus", 0777) = 0 [pid 5133] mount("/dev/loop0", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "") = 0 [pid 5133] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5133] chdir("./bus") = 0 [pid 5133] ioctl(4, LOOP_CLR_FD) = 0 [ 76.788861][ T5133] loop0: detected capacity change from 0 to 32768 [pid 5133] close(4) = 0 [pid 5133] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5138] <... write resumed>) = 16777216 [pid 5134] <... write resumed>) = 2097152 [pid 5133] <... futex resumed>) = 1 [pid 5131] <... futex resumed>) = 0 [pid 5133] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5131] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5133] <... futex resumed>) = 0 [pid 5133] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5131] <... futex resumed>) = 1 [pid 5133] <... open resumed>) = 4 [pid 5133] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5133] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5131] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5138] munmap(0x7ff67f29d000, 16777216 [pid 5131] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5131] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5133] <... futex resumed>) = 0 [pid 5131] <... futex resumed>) = 1 [pid 5133] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 5131] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5133] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5133] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5131] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5131] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5133] <... futex resumed>) = 0 [pid 5131] <... futex resumed>) = 1 [pid 5133] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5131] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5133] <... mmap resumed>) = 0x20000000 [pid 5133] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5131] <... futex resumed>) = 0 [pid 5133] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5131] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5133] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5131] <... futex resumed>) = 0 [pid 5133] ftruncate(4, 33587199) = 0 [pid 5131] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5133] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5131] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5133] <... futex resumed>) = 0 [pid 5131] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5133] open("./bus", O_RDONLY [pid 5131] <... futex resumed>) = 0 [pid 5133] <... open resumed>) = 6 [pid 5131] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5133] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5131] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5133] <... futex resumed>) = 0 [pid 5131] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5133] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5131] <... futex resumed>) = 0 [pid 5133] <... open resumed>) = 7 [pid 5131] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5133] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5131] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5133] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5131] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5133] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5131] <... futex resumed>) = 0 [pid 5133] dup(7 [pid 5131] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5133] <... dup resumed>) = 8 [pid 5133] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5131] <... futex resumed>) = 0 [pid 5133] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5131] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5133] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5133] memfd_create("syzkaller", 0 [pid 5131] <... futex resumed>) = 0 [pid 5133] <... memfd_create resumed>) = 9 [pid 5131] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5133] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5134] munmap(0x7ff677e9d000, 2097152 [pid 5133] <... mmap resumed>) = 0x7ff677e9d000 [pid 5134] <... munmap resumed>) = 0 [pid 5134] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 10 [pid 5134] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5134] ioctl(10, LOOP_CLR_FD) = 0 [pid 5134] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5134] close(10 [pid 5140] <... write resumed>) = 16777216 [pid 5139] <... write resumed>) = 16777216 [pid 5138] <... munmap resumed>) = 0 [pid 5134] <... close resumed>) = 0 [pid 5134] close(9 [pid 5140] munmap(0x7ff67f29d000, 16777216 [pid 5139] munmap(0x7ff67f29d000, 16777216 [pid 5138] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5134] <... close resumed>) = 0 [pid 5140] <... munmap resumed>) = 0 [pid 5138] <... openat resumed>) = 4 [pid 5134] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5138] ioctl(4, LOOP_SET_FD, 3 [pid 5132] <... futex resumed>) = 0 [pid 5132] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5132] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5134] <... futex resumed>) = 1 [pid 5134] sendfile(8, 6, NULL, 281474978811908 [pid 5138] <... ioctl resumed>) = 0 [pid 5139] <... munmap resumed>) = 0 [pid 5138] close(3 [pid 5140] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5138] <... close resumed>) = 0 [pid 5138] mkdir("./bus", 0777 [pid 5140] <... openat resumed>) = 4 [pid 5140] ioctl(4, LOOP_SET_FD, 3 [pid 5138] <... mkdir resumed>) = 0 [pid 5138] mount("/dev/loop2", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5139] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5140] <... ioctl resumed>) = 0 [pid 5139] <... openat resumed>) = 4 [pid 5139] ioctl(4, LOOP_SET_FD, 3 [pid 5140] close(3 [pid 5133] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5140] <... close resumed>) = 0 [pid 5140] mkdir("./bus", 0777 [pid 5138] <... mount resumed>) = 0 [pid 5138] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5140] <... mkdir resumed>) = 0 [pid 5138] <... openat resumed>) = 3 [pid 5132] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5132] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5142] <... write resumed>) = 16777216 [pid 5140] mount("/dev/loop3", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5139] <... ioctl resumed>) = 0 [pid 5138] chdir("./bus" [pid 5132] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5132] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5142] munmap(0x7ff67f29d000, 16777216 [pid 5140] <... mount resumed>) = 0 [pid 5139] close(3 [pid 5138] <... chdir resumed>) = 0 [pid 5133] <... write resumed>) = 2097152 [pid 5132] <... mmap resumed>) = 0x7ff67807c000 [pid 5142] <... munmap resumed>) = 0 [pid 5140] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5139] <... close resumed>) = 0 [pid 5138] ioctl(4, LOOP_CLR_FD [pid 5133] munmap(0x7ff677e9d000, 2097152 [ 76.964970][ T5138] loop2: detected capacity change from 0 to 32768 [ 76.984329][ T5140] loop3: detected capacity change from 0 to 32768 [ 76.997009][ T5139] loop1: detected capacity change from 0 to 32768 [pid 5132] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5140] <... openat resumed>) = 3 [pid 5139] mkdir("./bus", 0777 [pid 5138] <... ioctl resumed>) = 0 [pid 5133] <... munmap resumed>) = 0 [pid 5132] <... mprotect resumed>) = 0 [pid 5142] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5140] chdir("./bus" [pid 5139] <... mkdir resumed>) = 0 [pid 5138] close(4 [pid 5132] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5142] <... openat resumed>) = 4 [pid 5140] <... chdir resumed>) = 0 [pid 5139] mount("/dev/loop1", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5138] <... close resumed>) = 0 [pid 5133] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5142] ioctl(4, LOOP_SET_FD, 3 [pid 5138] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5133] <... openat resumed>) = 10 [pid 5140] ioctl(4, LOOP_CLR_FD [pid 5139] <... mount resumed>) = 0 [pid 5138] <... futex resumed>) = 1 [pid 5135] <... futex resumed>) = 0 [pid 5133] ioctl(10, LOOP_SET_FD, 9 [pid 5140] <... ioctl resumed>) = 0 [pid 5139] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5138] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5135] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5133] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5132] <... clone resumed>, parent_tid=[5143], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5143 [pid 5140] close(4 [pid 5139] <... openat resumed>) = 3 [pid 5138] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5135] <... futex resumed>) = 0 [pid 5133] ioctl(10, LOOP_CLR_FD [pid 5132] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5140] <... close resumed>) = 0 [pid 5139] chdir("./bus" [pid 5138] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5135] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5133] <... ioctl resumed>) = 0 [pid 5140] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5139] <... chdir resumed>) = 0 [pid 5138] <... open resumed>) = 4 [pid 5132] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5143 attached [pid 5140] <... futex resumed>) = 1 [pid 5139] ioctl(4, LOOP_CLR_FD [pid 5138] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5137] <... futex resumed>) = 0 [pid 5132] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5143] set_robust_list(0x7ff67809c9e0, 24 [pid 5140] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5139] <... ioctl resumed>) = 0 [pid 5138] <... futex resumed>) = 1 [pid 5137] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5135] <... futex resumed>) = 0 [pid 5133] ioctl(10, LOOP_SET_FD, 9 [pid 5143] <... set_robust_list resumed>) = 0 [pid 5140] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5139] close(4 [pid 5138] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5137] <... futex resumed>) = 0 [pid 5135] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5133] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5143] sync( [pid 5142] <... ioctl resumed>) = 0 [pid 5140] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5139] <... close resumed>) = 0 [pid 5138] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5137] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5135] <... futex resumed>) = 0 [pid 5133] close(10 [pid 5142] close(3 [pid 5140] <... open resumed>) = 4 [pid 5139] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5138] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5135] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5133] <... close resumed>) = 0 [pid 5142] <... close resumed>) = 0 [pid 5140] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5139] <... futex resumed>) = 1 [pid 5138] <... open resumed>) = 5 [pid 5136] <... futex resumed>) = 0 [pid 5133] close(9 [pid 5143] <... sync resumed>) = 0 [pid 5142] mkdir("./bus", 0777 [pid 5140] <... futex resumed>) = 1 [pid 5139] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5138] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5137] <... futex resumed>) = 0 [pid 5136] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5143] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5142] <... mkdir resumed>) = 0 [pid 5140] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5139] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5138] <... futex resumed>) = 1 [pid 5137] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5136] <... futex resumed>) = 0 [pid 5135] <... futex resumed>) = 0 [pid 5143] <... futex resumed>) = 1 [pid 5142] mount("/dev/loop5", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5140] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5139] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5138] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5137] <... futex resumed>) = 0 [pid 5136] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5135] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5133] <... close resumed>) = 0 [pid 5132] <... futex resumed>) = 0 [pid 5143] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5140] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5139] <... open resumed>) = 4 [pid 5138] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5137] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5135] <... futex resumed>) = 0 [pid 5133] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5140] <... open resumed>) = 5 [pid 5139] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5138] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5135] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5133] <... futex resumed>) = 1 [pid 5131] <... futex resumed>) = 0 [ 77.060912][ T5142] loop5: detected capacity change from 0 to 32768 [pid 5142] <... mount resumed>) = 0 [pid 5140] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5139] <... futex resumed>) = 1 [pid 5138] <... mmap resumed>) = 0x20000000 [pid 5136] <... futex resumed>) = 0 [pid 5133] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5131] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5142] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5140] <... futex resumed>) = 1 [pid 5139] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5138] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5137] <... futex resumed>) = 0 [pid 5136] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5133] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5131] <... futex resumed>) = 0 [pid 5142] <... openat resumed>) = 3 [pid 5140] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5139] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5138] <... futex resumed>) = 1 [pid 5137] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5136] <... futex resumed>) = 0 [pid 5135] <... futex resumed>) = 0 [pid 5133] sendfile(8, 6, NULL, 281474978811908 [pid 5131] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5142] chdir("./bus" [pid 5140] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5139] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5138] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5137] <... futex resumed>) = 0 [pid 5136] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5135] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5142] <... chdir resumed>) = 0 [pid 5140] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5139] <... open resumed>) = 5 [pid 5138] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5137] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5135] <... futex resumed>) = 0 [pid 5142] ioctl(4, LOOP_CLR_FD [pid 5140] <... mmap resumed>) = 0x20000000 [pid 5139] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5138] ftruncate(4, 33587199 [pid 5135] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5142] <... ioctl resumed>) = 0 [pid 5140] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5139] <... futex resumed>) = 1 [pid 5138] <... ftruncate resumed>) = 0 [pid 5136] <... futex resumed>) = 0 [pid 5142] close(4 [pid 5140] <... futex resumed>) = 1 [pid 5139] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5138] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5137] <... futex resumed>) = 0 [pid 5136] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5142] <... close resumed>) = 0 [pid 5140] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5139] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5138] <... futex resumed>) = 1 [pid 5137] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5136] <... futex resumed>) = 0 [pid 5135] <... futex resumed>) = 0 [pid 5142] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5140] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5139] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5138] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5137] <... futex resumed>) = 0 [pid 5136] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5135] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5142] <... futex resumed>) = 1 [pid 5141] <... futex resumed>) = 0 [pid 5140] ftruncate(4, 33587199 [pid 5139] <... mmap resumed>) = 0x20000000 [pid 5138] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5137] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5135] <... futex resumed>) = 0 [pid 5142] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5141] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5140] <... ftruncate resumed>) = 0 [pid 5139] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5138] open("./bus", O_RDONLY [pid 5135] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5142] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5141] <... futex resumed>) = 0 [pid 5140] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5139] <... futex resumed>) = 1 [pid 5138] <... open resumed>) = 6 [pid 5136] <... futex resumed>) = 0 [pid 5142] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5141] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5140] <... futex resumed>) = 1 [pid 5139] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5138] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5137] <... futex resumed>) = 0 [pid 5136] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5142] <... open resumed>) = 4 [pid 5140] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5139] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5138] <... futex resumed>) = 1 [pid 5137] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5136] <... futex resumed>) = 0 [pid 5135] <... futex resumed>) = 0 [pid 5142] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5140] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5139] ftruncate(4, 33587199 [pid 5138] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5137] <... futex resumed>) = 0 [pid 5136] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5135] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5142] <... futex resumed>) = 1 [pid 5141] <... futex resumed>) = 0 [pid 5140] open("./bus", O_RDONLY [pid 5139] <... ftruncate resumed>) = 0 [pid 5138] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5137] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5135] <... futex resumed>) = 0 [pid 5131] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5142] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5141] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5140] <... open resumed>) = 6 [pid 5139] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5138] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5135] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5131] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5142] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5141] <... futex resumed>) = 0 [pid 5140] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5139] <... futex resumed>) = 1 [pid 5138] <... open resumed>) = 7 [pid 5136] <... futex resumed>) = 0 [pid 5131] <... futex resumed>) = 0 [pid 5142] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5141] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5140] <... futex resumed>) = 1 [pid 5139] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5138] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5137] <... futex resumed>) = 0 [pid 5136] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5131] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5142] <... open resumed>) = 5 [pid 5140] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5139] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5138] <... futex resumed>) = 1 [pid 5137] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5136] <... futex resumed>) = 0 [pid 5135] <... futex resumed>) = 0 [pid 5131] <... mmap resumed>) = 0x7ff67807c000 [pid 5142] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5140] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5139] open("./bus", O_RDONLY [pid 5138] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5137] <... futex resumed>) = 0 [pid 5136] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5135] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5131] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5142] <... futex resumed>) = 1 [pid 5141] <... futex resumed>) = 0 [pid 5140] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5139] <... open resumed>) = 6 [pid 5138] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5137] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5135] <... futex resumed>) = 0 [pid 5131] <... mprotect resumed>) = 0 [pid 5142] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5141] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5140] <... open resumed>) = 7 [pid 5139] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5138] dup(7 [pid 5135] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5131] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5142] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5141] <... futex resumed>) = 0 [pid 5140] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5139] <... futex resumed>) = 1 [pid 5138] <... dup resumed>) = 8 [pid 5136] <... futex resumed>) = 0 [pid 5142] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5141] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5140] <... futex resumed>) = 1 [pid 5139] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5138] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5137] <... futex resumed>) = 0 [pid 5136] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5131] <... clone resumed>, parent_tid=[5144], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5144 [pid 5142] <... mmap resumed>) = 0x20000000 [pid 5140] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5139] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5138] <... futex resumed>) = 1 [pid 5137] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5136] <... futex resumed>) = 0 [pid 5135] <... futex resumed>) = 0 [pid 5131] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5142] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5140] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5139] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5138] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5137] <... futex resumed>) = 0 [pid 5136] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5135] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5131] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5144 attached [pid 5142] <... futex resumed>) = 1 [pid 5141] <... futex resumed>) = 0 [pid 5140] dup(7 [pid 5139] <... open resumed>) = 7 [pid 5138] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5137] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5135] <... futex resumed>) = 0 [pid 5131] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5144] set_robust_list(0x7ff67809c9e0, 24 [pid 5142] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5141] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5140] <... dup resumed>) = 8 [pid 5139] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5138] memfd_create("syzkaller", 0 [pid 5135] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5144] <... set_robust_list resumed>) = 0 [pid 5142] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5141] <... futex resumed>) = 0 [pid 5140] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5139] <... futex resumed>) = 1 [pid 5138] <... memfd_create resumed>) = 9 [pid 5136] <... futex resumed>) = 0 [pid 5144] sync( [pid 5142] ftruncate(4, 33587199 [pid 5141] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5140] <... futex resumed>) = 1 [pid 5139] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5138] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5137] <... futex resumed>) = 0 [pid 5136] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5142] <... ftruncate resumed>) = 0 [pid 5140] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5139] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5138] <... mmap resumed>) = 0x7ff677e9d000 [pid 5137] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5136] <... futex resumed>) = 0 [pid 5144] <... sync resumed>) = 0 [pid 5142] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5140] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5139] dup(7 [pid 5137] <... futex resumed>) = 0 [pid 5136] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5144] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5142] <... futex resumed>) = 1 [pid 5141] <... futex resumed>) = 0 [pid 5144] <... futex resumed>) = 1 [pid 5142] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5141] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5131] <... futex resumed>) = 0 [pid 5144] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5142] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5141] <... futex resumed>) = 0 [pid 5140] memfd_create("syzkaller", 0 [pid 5139] <... dup resumed>) = 8 [pid 5137] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5142] open("./bus", O_RDONLY [pid 5141] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5140] <... memfd_create resumed>) = 9 [pid 5139] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5142] <... open resumed>) = 6 [pid 5140] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5139] <... futex resumed>) = 1 [pid 5138] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5136] <... futex resumed>) = 0 [pid 5142] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5140] <... mmap resumed>) = 0x7ff677e9d000 [pid 5136] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5142] <... futex resumed>) = 1 [pid 5141] <... futex resumed>) = 0 [pid 5136] <... futex resumed>) = 0 [pid 5142] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5141] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5136] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5142] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5141] <... futex resumed>) = 0 [pid 5142] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5141] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5142] <... open resumed>) = 7 [pid 5142] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5141] <... futex resumed>) = 0 [pid 5139] memfd_create("syzkaller", 0 [pid 5142] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5141] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5139] <... memfd_create resumed>) = 9 [pid 5142] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5141] <... futex resumed>) = 0 [pid 5139] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5142] dup(7 [pid 5141] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5139] <... mmap resumed>) = 0x7ff677e9d000 [pid 5142] <... dup resumed>) = 8 [pid 5142] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5141] <... futex resumed>) = 0 [pid 5142] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5141] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5142] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5141] <... futex resumed>) = 0 [pid 5142] memfd_create("syzkaller", 0 [pid 5141] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5142] <... memfd_create resumed>) = 9 [pid 5142] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff677e9d000 [pid 5139] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5142] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5140] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5138] <... write resumed>) = 2097152 [pid 5138] munmap(0x7ff677e9d000, 2097152) = 0 [pid 5138] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 10 [pid 5138] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5138] ioctl(10, LOOP_CLR_FD) = 0 [pid 5138] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5138] close(10) = 0 [pid 5138] close(9 [pid 5140] <... write resumed>) = 2097152 [pid 5138] <... close resumed>) = 0 [pid 5138] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5139] <... write resumed>) = 2097152 [pid 5138] <... futex resumed>) = 1 [pid 5135] <... futex resumed>) = 0 [pid 5139] munmap(0x7ff677e9d000, 2097152 [pid 5138] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5135] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5138] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5135] <... futex resumed>) = 0 [pid 5138] sendfile(8, 6, NULL, 281474978811908 [pid 5135] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5142] <... write resumed>) = 2097152 [pid 5140] munmap(0x7ff677e9d000, 2097152 [pid 5142] munmap(0x7ff677e9d000, 2097152 [pid 5139] <... munmap resumed>) = 0 [pid 5140] <... munmap resumed>) = 0 [pid 5139] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5142] <... munmap resumed>) = 0 [pid 5139] <... openat resumed>) = 10 [pid 5140] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5142] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5140] <... openat resumed>) = 10 [pid 5139] ioctl(10, LOOP_SET_FD, 9 [pid 5142] <... openat resumed>) = 10 [pid 5140] ioctl(10, LOOP_SET_FD, 9 [pid 5139] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5142] ioctl(10, LOOP_SET_FD, 9 [pid 5140] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5139] ioctl(10, LOOP_CLR_FD [pid 5142] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5140] ioctl(10, LOOP_CLR_FD [pid 5139] <... ioctl resumed>) = 0 [pid 5142] ioctl(10, LOOP_CLR_FD [pid 5140] <... ioctl resumed>) = 0 [pid 5142] <... ioctl resumed>) = 0 [pid 5139] ioctl(10, LOOP_SET_FD, 9 [pid 5142] ioctl(10, LOOP_SET_FD, 9 [pid 5140] ioctl(10, LOOP_SET_FD, 9 [pid 5139] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5142] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5140] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5139] close(10 [pid 5142] close(10 [pid 5140] close(10 [pid 5139] <... close resumed>) = 0 [pid 5135] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5142] <... close resumed>) = 0 [pid 5142] close(9 [pid 5140] <... close resumed>) = 0 [pid 5139] close(9 [pid 5135] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5140] close(9 [pid 5135] <... futex resumed>) = 0 [pid 5135] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff67807c000 [pid 5135] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5135] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5142] <... close resumed>) = 0 [pid 5135] <... clone resumed>, parent_tid=[5145], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5145 [pid 5135] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5135] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5145 attached [pid 5142] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5140] <... close resumed>) = 0 [pid 5139] <... close resumed>) = 0 [pid 5145] set_robust_list(0x7ff67809c9e0, 24 [pid 5142] <... futex resumed>) = 1 [pid 5141] <... futex resumed>) = 0 [pid 5140] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5139] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5145] <... set_robust_list resumed>) = 0 [pid 5142] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5141] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5140] <... futex resumed>) = 1 [pid 5139] <... futex resumed>) = 1 [pid 5137] <... futex resumed>) = 0 [pid 5136] <... futex resumed>) = 0 [pid 5145] sync( [pid 5142] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5141] <... futex resumed>) = 0 [pid 5140] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5139] sendfile(8, 6, NULL, 281474978811908 [pid 5137] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5136] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5141] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5136] <... futex resumed>) = 0 [pid 5142] sendfile(8, 6, NULL, 281474978811908 [pid 5140] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5137] <... futex resumed>) = 0 [pid 5136] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5140] sendfile(8, 6, NULL, 281474978811908 [pid 5137] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5135] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5145] <... sync resumed>) = 0 [pid 5145] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5145] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5141] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5141] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5141] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff67807c000 [pid 5136] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5141] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5136] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5141] <... mprotect resumed>) = 0 [pid 5137] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5136] <... futex resumed>) = 0 [pid 5141] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5137] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5136] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5137] <... futex resumed>) = 0 [pid 5136] <... mmap resumed>) = 0x7ff67807c000 [pid 5141] <... clone resumed>, parent_tid=[5146], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5146 [pid 5137] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5136] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5141] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5137] <... mmap resumed>) = 0x7ff67807c000 [pid 5136] <... mprotect resumed>) = 0 ./strace-static-x86_64: Process 5146 attached [pid 5141] <... futex resumed>) = 0 [pid 5137] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5136] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5146] set_robust_list(0x7ff67809c9e0, 24 [pid 5141] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5137] <... mprotect resumed>) = 0 [pid 5146] <... set_robust_list resumed>) = 0 [pid 5137] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5136] <... clone resumed>, parent_tid=[5147], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5147 [pid 5146] sync( [pid 5136] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5147 attached [pid 5137] <... clone resumed>, parent_tid=[5148], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5148 [pid 5136] <... futex resumed>) = 0 [pid 5147] set_robust_list(0x7ff67809c9e0, 24 [pid 5137] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5136] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5147] <... set_robust_list resumed>) = 0 [pid 5146] <... sync resumed>) = 0 [pid 5137] <... futex resumed>) = 0 [pid 5147] sync( [pid 5146] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5137] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5148 attached [pid 5147] <... sync resumed>) = 0 [pid 5146] <... futex resumed>) = 1 [pid 5141] <... futex resumed>) = 0 [pid 5148] set_robust_list(0x7ff67809c9e0, 24 [pid 5147] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5146] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5148] <... set_robust_list resumed>) = 0 [pid 5147] <... futex resumed>) = 1 [pid 5136] <... futex resumed>) = 0 [pid 5148] sync( [pid 5147] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5148] <... sync resumed>) = 0 [pid 5148] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5137] <... futex resumed>) = 0 [pid 5148] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5132] exit_group(0 [pid 5143] <... futex resumed>) = ? [pid 5132] <... exit_group resumed>) = ? [pid 5143] +++ exited with 0 +++ [pid 5134] <... sendfile resumed>) = ? [pid 5134] +++ exited with 0 +++ [pid 5132] +++ exited with 0 +++ [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5132, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=38 /* 0.38 s */} --- [pid 4997] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4997] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(3, 0x555556742620 /* 4 entries */, 32768) = 104 [pid 4997] umount2("./7/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5131] exit_group(0 [pid 5144] <... futex resumed>) = ? [pid 5131] <... exit_group resumed>) = ? [pid 5144] +++ exited with 0 +++ [pid 5133] <... sendfile resumed>) = ? [pid 5133] +++ exited with 0 +++ [pid 5131] +++ exited with 0 +++ [pid 4993] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5131, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=31 /* 0.31 s */} --- [pid 4993] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4993] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4993] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4993] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4993] getdents64(3, 0x555556742620 /* 4 entries */, 32768) = 104 [pid 4993] umount2("./7/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5136] exit_group(0 [pid 5147] <... futex resumed>) = ? [pid 5136] <... exit_group resumed>) = ? [pid 5147] +++ exited with 0 +++ [pid 5141] exit_group(0 [pid 5139] <... sendfile resumed>) = ? [pid 5141] <... exit_group resumed>) = ? [pid 5146] <... futex resumed>) = ? [pid 5146] +++ exited with 0 +++ [pid 5135] exit_group(0 [pid 5145] <... futex resumed>) = ? [pid 5142] <... sendfile resumed>) = ? [pid 5139] +++ exited with 0 +++ [pid 5138] <... sendfile resumed>) = ? [pid 5136] +++ exited with 0 +++ [pid 5135] <... exit_group resumed>) = ? [pid 5145] +++ exited with 0 +++ [pid 5138] +++ exited with 0 +++ [pid 4994] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5136, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=47 /* 0.47 s */} --- [pid 4994] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4994] fstat(3, [pid 5135] +++ exited with 0 +++ [pid 4995] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5135, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=48 /* 0.48 s */} --- [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] restart_syscall(<... resuming interrupted clone ...> [pid 4994] getdents64(3, [pid 4995] <... restart_syscall resumed>) = 0 [pid 4994] <... getdents64 resumed>0x555556742620 /* 4 entries */, 32768) = 104 [pid 4994] umount2("./7/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4995] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5142] +++ exited with 0 +++ [pid 5141] +++ exited with 0 +++ [pid 4995] <... openat resumed>) = 3 [pid 4995] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5137] exit_group(0 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5141, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=35 /* 0.35 s */} --- [pid 5148] <... futex resumed>) = ? [pid 5137] <... exit_group resumed>) = ? [pid 4995] getdents64(3, [pid 5148] +++ exited with 0 +++ [pid 4998] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] <... getdents64 resumed>0x555556742620 /* 4 entries */, 32768) = 104 [pid 5140] <... sendfile resumed>) = ? [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4995] umount2("./7/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5140] +++ exited with 0 +++ [pid 5137] +++ exited with 0 +++ [pid 4998] <... openat resumed>) = 3 [pid 4998] fstat(3, [pid 4996] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5137, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=33 /* 0.33 s */} --- [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x555556742620 /* 4 entries */, 32768) = 104 [pid 4998] umount2("./7/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4996] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] getdents64(3, 0x555556742620 /* 4 entries */, 32768) = 104 [pid 4996] umount2("./7/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... umount2 resumed>) = 0 [pid 4998] umount2("./7/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./7/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./7/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./7/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./7/bus") = 0 [pid 4998] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./7/binderfs") = 0 [pid 4998] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./7") = 0 [pid 4998] mkdir("./8", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567415d0) = 5149 ./strace-static-x86_64: Process 5149 attached [pid 5149] set_robust_list(0x5555567415e0, 24) = 0 [pid 5149] chdir("./8") = 0 [pid 5149] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5149] setpgid(0, 0) = 0 [pid 5149] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5149] write(3, "1000", 4) = 4 [pid 5149] close(3) = 0 [pid 5149] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5149] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5149] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5149] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5149] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5150], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5150 [pid 5149] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] <... umount2 resumed>) = 0 [pid 5149] <... futex resumed>) = 0 [pid 5149] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5150 attached [pid 5150] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5150] memfd_create("syzkaller", 0) = 3 [pid 5150] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 4996] <... umount2 resumed>) = 0 [pid 4996] umount2("./7/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] lstat("./7/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] umount2("./7/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] openat(AT_FDCWD, "./7/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4996] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4996] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4996] close(4) = 0 [pid 4996] rmdir("./7/bus") = 0 [pid 4996] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] lstat("./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4996] unlink("./7/binderfs") = 0 [pid 4996] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4996] close(3) = 0 [pid 4996] rmdir("./7") = 0 [pid 4996] mkdir("./8", 0777) = 0 [pid 4996] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 4996] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4996] close(3) = 0 [pid 4996] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567415d0) = 5151 [pid 4994] umount2("./7/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] lstat("./7/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] umount2("./7/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] openat(AT_FDCWD, "./7/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4994] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] <... umount2 resumed>) = 0 [pid 4994] getdents64(4, [pid 4995] umount2("./7/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] <... getdents64 resumed>0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] getdents64(4, [pid 4995] lstat("./7/bus", [pid 4994] <... getdents64 resumed>0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4994] close(4 [pid 4995] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] <... close resumed>) = 0 [pid 4994] rmdir("./7/bus" [pid 4995] umount2("./7/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] <... rmdir resumed>) = 0 [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] openat(AT_FDCWD, "./7/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4994] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4995] <... openat resumed>) = 4 [pid 4994] lstat("./7/binderfs", [pid 4995] fstat(4, [pid 4994] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] unlink("./7/binderfs" [pid 4995] getdents64(4, [pid 4994] <... unlink resumed>) = 0 [pid 4994] getdents64(3, [pid 4995] <... getdents64 resumed>0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4995] getdents64(4, [pid 4994] <... getdents64 resumed>0x555556742620 /* 0 entries */, 32768) = 0 [pid 4995] <... getdents64 resumed>0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4995] close(4 [pid 4994] close(3 [pid 4995] <... close resumed>) = 0 [pid 4994] <... close resumed>) = 0 [pid 4995] rmdir("./7/bus" [pid 4994] rmdir("./7"./strace-static-x86_64: Process 5151 attached [pid 5151] set_robust_list(0x5555567415e0, 24 [pid 4994] <... rmdir resumed>) = 0 [pid 4995] <... rmdir resumed>) = 0 [pid 5151] <... set_robust_list resumed>) = 0 [pid 4995] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] mkdir("./8", 0777 [pid 5151] chdir("./8" [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5151] <... chdir resumed>) = 0 [pid 5151] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4995] lstat("./7/binderfs", [pid 4994] <... mkdir resumed>) = 0 [pid 5151] <... prctl resumed>) = 0 [pid 4994] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5151] setpgid(0, 0 [pid 4995] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5151] <... setpgid resumed>) = 0 [pid 4995] unlink("./7/binderfs" [pid 4994] <... openat resumed>) = 3 [pid 5151] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4995] <... unlink resumed>) = 0 [pid 4994] ioctl(3, LOOP_CLR_FD [pid 4993] <... umount2 resumed>) = 0 [pid 5151] write(3, "1000", 4 [pid 4995] getdents64(3, [pid 4994] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5151] <... write resumed>) = 4 [pid 4993] umount2("./7/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] <... getdents64 resumed>0x555556742620 /* 0 entries */, 32768) = 0 [pid 5151] close(3 [pid 4994] close(3 [pid 5151] <... close resumed>) = 0 [pid 4995] close(3 [pid 4993] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5151] symlink("/dev/binderfs", "./binderfs" [pid 4994] <... close resumed>) = 0 [pid 5151] <... symlink resumed>) = 0 [pid 4995] <... close resumed>) = 0 [pid 4994] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4993] lstat("./7/bus", [pid 5151] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] rmdir("./7" [pid 5151] <... futex resumed>) = 0 [pid 5151] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 4993] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5151] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4995] <... rmdir resumed>) = 0 [pid 4994] <... clone resumed>, child_tidptr=0x5555567415d0) = 5152 [pid 4993] umount2("./7/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5151] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4995] mkdir("./8", 0777 [pid 4993] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5151] <... clone resumed>, parent_tid=[5153], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5153 [pid 5151] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] <... mkdir resumed>) = 0 [pid 4993] openat(AT_FDCWD, "./7/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5151] <... futex resumed>) = 0 [pid 4995] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5151] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4993] <... openat resumed>) = 4 [pid 4995] <... openat resumed>) = 3 [pid 4993] fstat(4, ./strace-static-x86_64: Process 5152 attached [pid 5152] set_robust_list(0x5555567415e0, 24 [pid 4995] ioctl(3, LOOP_CLR_FD [pid 4993] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 5153 attached [pid 5153] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5153] memfd_create("syzkaller", 0) = 3 [pid 5153] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 4995] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4993] getdents64(4, [pid 5152] <... set_robust_list resumed>) = 0 [pid 4995] close(3 [pid 4993] <... getdents64 resumed>0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4995] <... close resumed>) = 0 [pid 4993] getdents64(4, [pid 4995] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4993] <... getdents64 resumed>0x55555674a660 /* 0 entries */, 32768) = 0 [pid 5152] chdir("./8" [pid 4993] close(4 [pid 4995] <... clone resumed>, child_tidptr=0x5555567415d0) = 5154 [pid 5152] <... chdir resumed>) = 0 [pid 4993] <... close resumed>) = 0 [pid 5152] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4993] rmdir("./7/bus" [pid 5152] setpgid(0, 0 [pid 4993] <... rmdir resumed>) = 0 [pid 5152] <... setpgid resumed>) = 0 ./strace-static-x86_64: Process 5154 attached [pid 5154] set_robust_list(0x5555567415e0, 24) = 0 [pid 5154] chdir("./8") = 0 [pid 5154] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5154] setpgid(0, 0) = 0 [pid 5154] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5154] write(3, "1000", 4) = 4 [pid 5154] close(3) = 0 [pid 5154] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5154] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5154] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5154] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5154] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5152] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4993] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5154] <... clone resumed>, parent_tid=[5155], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5155 [pid 5152] <... openat resumed>) = 3 [pid 4993] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5152] write(3, "1000", 4 [pid 4993] lstat("./7/binderfs", [pid 5152] <... write resumed>) = 4 [pid 5154] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5152] close(3 [pid 4993] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5154] <... futex resumed>) = 0 [pid 5152] <... close resumed>) = 0 [pid 4993] unlink("./7/binderfs" [pid 5154] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5152] symlink("/dev/binderfs", "./binderfs" [pid 4993] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 5155 attached [pid 5152] <... symlink resumed>) = 0 [pid 4993] getdents64(3, [pid 5152] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 4993] <... getdents64 resumed>0x555556742620 /* 0 entries */, 32768) = 0 [pid 5152] <... futex resumed>) = 0 [pid 4993] close(3 [pid 5152] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4993] <... close resumed>) = 0 [pid 5155] set_robust_list(0x7ff6876bd9e0, 24 [pid 5152] <... mmap resumed>) = 0x7ff68769d000 [pid 4993] rmdir("./7" [pid 5155] <... set_robust_list resumed>) = 0 [pid 5152] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE [pid 5155] memfd_create("syzkaller", 0 [pid 5152] <... mprotect resumed>) = 0 [pid 4993] <... rmdir resumed>) = 0 [pid 5155] <... memfd_create resumed>) = 3 [pid 5152] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4993] mkdir("./8", 0777 [pid 5155] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 ./strace-static-x86_64: Process 5156 attached [pid 5152] <... clone resumed>, parent_tid=[5156], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5156 [pid 4993] <... mkdir resumed>) = 0 [pid 5156] set_robust_list(0x7ff6876bd9e0, 24 [pid 5152] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] <... umount2 resumed>) = 0 [pid 5156] <... set_robust_list resumed>) = 0 [pid 5152] <... futex resumed>) = 0 [pid 4997] umount2("./7/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4993] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5156] memfd_create("syzkaller", 0 [pid 5152] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5156] <... memfd_create resumed>) = 3 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4993] <... openat resumed>) = 3 [pid 5156] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4993] ioctl(3, LOOP_CLR_FD [pid 5156] <... mmap resumed>) = 0x7ff67f29d000 [pid 4997] lstat("./7/bus", [pid 4993] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4993] close(3) = 0 [pid 4993] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567415d0) = 5157 [pid 4997] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./7/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./7/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4997] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4997] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4997] close(4) = 0 [pid 4997] rmdir("./7/bus"./strace-static-x86_64: Process 5157 attached ) = 0 [pid 5157] set_robust_list(0x5555567415e0, 24) = 0 [pid 4997] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5157] chdir("./8" [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5157] <... chdir resumed>) = 0 [pid 4997] lstat("./7/binderfs", [pid 5157] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4997] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5157] <... prctl resumed>) = 0 [pid 4997] unlink("./7/binderfs" [pid 5157] setpgid(0, 0) = 0 [pid 4997] <... unlink resumed>) = 0 [pid 5157] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4997] getdents64(3, [pid 5157] <... openat resumed>) = 3 [pid 4997] <... getdents64 resumed>0x555556742620 /* 0 entries */, 32768) = 0 [pid 5157] write(3, "1000", 4 [pid 4997] close(3 [pid 5157] <... write resumed>) = 4 [pid 5157] close(3 [pid 4997] <... close resumed>) = 0 [pid 5157] <... close resumed>) = 0 [pid 4997] rmdir("./7" [pid 5157] symlink("/dev/binderfs", "./binderfs" [pid 4997] <... rmdir resumed>) = 0 [pid 5157] <... symlink resumed>) = 0 [pid 4997] mkdir("./8", 0777 [pid 5157] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4997] <... mkdir resumed>) = 0 [pid 5157] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4997] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5157] <... mmap resumed>) = 0x7ff68769d000 [pid 4997] <... openat resumed>) = 3 [pid 5157] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE [pid 4997] ioctl(3, LOOP_CLR_FD [pid 5157] <... mprotect resumed>) = 0 [pid 4997] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5157] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4997] close(3) = 0 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5157] <... clone resumed>, parent_tid=[5158], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5158 [pid 5157] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4997] <... clone resumed>, child_tidptr=0x5555567415d0) = 5159 [pid 5157] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5159 attached [pid 5159] set_robust_list(0x5555567415e0, 24./strace-static-x86_64: Process 5158 attached ) = 0 [pid 5159] chdir("./8" [pid 5158] set_robust_list(0x7ff6876bd9e0, 24 [pid 5159] <... chdir resumed>) = 0 [pid 5159] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5158] <... set_robust_list resumed>) = 0 [pid 5159] setpgid(0, 0) = 0 [pid 5158] memfd_create("syzkaller", 0 [pid 5159] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5159] write(3, "1000", 4) = 4 [pid 5158] <... memfd_create resumed>) = 3 [pid 5159] close(3 [pid 5158] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5159] <... close resumed>) = 0 [pid 5159] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5158] <... mmap resumed>) = 0x7ff67f29d000 [pid 5159] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5159] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5159] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5159] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5160], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5160 [pid 5159] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5159] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5160 attached [pid 5160] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5160] memfd_create("syzkaller", 0) = 3 [pid 5160] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 5153] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5150] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5155] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5158] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5156] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5160] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5153] <... write resumed>) = 16777216 [pid 5153] munmap(0x7ff67f29d000, 16777216) = 0 [pid 5150] <... write resumed>) = 16777216 [pid 5153] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5150] munmap(0x7ff67f29d000, 16777216 [pid 5153] <... openat resumed>) = 4 [pid 5153] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5150] <... munmap resumed>) = 0 [pid 5153] close(3 [pid 5150] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5153] <... close resumed>) = 0 [pid 5150] <... openat resumed>) = 4 [pid 5153] mkdir("./bus", 0777 [ 79.431125][ T5153] loop3: detected capacity change from 0 to 32768 [pid 5150] ioctl(4, LOOP_SET_FD, 3 [pid 5153] <... mkdir resumed>) = 0 [pid 5153] mount("/dev/loop3", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "") = 0 [pid 5153] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5153] chdir("./bus") = 0 [pid 5155] <... write resumed>) = 16777216 [pid 5153] ioctl(4, LOOP_CLR_FD [pid 5150] <... ioctl resumed>) = 0 [pid 5158] <... write resumed>) = 16777216 [pid 5155] munmap(0x7ff67f29d000, 16777216 [pid 5153] <... ioctl resumed>) = 0 [pid 5150] close(3 [pid 5158] munmap(0x7ff67f29d000, 16777216 [pid 5156] <... write resumed>) = 16777216 [pid 5156] munmap(0x7ff67f29d000, 16777216 [pid 5155] <... munmap resumed>) = 0 [pid 5153] close(4 [pid 5150] <... close resumed>) = 0 [pid 5158] <... munmap resumed>) = 0 [pid 5153] <... close resumed>) = 0 [pid 5150] mkdir("./bus", 0777) = 0 [pid 5153] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5151] <... futex resumed>) = 0 [pid 5150] mount("/dev/loop5", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5153] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [ 79.476242][ T5150] loop5: detected capacity change from 0 to 32768 [pid 5151] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5153] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5151] <... futex resumed>) = 0 [pid 5153] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5151] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5153] <... open resumed>) = 4 [pid 5153] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5150] <... mount resumed>) = 0 [pid 5153] <... futex resumed>) = 1 [pid 5151] <... futex resumed>) = 0 [pid 5150] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5153] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5151] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5150] <... openat resumed>) = 3 [pid 5156] <... munmap resumed>) = 0 [pid 5153] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5151] <... futex resumed>) = 0 [pid 5153] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5151] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5150] chdir("./bus" [pid 5158] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5155] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5153] <... open resumed>) = 5 [pid 5150] <... chdir resumed>) = 0 [pid 5158] <... openat resumed>) = 4 [pid 5155] <... openat resumed>) = 4 [pid 5153] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5150] ioctl(4, LOOP_CLR_FD [pid 5158] ioctl(4, LOOP_SET_FD, 3 [pid 5156] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5155] ioctl(4, LOOP_SET_FD, 3 [pid 5153] <... futex resumed>) = 1 [pid 5151] <... futex resumed>) = 0 [pid 5150] <... ioctl resumed>) = 0 [pid 5151] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5151] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5156] <... openat resumed>) = 4 [pid 5155] <... ioctl resumed>) = 0 [pid 5153] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5150] close(4 [pid 5156] ioctl(4, LOOP_SET_FD, 3 [pid 5153] <... mmap resumed>) = 0x20000000 [pid 5150] <... close resumed>) = 0 [pid 5155] close(3 [pid 5158] <... ioctl resumed>) = 0 [pid 5155] <... close resumed>) = 0 [pid 5158] close(3 [pid 5155] mkdir("./bus", 0777 [pid 5158] <... close resumed>) = 0 [pid 5155] <... mkdir resumed>) = 0 [pid 5153] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5150] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5160] <... write resumed>) = 16777216 [pid 5158] mkdir("./bus", 0777 [pid 5156] <... ioctl resumed>) = 0 [pid 5155] mount("/dev/loop2", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5153] <... futex resumed>) = 1 [pid 5151] <... futex resumed>) = 0 [pid 5150] <... futex resumed>) = 1 [pid 5149] <... futex resumed>) = 0 [pid 5160] munmap(0x7ff67f29d000, 16777216 [pid 5158] <... mkdir resumed>) = 0 [pid 5156] close(3 [pid 5153] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5151] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5150] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5149] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5160] <... munmap resumed>) = 0 [pid 5156] <... close resumed>) = 0 [pid 5153] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5151] <... futex resumed>) = 0 [pid 5150] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5158] mount("/dev/loop0", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5149] <... futex resumed>) = 0 [pid 5160] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5156] mkdir("./bus", 0777 [pid 5153] ftruncate(4, 33587199 [pid 5151] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5150] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5149] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5160] <... openat resumed>) = 4 [pid 5156] <... mkdir resumed>) = 0 [pid 5153] <... ftruncate resumed>) = 0 [pid 5150] <... open resumed>) = 4 [ 79.566745][ T5158] loop0: detected capacity change from 0 to 32768 [ 79.573789][ T5155] loop2: detected capacity change from 0 to 32768 [ 79.599882][ T5156] loop1: detected capacity change from 0 to 32768 [pid 5160] ioctl(4, LOOP_SET_FD, 3 [pid 5156] mount("/dev/loop1", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5153] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5150] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5158] <... mount resumed>) = 0 [pid 5155] <... mount resumed>) = 0 [pid 5153] <... futex resumed>) = 1 [pid 5151] <... futex resumed>) = 0 [pid 5150] <... futex resumed>) = 1 [pid 5149] <... futex resumed>) = 0 [pid 5153] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5151] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5150] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5149] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5153] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5151] <... futex resumed>) = 0 [pid 5150] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5149] <... futex resumed>) = 0 [pid 5153] open("./bus", O_RDONLY [pid 5151] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5150] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5149] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5153] <... open resumed>) = 6 [pid 5150] <... open resumed>) = 5 [pid 5153] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5150] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5153] <... futex resumed>) = 0 [pid 5150] <... futex resumed>) = 0 [pid 5153] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5150] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5160] <... ioctl resumed>) = 0 [pid 5160] close(3) = 0 [pid 5160] mkdir("./bus", 0777) = 0 [pid 5160] mount("/dev/loop4", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5158] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5158] chdir("./bus") = 0 [pid 5158] ioctl(4, LOOP_CLR_FD) = 0 [pid 5158] close(4) = 0 [pid 5158] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5157] <... futex resumed>) = 0 [pid 5157] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5158] <... futex resumed>) = 1 [pid 5157] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5158] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5158] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5157] <... futex resumed>) = 0 [pid 5157] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5158] <... futex resumed>) = 1 [pid 5157] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5158] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 5160] <... mount resumed>) = 0 [pid 5158] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5156] <... mount resumed>) = 0 [pid 5155] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5151] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5149] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5160] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5158] <... futex resumed>) = 1 [pid 5157] <... futex resumed>) = 0 [pid 5156] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5155] <... openat resumed>) = 3 [pid 5151] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [ 79.629730][ T5160] loop4: detected capacity change from 0 to 32768 [ 79.640640][ T27] kauditd_printk_skb: 14 callbacks suppressed [ 79.640653][ T27] audit: type=1804 audit(1686284884.477:98): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor481" name="/root/syzkaller.crriMX/8/bus/bus" dev="loop3" ino=7 res=1 errno=0 [pid 5149] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5160] <... openat resumed>) = 3 [pid 5158] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5157] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5156] <... openat resumed>) = 3 [pid 5155] chdir("./bus" [pid 5153] <... futex resumed>) = 0 [pid 5151] <... futex resumed>) = 1 [pid 5150] <... futex resumed>) = 0 [pid 5149] <... futex resumed>) = 1 [pid 5160] chdir("./bus" [pid 5157] <... futex resumed>) = 0 [pid 5156] chdir("./bus" [pid 5155] <... chdir resumed>) = 0 [pid 5153] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5151] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5150] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5149] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5160] <... chdir resumed>) = 0 [pid 5157] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5156] <... chdir resumed>) = 0 [pid 5155] ioctl(4, LOOP_CLR_FD [pid 5158] <... mmap resumed>) = 0x20000000 [pid 5153] <... open resumed>) = 7 [pid 5150] <... mmap resumed>) = 0x20000000 [pid 5160] ioctl(4, LOOP_CLR_FD [pid 5158] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5153] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5150] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5160] <... ioctl resumed>) = 0 [pid 5158] <... futex resumed>) = 1 [pid 5157] <... futex resumed>) = 0 [pid 5153] <... futex resumed>) = 1 [pid 5150] <... futex resumed>) = 1 [pid 5160] close(4 [pid 5158] ftruncate(4, 33587199 [pid 5157] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5153] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5150] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5160] <... close resumed>) = 0 [pid 5158] <... ftruncate resumed>) = 0 [pid 5157] <... futex resumed>) = 0 [pid 5160] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5158] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5157] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5160] <... futex resumed>) = 1 [pid 5158] <... futex resumed>) = 0 [pid 5157] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5160] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5158] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5157] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5158] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5157] <... futex resumed>) = 0 [pid 5159] <... futex resumed>) = 0 [pid 5158] open("./bus", O_RDONLY [pid 5157] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5156] ioctl(4, LOOP_CLR_FD [pid 5155] <... ioctl resumed>) = 0 [pid 5151] <... futex resumed>) = 0 [pid 5149] <... futex resumed>) = 0 [pid 5159] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5158] <... open resumed>) = 6 [pid 5158] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5157] <... futex resumed>) = 0 [pid 5158] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5157] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5158] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5157] <... futex resumed>) = 0 [pid 5158] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5157] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5158] <... open resumed>) = 7 [pid 5158] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5157] <... futex resumed>) = 0 [pid 5158] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5157] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5158] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5157] <... futex resumed>) = 0 [pid 5158] dup(7 [pid 5157] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5158] <... dup resumed>) = 8 [pid 5158] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5157] <... futex resumed>) = 0 [pid 5158] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5157] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5158] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5157] <... futex resumed>) = 0 [pid 5158] memfd_create("syzkaller", 0 [pid 5157] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5158] <... memfd_create resumed>) = 9 [ 79.685238][ T27] audit: type=1804 audit(1686284884.527:99): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor481" name="/root/syzkaller.crriMX/8/bus/bus" dev="loop3" ino=7 res=1 errno=0 [ 79.708317][ T27] audit: type=1804 audit(1686284884.547:100): pid=5158 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor481" name="/root/syzkaller.lVUVkM/8/bus/bus" dev="loop0" ino=7 res=1 errno=0 [pid 5158] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff677e9d000 [pid 5160] <... futex resumed>) = 0 [pid 5159] <... futex resumed>) = 1 [pid 5156] <... ioctl resumed>) = 0 [pid 5155] close(4 [pid 5151] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5149] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5160] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5160] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5160] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5159] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5156] close(4 [pid 5159] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5155] <... close resumed>) = 0 [pid 5153] <... futex resumed>) = 0 [pid 5151] <... futex resumed>) = 1 [pid 5150] <... futex resumed>) = 0 [pid 5149] <... futex resumed>) = 1 [pid 5156] <... close resumed>) = 0 [pid 5159] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5156] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5155] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5153] dup(7 [pid 5151] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5150] ftruncate(4, 33587199 [pid 5149] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5160] <... futex resumed>) = 0 [pid 5159] <... futex resumed>) = 1 [pid 5156] <... futex resumed>) = 1 [pid 5155] <... futex resumed>) = 1 [pid 5154] <... futex resumed>) = 0 [pid 5153] <... dup resumed>) = 8 [pid 5152] <... futex resumed>) = 0 [pid 5150] <... ftruncate resumed>) = 0 [pid 5160] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5159] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5156] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5155] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5154] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5153] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5152] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5150] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5160] <... open resumed>) = 5 [pid 5156] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5155] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5154] <... futex resumed>) = 0 [pid 5153] <... futex resumed>) = 1 [pid 5152] <... futex resumed>) = 0 [pid 5151] <... futex resumed>) = 0 [pid 5150] <... futex resumed>) = 1 [pid 5149] <... futex resumed>) = 0 [pid 5160] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5158] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5156] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5155] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5154] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5153] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5152] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5151] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5150] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5149] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5160] <... futex resumed>) = 1 [pid 5159] <... futex resumed>) = 0 [pid 5153] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5151] <... futex resumed>) = 0 [pid 5150] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5160] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5159] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5156] <... open resumed>) = 4 [pid 5155] <... open resumed>) = 4 [pid 5153] memfd_create("syzkaller", 0 [pid 5151] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5150] open("./bus", O_RDONLY [pid 5149] <... futex resumed>) = 0 [ 79.732581][ T27] audit: type=1804 audit(1686284884.557:101): pid=5158 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor481" name="/root/syzkaller.lVUVkM/8/bus/bus" dev="loop0" ino=7 res=1 errno=0 [pid 5160] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5159] <... futex resumed>) = 0 [pid 5156] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5155] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5153] <... memfd_create resumed>) = 9 [pid 5150] <... open resumed>) = 6 [pid 5160] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5153] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5150] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5160] <... mmap resumed>) = 0x20000000 [pid 5153] <... mmap resumed>) = 0x7ff677e9d000 [pid 5150] <... futex resumed>) = 0 [pid 5160] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5150] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5160] <... futex resumed>) = 0 [pid 5160] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5149] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5159] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5156] <... futex resumed>) = 1 [pid 5159] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5156] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5155] <... futex resumed>) = 1 [pid 5154] <... futex resumed>) = 0 [pid 5149] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5159] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5155] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5154] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5149] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5159] <... futex resumed>) = 1 [pid 5155] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5154] <... futex resumed>) = 0 [pid 5149] <... futex resumed>) = 1 [pid 5159] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5155] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5154] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5149] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5160] <... futex resumed>) = 0 [pid 5155] <... open resumed>) = 5 [pid 5152] <... futex resumed>) = 0 [pid 5150] <... futex resumed>) = 0 [pid 5155] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5154] <... futex resumed>) = 0 [pid 5155] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5154] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5155] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5154] <... futex resumed>) = 0 [pid 5155] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5154] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5160] ftruncate(4, 33587199 [pid 5155] <... mmap resumed>) = 0x20000000 [pid 5152] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5150] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5160] <... ftruncate resumed>) = 0 [pid 5156] <... futex resumed>) = 0 [pid 5155] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5152] <... futex resumed>) = 1 [pid 5150] <... open resumed>) = 7 [pid 5160] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5156] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5155] <... futex resumed>) = 1 [pid 5154] <... futex resumed>) = 0 [pid 5152] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5150] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5160] <... futex resumed>) = 1 [pid 5159] <... futex resumed>) = 0 [pid 5156] <... open resumed>) = 5 [pid 5155] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5154] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5150] <... futex resumed>) = 1 [pid 5149] <... futex resumed>) = 0 [pid 5160] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5159] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5158] <... write resumed>) = 2097152 [pid 5156] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5155] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5154] <... futex resumed>) = 0 [pid 5150] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5160] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5160] open("./bus", O_RDONLY) = 6 [pid 5160] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5153] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5160] <... futex resumed>) = 0 [ 79.788483][ T27] audit: type=1804 audit(1686284884.627:102): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor481" name="/root/syzkaller.PL7eda/8/bus/bus" dev="loop5" ino=7 res=1 errno=0 [pid 5160] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL) = 0 [pid 5159] <... futex resumed>) = 1 [pid 5158] munmap(0x7ff677e9d000, 2097152 [pid 5156] <... futex resumed>) = 1 [pid 5155] ftruncate(4, 33587199 [pid 5154] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5152] <... futex resumed>) = 0 [pid 5149] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5160] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5152] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5150] <... futex resumed>) = 0 [pid 5149] <... futex resumed>) = 1 [pid 5152] <... futex resumed>) = 0 [pid 5150] dup(7 [pid 5149] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5152] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5150] <... dup resumed>) = 8 [pid 5150] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5149] <... futex resumed>) = 0 [pid 5150] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5149] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5159] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5150] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5149] <... futex resumed>) = 0 [pid 5159] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5158] <... munmap resumed>) = 0 [pid 5156] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5155] <... ftruncate resumed>) = 0 [pid 5150] memfd_create("syzkaller", 0 [pid 5149] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5159] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5158] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5156] <... mmap resumed>) = 0x20000000 [pid 5155] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5150] <... memfd_create resumed>) = 9 [pid 5160] <... futex resumed>) = 0 [pid 5159] <... futex resumed>) = 1 [pid 5158] <... openat resumed>) = 10 [pid 5156] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5155] <... futex resumed>) = 1 [pid 5154] <... futex resumed>) = 0 [pid 5150] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [ 79.824054][ T27] audit: type=1804 audit(1686284884.657:103): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor481" name="/root/syzkaller.PL7eda/8/bus/bus" dev="loop5" ino=7 res=1 errno=0 [ 79.846258][ T27] audit: type=1804 audit(1686284884.667:104): pid=5160 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor481" name="/root/syzkaller.hTAWL1/8/bus/bus" dev="loop4" ino=7 res=1 errno=0 [pid 5160] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5159] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5158] ioctl(10, LOOP_SET_FD, 9 [pid 5156] <... futex resumed>) = 1 [pid 5155] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5154] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5152] <... futex resumed>) = 0 [pid 5150] <... mmap resumed>) = 0x7ff677e9d000 [pid 5160] <... open resumed>) = 7 [pid 5158] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5154] <... futex resumed>) = 0 [pid 5153] <... write resumed>) = 2097152 [pid 5152] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5160] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5158] ioctl(10, LOOP_CLR_FD [pid 5154] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5152] <... futex resumed>) = 0 [pid 5160] <... futex resumed>) = 1 [pid 5159] <... futex resumed>) = 0 [pid 5158] <... ioctl resumed>) = 0 [pid 5152] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5160] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5159] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5160] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5159] <... futex resumed>) = 0 [pid 5160] dup(7 [pid 5159] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5160] <... dup resumed>) = 8 [pid 5160] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5158] ioctl(10, LOOP_SET_FD, 9 [pid 5160] <... futex resumed>) = 1 [pid 5159] <... futex resumed>) = 0 [pid 5158] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5156] ftruncate(4, 33587199 [pid 5155] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5160] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5159] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5158] close(10 [pid 5153] munmap(0x7ff677e9d000, 2097152 [pid 5160] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5159] <... futex resumed>) = 0 [pid 5158] <... close resumed>) = 0 [pid 5156] <... ftruncate resumed>) = 0 [pid 5155] open("./bus", O_RDONLY [pid 5160] memfd_create("syzkaller", 0 [ 79.899887][ T27] audit: type=1804 audit(1686284884.737:105): pid=5160 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor481" name="/root/syzkaller.hTAWL1/8/bus/bus" dev="loop4" ino=7 res=1 errno=0 [pid 5159] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5158] close(9 [pid 5156] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5160] <... memfd_create resumed>) = 9 [pid 5158] <... close resumed>) = 0 [pid 5155] <... open resumed>) = 6 [pid 5153] <... munmap resumed>) = 0 [pid 5160] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff677e9d000 [pid 5156] <... futex resumed>) = 1 [pid 5155] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5153] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5152] <... futex resumed>) = 0 [pid 5150] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5158] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5156] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5155] <... futex resumed>) = 1 [pid 5154] <... futex resumed>) = 0 [pid 5153] <... openat resumed>) = 10 [pid 5152] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5158] <... futex resumed>) = 1 [pid 5157] <... futex resumed>) = 0 [pid 5156] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5155] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5154] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5153] ioctl(10, LOOP_SET_FD, 9 [pid 5152] <... futex resumed>) = 0 [pid 5158] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5157] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5156] open("./bus", O_RDONLY [pid 5155] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5154] <... futex resumed>) = 0 [pid 5152] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5153] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5158] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5157] <... futex resumed>) = 0 [pid 5156] <... open resumed>) = 6 [pid 5155] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5154] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 79.940103][ T27] audit: type=1804 audit(1686284884.777:106): pid=5155 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor481" name="/root/syzkaller.txkbmS/8/bus/bus" dev="loop2" ino=7 res=1 errno=0 [pid 5157] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5150] <... write resumed>) = 2097152 [pid 5150] munmap(0x7ff677e9d000, 2097152 [pid 5158] sendfile(8, 6, NULL, 281474978811908 [pid 5153] ioctl(10, LOOP_CLR_FD [pid 5156] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5155] <... open resumed>) = 7 [pid 5160] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5156] <... futex resumed>) = 1 [pid 5155] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5153] <... ioctl resumed>) = 0 [pid 5152] <... futex resumed>) = 0 [pid 5150] <... munmap resumed>) = 0 [pid 5156] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5155] <... futex resumed>) = 1 [pid 5155] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5154] <... futex resumed>) = 0 [pid 5152] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5154] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5153] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5153] close(10 [pid 5156] <... futex resumed>) = 0 [pid 5155] <... futex resumed>) = 0 [pid 5154] <... futex resumed>) = 1 [pid 5153] <... close resumed>) = 0 [pid 5152] <... futex resumed>) = 1 [pid 5156] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5155] dup(7 [pid 5154] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5153] close(9 [pid 5152] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5157] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5156] <... open resumed>) = 7 [pid 5155] <... dup resumed>) = 8 [pid 5150] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5156] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5155] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5156] <... futex resumed>) = 0 [pid 5155] <... futex resumed>) = 1 [pid 5156] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5155] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5152] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5157] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5154] <... futex resumed>) = 0 [pid 5157] <... futex resumed>) = 0 [pid 5154] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5152] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5150] <... openat resumed>) = 10 [pid 5157] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5156] <... futex resumed>) = 0 [pid 5155] <... futex resumed>) = 0 [pid 5154] <... futex resumed>) = 1 [pid 5152] <... futex resumed>) = 1 [pid 5157] <... mmap resumed>) = 0x7ff67807c000 [pid 5156] dup(7 [pid 5155] memfd_create("syzkaller", 0 [pid 5154] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5152] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5150] ioctl(10, LOOP_SET_FD, 9 [pid 5157] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5156] <... dup resumed>) = 8 [pid 5155] <... memfd_create resumed>) = 9 [pid 5157] <... mprotect resumed>) = 0 [pid 5156] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5155] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5153] <... close resumed>) = 0 [pid 5152] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5150] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5157] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5156] <... futex resumed>) = 0 [ 79.977602][ T27] audit: type=1804 audit(1686284884.817:107): pid=5156 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor481" name="/root/syzkaller.20fUYQ/8/bus/bus" dev="loop1" ino=7 res=1 errno=0 [pid 5155] <... mmap resumed>) = 0x7ff677e9d000 [pid 5153] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5152] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5161 attached [pid 5156] memfd_create("syzkaller", 0 [pid 5153] <... futex resumed>) = 1 [pid 5151] <... futex resumed>) = 0 [pid 5150] ioctl(10, LOOP_CLR_FD [pid 5156] <... memfd_create resumed>) = 9 [pid 5153] sendfile(8, 6, NULL, 281474978811908 [pid 5151] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5161] set_robust_list(0x7ff67809c9e0, 24 [pid 5157] <... clone resumed>, parent_tid=[5161], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5161 [pid 5156] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5152] <... futex resumed>) = 0 [pid 5151] <... futex resumed>) = 0 [pid 5150] <... ioctl resumed>) = 0 [pid 5161] <... set_robust_list resumed>) = 0 [pid 5160] <... write resumed>) = 2097152 [pid 5157] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5156] <... mmap resumed>) = 0x7ff677e9d000 [pid 5155] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5152] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5151] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5161] sync( [pid 5160] munmap(0x7ff677e9d000, 2097152 [pid 5157] <... futex resumed>) = 0 [pid 5160] <... munmap resumed>) = 0 [pid 5157] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5160] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5150] ioctl(10, LOOP_SET_FD, 9 [pid 5160] <... openat resumed>) = 10 [pid 5150] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5160] ioctl(10, LOOP_SET_FD, 9 [pid 5150] close(10 [pid 5161] <... sync resumed>) = 0 [pid 5160] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5150] <... close resumed>) = 0 [pid 5161] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5160] ioctl(10, LOOP_CLR_FD [pid 5156] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5150] close(9 [pid 5161] <... futex resumed>) = 1 [pid 5160] <... ioctl resumed>) = 0 [pid 5157] <... futex resumed>) = 0 [pid 5155] <... write resumed>) = 2097152 [pid 5151] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5161] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5155] munmap(0x7ff677e9d000, 2097152 [pid 5151] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5150] <... close resumed>) = 0 [pid 5155] <... munmap resumed>) = 0 [pid 5151] <... futex resumed>) = 0 [pid 5160] ioctl(10, LOOP_SET_FD, 9 [pid 5151] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5160] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5155] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5151] <... mmap resumed>) = 0x7ff67807c000 [pid 5150] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5160] close(10 [pid 5155] <... openat resumed>) = 10 [pid 5151] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5150] <... futex resumed>) = 1 [pid 5149] <... futex resumed>) = 0 [pid 5160] <... close resumed>) = 0 [pid 5155] ioctl(10, LOOP_SET_FD, 9 [pid 5151] <... mprotect resumed>) = 0 [pid 5150] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5149] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5160] close(9 [pid 5156] <... write resumed>) = 2097152 [pid 5155] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5151] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5149] <... futex resumed>) = 0 [pid 5156] munmap(0x7ff677e9d000, 2097152) = 0 [pid 5151] <... clone resumed>, parent_tid=[5162], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5162 [pid 5151] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5151] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5156] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 10 [pid 5156] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5156] ioctl(10, LOOP_CLR_FD) = 0 [pid 5156] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5156] close(10) = 0 [pid 5156] close(9 [pid 5160] <... close resumed>) = 0 ./strace-static-x86_64: Process 5162 attached [pid 5155] ioctl(10, LOOP_CLR_FD [pid 5150] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5149] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5160] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5162] set_robust_list(0x7ff67809c9e0, 24 [pid 5160] <... futex resumed>) = 1 [pid 5159] <... futex resumed>) = 0 [pid 5156] <... close resumed>) = 0 [pid 5155] <... ioctl resumed>) = 0 [pid 5150] sendfile(8, 6, NULL, 281474978811908 [pid 5162] <... set_robust_list resumed>) = 0 [pid 5160] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5159] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5162] sync( [pid 5160] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5159] <... futex resumed>) = 0 [pid 5160] sendfile(8, 6, NULL, 281474978811908 [pid 5159] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5155] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5155] close(10) = 0 [pid 5155] close(9 [pid 5156] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5156] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5152] <... futex resumed>) = 0 [pid 5152] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5156] <... futex resumed>) = 0 [pid 5152] <... futex resumed>) = 1 [pid 5162] <... sync resumed>) = 0 [pid 5155] <... close resumed>) = 0 [pid 5151] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5162] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5152] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5162] <... futex resumed>) = 0 [pid 5155] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5162] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5155] <... futex resumed>) = 1 [pid 5154] <... futex resumed>) = 0 [pid 5156] sendfile(8, 6, NULL, 281474978811908 [pid 5154] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5155] sendfile(8, 6, NULL, 281474978811908 [pid 5154] <... futex resumed>) = 0 [pid 5149] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5154] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5149] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5149] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff67807c000 [pid 5159] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5159] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5149] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5159] <... futex resumed>) = 0 [pid 5149] <... mprotect resumed>) = 0 [pid 5159] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5149] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5159] <... mmap resumed>) = 0x7ff67807c000 [pid 5159] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5149] <... clone resumed>, parent_tid=[5163], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5163 [pid 5159] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5149] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5152] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5149] <... futex resumed>) = 0 [pid 5159] <... clone resumed>, parent_tid=[5164], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5164 [pid 5152] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5149] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5159] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5152] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5164 attached ./strace-static-x86_64: Process 5163 attached [pid 5159] <... futex resumed>) = 0 [pid 5154] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5152] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5164] set_robust_list(0x7ff67809c9e0, 24 [pid 5163] set_robust_list(0x7ff67809c9e0, 24 [pid 5159] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5154] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5152] <... mmap resumed>) = 0x7ff67807c000 [pid 5164] <... set_robust_list resumed>) = 0 [pid 5163] <... set_robust_list resumed>) = 0 [pid 5154] <... futex resumed>) = 0 [pid 5152] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5164] sync( [pid 5163] sync( [pid 5154] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5152] <... mprotect resumed>) = 0 [pid 5164] <... sync resumed>) = 0 [pid 5163] <... sync resumed>) = 0 [pid 5154] <... mmap resumed>) = 0x7ff67807c000 [pid 5152] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5164] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5163] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5154] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5164] <... futex resumed>) = 1 [pid 5163] <... futex resumed>) = 1 [pid 5159] <... futex resumed>) = 0 [pid 5154] <... mprotect resumed>) = 0 [pid 5152] <... clone resumed>, parent_tid=[5165], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5165 [pid 5149] <... futex resumed>) = 0 [pid 5164] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5163] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5154] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5152] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 5165 attached [pid 5154] <... clone resumed>, parent_tid=[5166], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5166 [pid 5152] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5165] set_robust_list(0x7ff67809c9e0, 24 [pid 5154] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5165] <... set_robust_list resumed>) = 0 [pid 5154] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5166 attached [pid 5165] sync( [pid 5154] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5166] set_robust_list(0x7ff67809c9e0, 24 [pid 5165] <... sync resumed>) = 0 [pid 5166] <... set_robust_list resumed>) = 0 [pid 5165] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5166] sync( [pid 5165] <... futex resumed>) = 1 [pid 5152] <... futex resumed>) = 0 [pid 5165] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5166] <... sync resumed>) = 0 [pid 5166] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5154] <... futex resumed>) = 0 [pid 5166] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5157] exit_group(0 [pid 5161] <... futex resumed>) = ? [pid 5157] <... exit_group resumed>) = ? [pid 5161] +++ exited with 0 +++ [pid 5158] <... sendfile resumed>) = ? [pid 5158] +++ exited with 0 +++ [pid 5157] +++ exited with 0 +++ [pid 4993] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5157, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=45 /* 0.45 s */} --- [pid 4993] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4993] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4993] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4993] getdents64(3, 0x555556742620 /* 4 entries */, 32768) = 104 [pid 4993] umount2("./8/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5151] exit_group(0 [pid 5162] <... futex resumed>) = ? [pid 5151] <... exit_group resumed>) = ? [pid 5162] +++ exited with 0 +++ [pid 5153] <... sendfile resumed>) = ? [pid 5153] +++ exited with 0 +++ [pid 5151] +++ exited with 0 +++ [pid 4996] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5151, si_uid=0, si_status=0, si_utime=11 /* 0.11 s */, si_stime=38 /* 0.38 s */} --- [pid 4996] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4996] fstat(3, [pid 5159] exit_group(0 [pid 4996] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5164] <... futex resumed>) = ? [pid 5159] <... exit_group resumed>) = ? [pid 4996] getdents64(3, 0x555556742620 /* 4 entries */, 32768) = 104 [pid 5164] +++ exited with 0 +++ [pid 5160] <... sendfile resumed>) = ? [pid 4996] umount2("./8/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5160] +++ exited with 0 +++ [pid 5159] +++ exited with 0 +++ [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5159, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=41 /* 0.41 s */} --- [pid 4997] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4997] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4997] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(3, 0x555556742620 /* 4 entries */, 32768) = 104 [pid 4997] umount2("./8/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5152] exit_group(0 [pid 5165] <... futex resumed>) = ? [pid 5152] <... exit_group resumed>) = ? [pid 5165] +++ exited with 0 +++ [pid 5149] exit_group(0 [pid 5163] <... futex resumed>) = ? [pid 5149] <... exit_group resumed>) = ? [pid 5163] +++ exited with 0 +++ [pid 5156] <... sendfile resumed>) = ? [pid 5154] exit_group(0 [pid 5166] <... futex resumed>) = ? [pid 5154] <... exit_group resumed>) = ? [pid 5166] +++ exited with 0 +++ [pid 5155] <... sendfile resumed>) = ? [pid 5156] +++ exited with 0 +++ [pid 5152] +++ exited with 0 +++ [pid 4994] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5152, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=35 /* 0.35 s */} --- [pid 4994] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5150] <... sendfile resumed>) = ? [pid 5155] +++ exited with 0 +++ [pid 5154] +++ exited with 0 +++ [pid 4995] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5154, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=35 /* 0.35 s */} --- [pid 4994] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5150] +++ exited with 0 +++ [pid 5149] +++ exited with 0 +++ [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5149, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=30 /* 0.30 s */} --- [pid 4994] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] <... openat resumed>) = 3 [pid 4998] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... openat resumed>) = 3 [pid 4994] fstat(3, [pid 4998] fstat(3, [pid 4995] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, [pid 4995] <... openat resumed>) = 3 [pid 4998] <... getdents64 resumed>0x555556742620 /* 4 entries */, 32768) = 104 [pid 4995] fstat(3, [pid 4994] getdents64(3, [pid 4998] umount2("./8/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] <... getdents64 resumed>0x555556742620 /* 4 entries */, 32768) = 104 [pid 4995] getdents64(3, [pid 4994] umount2("./8/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] <... getdents64 resumed>0x555556742620 /* 4 entries */, 32768) = 104 [pid 4995] umount2("./8/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] <... umount2 resumed>) = 0 [pid 4996] umount2("./8/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] lstat("./8/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] umount2("./8/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] openat(AT_FDCWD, "./8/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4996] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4996] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4996] close(4) = 0 [pid 4996] rmdir("./8/bus") = 0 [pid 4996] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] lstat("./8/binderfs", [pid 4994] <... umount2 resumed>) = 0 [pid 4996] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4994] umount2("./8/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] unlink("./8/binderfs") = 0 [pid 4996] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4996] close(3) = 0 [pid 4996] rmdir("./8") = 0 [pid 4996] mkdir("./9", 0777 [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] lstat("./8/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] <... mkdir resumed>) = 0 [pid 4994] umount2("./8/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] openat(AT_FDCWD, "./8/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4994] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4994] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4994] close(4) = 0 [pid 4994] rmdir("./8/bus" [pid 4996] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4994] <... rmdir resumed>) = 0 [pid 4996] <... openat resumed>) = 3 [pid 4994] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4996] close(3) = 0 [pid 4996] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567415d0) = 5167 ./strace-static-x86_64: Process 5167 attached [pid 5167] set_robust_list(0x5555567415e0, 24) = 0 [pid 5167] chdir("./9") = 0 [pid 5167] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5167] setpgid(0, 0) = 0 [pid 5167] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5167] write(3, "1000", 4) = 4 [pid 5167] close(3) = 0 [pid 5167] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5167] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5167] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5167] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5167] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5168], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5168 [pid 5167] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5167] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5168 attached [pid 5168] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5168] memfd_create("syzkaller", 0) = 3 [pid 5168] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] lstat("./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4994] unlink("./8/binderfs") = 0 [pid 4994] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4994] close(3) = 0 [pid 4994] rmdir("./8") = 0 [pid 4994] mkdir("./9", 0777) = 0 [pid 4994] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4994] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4994] close(3) = 0 [pid 4994] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567415d0) = 5169 ./strace-static-x86_64: Process 5169 attached [pid 5169] set_robust_list(0x5555567415e0, 24) = 0 [pid 5169] chdir("./9") = 0 [pid 5169] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5169] setpgid(0, 0) = 0 [pid 5169] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5169] write(3, "1000", 4) = 4 [pid 5169] close(3) = 0 [pid 5169] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5169] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5169] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5169] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5169] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5170], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5170 [pid 5169] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5169] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5170 attached [pid 5170] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5170] memfd_create("syzkaller", 0) = 3 [pid 5170] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 5168] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5170] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 4995] <... umount2 resumed>) = 0 [pid 4997] <... umount2 resumed>) = 0 [pid 4997] umount2("./8/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] umount2("./8/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./8/bus", [pid 4995] lstat("./8/bus", [pid 4997] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./8/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] umount2("./8/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./8/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4995] openat(AT_FDCWD, "./8/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] <... openat resumed>) = 4 [pid 4997] fstat(4, [pid 4995] <... openat resumed>) = 4 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] fstat(4, [pid 4997] getdents64(4, [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] <... getdents64 resumed>0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4995] getdents64(4, [pid 4997] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4995] <... getdents64 resumed>0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4997] close(4 [pid 4995] getdents64(4, [pid 4997] <... close resumed>) = 0 [pid 4995] <... getdents64 resumed>0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4997] rmdir("./8/bus" [pid 4995] close(4 [pid 4997] <... rmdir resumed>) = 0 [pid 4995] <... close resumed>) = 0 [pid 4997] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] rmdir("./8/bus" [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./8/binderfs", [pid 4995] <... rmdir resumed>) = 0 [pid 4997] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4995] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] unlink("./8/binderfs" [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] <... unlink resumed>) = 0 [pid 4995] lstat("./8/binderfs", [pid 4997] getdents64(3, [pid 4998] <... umount2 resumed>) = 0 [pid 4995] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] <... getdents64 resumed>0x555556742620 /* 0 entries */, 32768) = 0 [pid 4995] unlink("./8/binderfs" [pid 4997] close(3 [pid 4995] <... unlink resumed>) = 0 [pid 4997] <... close resumed>) = 0 [pid 4995] getdents64(3, [pid 4997] rmdir("./8" [pid 4995] <... getdents64 resumed>0x555556742620 /* 0 entries */, 32768) = 0 [pid 4997] <... rmdir resumed>) = 0 [pid 4995] close(3 [pid 4997] mkdir("./9", 0777 [pid 4995] <... close resumed>) = 0 [pid 4998] umount2("./8/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... mkdir resumed>) = 0 [pid 4995] rmdir("./8" [pid 4997] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4995] <... rmdir resumed>) = 0 [pid 4997] <... openat resumed>) = 3 [pid 4995] mkdir("./9", 0777 [pid 4997] ioctl(3, LOOP_CLR_FD [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] <... mkdir resumed>) = 0 [pid 4997] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4995] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4997] close(3 [pid 4998] lstat("./8/bus", [pid 4995] <... openat resumed>) = 3 [pid 4997] <... close resumed>) = 0 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./8/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./8/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./8/bus" [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4995] ioctl(3, LOOP_CLR_FD [pid 4997] <... clone resumed>, child_tidptr=0x5555567415d0) = 5171 [pid 4995] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] <... rmdir resumed>) = 0 [pid 4995] close(3 [pid 4998] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] <... close resumed>) = 0 [pid 4995] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567415d0) = 5172 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./8/binderfs") = 0 [pid 4998] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./8"./strace-static-x86_64: Process 5171 attached ) = 0 [pid 4998] mkdir("./9", 0777 [pid 5171] set_robust_list(0x5555567415e0, 24 [pid 4998] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 5172 attached [pid 5172] set_robust_list(0x5555567415e0, 24) = 0 [pid 5171] <... set_robust_list resumed>) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5172] chdir("./9" [pid 4998] <... openat resumed>) = 3 [pid 5172] <... chdir resumed>) = 0 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5172] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5171] chdir("./9" [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5172] <... prctl resumed>) = 0 [pid 5171] <... chdir resumed>) = 0 [pid 4998] close(3 [pid 5172] setpgid(0, 0 [pid 5171] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4998] <... close resumed>) = 0 [pid 5172] <... setpgid resumed>) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5172] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4998] <... clone resumed>, child_tidptr=0x5555567415d0) = 5173 [pid 5172] write(3, "1000", 4) = 4 [pid 5172] close(3) = 0 [pid 5172] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5172] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5171] <... prctl resumed>) = 0 [pid 5172] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5171] setpgid(0, 0 [pid 5172] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE [pid 5171] <... setpgid resumed>) = 0 [pid 5172] <... mprotect resumed>) = 0 [pid 5171] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5172] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5171] <... openat resumed>) = 3 [pid 5172] <... clone resumed>, parent_tid=[5174], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5174 [pid 5171] write(3, "1000", 4 [pid 5172] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5171] <... write resumed>) = 4 [pid 5172] <... futex resumed>) = 0 [pid 5171] close(3 [pid 5172] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5171] <... close resumed>) = 0 [pid 5171] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5171] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5171] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 ./strace-static-x86_64: Process 5174 attached [pid 5171] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE [pid 5174] set_robust_list(0x7ff6876bd9e0, 24 [pid 5171] <... mprotect resumed>) = 0 [pid 5174] <... set_robust_list resumed>) = 0 [pid 5174] memfd_create("syzkaller", 0 [pid 5171] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5174] <... memfd_create resumed>) = 3 [pid 5174] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 5171] <... clone resumed>, parent_tid=[5175], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5175 [pid 5171] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5171] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5175 attached ./strace-static-x86_64: Process 5173 attached [pid 5173] set_robust_list(0x5555567415e0, 24 [pid 5175] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5173] <... set_robust_list resumed>) = 0 [pid 5173] chdir("./9" [pid 5175] memfd_create("syzkaller", 0 [pid 5173] <... chdir resumed>) = 0 [pid 5173] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5175] <... memfd_create resumed>) = 3 [pid 5173] <... prctl resumed>) = 0 [pid 5175] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5173] setpgid(0, 0) = 0 [pid 5175] <... mmap resumed>) = 0x7ff67f29d000 [pid 5173] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5173] write(3, "1000", 4) = 4 [pid 5173] close(3) = 0 [pid 5173] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5168] <... write resumed>) = 16777216 [pid 5173] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5173] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5173] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5173] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5176], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5176 [pid 5173] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5173] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5176 attached [pid 5176] set_robust_list(0x7ff6876bd9e0, 24 [pid 5168] munmap(0x7ff67f29d000, 16777216 [pid 5176] <... set_robust_list resumed>) = 0 [pid 5176] memfd_create("syzkaller", 0) = 3 [pid 5176] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 5168] <... munmap resumed>) = 0 [pid 5168] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5168] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5168] close(3) = 0 [pid 5168] mkdir("./bus", 0777) = 0 [pid 5168] mount("/dev/loop3", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 4993] <... umount2 resumed>) = 0 [pid 4993] umount2("./8/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4993] lstat("./8/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5168] <... mount resumed>) = 0 [pid 4993] umount2("./8/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5168] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 4993] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4993] openat(AT_FDCWD, "./8/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4993] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5168] chdir("./bus" [ 81.619412][ T5168] loop3: detected capacity change from 0 to 32768 [pid 4993] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 5168] <... chdir resumed>) = 0 [pid 4993] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4993] close(4) = 0 [pid 4993] rmdir("./8/bus" [pid 5168] ioctl(4, LOOP_CLR_FD [pid 4993] <... rmdir resumed>) = 0 [pid 4993] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5168] <... ioctl resumed>) = 0 [pid 4993] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5168] close(4 [pid 4993] lstat("./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4993] unlink("./8/binderfs") = 0 [pid 4993] getdents64(3, [pid 5168] <... close resumed>) = 0 [pid 4993] <... getdents64 resumed>0x555556742620 /* 0 entries */, 32768) = 0 [pid 5168] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 4993] close(3 [pid 5168] <... futex resumed>) = 1 [pid 5167] <... futex resumed>) = 0 [pid 4993] <... close resumed>) = 0 [pid 5168] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5167] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4993] rmdir("./8" [pid 5168] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5167] <... futex resumed>) = 0 [pid 4993] <... rmdir resumed>) = 0 [pid 5168] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5167] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4993] mkdir("./9", 0777 [pid 5168] <... open resumed>) = 4 [pid 4993] <... mkdir resumed>) = 0 [pid 5168] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 4993] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5168] <... futex resumed>) = 1 [pid 5167] <... futex resumed>) = 0 [pid 4993] <... openat resumed>) = 3 [pid 5168] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5167] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4993] ioctl(3, LOOP_CLR_FD [pid 5168] <... open resumed>) = 5 [pid 5167] <... futex resumed>) = 0 [pid 4993] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5168] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5167] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4993] close(3 [pid 5168] <... futex resumed>) = 0 [pid 5167] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4993] <... close resumed>) = 0 [pid 5168] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5167] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4993] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5168] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5167] <... futex resumed>) = 0 [pid 5168] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5167] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4993] <... clone resumed>, child_tidptr=0x5555567415d0) = 5177 [pid 5168] <... mmap resumed>) = 0x20000000 [pid 5168] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5167] <... futex resumed>) = 0 [pid 5168] <... futex resumed>) = 1 [pid 5167] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5168] ftruncate(4, 33587199 [pid 5167] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5177 attached [pid 5167] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5168] <... ftruncate resumed>) = 0 [pid 5168] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5168] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5167] <... futex resumed>) = 0 [pid 5167] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5177] set_robust_list(0x5555567415e0, 24 [pid 5168] <... futex resumed>) = 0 [pid 5167] <... futex resumed>) = 1 [pid 5177] <... set_robust_list resumed>) = 0 [pid 5177] chdir("./9") = 0 [pid 5177] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5168] open("./bus", O_RDONLY [pid 5167] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5177] <... prctl resumed>) = 0 [pid 5177] setpgid(0, 0 [pid 5168] <... open resumed>) = 6 [pid 5177] <... setpgid resumed>) = 0 [pid 5177] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5168] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5177] <... openat resumed>) = 3 [pid 5168] <... futex resumed>) = 1 [pid 5167] <... futex resumed>) = 0 [pid 5177] write(3, "1000", 4 [pid 5168] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5167] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5177] <... write resumed>) = 4 [pid 5168] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5167] <... futex resumed>) = 0 [pid 5177] close(3 [pid 5168] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5167] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5177] <... close resumed>) = 0 [pid 5177] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5168] <... open resumed>) = 7 [pid 5177] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5168] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5177] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5168] <... futex resumed>) = 1 [pid 5167] <... futex resumed>) = 0 [pid 5177] <... mmap resumed>) = 0x7ff68769d000 [pid 5168] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5167] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5177] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE [pid 5168] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5177] <... mprotect resumed>) = 0 [pid 5168] dup(7 [pid 5167] <... futex resumed>) = 0 [pid 5177] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5168] <... dup resumed>) = 8 [pid 5167] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5177] <... clone resumed>, parent_tid=[5178], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5178 [pid 5168] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5177] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5168] <... futex resumed>) = 0 [pid 5167] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5177] <... futex resumed>) = 0 [pid 5168] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5167] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5177] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5168] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5167] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5178 attached [pid 5178] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5178] memfd_create("syzkaller", 0) = 3 [pid 5178] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5168] memfd_create("syzkaller", 0 [pid 5167] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5178] <... mmap resumed>) = 0x7ff67f29d000 [pid 5168] <... memfd_create resumed>) = 9 [pid 5168] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff677e9d000 [pid 5168] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5168] munmap(0x7ff677e9d000, 2097152) = 0 [pid 5168] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 10 [pid 5168] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5168] ioctl(10, LOOP_CLR_FD) = 0 [pid 5168] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5168] close(10) = 0 [pid 5168] close(9 [pid 5170] <... write resumed>) = 16777216 [pid 5170] munmap(0x7ff67f29d000, 16777216) = 0 [pid 5168] <... close resumed>) = 0 [pid 5168] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5167] <... futex resumed>) = 0 [pid 5168] sendfile(8, 6, NULL, 281474978811908 [pid 5167] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5174] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5167] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5170] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5170] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5170] close(3) = 0 [pid 5170] mkdir("./bus", 0777) = 0 [pid 5170] mount("/dev/loop1", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "") = 0 [pid 5170] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5170] chdir("./bus") = 0 [pid 5170] ioctl(4, LOOP_CLR_FD [pid 5175] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5170] <... ioctl resumed>) = 0 [pid 5167] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5170] close(4 [ 81.977313][ T5170] loop1: detected capacity change from 0 to 32768 [pid 5167] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5176] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5170] <... close resumed>) = 0 [pid 5170] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5167] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5170] <... futex resumed>) = 1 [pid 5169] <... futex resumed>) = 0 [pid 5170] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5169] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5167] <... mmap resumed>) = 0x7ff67807c000 [pid 5170] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5169] <... futex resumed>) = 0 [pid 5167] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5170] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5169] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5170] <... open resumed>) = 4 [pid 5167] <... mprotect resumed>) = 0 [pid 5170] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5169] <... futex resumed>) = 0 [pid 5167] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5169] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5169] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5170] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 5167] <... clone resumed>, parent_tid=[5179], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5179 [pid 5170] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5167] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5170] <... futex resumed>) = 1 [pid 5169] <... futex resumed>) = 0 [pid 5167] <... futex resumed>) = 0 [pid 5169] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5167] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5170] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5169] <... futex resumed>) = 0 [pid 5169] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5170] <... mmap resumed>) = 0x20000000 [pid 5170] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5169] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5179 attached [pid 5170] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5169] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5170] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5169] <... futex resumed>) = 0 [pid 5179] set_robust_list(0x7ff67809c9e0, 24 [pid 5169] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5170] ftruncate(4, 33587199) = 0 [pid 5170] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5169] <... futex resumed>) = 0 [pid 5170] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5169] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5179] <... set_robust_list resumed>) = 0 [pid 5170] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5169] <... futex resumed>) = 0 [pid 5169] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5170] open("./bus", O_RDONLY) = 6 [pid 5170] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5179] sync( [pid 5170] <... futex resumed>) = 1 [pid 5169] <... futex resumed>) = 0 [pid 5170] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5169] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5170] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5169] <... futex resumed>) = 0 [pid 5169] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5170] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5170] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5169] <... futex resumed>) = 0 [pid 5170] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5169] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5170] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5169] <... futex resumed>) = 0 [pid 5170] dup(7 [pid 5169] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5170] <... dup resumed>) = 8 [pid 5170] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5167] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5170] <... futex resumed>) = 1 [pid 5169] <... futex resumed>) = 0 [pid 5169] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5169] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5170] memfd_create("syzkaller", 0 [pid 5179] <... sync resumed>) = 0 [pid 5179] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5170] <... memfd_create resumed>) = 9 [pid 5179] <... futex resumed>) = 0 [pid 5170] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5179] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5170] <... mmap resumed>) = 0x7ff677e9d000 [pid 5170] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5178] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5170] <... write resumed>) = 2097152 [pid 5170] munmap(0x7ff677e9d000, 2097152) = 0 [pid 5170] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 10 [pid 5170] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5170] ioctl(10, LOOP_CLR_FD) = 0 [pid 5170] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5170] close(10) = 0 [pid 5170] close(9) = 0 [pid 5170] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5169] <... futex resumed>) = 0 [pid 5170] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5169] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5170] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5169] <... futex resumed>) = 0 [pid 5170] sendfile(8, 6, NULL, 281474978811908 [pid 5169] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5169] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5169] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff67807c000 [pid 5169] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5169] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5180], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5180 [pid 5169] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5169] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5180 attached [pid 5180] set_robust_list(0x7ff67809c9e0, 24) = 0 [pid 5180] sync() = 0 [pid 5180] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5169] <... futex resumed>) = 0 [pid 5180] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5167] exit_group(0 [pid 5179] <... futex resumed>) = ? [pid 5167] <... exit_group resumed>) = ? [pid 5179] +++ exited with 0 +++ [pid 5168] <... sendfile resumed>) = ? [pid 5168] +++ exited with 0 +++ [pid 5167] +++ exited with 0 +++ [pid 4996] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5167, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=35 /* 0.35 s */} --- [pid 4996] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4996] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4996] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] getdents64(3, 0x555556742620 /* 4 entries */, 32768) = 104 [pid 4996] umount2("./9/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5174] <... write resumed>) = 16777216 [pid 5174] munmap(0x7ff67f29d000, 16777216) = 0 [pid 5174] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5174] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5175] <... write resumed>) = 16777216 [pid 5175] munmap(0x7ff67f29d000, 16777216 [pid 5174] close(3) = 0 [pid 5174] mkdir("./bus", 0777) = 0 [pid 5174] mount("/dev/loop2", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5176] <... write resumed>) = 16777216 [pid 5176] munmap(0x7ff67f29d000, 16777216 [pid 5174] <... mount resumed>) = 0 [pid 5175] <... munmap resumed>) = 0 [pid 5174] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5175] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5174] <... openat resumed>) = 3 [pid 5175] <... openat resumed>) = 4 [pid 5174] chdir("./bus" [pid 5175] ioctl(4, LOOP_SET_FD, 3 [pid 5174] <... chdir resumed>) = 0 [ 82.587899][ T5174] loop2: detected capacity change from 0 to 32768 [pid 5174] ioctl(4, LOOP_CLR_FD) = 0 [pid 5174] close(4) = 0 [pid 5174] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5172] <... futex resumed>) = 0 [pid 5174] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5172] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5174] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5172] <... futex resumed>) = 0 [pid 5174] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5172] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5174] <... open resumed>) = 4 [pid 5174] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5172] <... futex resumed>) = 0 [pid 5174] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5172] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5174] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5172] <... futex resumed>) = 0 [pid 5174] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5172] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5174] <... open resumed>) = 5 [pid 5174] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5172] <... futex resumed>) = 0 [pid 5176] <... munmap resumed>) = 0 [pid 5174] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5172] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5176] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5175] <... ioctl resumed>) = 0 [pid 5174] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5172] <... futex resumed>) = 0 [pid 5175] close(3 [pid 5174] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5172] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5176] <... openat resumed>) = 4 [pid 5175] <... close resumed>) = 0 [pid 5174] <... mmap resumed>) = 0x20000000 [pid 5176] ioctl(4, LOOP_SET_FD, 3 [pid 5175] mkdir("./bus", 0777 [ 82.636678][ T5175] loop4: detected capacity change from 0 to 32768 [pid 5174] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5172] <... futex resumed>) = 0 [pid 5174] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5172] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5174] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5172] <... futex resumed>) = 0 [pid 5174] ftruncate(4, 33587199 [pid 5172] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5174] <... ftruncate resumed>) = 0 [pid 5174] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5172] <... futex resumed>) = 0 [pid 5174] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5172] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5174] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5172] <... futex resumed>) = 0 [pid 5175] <... mkdir resumed>) = 0 [pid 5174] open("./bus", O_RDONLY [pid 5172] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5175] mount("/dev/loop4", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5174] <... open resumed>) = 6 [pid 5174] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5172] <... futex resumed>) = 0 [pid 5174] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5172] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5174] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5172] <... futex resumed>) = 0 [pid 5174] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5172] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5175] <... mount resumed>) = 0 [pid 5174] <... open resumed>) = 7 [pid 5176] <... ioctl resumed>) = 0 [pid 5175] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5174] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5176] close(3 [pid 5175] <... openat resumed>) = 3 [pid 5174] <... futex resumed>) = 1 [pid 5172] <... futex resumed>) = 0 [pid 5176] <... close resumed>) = 0 [pid 5175] chdir("./bus" [pid 5174] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5172] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5176] mkdir("./bus", 0777 [pid 5175] <... chdir resumed>) = 0 [pid 5174] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5172] <... futex resumed>) = 0 [pid 5176] <... mkdir resumed>) = 0 [pid 5175] ioctl(4, LOOP_CLR_FD [pid 5174] dup(7 [pid 5172] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5176] mount("/dev/loop5", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5175] <... ioctl resumed>) = 0 [pid 5174] <... dup resumed>) = 8 [pid 5174] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5175] close(4 [pid 5174] <... futex resumed>) = 1 [pid 5172] <... futex resumed>) = 0 [pid 5176] <... mount resumed>) = 0 [pid 5175] <... close resumed>) = 0 [pid 5174] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5172] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5174] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5172] <... futex resumed>) = 0 [pid 5176] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5175] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5174] memfd_create("syzkaller", 0 [pid 5172] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5176] <... openat resumed>) = 3 [pid 5175] <... futex resumed>) = 1 [pid 5174] <... memfd_create resumed>) = 9 [pid 5171] <... futex resumed>) = 0 [pid 5176] chdir("./bus" [pid 5175] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5174] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [ 82.678715][ T5176] loop5: detected capacity change from 0 to 32768 [pid 5171] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5176] <... chdir resumed>) = 0 [pid 5175] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5174] <... mmap resumed>) = 0x7ff677e9d000 [pid 5171] <... futex resumed>) = 0 [pid 5178] <... write resumed>) = 16777216 [pid 5176] ioctl(4, LOOP_CLR_FD [pid 5175] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5171] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5176] <... ioctl resumed>) = 0 [pid 5175] <... open resumed>) = 4 [pid 5176] close(4 [pid 5175] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5176] <... close resumed>) = 0 [pid 5175] <... futex resumed>) = 1 [pid 5171] <... futex resumed>) = 0 [pid 5176] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5175] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5171] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5178] munmap(0x7ff67f29d000, 16777216 [pid 5176] <... futex resumed>) = 1 [pid 5175] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5173] <... futex resumed>) = 0 [pid 5171] <... futex resumed>) = 0 [pid 5178] <... munmap resumed>) = 0 [pid 5176] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5175] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5173] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5171] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5176] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5175] <... open resumed>) = 5 [pid 5173] <... futex resumed>) = 0 [pid 5178] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5176] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5175] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5173] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5178] <... openat resumed>) = 4 [pid 5178] ioctl(4, LOOP_SET_FD, 3 [pid 5176] <... open resumed>) = 4 [pid 5175] <... futex resumed>) = 1 [pid 5171] <... futex resumed>) = 0 [pid 5176] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5175] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5171] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5176] <... futex resumed>) = 1 [pid 5173] <... futex resumed>) = 0 [pid 5178] <... ioctl resumed>) = 0 [pid 5176] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5175] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5173] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5171] <... futex resumed>) = 0 [pid 5178] close(3 [pid 5176] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5175] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5174] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5173] <... futex resumed>) = 0 [pid 5171] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5178] <... close resumed>) = 0 [pid 5176] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5175] <... mmap resumed>) = 0x20000000 [pid 5178] mkdir("./bus", 0777 [pid 5176] <... open resumed>) = 5 [pid 5175] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5173] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5178] <... mkdir resumed>) = 0 [pid 5176] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5175] <... futex resumed>) = 1 [pid 5173] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5171] <... futex resumed>) = 0 [pid 5178] mount("/dev/loop0", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5176] <... futex resumed>) = 0 [pid 5175] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5173] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5171] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5173] <... futex resumed>) = 0 [pid 5171] <... futex resumed>) = 0 [pid 5176] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5175] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5173] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5171] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5176] <... mmap resumed>) = 0x20000000 [pid 5175] ftruncate(4, 33587199 [pid 5176] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5175] <... ftruncate resumed>) = 0 [pid 5176] <... futex resumed>) = 1 [pid 5175] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5173] <... futex resumed>) = 0 [pid 5178] <... mount resumed>) = 0 [pid 5176] ftruncate(4, 33587199 [pid 5175] <... futex resumed>) = 1 [pid 5173] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5171] <... futex resumed>) = 0 [pid 5178] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5176] <... ftruncate resumed>) = 0 [pid 5175] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5173] <... futex resumed>) = 0 [pid 5171] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5176] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5175] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5173] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5171] <... futex resumed>) = 0 [pid 5171] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5176] <... futex resumed>) = 0 [pid 5175] open("./bus", O_RDONLY [pid 5178] <... openat resumed>) = 3 [pid 5173] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5178] chdir("./bus" [pid 5176] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5175] <... open resumed>) = 6 [pid 5173] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5178] <... chdir resumed>) = 0 [pid 5176] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5175] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5173] <... futex resumed>) = 0 [ 82.776224][ T5178] loop0: detected capacity change from 0 to 32768 [pid 5173] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5178] ioctl(4, LOOP_CLR_FD [pid 5176] open("./bus", O_RDONLY [pid 5175] <... futex resumed>) = 1 [pid 5171] <... futex resumed>) = 0 [pid 5178] <... ioctl resumed>) = 0 [pid 5176] <... open resumed>) = 6 [pid 5175] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5174] <... write resumed>) = 2097152 [pid 5171] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5178] close(4 [pid 5176] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5175] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5174] munmap(0x7ff677e9d000, 2097152 [pid 5171] <... futex resumed>) = 0 [pid 5178] <... close resumed>) = 0 [pid 5176] <... futex resumed>) = 1 [pid 5175] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5174] <... munmap resumed>) = 0 [pid 5173] <... futex resumed>) = 0 [pid 5171] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5178] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5176] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5175] <... open resumed>) = 7 [pid 5173] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5178] <... futex resumed>) = 1 [pid 5177] <... futex resumed>) = 0 [pid 5176] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5175] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5173] <... futex resumed>) = 0 [pid 5178] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5177] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5176] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5175] <... futex resumed>) = 1 [pid 5174] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5173] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5171] <... futex resumed>) = 0 [pid 5178] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5177] <... futex resumed>) = 0 [pid 5176] <... open resumed>) = 7 [pid 5175] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5174] <... openat resumed>) = 10 [pid 5171] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5178] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5177] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5176] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5175] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5174] ioctl(10, LOOP_SET_FD, 9 [pid 5171] <... futex resumed>) = 0 [pid 5178] <... open resumed>) = 4 [pid 5176] <... futex resumed>) = 1 [pid 5175] dup(7 [pid 5174] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5173] <... futex resumed>) = 0 [pid 5171] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5178] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5176] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5175] <... dup resumed>) = 8 [pid 5174] ioctl(10, LOOP_CLR_FD [pid 5173] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5178] <... futex resumed>) = 1 [pid 5177] <... futex resumed>) = 0 [pid 5176] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5175] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5174] <... ioctl resumed>) = 0 [pid 5173] <... futex resumed>) = 0 [pid 5178] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5177] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5176] dup(7 [pid 5175] <... futex resumed>) = 1 [pid 5173] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5171] <... futex resumed>) = 0 [pid 5178] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5177] <... futex resumed>) = 0 [pid 5176] <... dup resumed>) = 8 [pid 5175] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5171] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5178] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5177] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5176] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5175] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5174] ioctl(10, LOOP_SET_FD, 9 [pid 5171] <... futex resumed>) = 0 [pid 5178] <... open resumed>) = 5 [pid 5176] <... futex resumed>) = 1 [pid 5174] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5174] close(10) = 0 [pid 5174] close(9 [pid 5173] <... futex resumed>) = 0 [pid 5171] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5174] <... close resumed>) = 0 [pid 5169] exit_group(0) = ? [pid 5174] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5172] <... futex resumed>) = 0 [pid 5172] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5172] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5174] <... futex resumed>) = 1 [pid 5174] sendfile(8, 6, NULL, 281474978811908 [pid 5180] <... futex resumed>) = ? [pid 5178] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5176] memfd_create("syzkaller", 0 [pid 5175] memfd_create("syzkaller", 0 [pid 5173] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5170] <... sendfile resumed>) = ? [pid 5180] +++ exited with 0 +++ [pid 5178] <... futex resumed>) = 1 [pid 5177] <... futex resumed>) = 0 [pid 5176] <... memfd_create resumed>) = 9 [pid 5175] <... memfd_create resumed>) = 9 [pid 5173] <... futex resumed>) = 0 [pid 5170] +++ exited with 0 +++ [pid 5169] +++ exited with 0 +++ [pid 5178] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5177] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5176] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5175] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5173] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4994] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5169, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=34 /* 0.34 s */} --- [pid 5178] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5177] <... futex resumed>) = 0 [pid 5176] <... mmap resumed>) = 0x7ff677e9d000 [pid 5175] <... mmap resumed>) = 0x7ff677e9d000 [pid 5178] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5177] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4994] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4994] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] getdents64(3, 0x555556742620 /* 4 entries */, 32768) = 104 [pid 4994] umount2("./9/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5178] <... mmap resumed>) = 0x20000000 [pid 5178] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5177] <... futex resumed>) = 0 [pid 5178] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5177] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5178] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5177] <... futex resumed>) = 0 [pid 5178] ftruncate(4, 33587199 [pid 5177] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5178] <... ftruncate resumed>) = 0 [pid 5178] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5172] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5178] <... futex resumed>) = 1 [pid 5177] <... futex resumed>) = 0 [pid 5172] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5178] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5177] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5172] <... futex resumed>) = 0 [pid 5178] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5177] <... futex resumed>) = 0 [pid 5172] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5178] open("./bus", O_RDONLY [pid 5177] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5172] <... mmap resumed>) = 0x7ff67807c000 [pid 5178] <... open resumed>) = 6 [pid 5172] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5178] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5172] <... mprotect resumed>) = 0 [pid 5178] <... futex resumed>) = 1 [pid 5177] <... futex resumed>) = 0 [pid 5172] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5178] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5177] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5178] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5177] <... futex resumed>) = 0 [pid 5172] <... clone resumed>, parent_tid=[5181], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5181 [pid 5178] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5177] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5172] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5178] <... open resumed>) = 7 [pid 5172] <... futex resumed>) = 0 [pid 5178] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5172] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5178] <... futex resumed>) = 1 [pid 5177] <... futex resumed>) = 0 [pid 5178] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5177] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5181 attached [pid 5178] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5177] <... futex resumed>) = 0 [pid 5181] set_robust_list(0x7ff67809c9e0, 24 [pid 5178] dup(7 [pid 5177] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5181] <... set_robust_list resumed>) = 0 [pid 5178] <... dup resumed>) = 8 [pid 5176] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5175] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5181] sync( [pid 5178] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5177] <... futex resumed>) = 0 [pid 5177] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5178] memfd_create("syzkaller", 0 [pid 5177] <... futex resumed>) = 0 [pid 5177] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5178] <... memfd_create resumed>) = 9 [pid 5178] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4996] <... umount2 resumed>) = 0 [pid 4996] umount2("./9/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5178] <... mmap resumed>) = 0x7ff677e9d000 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4996] lstat("./9/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] umount2("./9/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] openat(AT_FDCWD, "./9/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4996] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4996] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4996] close(4) = 0 [pid 4996] rmdir("./9/bus") = 0 [pid 4996] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] lstat("./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4996] unlink("./9/binderfs") = 0 [pid 4996] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 5172] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4996] close(3) = 0 [pid 4996] rmdir("./9") = 0 [pid 4996] mkdir("./10", 0777) = 0 [pid 4996] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 4996] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4996] close(3) = 0 [pid 4996] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567415d0) = 5182 ./strace-static-x86_64: Process 5182 attached [pid 5182] set_robust_list(0x5555567415e0, 24 [pid 5176] <... write resumed>) = 2097152 [pid 5182] <... set_robust_list resumed>) = 0 [pid 5175] <... write resumed>) = 2097152 [pid 5176] munmap(0x7ff677e9d000, 2097152 [pid 5182] chdir("./10" [pid 5178] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5175] munmap(0x7ff677e9d000, 2097152 [pid 5182] <... chdir resumed>) = 0 [pid 5176] <... munmap resumed>) = 0 [pid 5182] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5182] setpgid(0, 0) = 0 [pid 5176] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5175] <... munmap resumed>) = 0 [pid 5182] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5176] <... openat resumed>) = 10 [pid 5175] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5182] <... openat resumed>) = 3 [pid 5176] ioctl(10, LOOP_SET_FD, 9 [pid 5175] <... openat resumed>) = 10 [pid 5182] write(3, "1000", 4 [pid 5176] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5175] ioctl(10, LOOP_SET_FD, 9 [pid 5182] <... write resumed>) = 4 [pid 5176] ioctl(10, LOOP_CLR_FD [pid 5182] close(3 [pid 5176] <... ioctl resumed>) = 0 [pid 5175] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5182] <... close resumed>) = 0 [pid 5175] ioctl(10, LOOP_CLR_FD [pid 5182] symlink("/dev/binderfs", "./binderfs" [pid 5175] <... ioctl resumed>) = 0 [pid 5182] <... symlink resumed>) = 0 [pid 5182] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5176] ioctl(10, LOOP_SET_FD, 9 [pid 5182] <... futex resumed>) = 0 [pid 5176] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5182] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5176] close(10 [pid 5175] ioctl(10, LOOP_SET_FD, 9 [pid 5182] <... mmap resumed>) = 0x7ff68769d000 [pid 5176] <... close resumed>) = 0 [pid 5182] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5182] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5183], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5183 [pid 5182] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5182] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5183 attached [pid 5183] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5183] memfd_create("syzkaller", 0) = 3 [pid 5183] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 5176] close(9 [pid 5175] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5178] <... write resumed>) = 2097152 [pid 5176] <... close resumed>) = 0 [pid 5175] close(10) = 0 [pid 5175] close(9 [pid 5178] munmap(0x7ff677e9d000, 2097152 [pid 5175] <... close resumed>) = 0 [pid 5175] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5176] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5175] <... futex resumed>) = 1 [pid 5171] <... futex resumed>) = 0 [pid 5175] sendfile(8, 6, NULL, 281474978811908 [pid 5173] <... futex resumed>) = 0 [pid 5171] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5176] <... futex resumed>) = 1 [pid 5173] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5171] <... futex resumed>) = 0 [pid 5178] <... munmap resumed>) = 0 [pid 5176] sendfile(8, 6, NULL, 281474978811908 [pid 5173] <... futex resumed>) = 0 [pid 5171] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5173] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5178] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 10 [pid 5178] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5178] ioctl(10, LOOP_CLR_FD) = 0 [pid 5178] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5178] close(10) = 0 [pid 5178] close(9) = 0 [pid 5178] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5177] <... futex resumed>) = 0 [pid 5178] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5173] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5171] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5178] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5177] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5173] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5181] <... sync resumed>) = 0 [pid 5178] sendfile(8, 6, NULL, 281474978811908 [pid 5177] <... futex resumed>) = 0 [pid 5173] <... futex resumed>) = 0 [pid 5171] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5181] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5177] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5173] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5171] <... futex resumed>) = 0 [pid 5181] <... futex resumed>) = 0 [pid 5173] <... mmap resumed>) = 0x7ff67807c000 [pid 5181] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5173] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5171] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5173] <... mprotect resumed>) = 0 [pid 5173] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5171] <... mmap resumed>) = 0x7ff67807c000 [pid 5171] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5173] <... clone resumed>, parent_tid=[5184], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5184 [pid 5173] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5171] <... mprotect resumed>) = 0 [pid 5173] <... futex resumed>) = 0 [pid 5171] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5173] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5171] <... clone resumed>, parent_tid=[5185], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5185 [pid 5171] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5171] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5185 attached ./strace-static-x86_64: Process 5184 attached [pid 5185] set_robust_list(0x7ff67809c9e0, 24 [pid 5177] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5185] <... set_robust_list resumed>) = 0 [pid 5184] set_robust_list(0x7ff67809c9e0, 24 [pid 5177] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5185] sync( [pid 5184] <... set_robust_list resumed>) = 0 [pid 5177] <... futex resumed>) = 0 [pid 5185] <... sync resumed>) = 0 [pid 5184] sync( [pid 5177] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5185] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5177] <... mmap resumed>) = 0x7ff67807c000 [pid 5185] <... futex resumed>) = 1 [pid 5171] <... futex resumed>) = 0 [pid 5185] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5177] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5177] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5184] <... sync resumed>) = 0 [pid 5184] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5177] <... clone resumed>, parent_tid=[5186], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5186 [pid 5184] <... futex resumed>) = 1 [pid 5177] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5173] <... futex resumed>) = 0 [pid 5184] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5177] <... futex resumed>) = 0 [pid 5177] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5186 attached [pid 5186] set_robust_list(0x7ff67809c9e0, 24) = 0 [pid 5186] sync() = 0 [pid 5186] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5177] <... futex resumed>) = 0 [pid 5186] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5172] exit_group(0 [pid 5181] <... futex resumed>) = ? [pid 5172] <... exit_group resumed>) = ? [pid 5181] +++ exited with 0 +++ [pid 5174] <... sendfile resumed>) = ? [pid 5174] +++ exited with 0 +++ [pid 5172] +++ exited with 0 +++ [pid 4995] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5172, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=46 /* 0.46 s */} --- [pid 4995] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4995] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4995] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4995] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] getdents64(3, 0x555556742620 /* 4 entries */, 32768) = 104 [pid 4995] umount2("./9/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] <... umount2 resumed>) = 0 [pid 4994] umount2("./9/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] lstat("./9/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] umount2("./9/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] openat(AT_FDCWD, "./9/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4994] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4994] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4994] close(4) = 0 [pid 4994] rmdir("./9/bus") = 0 [pid 4994] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] lstat("./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4994] unlink("./9/binderfs") = 0 [pid 4994] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4994] close(3) = 0 [pid 4994] rmdir("./9") = 0 [pid 4994] mkdir("./10", 0777) = 0 [pid 4994] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4994] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4994] close(3) = 0 [pid 4994] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567415d0) = 5187 ./strace-static-x86_64: Process 5187 attached [pid 5187] set_robust_list(0x5555567415e0, 24) = 0 [pid 5187] chdir("./10") = 0 [pid 5187] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5183] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5187] setpgid(0, 0) = 0 [pid 5187] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5187] write(3, "1000", 4) = 4 [pid 5187] close(3) = 0 [pid 5187] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5187] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5187] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5187] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5187] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5188], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5188 [pid 5187] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5187] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5188 attached [pid 5188] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5188] memfd_create("syzkaller", 0) = 3 [pid 5188] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 5171] exit_group(0 [pid 5185] <... futex resumed>) = ? [pid 5171] <... exit_group resumed>) = ? [pid 5185] +++ exited with 0 +++ [pid 5175] <... sendfile resumed>) = ? [pid 5177] exit_group(0 [pid 5186] <... futex resumed>) = ? [pid 5177] <... exit_group resumed>) = ? [pid 5186] +++ exited with 0 +++ [pid 5175] +++ exited with 0 +++ [pid 5171] +++ exited with 0 +++ [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5171, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=39 /* 0.39 s */} --- [pid 4997] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4997] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(3, [pid 5173] exit_group(0 [pid 4997] <... getdents64 resumed>0x555556742620 /* 4 entries */, 32768) = 104 [pid 5184] <... futex resumed>) = ? [pid 5173] <... exit_group resumed>) = ? [pid 4997] umount2("./9/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5184] +++ exited with 0 +++ [pid 5178] <... sendfile resumed>) = ? [pid 5178] +++ exited with 0 +++ [pid 5177] +++ exited with 0 +++ [pid 5176] <... sendfile resumed>) = ? [pid 4993] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5177, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=36 /* 0.36 s */} --- [pid 5176] +++ exited with 0 +++ [pid 5173] +++ exited with 0 +++ [pid 4993] restart_syscall(<... resuming interrupted clone ...> [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5173, si_uid=0, si_status=0, si_utime=11 /* 0.11 s */, si_stime=36 /* 0.36 s */} --- [pid 4993] <... restart_syscall resumed>) = 0 [pid 4993] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4993] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4993] fstat(3, [pid 4998] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4993] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4993] getdents64(3, [pid 4998] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4993] <... getdents64 resumed>0x555556742620 /* 4 entries */, 32768) = 104 [pid 4998] <... openat resumed>) = 3 [pid 4993] umount2("./9/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x555556742620 /* 4 entries */, 32768) = 104 [pid 4998] umount2("./9/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... umount2 resumed>) = 0 [pid 4997] umount2("./9/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./9/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./9/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./9/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4997] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4997] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4997] close(4) = 0 [pid 4997] rmdir("./9/bus") = 0 [pid 4997] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] unlink("./9/binderfs") = 0 [pid 4997] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4997] close(3) = 0 [pid 4997] rmdir("./9") = 0 [pid 4997] mkdir("./10", 0777) = 0 [pid 4997] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 4997] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4997] close(3) = 0 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567415d0) = 5189 ./strace-static-x86_64: Process 5189 attached [pid 5189] set_robust_list(0x5555567415e0, 24) = 0 [pid 5189] chdir("./10") = 0 [pid 5188] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5189] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5189] setpgid(0, 0) = 0 [pid 5189] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5189] write(3, "1000", 4) = 4 [pid 5189] close(3) = 0 [pid 5189] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5189] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5189] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5189] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5189] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5190], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5190 [pid 5189] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5189] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5190 attached [pid 5190] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5190] memfd_create("syzkaller", 0) = 3 [pid 5190] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 4993] <... umount2 resumed>) = 0 [pid 4993] umount2("./9/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4993] lstat("./9/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4993] umount2("./9/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4993] openat(AT_FDCWD, "./9/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4993] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4993] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4993] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4993] close(4) = 0 [pid 4993] rmdir("./9/bus") = 0 [pid 4993] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4993] lstat("./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4993] unlink("./9/binderfs") = 0 [pid 4993] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4993] close(3) = 0 [pid 4993] rmdir("./9") = 0 [pid 4993] mkdir("./10", 0777) = 0 [pid 4993] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4993] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4993] close(3) = 0 [pid 4993] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567415d0) = 5191 ./strace-static-x86_64: Process 5191 attached [pid 5191] set_robust_list(0x5555567415e0, 24) = 0 [pid 5191] chdir("./10") = 0 [pid 5191] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5191] setpgid(0, 0) = 0 [pid 5191] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5191] write(3, "1000", 4) = 4 [pid 5191] close(3) = 0 [pid 5191] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5191] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5191] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5191] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE [pid 5183] <... write resumed>) = 16777216 [pid 5191] <... mprotect resumed>) = 0 [pid 5191] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5192], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5192 [pid 5183] munmap(0x7ff67f29d000, 16777216 [pid 5191] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5191] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5192 attached [pid 5192] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5192] memfd_create("syzkaller", 0) = 3 [pid 5183] <... munmap resumed>) = 0 [pid 5192] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 5183] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5183] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5183] close(3) = 0 [pid 5183] mkdir("./bus", 0777) = 0 [pid 5183] mount("/dev/loop3", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "") = 0 [pid 5183] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5183] chdir("./bus") = 0 [pid 5183] ioctl(4, LOOP_CLR_FD) = 0 [pid 5183] close(4) = 0 [ 84.190162][ T5183] loop3: detected capacity change from 0 to 32768 [pid 5183] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5182] <... futex resumed>) = 0 [pid 5183] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5182] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5183] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5182] <... futex resumed>) = 0 [pid 5183] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5182] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5183] <... open resumed>) = 4 [pid 5183] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5182] <... futex resumed>) = 0 [pid 5183] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5182] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5183] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5182] <... futex resumed>) = 0 [pid 5183] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5182] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5183] <... open resumed>) = 5 [pid 5183] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5182] <... futex resumed>) = 0 [pid 5183] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5182] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5183] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5182] <... futex resumed>) = 0 [pid 5183] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5182] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5183] <... mmap resumed>) = 0x20000000 [pid 5183] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5182] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5183] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5182] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5183] <... futex resumed>) = 0 [pid 5182] <... futex resumed>) = 1 [pid 5183] ftruncate(4, 33587199) = 0 [pid 5182] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5183] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5182] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5183] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5182] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5183] <... futex resumed>) = 0 [pid 5182] <... futex resumed>) = 1 [pid 5182] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5183] open("./bus", O_RDONLY) = 6 [pid 5183] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5182] <... futex resumed>) = 0 [pid 5183] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5182] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5183] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5182] <... futex resumed>) = 0 [pid 5183] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5182] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5183] <... open resumed>) = 7 [pid 5183] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5182] <... futex resumed>) = 0 [pid 5183] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5182] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5183] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5182] <... futex resumed>) = 0 [pid 5183] dup(7 [pid 5182] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5183] <... dup resumed>) = 8 [pid 5183] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5182] <... futex resumed>) = 0 [pid 5182] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5182] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5183] memfd_create("syzkaller", 0) = 9 [pid 5183] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff677e9d000 [pid 4995] <... umount2 resumed>) = 0 [pid 4995] umount2("./9/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4995] lstat("./9/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] umount2("./9/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4995] openat(AT_FDCWD, "./9/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4995] fstat(4, [pid 5183] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4995] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4995] close(4) = 0 [pid 4995] rmdir("./9/bus") = 0 [pid 4995] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4995] lstat("./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4995] unlink("./9/binderfs" [pid 5190] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 4995] <... unlink resumed>) = 0 [pid 4995] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4995] close(3) = 0 [pid 4995] rmdir("./9") = 0 [pid 4995] mkdir("./10", 0777) = 0 [pid 4995] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 4995] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4995] close(3 [pid 4998] <... umount2 resumed>) = 0 [pid 4995] <... close resumed>) = 0 [pid 4998] umount2("./9/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./9/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./9/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./9/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4995] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] <... openat resumed>) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, [pid 4995] <... clone resumed>, child_tidptr=0x5555567415d0) = 5193 [pid 4998] <... getdents64 resumed>0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./9/bus") = 0 ./strace-static-x86_64: Process 5193 attached [pid 4998] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5193] set_robust_list(0x5555567415e0, 24 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5193] <... set_robust_list resumed>) = 0 [pid 4998] lstat("./9/binderfs", [pid 5193] chdir("./10" [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5193] <... chdir resumed>) = 0 [pid 4998] unlink("./9/binderfs" [pid 5193] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4998] <... unlink resumed>) = 0 [pid 5193] <... prctl resumed>) = 0 [pid 4998] getdents64(3, [pid 5193] setpgid(0, 0 [pid 4998] <... getdents64 resumed>0x555556742620 /* 0 entries */, 32768) = 0 [pid 5193] <... setpgid resumed>) = 0 [pid 4998] close(3 [pid 5193] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4998] <... close resumed>) = 0 [pid 5193] <... openat resumed>) = 3 [pid 4998] rmdir("./9" [pid 5193] write(3, "1000", 4 [pid 4998] <... rmdir resumed>) = 0 [pid 5193] <... write resumed>) = 4 [pid 5183] <... write resumed>) = 2097152 [pid 4998] mkdir("./10", 0777 [pid 5193] close(3 [pid 4998] <... mkdir resumed>) = 0 [pid 5183] munmap(0x7ff677e9d000, 2097152 [pid 5193] <... close resumed>) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5193] symlink("/dev/binderfs", "./binderfs" [pid 4998] <... openat resumed>) = 3 [pid 5193] <... symlink resumed>) = 0 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5193] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5183] <... munmap resumed>) = 0 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5193] <... futex resumed>) = 0 [pid 4998] close(3 [pid 5193] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4998] <... close resumed>) = 0 [pid 5193] <... mmap resumed>) = 0x7ff68769d000 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5193] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4998] <... clone resumed>, child_tidptr=0x5555567415d0) = 5194 [pid 5193] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5195], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5195 [pid 5193] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5193] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5194 attached [pid 5194] set_robust_list(0x5555567415e0, 24) = 0 [pid 5194] chdir("./10") = 0 [pid 5194] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5194] setpgid(0, 0) = 0 [pid 5194] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5194] write(3, "1000", 4) = 4 [pid 5183] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5194] close(3 [pid 5183] <... openat resumed>) = 10 [pid 5183] ioctl(10, LOOP_SET_FD, 9 [pid 5194] <... close resumed>) = 0 [pid 5183] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) ./strace-static-x86_64: Process 5195 attached [pid 5194] symlink("/dev/binderfs", "./binderfs" [pid 5183] ioctl(10, LOOP_CLR_FD [pid 5195] set_robust_list(0x7ff6876bd9e0, 24 [pid 5194] <... symlink resumed>) = 0 [pid 5183] <... ioctl resumed>) = 0 [pid 5195] <... set_robust_list resumed>) = 0 [pid 5194] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5195] memfd_create("syzkaller", 0 [pid 5194] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5195] <... memfd_create resumed>) = 3 [pid 5194] <... mmap resumed>) = 0x7ff68769d000 [pid 5195] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5194] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE [pid 5183] ioctl(10, LOOP_SET_FD, 9 [pid 5195] <... mmap resumed>) = 0x7ff67f29d000 [pid 5194] <... mprotect resumed>) = 0 [pid 5183] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5194] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5183] close(10) = 0 [pid 5194] <... clone resumed>, parent_tid=[5196], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5196 [pid 5183] close(9 [pid 5194] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5194] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5196 attached [pid 5196] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5196] memfd_create("syzkaller", 0) = 3 [pid 5196] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5188] <... write resumed>) = 16777216 [pid 5183] <... close resumed>) = 0 [pid 5196] <... mmap resumed>) = 0x7ff67f29d000 [pid 5183] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5182] <... futex resumed>) = 0 [pid 5183] sendfile(8, 6, NULL, 281474978811908 [pid 5182] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5182] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5188] munmap(0x7ff67f29d000, 16777216) = 0 [pid 5188] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5182] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5182] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5182] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff67807c000 [pid 5182] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5182] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5197], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5197 [pid 5188] <... openat resumed>) = 4 [pid 5182] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5188] ioctl(4, LOOP_SET_FD, 3 [pid 5182] <... futex resumed>) = 0 [pid 5188] <... ioctl resumed>) = 0 [pid 5182] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5197 attached [pid 5197] set_robust_list(0x7ff67809c9e0, 24) = 0 [pid 5197] sync() = 0 [pid 5197] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5182] <... futex resumed>) = 0 [pid 5197] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5188] close(3) = 0 [pid 5188] mkdir("./bus", 0777) = 0 [pid 5188] mount("/dev/loop1", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "") = 0 [ 84.614481][ T5188] loop1: detected capacity change from 0 to 32768 [pid 5188] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5188] chdir("./bus") = 0 [pid 5188] ioctl(4, LOOP_CLR_FD) = 0 [pid 5188] close(4) = 0 [pid 5188] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5187] <... futex resumed>) = 0 [pid 5188] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5187] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5188] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5187] <... futex resumed>) = 0 [pid 5188] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5187] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5188] <... open resumed>) = 4 [pid 5188] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5187] <... futex resumed>) = 0 [pid 5188] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5187] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5188] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5187] <... futex resumed>) = 0 [pid 5188] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5187] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5188] <... open resumed>) = 5 [pid 5188] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5187] <... futex resumed>) = 0 [pid 5188] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5187] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5188] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5187] <... futex resumed>) = 0 [pid 5188] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5187] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5188] <... mmap resumed>) = 0x20000000 [pid 5188] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5187] <... futex resumed>) = 0 [pid 5188] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5187] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5188] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5187] <... futex resumed>) = 0 [pid 5188] ftruncate(4, 33587199 [pid 5187] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5188] <... ftruncate resumed>) = 0 [pid 5188] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5187] <... futex resumed>) = 0 [pid 5188] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5187] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5188] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5187] <... futex resumed>) = 0 [pid 5188] open("./bus", O_RDONLY [pid 5187] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5192] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5188] <... open resumed>) = 6 [pid 5188] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5187] <... futex resumed>) = 0 [pid 5188] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5187] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5188] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5187] <... futex resumed>) = 0 [pid 5188] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5187] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5188] <... open resumed>) = 7 [pid 5188] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5187] <... futex resumed>) = 0 [pid 5188] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5187] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5188] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5187] <... futex resumed>) = 0 [pid 5188] dup(7 [pid 5187] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5188] <... dup resumed>) = 8 [pid 5188] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5187] <... futex resumed>) = 0 [pid 5188] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5187] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5188] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5187] <... futex resumed>) = 0 [pid 5188] memfd_create("syzkaller", 0 [pid 5187] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5188] <... memfd_create resumed>) = 9 [pid 5188] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff677e9d000 [ 84.723388][ T27] kauditd_printk_skb: 16 callbacks suppressed [ 84.723401][ T27] audit: type=1804 audit(1686284889.567:124): pid=5188 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor481" name="/root/syzkaller.20fUYQ/10/bus/bus" dev="loop1" ino=7 res=1 errno=0 [ 84.852617][ T27] audit: type=1804 audit(1686284889.607:125): pid=5188 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor481" name="/root/syzkaller.20fUYQ/10/bus/bus" dev="loop1" ino=7 res=1 errno=0 [pid 5188] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5188] munmap(0x7ff677e9d000, 2097152) = 0 [pid 5188] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 10 [pid 5188] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5188] ioctl(10, LOOP_CLR_FD) = 0 [pid 5188] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5188] close(10) = 0 [pid 5188] close(9) = 0 [pid 5188] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5187] <... futex resumed>) = 0 [pid 5188] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5187] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5188] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5187] <... futex resumed>) = 0 [pid 5188] sendfile(8, 6, NULL, 281474978811908 [pid 5187] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5182] exit_group(0 [pid 5197] <... futex resumed>) = ? [pid 5182] <... exit_group resumed>) = ? [pid 5197] +++ exited with 0 +++ [pid 5183] <... sendfile resumed>) = ? [pid 5183] +++ exited with 0 +++ [pid 5182] +++ exited with 0 +++ [pid 4996] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5182, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=31 /* 0.31 s */} --- [pid 4996] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5196] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5187] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4996] <... openat resumed>) = 3 [pid 5187] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] fstat(3, [pid 5187] <... futex resumed>) = 0 [pid 4996] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5187] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4996] getdents64(3, [pid 5187] <... mmap resumed>) = 0x7ff67807c000 [pid 4996] <... getdents64 resumed>0x555556742620 /* 4 entries */, 32768) = 104 [pid 5187] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 4996] umount2("./10/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5187] <... mprotect resumed>) = 0 [pid 5187] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5198], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5198 [pid 5187] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5187] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5198 attached [pid 5198] set_robust_list(0x7ff67809c9e0, 24) = 0 [pid 5198] sync() = 0 [pid 5198] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5187] <... futex resumed>) = 0 [pid 5198] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5195] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5190] <... write resumed>) = 16777216 [pid 5190] munmap(0x7ff67f29d000, 16777216) = 0 [pid 5190] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5190] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5190] close(3) = 0 [pid 5190] mkdir("./bus", 0777) = 0 [pid 5190] mount("/dev/loop4", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "") = 0 [pid 5190] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5190] chdir("./bus") = 0 [pid 5190] ioctl(4, LOOP_CLR_FD) = 0 [pid 5190] close(4) = 0 [ 85.206160][ T5190] loop4: detected capacity change from 0 to 32768 [pid 5190] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5189] <... futex resumed>) = 0 [pid 5190] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5189] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5190] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5189] <... futex resumed>) = 0 [pid 5190] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5189] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5190] <... open resumed>) = 4 [pid 5190] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5189] <... futex resumed>) = 0 [pid 5190] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5189] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5190] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5189] <... futex resumed>) = 0 [pid 5190] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5189] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5190] <... open resumed>) = 5 [pid 5190] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5190] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5189] <... futex resumed>) = 0 [pid 5189] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5190] <... futex resumed>) = 0 [pid 5189] <... futex resumed>) = 1 [pid 5190] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5189] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5190] <... mmap resumed>) = 0x20000000 [pid 5190] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5189] <... futex resumed>) = 0 [pid 5190] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5189] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5190] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5189] <... futex resumed>) = 0 [pid 5190] ftruncate(4, 33587199 [pid 5189] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5190] <... ftruncate resumed>) = 0 [pid 5190] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5189] <... futex resumed>) = 0 [pid 5190] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5189] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5190] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5189] <... futex resumed>) = 0 [pid 5190] open("./bus", O_RDONLY [pid 5189] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5192] <... write resumed>) = 16777216 [pid 5190] <... open resumed>) = 6 [pid 4996] <... umount2 resumed>) = 0 [pid 5192] munmap(0x7ff67f29d000, 16777216 [pid 5190] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] umount2("./10/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5190] <... futex resumed>) = 1 [pid 5189] <... futex resumed>) = 0 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5190] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5189] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] lstat("./10/bus", [pid 5192] <... munmap resumed>) = 0 [pid 5190] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5189] <... futex resumed>) = 0 [pid 5192] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5190] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5189] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4996] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5192] <... openat resumed>) = 4 [pid 5190] <... open resumed>) = 7 [pid 4996] umount2("./10/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5192] ioctl(4, LOOP_SET_FD, 3 [ 85.326376][ T27] audit: type=1804 audit(1686284890.167:126): pid=5190 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor481" name="/root/syzkaller.hTAWL1/10/bus/bus" dev="loop4" ino=7 res=1 errno=0 [pid 5190] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5190] <... futex resumed>) = 1 [pid 5192] <... ioctl resumed>) = 0 [pid 5190] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5189] <... futex resumed>) = 0 [pid 4996] openat(AT_FDCWD, "./10/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5192] close(3 [pid 5189] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5192] <... close resumed>) = 0 [pid 5190] <... futex resumed>) = 0 [pid 5189] <... futex resumed>) = 1 [pid 4996] <... openat resumed>) = 4 [pid 5192] mkdir("./bus", 0777 [pid 5190] dup(7 [pid 5189] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4996] fstat(4, [pid 5192] <... mkdir resumed>) = 0 [pid 5190] <... dup resumed>) = 8 [pid 5192] mount("/dev/loop0", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5190] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5190] <... futex resumed>) = 1 [pid 5189] <... futex resumed>) = 0 [pid 4996] getdents64(4, [pid 5190] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5189] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5190] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5189] <... futex resumed>) = 0 [pid 4996] <... getdents64 resumed>0x55555674a660 /* 2 entries */, 32768) = 48 [pid 5189] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4996] getdents64(4, [pid 5192] <... mount resumed>) = 0 [pid 5190] memfd_create("syzkaller", 0 [pid 4996] <... getdents64 resumed>0x55555674a660 /* 0 entries */, 32768) = 0 [pid 5192] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5190] <... memfd_create resumed>) = 9 [pid 4996] close(4 [pid 5192] <... openat resumed>) = 3 [pid 5190] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4996] <... close resumed>) = 0 [pid 5192] chdir("./bus" [pid 5190] <... mmap resumed>) = 0x7ff677e9d000 [pid 4996] rmdir("./10/bus" [pid 5192] <... chdir resumed>) = 0 [pid 5192] ioctl(4, LOOP_CLR_FD) = 0 [ 85.378515][ T5192] loop0: detected capacity change from 0 to 32768 [ 85.400796][ T27] audit: type=1804 audit(1686284890.217:127): pid=5190 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor481" name="/root/syzkaller.hTAWL1/10/bus/bus" dev="loop4" ino=7 res=1 errno=0 [pid 5192] close(4) = 0 [pid 4996] <... rmdir resumed>) = 0 [pid 5192] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5192] <... futex resumed>) = 1 [pid 5191] <... futex resumed>) = 0 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5192] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5191] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] lstat("./10/binderfs", [pid 5192] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5191] <... futex resumed>) = 0 [pid 5196] <... write resumed>) = 16777216 [pid 5192] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5191] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4996] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5196] munmap(0x7ff67f29d000, 16777216 [pid 5192] <... open resumed>) = 4 [pid 5190] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 4996] unlink("./10/binderfs" [pid 5192] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... unlink resumed>) = 0 [pid 5192] <... futex resumed>) = 1 [pid 5191] <... futex resumed>) = 0 [pid 4996] getdents64(3, [pid 5192] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5191] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... getdents64 resumed>0x555556742620 /* 0 entries */, 32768) = 0 [pid 5192] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5191] <... futex resumed>) = 0 [pid 4996] close(3 [pid 5192] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5191] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4996] <... close resumed>) = 0 [pid 5192] <... open resumed>) = 5 [pid 4996] rmdir("./10" [pid 5192] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5191] <... futex resumed>) = 0 [pid 4996] <... rmdir resumed>) = 0 [pid 5192] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5191] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] mkdir("./11", 0777 [pid 5196] <... munmap resumed>) = 0 [pid 5192] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5191] <... futex resumed>) = 0 [pid 5192] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5191] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4996] <... mkdir resumed>) = 0 [pid 5196] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5192] <... mmap resumed>) = 0x20000000 [pid 4996] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5192] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... openat resumed>) = 3 [pid 5196] <... openat resumed>) = 4 [pid 5192] <... futex resumed>) = 1 [pid 5191] <... futex resumed>) = 0 [pid 4996] ioctl(3, LOOP_CLR_FD [pid 5196] ioctl(4, LOOP_SET_FD, 3 [pid 5192] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5191] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5196] <... ioctl resumed>) = 0 [pid 5192] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5191] <... futex resumed>) = 0 [pid 5190] <... write resumed>) = 2097152 [pid 4996] close(3 [pid 5192] ftruncate(4, 33587199 [pid 5191] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5187] exit_group(0 [pid 4996] <... close resumed>) = 0 [pid 5198] <... futex resumed>) = ? [pid 5192] <... ftruncate resumed>) = 0 [pid 5187] <... exit_group resumed>) = ? [pid 5198] +++ exited with 0 +++ [pid 5192] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5191] <... futex resumed>) = 0 [pid 5192] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5191] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5192] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5191] <... futex resumed>) = 0 [pid 5192] open("./bus", O_RDONLY [pid 5191] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5192] <... open resumed>) = 6 [pid 5192] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5191] <... futex resumed>) = 0 [pid 5192] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5191] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5192] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5191] <... futex resumed>) = 0 [pid 5192] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5191] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5192] <... open resumed>) = 7 [pid 5192] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5191] <... futex resumed>) = 0 [pid 5192] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5191] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5192] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5191] <... futex resumed>) = 0 [pid 5192] dup(7 [pid 5191] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5192] <... dup resumed>) = 8 [pid 5192] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5191] <... futex resumed>) = 0 [pid 5192] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5191] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5192] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5191] <... futex resumed>) = 0 [pid 5192] memfd_create("syzkaller", 0 [pid 5191] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5192] <... memfd_create resumed>) = 9 [pid 5192] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff677e9d000 [pid 4996] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567415d0) = 5199 [pid 5196] close(3) = 0 [pid 5190] munmap(0x7ff677e9d000, 2097152 [pid 5188] <... sendfile resumed>) = ? [pid 5196] mkdir("./bus", 0777) = 0 [ 85.519419][ T5196] loop5: detected capacity change from 0 to 32768 [ 85.540431][ T27] audit: type=1804 audit(1686284890.377:128): pid=5192 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor481" name="/root/syzkaller.lVUVkM/10/bus/bus" dev="loop0" ino=7 res=1 errno=0 [pid 5196] mount("/dev/loop5", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "") = 0 [pid 5190] <... munmap resumed>) = 0 [pid 5188] +++ exited with 0 +++ [pid 5187] +++ exited with 0 +++ [pid 4994] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5187, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=38 /* 0.38 s */} --- ./strace-static-x86_64: Process 5199 attached [pid 5199] set_robust_list(0x5555567415e0, 24) = 0 [pid 5199] chdir("./11") = 0 [pid 5196] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5190] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4994] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5199] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5196] <... openat resumed>) = 3 [pid 5190] <... openat resumed>) = 10 [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5199] <... prctl resumed>) = 0 [pid 5196] chdir("./bus" [pid 5192] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5190] ioctl(10, LOOP_SET_FD, 9 [pid 4994] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5199] setpgid(0, 0 [pid 5196] <... chdir resumed>) = 0 [pid 4994] <... openat resumed>) = 3 [pid 5199] <... setpgid resumed>) = 0 [pid 4994] fstat(3, [pid 5199] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5199] <... openat resumed>) = 3 [pid 4994] getdents64(3, [pid 5199] write(3, "1000", 4 [pid 4994] <... getdents64 resumed>0x555556742620 /* 4 entries */, 32768) = 104 [pid 5199] <... write resumed>) = 4 [pid 5196] ioctl(4, LOOP_CLR_FD [pid 5190] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 4994] umount2("./10/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5199] close(3 [pid 5196] <... ioctl resumed>) = 0 [pid 5190] ioctl(10, LOOP_CLR_FD [pid 5199] <... close resumed>) = 0 [pid 5196] close(4 [pid 5190] <... ioctl resumed>) = 0 [pid 5199] symlink("/dev/binderfs", "./binderfs" [pid 5196] <... close resumed>) = 0 [pid 5199] <... symlink resumed>) = 0 [pid 5199] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5199] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5199] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5196] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5199] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5196] <... futex resumed>) = 1 [pid 5194] <... futex resumed>) = 0 [pid 5196] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5194] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5199] <... clone resumed>, parent_tid=[5200], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5200 [pid 5196] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5194] <... futex resumed>) = 0 [pid 5199] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5196] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5194] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5190] ioctl(10, LOOP_SET_FD, 9 [pid 5199] <... futex resumed>) = 0 [pid 5199] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5196] <... open resumed>) = 4 [pid 5190] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5196] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5190] close(10 [pid 5196] <... futex resumed>) = 1 [pid 5194] <... futex resumed>) = 0 [pid 5190] <... close resumed>) = 0 [pid 5196] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5194] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5196] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5194] <... futex resumed>) = 0 [pid 5190] close(9 [pid 5196] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5194] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5200 attached [pid 5200] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5200] memfd_create("syzkaller", 0 [pid 5196] <... open resumed>) = 5 [pid 5200] <... memfd_create resumed>) = 3 [pid 5196] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5200] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5196] <... futex resumed>) = 1 [pid 5194] <... futex resumed>) = 0 [ 85.580189][ T27] audit: type=1804 audit(1686284890.377:129): pid=5192 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor481" name="/root/syzkaller.lVUVkM/10/bus/bus" dev="loop0" ino=7 res=1 errno=0 [pid 5200] <... mmap resumed>) = 0x7ff67f29d000 [pid 5196] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5194] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5196] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5194] <... futex resumed>) = 0 [pid 5190] <... close resumed>) = 0 [pid 5196] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5194] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5196] <... mmap resumed>) = 0x20000000 [pid 5196] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5196] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5194] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5194] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5196] <... futex resumed>) = 0 [pid 5194] <... futex resumed>) = 1 [pid 5196] ftruncate(4, 33587199) = 0 [pid 5194] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5196] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5196] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5194] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5194] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5196] <... futex resumed>) = 0 [pid 5194] <... futex resumed>) = 1 [pid 5194] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5196] open("./bus", O_RDONLY) = 6 [pid 5196] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5194] <... futex resumed>) = 0 [pid 5190] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5196] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5190] <... futex resumed>) = 1 [pid 5189] <... futex resumed>) = 0 [pid 5189] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5190] sendfile(8, 6, NULL, 281474978811908 [pid 5189] <... futex resumed>) = 0 [pid 5194] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5189] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5196] <... futex resumed>) = 0 [pid 5194] <... futex resumed>) = 1 [pid 5196] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5194] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5196] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5194] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5196] <... futex resumed>) = 0 [pid 5194] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5196] dup(7 [pid 5194] <... futex resumed>) = 0 [pid 5196] <... dup resumed>) = 8 [pid 5194] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5196] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5194] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5196] <... futex resumed>) = 0 [pid 5194] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5194] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5196] memfd_create("syzkaller", 0) = 9 [pid 5196] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff677e9d000 [ 85.651065][ T27] audit: type=1804 audit(1686284890.487:130): pid=5196 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor481" name="/root/syzkaller.PL7eda/10/bus/bus" dev="loop5" ino=7 res=1 errno=0 [pid 5192] <... write resumed>) = 2097152 [pid 5192] munmap(0x7ff677e9d000, 2097152) = 0 [pid 5189] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5192] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5189] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5189] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff67807c000 [pid 5192] <... openat resumed>) = 10 [pid 5189] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5192] ioctl(10, LOOP_SET_FD, 9 [pid 5189] <... mprotect resumed>) = 0 [pid 5192] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5189] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5192] ioctl(10, LOOP_CLR_FD) = 0 [pid 5189] <... clone resumed>, parent_tid=[5201], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5201 [pid 5189] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5189] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5192] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5192] close(10) = 0 [pid 5192] close(9./strace-static-x86_64: Process 5201 attached [pid 5201] set_robust_list(0x7ff67809c9e0, 24) = 0 [pid 5201] sync( [pid 5196] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5195] <... write resumed>) = 16777216 [pid 5192] <... close resumed>) = 0 [pid 5189] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5195] munmap(0x7ff67f29d000, 16777216 [pid 5192] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5195] <... munmap resumed>) = 0 [pid 5192] <... futex resumed>) = 1 [pid 5191] <... futex resumed>) = 0 [pid 5192] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5191] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5192] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5191] <... futex resumed>) = 0 [pid 5195] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5192] sendfile(8, 6, NULL, 281474978811908 [ 85.774885][ T27] audit: type=1804 audit(1686284890.517:131): pid=5196 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor481" name="/root/syzkaller.PL7eda/10/bus/bus" dev="loop5" ino=7 res=1 errno=0 [pid 5191] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5196] <... write resumed>) = 2097152 [pid 5195] <... openat resumed>) = 4 [pid 5196] munmap(0x7ff677e9d000, 2097152 [pid 5195] ioctl(4, LOOP_SET_FD, 3 [pid 5196] <... munmap resumed>) = 0 [pid 5195] <... ioctl resumed>) = 0 [pid 5196] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 10 [pid 5195] close(3 [pid 5196] ioctl(10, LOOP_SET_FD, 9 [pid 5195] <... close resumed>) = 0 [pid 5196] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5195] mkdir("./bus", 0777 [pid 5196] ioctl(10, LOOP_CLR_FD [pid 5195] <... mkdir resumed>) = 0 [pid 5196] <... ioctl resumed>) = 0 [pid 5195] mount("/dev/loop2", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5196] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5195] <... mount resumed>) = 0 [pid 5191] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5196] close(10 [pid 5195] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5191] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5196] <... close resumed>) = 0 [pid 5191] <... futex resumed>) = 0 [pid 5196] close(9 [pid 5195] <... openat resumed>) = 3 [pid 5191] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff67807c000 [pid 5191] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5191] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [ 85.853464][ T5195] loop2: detected capacity change from 0 to 32768 [pid 5195] chdir("./bus") = 0 [pid 5191] <... clone resumed>, parent_tid=[5202], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5202 [pid 5195] ioctl(4, LOOP_CLR_FD [pid 5191] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5195] <... ioctl resumed>) = 0 [pid 5191] <... futex resumed>) = 0 [pid 5201] <... sync resumed>) = 0 [pid 5195] close(4 [pid 5191] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5202 attached [pid 5201] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5195] <... close resumed>) = 0 [pid 5202] set_robust_list(0x7ff67809c9e0, 24 [pid 5201] <... futex resumed>) = 0 [pid 5195] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5202] <... set_robust_list resumed>) = 0 [pid 5202] sync( [pid 5201] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5195] <... futex resumed>) = 1 [pid 5193] <... futex resumed>) = 0 [pid 5195] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5193] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5195] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5193] <... futex resumed>) = 0 [pid 5202] <... sync resumed>) = 0 [pid 5195] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5193] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5202] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5195] <... open resumed>) = 4 [pid 5202] <... futex resumed>) = 1 [pid 5195] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5191] <... futex resumed>) = 0 [pid 5202] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5195] <... futex resumed>) = 1 [pid 5193] <... futex resumed>) = 0 [pid 5195] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5193] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5195] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5193] <... futex resumed>) = 0 [pid 5195] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5193] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5196] <... close resumed>) = 0 [pid 5195] <... open resumed>) = 5 [pid 5195] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5193] <... futex resumed>) = 0 [pid 5195] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5193] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5196] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5193] <... futex resumed>) = 0 [pid 5193] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5196] <... futex resumed>) = 1 [pid 5195] <... mmap resumed>) = 0x20000000 [pid 5194] <... futex resumed>) = 0 [pid 5196] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5195] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5194] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5196] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5195] <... futex resumed>) = 1 [pid 5194] <... futex resumed>) = 0 [pid 5193] <... futex resumed>) = 0 [pid 5196] sendfile(8, 6, NULL, 281474978811908 [pid 5195] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5194] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5193] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5195] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5193] <... futex resumed>) = 0 [pid 5195] ftruncate(4, 33587199 [pid 5193] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5195] <... ftruncate resumed>) = 0 [pid 5195] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5193] <... futex resumed>) = 0 [pid 5193] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5195] open("./bus", O_RDONLY [pid 5193] <... futex resumed>) = 0 [pid 5195] <... open resumed>) = 6 [pid 5193] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5195] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5193] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5195] <... futex resumed>) = 0 [pid 5193] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5195] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5194] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5193] <... futex resumed>) = 0 [pid 5195] <... open resumed>) = 7 [pid 5194] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5193] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5195] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5194] <... futex resumed>) = 0 [pid 5193] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5195] <... futex resumed>) = 0 [pid 5194] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5193] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5195] dup(7 [pid 5194] <... mmap resumed>) = 0x7ff67807c000 [pid 5193] <... futex resumed>) = 0 [pid 5195] <... dup resumed>) = 8 [pid 5194] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5193] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5200] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5195] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5194] <... mprotect resumed>) = 0 [pid 5193] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5195] <... futex resumed>) = 0 [pid 5194] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5193] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5194] <... clone resumed>, parent_tid=[5203], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5203 [pid 5193] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5194] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 85.968909][ T27] audit: type=1804 audit(1686284890.807:132): pid=5195 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor481" name="/root/syzkaller.txkbmS/10/bus/bus" dev="loop2" ino=7 res=1 errno=0 [pid 5194] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5203 attached [pid 5203] set_robust_list(0x7ff67809c9e0, 24) = 0 [pid 5203] sync( [pid 5195] memfd_create("syzkaller", 0) = 9 [pid 5195] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff677e9d000 [pid 5203] <... sync resumed>) = 0 [pid 5203] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5194] <... futex resumed>) = 0 [ 86.035572][ T27] audit: type=1804 audit(1686284890.847:133): pid=5195 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor481" name="/root/syzkaller.txkbmS/10/bus/bus" dev="loop2" ino=7 res=1 errno=0 [pid 5203] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5195] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5195] munmap(0x7ff677e9d000, 2097152) = 0 [pid 5195] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 10 [pid 5195] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5195] ioctl(10, LOOP_CLR_FD) = 0 [pid 5195] ioctl(10, LOOP_SET_FD, 9 [pid 4994] <... umount2 resumed>) = 0 [pid 5195] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5195] close(10 [pid 4994] umount2("./10/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5195] <... close resumed>) = 0 [pid 5195] close(9 [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] lstat("./10/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] umount2("./10/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] openat(AT_FDCWD, "./10/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5195] <... close resumed>) = 0 [pid 5195] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] <... openat resumed>) = 4 [pid 5195] <... futex resumed>) = 1 [pid 5193] <... futex resumed>) = 0 [pid 4994] fstat(4, [pid 5195] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5193] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5195] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5193] <... futex resumed>) = 0 [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5195] sendfile(8, 6, NULL, 281474978811908 [pid 5193] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4994] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4994] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4994] close(4) = 0 [pid 4994] rmdir("./10/bus") = 0 [pid 4994] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] lstat("./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4994] unlink("./10/binderfs" [pid 5193] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5193] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] <... unlink resumed>) = 0 [pid 5193] <... futex resumed>) = 0 [pid 4994] getdents64(3, [pid 5193] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff67807c000 [pid 4994] <... getdents64 resumed>0x555556742620 /* 0 entries */, 32768) = 0 [pid 5193] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 4994] close(3 [pid 5193] <... mprotect resumed>) = 0 [pid 5193] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4994] <... close resumed>) = 0 [pid 4994] rmdir("./10" [pid 5193] <... clone resumed>, parent_tid=[5204], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5204 [pid 5193] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] <... rmdir resumed>) = 0 [pid 5193] <... futex resumed>) = 0 [pid 4994] mkdir("./11", 0777./strace-static-x86_64: Process 5204 attached [pid 5193] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4994] <... mkdir resumed>) = 0 [pid 5204] set_robust_list(0x7ff67809c9e0, 24 [pid 4994] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5204] <... set_robust_list resumed>) = 0 [pid 5204] sync( [pid 4994] <... openat resumed>) = 3 [pid 4994] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5204] <... sync resumed>) = 0 [pid 4994] close(3 [pid 5204] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5193] <... futex resumed>) = 0 [pid 4994] <... close resumed>) = 0 [pid 5204] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4994] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567415d0) = 5205 ./strace-static-x86_64: Process 5205 attached [pid 5205] set_robust_list(0x5555567415e0, 24) = 0 [pid 5205] chdir("./11") = 0 [pid 5205] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5205] setpgid(0, 0) = 0 [pid 5205] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5191] exit_group(0 [pid 5202] <... futex resumed>) = ? [pid 5191] <... exit_group resumed>) = ? [pid 5205] write(3, "1000", 4 [pid 5202] +++ exited with 0 +++ [pid 5205] <... write resumed>) = 4 [pid 5192] <... sendfile resumed>) = ? [pid 5205] close(3) = 0 [pid 5205] symlink("/dev/binderfs", "./binderfs" [pid 5192] +++ exited with 0 +++ [pid 5191] +++ exited with 0 +++ [pid 5205] <... symlink resumed>) = 0 [pid 4993] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5191, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=35 /* 0.35 s */} --- [pid 5205] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 4993] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5205] <... futex resumed>) = 0 [pid 4993] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5205] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4993] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4993] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5205] <... mmap resumed>) = 0x7ff68769d000 [pid 4993] getdents64(3, [pid 5205] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE [pid 4993] <... getdents64 resumed>0x555556742620 /* 4 entries */, 32768) = 104 [pid 4993] umount2("./10/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5205] <... mprotect resumed>) = 0 [pid 5205] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5206], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5206 [pid 5205] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5205] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5189] exit_group(0./strace-static-x86_64: Process 5206 attached ) = ? [pid 5201] <... futex resumed>) = ? [pid 5206] set_robust_list(0x7ff6876bd9e0, 24 [pid 5201] +++ exited with 0 +++ [pid 5206] <... set_robust_list resumed>) = 0 [pid 5190] <... sendfile resumed>) = ? [pid 5194] exit_group(0 [pid 5203] <... futex resumed>) = ? [pid 5194] <... exit_group resumed>) = ? [pid 5203] +++ exited with 0 +++ [pid 5206] memfd_create("syzkaller", 0) = 3 [pid 5196] <... sendfile resumed>) = ? [pid 5206] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 5190] +++ exited with 0 +++ [pid 5189] +++ exited with 0 +++ [pid 5196] +++ exited with 0 +++ [pid 5194] +++ exited with 0 +++ [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5189, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=39 /* 0.39 s */} --- [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5194, si_uid=0, si_status=0, si_utime=11 /* 0.11 s */, si_stime=38 /* 0.38 s */} --- [pid 4998] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4998] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] fstat(3, [pid 4997] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] getdents64(3, [pid 4997] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... getdents64 resumed>0x555556742620 /* 4 entries */, 32768) = 104 [pid 4997] <... openat resumed>) = 3 [pid 4998] umount2("./10/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5200] <... write resumed>) = 16777216 [pid 4997] getdents64(3, 0x555556742620 /* 4 entries */, 32768) = 104 [pid 4997] umount2("./10/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5200] munmap(0x7ff67f29d000, 16777216) = 0 [pid 5200] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5200] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5200] close(3) = 0 [pid 5200] mkdir("./bus", 0777) = 0 [pid 5200] mount("/dev/loop3", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "") = 0 [pid 5200] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5200] chdir("./bus") = 0 [pid 5200] ioctl(4, LOOP_CLR_FD) = 0 [ 86.625649][ T5200] loop3: detected capacity change from 0 to 32768 [pid 5200] close(4) = 0 [pid 5200] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5199] <... futex resumed>) = 0 [pid 5200] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5199] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5200] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5199] <... futex resumed>) = 0 [pid 5200] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5199] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5200] <... open resumed>) = 4 [pid 5200] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5199] <... futex resumed>) = 0 [pid 5200] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5199] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5200] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5199] <... futex resumed>) = 0 [pid 5200] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5199] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5200] <... open resumed>) = 5 [pid 5200] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5199] <... futex resumed>) = 0 [pid 5200] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5199] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5200] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5199] <... futex resumed>) = 0 [pid 5200] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5199] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5200] <... mmap resumed>) = 0x20000000 [pid 5200] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5199] <... futex resumed>) = 0 [pid 5200] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5199] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5200] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5199] <... futex resumed>) = 0 [pid 5200] ftruncate(4, 33587199 [pid 5199] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5200] <... ftruncate resumed>) = 0 [pid 5200] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5199] <... futex resumed>) = 0 [pid 5200] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5199] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5200] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5199] <... futex resumed>) = 0 [pid 5200] open("./bus", O_RDONLY [pid 5199] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5200] <... open resumed>) = 6 [pid 5200] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5199] <... futex resumed>) = 0 [pid 5200] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5199] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5200] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5199] <... futex resumed>) = 0 [pid 5200] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5199] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5200] <... open resumed>) = 7 [pid 5200] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5199] <... futex resumed>) = 0 [pid 5200] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5199] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5200] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5199] <... futex resumed>) = 0 [pid 5200] dup(7 [pid 5199] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5200] <... dup resumed>) = 8 [pid 5200] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5199] <... futex resumed>) = 0 [pid 5200] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5199] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5200] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5199] <... futex resumed>) = 0 [pid 5200] memfd_create("syzkaller", 0 [pid 5199] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5200] <... memfd_create resumed>) = 9 [pid 5200] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff677e9d000 [pid 5193] exit_group(0 [pid 5204] <... futex resumed>) = ? [pid 5193] <... exit_group resumed>) = ? [pid 5204] +++ exited with 0 +++ [pid 5195] <... sendfile resumed>) = ? [pid 5195] +++ exited with 0 +++ [pid 5193] +++ exited with 0 +++ [pid 4995] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5193, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=39 /* 0.39 s */} --- [pid 4995] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4995] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4995] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] getdents64(3, 0x555556742620 /* 4 entries */, 32768) = 104 [pid 4995] umount2("./10/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... umount2 resumed>) = 0 [pid 4993] <... umount2 resumed>) = 0 [pid 4993] umount2("./10/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4993] lstat("./10/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4993] umount2("./10/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] umount2("./10/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4993] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./10/bus", [pid 4993] openat(AT_FDCWD, "./10/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./10/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4993] <... openat resumed>) = 4 [pid 4997] openat(AT_FDCWD, "./10/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4993] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] fstat(4, [pid 4993] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4993] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4993] close(4) = 0 [pid 4993] rmdir("./10/bus") = 0 [pid 4993] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4993] lstat("./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4993] unlink("./10/binderfs" [pid 4997] getdents64(4, [pid 4993] <... unlink resumed>) = 0 [pid 4993] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4993] close(3) = 0 [pid 4993] rmdir("./10") = 0 [pid 4993] mkdir("./11", 0777) = 0 [pid 4993] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 4997] <... getdents64 resumed>0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4997] getdents64(4, [pid 4993] <... openat resumed>) = 3 [pid 4997] <... getdents64 resumed>0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4997] close(4 [pid 4993] ioctl(3, LOOP_CLR_FD [pid 4997] <... close resumed>) = 0 [pid 4993] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4997] rmdir("./10/bus" [pid 4993] close(3) = 0 [pid 4997] <... rmdir resumed>) = 0 [pid 4993] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567415d0) = 5207 ./strace-static-x86_64: Process 5207 attached [pid 5207] set_robust_list(0x5555567415e0, 24) = 0 [pid 5207] chdir("./11") = 0 [pid 5207] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4997] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./10/binderfs", [pid 5207] setpgid(0, 0 [pid 4997] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5207] <... setpgid resumed>) = 0 [pid 4997] unlink("./10/binderfs" [pid 5207] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5200] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 4997] <... unlink resumed>) = 0 [pid 5207] <... openat resumed>) = 3 [pid 4997] getdents64(3, [pid 5207] write(3, "1000", 4 [pid 4997] <... getdents64 resumed>0x555556742620 /* 0 entries */, 32768) = 0 [pid 5207] <... write resumed>) = 4 [pid 4997] close(3 [pid 5207] close(3 [pid 4997] <... close resumed>) = 0 [pid 5207] <... close resumed>) = 0 [pid 5207] symlink("/dev/binderfs", "./binderfs" [pid 4997] rmdir("./10" [pid 5207] <... symlink resumed>) = 0 [pid 4997] <... rmdir resumed>) = 0 [pid 5207] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] mkdir("./11", 0777 [pid 5207] <... futex resumed>) = 0 [pid 5207] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4997] <... mkdir resumed>) = 0 [pid 5207] <... mmap resumed>) = 0x7ff68769d000 [pid 4997] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5207] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE [pid 4997] <... openat resumed>) = 3 [pid 5207] <... mprotect resumed>) = 0 [pid 4997] ioctl(3, LOOP_CLR_FD [pid 5207] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4997] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4997] close(3 [pid 5207] <... clone resumed>, parent_tid=[5208], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5208 [pid 4997] <... close resumed>) = 0 [pid 5207] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5207] <... futex resumed>) = 0 [pid 5207] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4997] <... clone resumed>, child_tidptr=0x5555567415d0) = 5209 ./strace-static-x86_64: Process 5208 attached [pid 5208] set_robust_list(0x7ff6876bd9e0, 24) = 0 ./strace-static-x86_64: Process 5209 attached [pid 5208] memfd_create("syzkaller", 0 [pid 5209] set_robust_list(0x5555567415e0, 24 [pid 5208] <... memfd_create resumed>) = 3 [pid 5209] <... set_robust_list resumed>) = 0 [pid 5208] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5209] chdir("./11" [pid 5208] <... mmap resumed>) = 0x7ff67f29d000 [pid 5209] <... chdir resumed>) = 0 [pid 5209] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5209] setpgid(0, 0) = 0 [pid 5209] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5209] write(3, "1000", 4) = 4 [pid 5209] close(3) = 0 [pid 5209] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5209] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5209] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5209] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5209] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5210], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5210 [pid 5209] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5209] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5210 attached [pid 5210] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5210] memfd_create("syzkaller", 0) = 3 [pid 5210] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 5200] <... write resumed>) = 2097152 [pid 5200] munmap(0x7ff677e9d000, 2097152) = 0 [pid 5200] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 10 [pid 5200] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5200] ioctl(10, LOOP_CLR_FD) = 0 [pid 5206] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5200] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5200] close(10) = 0 [pid 5200] close(9) = 0 [pid 5200] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5200] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5199] <... futex resumed>) = 0 [pid 5199] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5199] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5200] <... futex resumed>) = 0 [pid 5200] sendfile(8, 6, NULL, 281474978811908 [pid 5199] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5199] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5199] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff67807c000 [pid 5199] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5199] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5211], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5211 [pid 5199] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5199] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5211 attached [pid 5211] set_robust_list(0x7ff67809c9e0, 24) = 0 [pid 5211] sync() = 0 [pid 5211] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5199] <... futex resumed>) = 0 [pid 5211] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4995] <... umount2 resumed>) = 0 [pid 4995] umount2("./10/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4995] lstat("./10/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] umount2("./10/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4995] openat(AT_FDCWD, "./10/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4995] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4995] getdents64(4, [pid 4998] <... umount2 resumed>) = 0 [pid 4995] <... getdents64 resumed>0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4998] umount2("./10/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4995] close(4 [pid 4998] lstat("./10/bus", [pid 4995] <... close resumed>) = 0 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] rmdir("./10/bus" [pid 4998] umount2("./10/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] <... rmdir resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] openat(AT_FDCWD, "./10/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... openat resumed>) = 4 [pid 4998] fstat(4, [pid 4995] lstat("./10/binderfs", [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, [pid 4995] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] <... getdents64 resumed>0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4995] unlink("./10/binderfs" [pid 4998] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4995] <... unlink resumed>) = 0 [pid 4998] close(4 [pid 4995] getdents64(3, [pid 4998] <... close resumed>) = 0 [pid 4995] <... getdents64 resumed>0x555556742620 /* 0 entries */, 32768) = 0 [pid 4998] rmdir("./10/bus" [pid 4995] close(3 [pid 4998] <... rmdir resumed>) = 0 [pid 4998] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] <... close resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] rmdir("./10" [pid 4998] lstat("./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4995] <... rmdir resumed>) = 0 [pid 4998] unlink("./10/binderfs" [pid 4995] mkdir("./11", 0777 [pid 4998] <... unlink resumed>) = 0 [pid 4998] getdents64(3, [pid 4995] <... mkdir resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555556742620 /* 0 entries */, 32768) = 0 [pid 4995] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4998] close(3 [pid 4995] <... openat resumed>) = 3 [pid 4998] <... close resumed>) = 0 [pid 4995] ioctl(3, LOOP_CLR_FD [pid 4998] rmdir("./10" [pid 4995] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] <... rmdir resumed>) = 0 [pid 4995] close(3 [pid 4998] mkdir("./11", 0777 [pid 4995] <... close resumed>) = 0 [pid 4998] <... mkdir resumed>) = 0 [pid 4995] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 4995] <... clone resumed>, child_tidptr=0x5555567415d0) = 5212 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567415d0) = 5213 ./strace-static-x86_64: Process 5213 attached [pid 5213] set_robust_list(0x5555567415e0, 24) = 0 [pid 5213] chdir("./11") = 0 [pid 5213] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 ./strace-static-x86_64: Process 5212 attached [pid 5213] setpgid(0, 0) = 0 [pid 5212] set_robust_list(0x5555567415e0, 24) = 0 [pid 5213] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5212] chdir("./11" [pid 5213] <... openat resumed>) = 3 [pid 5212] <... chdir resumed>) = 0 [pid 5213] write(3, "1000", 4 [pid 5212] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5213] <... write resumed>) = 4 [pid 5212] <... prctl resumed>) = 0 [pid 5213] close(3 [pid 5212] setpgid(0, 0 [pid 5213] <... close resumed>) = 0 [pid 5212] <... setpgid resumed>) = 0 [pid 5213] symlink("/dev/binderfs", "./binderfs" [pid 5212] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5213] <... symlink resumed>) = 0 [pid 5212] <... openat resumed>) = 3 [pid 5213] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5212] write(3, "1000", 4 [pid 5213] <... futex resumed>) = 0 [pid 5212] <... write resumed>) = 4 [pid 5213] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5212] close(3 [pid 5213] <... mmap resumed>) = 0x7ff68769d000 [pid 5212] <... close resumed>) = 0 [pid 5213] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE [pid 5212] symlink("/dev/binderfs", "./binderfs" [pid 5213] <... mprotect resumed>) = 0 [pid 5212] <... symlink resumed>) = 0 [pid 5213] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5212] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5213] <... clone resumed>, parent_tid=[5214], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5214 [pid 5212] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5213] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5212] <... mmap resumed>) = 0x7ff68769d000 [pid 5213] <... futex resumed>) = 0 [pid 5212] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE [pid 5213] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5212] <... mprotect resumed>) = 0 [pid 5212] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5215], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5215 [pid 5212] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5212] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5214 attached [pid 5214] set_robust_list(0x7ff6876bd9e0, 24) = 0 ./strace-static-x86_64: Process 5215 attached [pid 5214] memfd_create("syzkaller", 0 [pid 5215] set_robust_list(0x7ff6876bd9e0, 24 [pid 5214] <... memfd_create resumed>) = 3 [pid 5215] <... set_robust_list resumed>) = 0 [pid 5214] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 5215] memfd_create("syzkaller", 0) = 3 [pid 5215] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 5210] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5208] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5206] <... write resumed>) = 16777216 [pid 5206] munmap(0x7ff67f29d000, 16777216) = 0 [pid 5206] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5206] ioctl(4, LOOP_SET_FD, 3 [pid 5199] exit_group(0 [pid 5211] <... futex resumed>) = ? [pid 5199] <... exit_group resumed>) = ? [pid 5211] +++ exited with 0 +++ [pid 5206] <... ioctl resumed>) = 0 [pid 5206] close(3 [pid 5200] <... sendfile resumed>) = ? [pid 5206] <... close resumed>) = 0 [pid 5200] +++ exited with 0 +++ [pid 5199] +++ exited with 0 +++ [pid 5206] mkdir("./bus", 0777 [pid 4996] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5199, si_uid=0, si_status=0, si_utime=13 /* 0.13 s */, si_stime=28 /* 0.28 s */} --- [pid 4996] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5206] <... mkdir resumed>) = 0 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5206] mount("/dev/loop1", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 4996] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4996] fstat(3, [pid 5206] <... mount resumed>) = 0 [pid 4996] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5206] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 4996] getdents64(3, [pid 5206] <... openat resumed>) = 3 [pid 4996] <... getdents64 resumed>0x555556742620 /* 4 entries */, 32768) = 104 [pid 5206] chdir("./bus" [pid 4996] umount2("./11/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5206] <... chdir resumed>) = 0 [pid 5206] ioctl(4, LOOP_CLR_FD) = 0 [pid 5206] close(4) = 0 [ 87.488189][ T5206] loop1: detected capacity change from 0 to 32768 [pid 5206] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5205] <... futex resumed>) = 0 [pid 5205] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5206] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5205] <... futex resumed>) = 0 [pid 5206] <... open resumed>) = 4 [pid 5205] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5206] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5205] <... futex resumed>) = 0 [pid 5205] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5206] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5205] <... futex resumed>) = 0 [pid 5205] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5206] <... open resumed>) = 5 [pid 5206] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5205] <... futex resumed>) = 0 [pid 5206] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5205] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5206] <... mmap resumed>) = 0x20000000 [pid 5206] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5205] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5206] <... futex resumed>) = 0 [pid 5205] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5206] ftruncate(4, 33587199 [pid 5205] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5206] <... ftruncate resumed>) = 0 [pid 5205] <... futex resumed>) = 0 [pid 5206] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5205] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5206] <... futex resumed>) = 0 [pid 5205] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5205] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5206] open("./bus", O_RDONLY [pid 5205] <... futex resumed>) = 0 [pid 5206] <... open resumed>) = 6 [pid 5205] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5206] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5205] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5206] <... futex resumed>) = 0 [pid 5205] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5206] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5205] <... futex resumed>) = 0 [pid 5206] <... open resumed>) = 7 [pid 5205] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5206] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5205] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5206] <... futex resumed>) = 0 [pid 5205] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5206] dup(7 [pid 5205] <... futex resumed>) = 0 [pid 5206] <... dup resumed>) = 8 [pid 5205] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5206] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5205] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5206] <... futex resumed>) = 0 [pid 5205] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5206] memfd_create("syzkaller", 0 [pid 5205] <... futex resumed>) = 0 [pid 5206] <... memfd_create resumed>) = 9 [pid 5205] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5206] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff677e9d000 [pid 5206] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5206] munmap(0x7ff677e9d000, 2097152 [pid 5215] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5206] <... munmap resumed>) = 0 [pid 5206] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 10 [pid 5214] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5206] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5206] ioctl(10, LOOP_CLR_FD) = 0 [pid 5206] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5206] close(10) = 0 [pid 5206] close(9) = 0 [pid 5206] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5205] <... futex resumed>) = 0 [pid 5206] <... futex resumed>) = 1 [pid 5205] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5206] sendfile(8, 6, NULL, 281474978811908 [pid 5205] <... futex resumed>) = 0 [pid 5205] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4996] <... umount2 resumed>) = 0 [pid 4996] umount2("./11/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5205] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5205] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] lstat("./11/bus", [pid 5205] <... futex resumed>) = 0 [pid 5205] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4996] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5205] <... mmap resumed>) = 0x7ff67807c000 [pid 4996] umount2("./11/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5205] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5205] <... mprotect resumed>) = 0 [pid 4996] openat(AT_FDCWD, "./11/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5205] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4996] <... openat resumed>) = 4 [pid 5205] <... clone resumed>, parent_tid=[5216], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5216 [pid 4996] fstat(4, [pid 5205] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5205] <... futex resumed>) = 0 [pid 4996] getdents64(4, [pid 5205] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4996] <... getdents64 resumed>0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4996] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4996] close(4) = 0 [pid 4996] rmdir("./11/bus") = 0 ./strace-static-x86_64: Process 5216 attached [pid 4996] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5216] set_robust_list(0x7ff67809c9e0, 24 [pid 4996] lstat("./11/binderfs", [pid 5216] <... set_robust_list resumed>) = 0 [pid 5216] sync( [pid 4996] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4996] unlink("./11/binderfs") = 0 [pid 4996] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4996] close(3) = 0 [pid 4996] rmdir("./11" [pid 5216] <... sync resumed>) = 0 [pid 4996] <... rmdir resumed>) = 0 [pid 5216] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5210] <... write resumed>) = 16777216 [pid 4996] mkdir("./12", 0777 [pid 5216] <... futex resumed>) = 1 [pid 5205] <... futex resumed>) = 0 [pid 5216] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4996] <... mkdir resumed>) = 0 [pid 5210] munmap(0x7ff67f29d000, 16777216 [pid 4996] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 4996] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4996] close(3) = 0 [pid 4996] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567415d0) = 5217 [pid 5208] <... write resumed>) = 16777216 ./strace-static-x86_64: Process 5217 attached [pid 5210] <... munmap resumed>) = 0 [pid 5217] set_robust_list(0x5555567415e0, 24) = 0 [pid 5217] chdir("./12" [pid 5210] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5217] <... chdir resumed>) = 0 [pid 5217] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5210] <... openat resumed>) = 4 [pid 5217] <... prctl resumed>) = 0 [pid 5210] ioctl(4, LOOP_SET_FD, 3 [pid 5217] setpgid(0, 0 [pid 5210] <... ioctl resumed>) = 0 [pid 5217] <... setpgid resumed>) = 0 [pid 5217] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5217] write(3, "1000", 4) = 4 [pid 5217] close(3) = 0 [pid 5217] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5217] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5217] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5217] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5217] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5218], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5218 [pid 5217] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5217] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5210] close(3) = 0 [pid 5208] munmap(0x7ff67f29d000, 16777216 [pid 5210] mkdir("./bus", 0777./strace-static-x86_64: Process 5218 attached ) = 0 [pid 5210] mount("/dev/loop4", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5218] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5218] memfd_create("syzkaller", 0) = 3 [pid 5218] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5210] <... mount resumed>) = 0 [pid 5218] <... mmap resumed>) = 0x7ff67f29d000 [pid 5210] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5210] chdir("./bus") = 0 [pid 5210] ioctl(4, LOOP_CLR_FD) = 0 [pid 5210] close(4) = 0 [pid 5210] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 87.995475][ T5210] loop4: detected capacity change from 0 to 32768 [pid 5210] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5208] <... munmap resumed>) = 0 [pid 5208] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5208] ioctl(4, LOOP_SET_FD, 3 [pid 5209] <... futex resumed>) = 0 [pid 5209] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5210] <... futex resumed>) = 0 [pid 5209] <... futex resumed>) = 1 [pid 5210] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5210] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5210] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5209] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5209] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5210] <... futex resumed>) = 0 [pid 5209] <... futex resumed>) = 1 [pid 5210] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5209] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5210] <... open resumed>) = 5 [pid 5210] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5209] <... futex resumed>) = 0 [pid 5210] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5209] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5210] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5209] <... futex resumed>) = 0 [pid 5210] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5209] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5210] <... mmap resumed>) = 0x20000000 [pid 5210] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5209] <... futex resumed>) = 0 [pid 5210] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5209] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5210] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5209] <... futex resumed>) = 0 [pid 5210] ftruncate(4, 33587199 [pid 5209] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5210] <... ftruncate resumed>) = 0 [pid 5210] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5209] <... futex resumed>) = 0 [pid 5210] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5209] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5210] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5209] <... futex resumed>) = 0 [pid 5210] open("./bus", O_RDONLY [pid 5209] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5210] <... open resumed>) = 6 [pid 5210] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5209] <... futex resumed>) = 0 [pid 5210] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5209] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5208] <... ioctl resumed>) = 0 [pid 5210] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5209] <... futex resumed>) = 0 [pid 5210] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5209] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5208] close(3 [pid 5210] <... open resumed>) = 7 [pid 5208] <... close resumed>) = 0 [pid 5210] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5208] mkdir("./bus", 0777 [pid 5210] <... futex resumed>) = 1 [ 88.061422][ T5208] loop0: detected capacity change from 0 to 32768 [pid 5209] <... futex resumed>) = 0 [pid 5208] <... mkdir resumed>) = 0 [pid 5210] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5209] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5208] mount("/dev/loop0", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5210] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5209] <... futex resumed>) = 0 [pid 5210] dup(7 [pid 5209] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5208] <... mount resumed>) = 0 [pid 5210] <... dup resumed>) = 8 [pid 5208] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5210] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5208] <... openat resumed>) = 3 [pid 5210] <... futex resumed>) = 1 [pid 5209] <... futex resumed>) = 0 [pid 5208] chdir("./bus" [pid 5210] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5209] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5208] <... chdir resumed>) = 0 [pid 5210] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5209] <... futex resumed>) = 0 [pid 5208] ioctl(4, LOOP_CLR_FD [pid 5210] memfd_create("syzkaller", 0 [pid 5209] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5208] <... ioctl resumed>) = 0 [pid 5210] <... memfd_create resumed>) = 9 [pid 5208] close(4 [pid 5210] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5208] <... close resumed>) = 0 [pid 5210] <... mmap resumed>) = 0x7ff677e9d000 [pid 5208] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5207] <... futex resumed>) = 0 [pid 5208] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5207] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5208] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5207] <... futex resumed>) = 0 [pid 5208] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5207] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5208] <... open resumed>) = 4 [pid 5208] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5207] <... futex resumed>) = 0 [pid 5208] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5207] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5208] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5207] <... futex resumed>) = 0 [pid 5208] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5207] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5208] <... open resumed>) = 5 [pid 5208] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5207] <... futex resumed>) = 0 [pid 5208] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5207] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5208] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5207] <... futex resumed>) = 0 [pid 5208] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5207] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5208] <... mmap resumed>) = 0x20000000 [pid 5208] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5215] <... write resumed>) = 16777216 [pid 5208] <... futex resumed>) = 1 [pid 5207] <... futex resumed>) = 0 [pid 5208] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5207] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5215] munmap(0x7ff67f29d000, 16777216 [pid 5208] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5207] <... futex resumed>) = 0 [pid 5208] ftruncate(4, 33587199 [pid 5207] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5208] <... ftruncate resumed>) = 0 [pid 5208] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5207] <... futex resumed>) = 0 [pid 5208] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5207] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5208] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5207] <... futex resumed>) = 0 [pid 5208] open("./bus", O_RDONLY [pid 5207] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5208] <... open resumed>) = 6 [pid 5208] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5207] <... futex resumed>) = 0 [pid 5208] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5207] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5208] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5207] <... futex resumed>) = 0 [pid 5215] <... munmap resumed>) = 0 [pid 5208] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5207] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5215] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5208] <... open resumed>) = 7 [pid 5208] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5207] <... futex resumed>) = 0 [pid 5208] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5207] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5208] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5207] <... futex resumed>) = 0 [pid 5208] dup(7 [pid 5207] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5208] <... dup resumed>) = 8 [pid 5208] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5207] <... futex resumed>) = 0 [pid 5208] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5207] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5208] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5207] <... futex resumed>) = 0 [pid 5215] <... openat resumed>) = 4 [pid 5208] memfd_create("syzkaller", 0 [pid 5207] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5215] ioctl(4, LOOP_SET_FD, 3 [pid 5208] <... memfd_create resumed>) = 9 [pid 5208] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff677e9d000 [pid 5215] <... ioctl resumed>) = 0 [pid 5215] close(3) = 0 [pid 5215] mkdir("./bus", 0777) = 0 [pid 5215] mount("/dev/loop2", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5210] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5215] <... mount resumed>) = 0 [pid 5215] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5215] chdir("./bus") = 0 [pid 5215] ioctl(4, LOOP_CLR_FD) = 0 [pid 5215] close(4) = 0 [pid 5215] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5212] <... futex resumed>) = 0 [pid 5212] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5212] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 88.266998][ T5215] loop2: detected capacity change from 0 to 32768 [pid 5215] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5215] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5212] <... futex resumed>) = 0 [pid 5215] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5212] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5215] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5212] <... futex resumed>) = 0 [pid 5215] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5212] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5215] <... open resumed>) = 5 [pid 5215] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5212] <... futex resumed>) = 0 [pid 5215] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5212] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5215] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5212] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5215] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 0 [pid 5215] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5212] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5215] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5212] <... futex resumed>) = 0 [pid 5215] ftruncate(4, 33587199 [pid 5212] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5215] <... ftruncate resumed>) = 0 [pid 5215] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5208] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5215] <... futex resumed>) = 1 [pid 5212] <... futex resumed>) = 0 [pid 5210] <... write resumed>) = 2097152 [pid 5215] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5212] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5215] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5212] <... futex resumed>) = 0 [pid 5212] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5215] open("./bus", O_RDONLY) = 6 [pid 5215] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5212] <... futex resumed>) = 0 [pid 5215] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5212] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5215] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5215] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5212] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5215] <... open resumed>) = 7 [pid 5215] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5212] <... futex resumed>) = 0 [pid 5215] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5212] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5210] munmap(0x7ff677e9d000, 2097152 [pid 5215] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5212] <... futex resumed>) = 0 [pid 5215] dup(7 [pid 5212] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5215] <... dup resumed>) = 8 [pid 5210] <... munmap resumed>) = 0 [pid 5215] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5212] <... futex resumed>) = 0 [pid 5215] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5212] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5215] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5212] <... futex resumed>) = 0 [pid 5212] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5210] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 10 [pid 5210] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5210] ioctl(10, LOOP_CLR_FD) = 0 [pid 5210] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5210] close(10 [pid 5215] memfd_create("syzkaller", 0 [pid 5210] <... close resumed>) = 0 [pid 5210] close(9 [pid 5218] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5215] <... memfd_create resumed>) = 9 [pid 5210] <... close resumed>) = 0 [pid 5215] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff677e9d000 [pid 5208] <... write resumed>) = 2097152 [pid 5210] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5210] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5208] munmap(0x7ff677e9d000, 2097152 [pid 5209] <... futex resumed>) = 0 [pid 5209] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5210] <... futex resumed>) = 0 [pid 5209] <... futex resumed>) = 1 [pid 5210] sendfile(8, 6, NULL, 281474978811908 [pid 5209] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5208] <... munmap resumed>) = 0 [pid 5208] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 10 [pid 5208] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5208] ioctl(10, LOOP_CLR_FD) = 0 [pid 5208] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5208] close(10 [pid 5214] <... write resumed>) = 16777216 [pid 5208] <... close resumed>) = 0 [pid 5209] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5208] close(9 [pid 5215] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5214] munmap(0x7ff67f29d000, 16777216 [pid 5209] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5208] <... close resumed>) = 0 [pid 5214] <... munmap resumed>) = 0 [pid 5209] <... futex resumed>) = 0 [pid 5209] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff67807c000 [pid 5209] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5209] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5219], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5219 [pid 5209] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5208] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5209] <... futex resumed>) = 0 [pid 5208] <... futex resumed>) = 1 [pid 5207] <... futex resumed>) = 0 [pid 5208] sendfile(8, 6, NULL, 281474978811908 [pid 5207] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5214] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5209] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5207] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5219 attached [pid 5219] set_robust_list(0x7ff67809c9e0, 24) = 0 [pid 5219] sync( [pid 5214] <... openat resumed>) = 4 [pid 5215] <... write resumed>) = 2097152 [pid 5214] ioctl(4, LOOP_SET_FD, 3 [pid 5215] munmap(0x7ff677e9d000, 2097152 [pid 5219] <... sync resumed>) = 0 [pid 5219] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5219] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5215] <... munmap resumed>) = 0 [pid 5209] <... futex resumed>) = 0 [pid 5215] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5214] <... ioctl resumed>) = 0 [pid 5215] <... openat resumed>) = 10 [pid 5214] close(3 [pid 5215] ioctl(10, LOOP_SET_FD, 9 [pid 5214] <... close resumed>) = 0 [pid 5215] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5214] mkdir("./bus", 0777 [pid 5215] ioctl(10, LOOP_CLR_FD [pid 5214] <... mkdir resumed>) = 0 [pid 5207] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5207] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5215] <... ioctl resumed>) = 0 [pid 5214] mount("/dev/loop5", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5207] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5214] <... mount resumed>) = 0 [pid 5207] <... mmap resumed>) = 0x7ff67807c000 [pid 5214] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5207] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5215] ioctl(10, LOOP_SET_FD, 9 [pid 5214] <... openat resumed>) = 3 [pid 5207] <... mprotect resumed>) = 0 [pid 5207] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5215] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5214] chdir("./bus" [pid 5215] close(10 [pid 5214] <... chdir resumed>) = 0 [pid 5207] <... clone resumed>, parent_tid=[5220], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5220 [pid 5207] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 88.561201][ T5214] loop5: detected capacity change from 0 to 32768 [pid 5207] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5215] <... close resumed>) = 0 [pid 5214] ioctl(4, LOOP_CLR_FD [pid 5215] close(9 [pid 5214] <... ioctl resumed>) = 0 [pid 5215] <... close resumed>) = 0 [pid 5214] close(4) = 0 ./strace-static-x86_64: Process 5220 attached [pid 5214] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5220] set_robust_list(0x7ff67809c9e0, 24 [pid 5214] <... futex resumed>) = 1 [pid 5213] <... futex resumed>) = 0 [pid 5214] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5213] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5214] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5213] <... futex resumed>) = 0 [pid 5220] <... set_robust_list resumed>) = 0 [pid 5215] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5220] sync( [pid 5215] <... futex resumed>) = 1 [pid 5214] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5213] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5212] <... futex resumed>) = 0 [pid 5215] sendfile(8, 6, NULL, 281474978811908 [pid 5214] <... open resumed>) = 4 [pid 5212] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5214] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5212] <... futex resumed>) = 0 [pid 5212] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5220] <... sync resumed>) = 0 [pid 5214] <... futex resumed>) = 1 [pid 5213] <... futex resumed>) = 0 [pid 5207] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5220] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5214] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5213] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5220] <... futex resumed>) = 0 [pid 5220] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5214] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5213] <... futex resumed>) = 0 [pid 5205] exit_group(0 [pid 5216] <... futex resumed>) = ? [pid 5214] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5213] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5205] <... exit_group resumed>) = ? [pid 5206] <... sendfile resumed>) = ? [pid 5216] +++ exited with 0 +++ [pid 5206] +++ exited with 0 +++ [pid 5214] <... open resumed>) = 5 [pid 5214] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5205] +++ exited with 0 +++ [pid 5214] <... futex resumed>) = 1 [pid 5213] <... futex resumed>) = 0 [pid 5214] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5213] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5205, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=42 /* 0.42 s */} --- [pid 5214] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5213] <... futex resumed>) = 0 [pid 4994] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5214] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5213] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5214] <... mmap resumed>) = 0x20000000 [pid 4994] <... openat resumed>) = 3 [pid 5214] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] fstat(3, [pid 5214] <... futex resumed>) = 1 [pid 5213] <... futex resumed>) = 0 [pid 5212] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5214] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5213] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5212] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] getdents64(3, [pid 5214] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5213] <... futex resumed>) = 0 [pid 5212] <... futex resumed>) = 0 [pid 5214] ftruncate(4, 33587199 [pid 5213] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5212] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4994] <... getdents64 resumed>0x555556742620 /* 4 entries */, 32768) = 104 [pid 5214] <... ftruncate resumed>) = 0 [pid 5212] <... mmap resumed>) = 0x7ff67807c000 [pid 5214] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5212] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 4994] umount2("./11/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5214] <... futex resumed>) = 1 [pid 5213] <... futex resumed>) = 0 [pid 5212] <... mprotect resumed>) = 0 [pid 5214] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5213] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5212] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5214] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5213] <... futex resumed>) = 0 [pid 5212] <... clone resumed>, parent_tid=[5221], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5221 [pid 5212] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5214] open("./bus", O_RDONLY [pid 5213] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5212] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5214] <... open resumed>) = 6 [pid 5214] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5213] <... futex resumed>) = 0 [pid 5214] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5213] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5214] <... open resumed>) = 7 [pid 5213] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5221 attached [pid 5214] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5213] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5221] set_robust_list(0x7ff67809c9e0, 24 [pid 5214] <... futex resumed>) = 0 [pid 5213] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5221] <... set_robust_list resumed>) = 0 [pid 5214] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5213] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5214] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5213] <... futex resumed>) = 0 [pid 5221] sync( [pid 5214] dup(7 [pid 5213] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5214] <... dup resumed>) = 8 [pid 5214] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5213] <... futex resumed>) = 0 [pid 5214] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 5213] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5214] memfd_create("syzkaller", 0 [pid 5213] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5214] <... memfd_create resumed>) = 9 [pid 5214] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff677e9d000 [pid 5212] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5214] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5218] <... write resumed>) = 16777216 [pid 5218] munmap(0x7ff67f29d000, 16777216) = 0 [pid 5218] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5218] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5218] close(3) = 0 [pid 5218] mkdir("./bus", 0777) = 0 [pid 5218] mount("/dev/loop3", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5214] <... write resumed>) = 2097152 [pid 5214] munmap(0x7ff677e9d000, 2097152 [pid 5218] <... mount resumed>) = 0 [pid 5214] <... munmap resumed>) = 0 [pid 5218] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5214] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5218] <... openat resumed>) = 3 [pid 5214] <... openat resumed>) = 10 [pid 5218] chdir("./bus" [pid 5214] ioctl(10, LOOP_SET_FD, 9 [pid 5218] <... chdir resumed>) = 0 [pid 5214] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5218] ioctl(4, LOOP_CLR_FD [pid 5214] ioctl(10, LOOP_CLR_FD [pid 5218] <... ioctl resumed>) = 0 [pid 5214] <... ioctl resumed>) = 0 [ 88.880230][ T5218] loop3: detected capacity change from 0 to 32768 [pid 5218] close(4) = 0 [pid 5218] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5214] ioctl(10, LOOP_SET_FD, 9 [pid 5218] <... futex resumed>) = 1 [pid 5217] <... futex resumed>) = 0 [pid 5214] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5218] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5217] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5214] close(10 [pid 5218] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5217] <... futex resumed>) = 0 [pid 5214] <... close resumed>) = 0 [pid 5218] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5217] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5214] close(9 [pid 5218] <... open resumed>) = 4 [pid 5214] <... close resumed>) = 0 [pid 5218] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5217] <... futex resumed>) = 0 [pid 5218] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5217] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5218] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5217] <... futex resumed>) = 0 [pid 5218] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5217] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5218] <... open resumed>) = 5 [pid 5218] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5214] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5218] <... futex resumed>) = 1 [pid 5217] <... futex resumed>) = 0 [pid 5214] <... futex resumed>) = 1 [pid 5213] <... futex resumed>) = 0 [pid 5218] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5217] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5214] sendfile(8, 6, NULL, 281474978811908 [pid 5213] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5218] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5217] <... futex resumed>) = 0 [pid 5213] <... futex resumed>) = 0 [pid 5218] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5217] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5213] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5218] <... mmap resumed>) = 0x20000000 [pid 5218] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5217] <... futex resumed>) = 0 [pid 5218] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5217] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5218] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5217] <... futex resumed>) = 0 [pid 5218] ftruncate(4, 33587199 [pid 5217] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5218] <... ftruncate resumed>) = 0 [pid 5218] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5217] <... futex resumed>) = 0 [pid 5221] <... sync resumed>) = 0 [pid 5218] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5217] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5221] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5218] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5217] <... futex resumed>) = 0 [pid 5221] <... futex resumed>) = 0 [pid 5218] open("./bus", O_RDONLY [pid 5217] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5221] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5218] <... open resumed>) = 6 [pid 5218] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5213] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5218] <... futex resumed>) = 1 [pid 5217] <... futex resumed>) = 0 [pid 5213] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5218] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5217] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5213] <... futex resumed>) = 0 [pid 5218] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5217] <... futex resumed>) = 0 [pid 5213] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5218] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5217] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5213] <... mmap resumed>) = 0x7ff67807c000 [pid 5218] <... open resumed>) = 7 [pid 5213] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5218] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5213] <... mprotect resumed>) = 0 [pid 5218] <... futex resumed>) = 1 [pid 5217] <... futex resumed>) = 0 [pid 5213] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5218] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5217] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5218] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5217] <... futex resumed>) = 0 [pid 5213] <... clone resumed>, parent_tid=[5222], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5222 [pid 5218] dup(7 [pid 5217] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5213] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5218] <... dup resumed>) = 8 [pid 5213] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5222 attached [pid 5218] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5213] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5222] set_robust_list(0x7ff67809c9e0, 24 [pid 5218] <... futex resumed>) = 1 [pid 5217] <... futex resumed>) = 0 [pid 5222] <... set_robust_list resumed>) = 0 [pid 5218] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5217] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5222] sync( [pid 5218] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5217] <... futex resumed>) = 0 [pid 5218] memfd_create("syzkaller", 0 [pid 5217] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5218] <... memfd_create resumed>) = 9 [pid 5218] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5222] <... sync resumed>) = 0 [pid 5218] <... mmap resumed>) = 0x7ff677e9d000 [pid 5222] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5213] <... futex resumed>) = 0 [pid 5222] <... futex resumed>) = 1 [pid 5222] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5218] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5209] exit_group(0 [pid 5219] <... futex resumed>) = ? [pid 5209] <... exit_group resumed>) = ? [pid 5219] +++ exited with 0 +++ [pid 5210] <... sendfile resumed>) = ? [pid 5210] +++ exited with 0 +++ [pid 5209] +++ exited with 0 +++ [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5209, si_uid=0, si_status=0, si_utime=11 /* 0.11 s */, si_stime=35 /* 0.35 s */} --- [pid 4997] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4997] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5218] <... write resumed>) = 2097152 [pid 4997] fstat(3, [pid 5207] exit_group(0 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5220] <... futex resumed>) = ? [pid 5218] munmap(0x7ff677e9d000, 2097152 [pid 5208] <... sendfile resumed>) = ? [pid 5207] <... exit_group resumed>) = ? [pid 4997] getdents64(3, [pid 5220] +++ exited with 0 +++ [pid 4997] <... getdents64 resumed>0x555556742620 /* 4 entries */, 32768) = 104 [pid 5218] <... munmap resumed>) = 0 [pid 5208] +++ exited with 0 +++ [pid 5207] +++ exited with 0 +++ [pid 4997] umount2("./11/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5218] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4993] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5207, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=43 /* 0.43 s */} --- [pid 5218] <... openat resumed>) = 10 [pid 5218] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5218] ioctl(10, LOOP_CLR_FD [pid 4993] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5218] <... ioctl resumed>) = 0 [pid 4993] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4993] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5218] ioctl(10, LOOP_SET_FD, 9 [pid 4993] fstat(3, [pid 5218] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5218] close(10 [pid 4993] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5218] <... close resumed>) = 0 [pid 4993] getdents64(3, [pid 5218] close(9 [pid 4993] <... getdents64 resumed>0x555556742620 /* 4 entries */, 32768) = 104 [pid 4993] umount2("./11/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] <... umount2 resumed>) = 0 [pid 5212] exit_group(0 [pid 5221] <... futex resumed>) = ? [pid 5212] <... exit_group resumed>) = ? [pid 4994] umount2("./11/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5221] +++ exited with 0 +++ [pid 5215] <... sendfile resumed>) = ? [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5215] +++ exited with 0 +++ [pid 5212] +++ exited with 0 +++ [pid 5218] <... close resumed>) = 0 [pid 4995] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5212, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=44 /* 0.44 s */} --- [pid 4994] lstat("./11/bus", [pid 5218] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] umount2("./11/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] openat(AT_FDCWD, "./11/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5218] <... futex resumed>) = 1 [pid 5217] <... futex resumed>) = 0 [pid 4995] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] fstat(4, [pid 5218] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5217] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5218] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5217] <... futex resumed>) = 0 [pid 4995] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4994] getdents64(4, [pid 5218] sendfile(8, 6, NULL, 281474978811908 [pid 5217] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4995] <... openat resumed>) = 3 [pid 4994] <... getdents64 resumed>0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4995] fstat(3, [pid 4994] getdents64(4, [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] <... getdents64 resumed>0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4995] getdents64(3, [pid 4994] close(4 [pid 4995] <... getdents64 resumed>0x555556742620 /* 4 entries */, 32768) = 104 [pid 4994] <... close resumed>) = 0 [pid 4995] umount2("./11/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] rmdir("./11/bus") = 0 [pid 4994] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] lstat("./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4994] unlink("./11/binderfs") = 0 [pid 4994] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4994] close(3) = 0 [pid 4994] rmdir("./11") = 0 [pid 4994] mkdir("./12", 0777) = 0 [pid 4994] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4994] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4994] close(3 [pid 5217] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4994] <... close resumed>) = 0 [pid 5217] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5217] <... futex resumed>) = 0 [pid 5217] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4994] <... clone resumed>, child_tidptr=0x5555567415d0) = 5223 [pid 5217] <... mmap resumed>) = 0x7ff67807c000 [pid 5217] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5217] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5224], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5224 ./strace-static-x86_64: Process 5223 attached [pid 5217] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5223] set_robust_list(0x5555567415e0, 24 [pid 5217] <... futex resumed>) = 0 [pid 5223] <... set_robust_list resumed>) = 0 [pid 5217] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5223] chdir("./12") = 0 [pid 5223] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5223] setpgid(0, 0) = 0 ./strace-static-x86_64: Process 5224 attached [pid 5223] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5224] set_robust_list(0x7ff67809c9e0, 24 [pid 5223] <... openat resumed>) = 3 [pid 5224] <... set_robust_list resumed>) = 0 [pid 5223] write(3, "1000", 4 [pid 5224] sync( [pid 5223] <... write resumed>) = 4 [pid 5223] close(3) = 0 [pid 5223] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5223] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5223] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5223] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5223] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5225], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5225 [pid 5224] <... sync resumed>) = 0 [pid 5223] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5224] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5223] <... futex resumed>) = 0 [pid 5224] <... futex resumed>) = 1 [pid 5223] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5217] <... futex resumed>) = 0 [pid 5224] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 5225 attached [pid 5225] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5225] memfd_create("syzkaller", 0) = 3 [pid 5225] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 5213] exit_group(0 [pid 5222] <... futex resumed>) = ? [pid 5213] <... exit_group resumed>) = ? [pid 5222] +++ exited with 0 +++ [pid 5214] <... sendfile resumed>) = ? [pid 5214] +++ exited with 0 +++ [pid 5213] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5213, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=42 /* 0.42 s */} --- [pid 4998] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x555556742620 /* 4 entries */, 32768) = 104 [pid 4998] umount2("./11/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... umount2 resumed>) = 0 [pid 4997] umount2("./11/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./11/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./11/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./11/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4997] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4997] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4997] close(4) = 0 [pid 4997] rmdir("./11/bus") = 0 [pid 4997] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] unlink("./11/binderfs") = 0 [pid 4997] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4997] close(3) = 0 [pid 4997] rmdir("./11") = 0 [pid 4997] mkdir("./12", 0777) = 0 [pid 4997] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 4997] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4997] close(3) = 0 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567415d0) = 5226 ./strace-static-x86_64: Process 5226 attached [pid 5226] set_robust_list(0x5555567415e0, 24) = 0 [pid 5226] chdir("./12") = 0 [pid 5226] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5226] setpgid(0, 0) = 0 [pid 5226] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5226] write(3, "1000", 4) = 4 [pid 5226] close(3) = 0 [pid 5226] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5226] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5226] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5226] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5226] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5227], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5227 [pid 5226] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5226] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5227 attached [pid 5227] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5227] memfd_create("syzkaller", 0) = 3 [pid 5227] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 4993] <... umount2 resumed>) = 0 [pid 4993] umount2("./11/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4993] lstat("./11/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4993] umount2("./11/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4993] openat(AT_FDCWD, "./11/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4993] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4993] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4993] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4993] close(4) = 0 [pid 4993] rmdir("./11/bus") = 0 [pid 4993] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4993] lstat("./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4993] unlink("./11/binderfs") = 0 [pid 4993] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4993] close(3) = 0 [pid 4993] rmdir("./11" [pid 4995] <... umount2 resumed>) = 0 [pid 4993] <... rmdir resumed>) = 0 [pid 4993] mkdir("./12", 0777) = 0 [pid 4993] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4995] umount2("./11/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4993] ioctl(3, LOOP_CLR_FD [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4993] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4995] lstat("./11/bus", [pid 4993] close(3 [pid 4995] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4993] <... close resumed>) = 0 [pid 4995] umount2("./11/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4993] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5217] exit_group(0 [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5224] <... futex resumed>) = ? [pid 5217] <... exit_group resumed>) = ? [pid 4995] openat(AT_FDCWD, "./11/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4993] <... clone resumed>, child_tidptr=0x5555567415d0) = 5228 [pid 5224] +++ exited with 0 +++ [pid 4995] <... openat resumed>) = 4 [pid 5218] <... sendfile resumed>) = ? [pid 4995] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4995] getdents64(4, [pid 5218] +++ exited with 0 +++ [pid 5217] +++ exited with 0 +++ [pid 4995] <... getdents64 resumed>0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4996] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5217, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=27 /* 0.27 s */} --- [pid 4995] close(4 [pid 4996] restart_syscall(<... resuming interrupted clone ...> [pid 4995] <... close resumed>) = 0 ./strace-static-x86_64: Process 5228 attached [pid 4996] <... restart_syscall resumed>) = 0 [pid 4995] rmdir("./11/bus" [pid 5228] set_robust_list(0x5555567415e0, 24 [pid 4995] <... rmdir resumed>) = 0 [pid 5228] <... set_robust_list resumed>) = 0 [pid 4995] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5228] chdir("./12" [pid 4996] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5228] <... chdir resumed>) = 0 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] lstat("./11/binderfs", [pid 5228] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4996] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4995] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5228] <... prctl resumed>) = 0 [pid 4996] <... openat resumed>) = 3 [pid 4995] unlink("./11/binderfs" [pid 5228] setpgid(0, 0 [pid 4996] fstat(3, [pid 4995] <... unlink resumed>) = 0 [pid 5228] <... setpgid resumed>) = 0 [pid 4996] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] getdents64(3, [pid 5228] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4996] getdents64(3, [pid 4995] <... getdents64 resumed>0x555556742620 /* 0 entries */, 32768) = 0 [pid 5228] <... openat resumed>) = 3 [pid 4996] <... getdents64 resumed>0x555556742620 /* 4 entries */, 32768) = 104 [pid 4995] close(3 [pid 5228] write(3, "1000", 4 [pid 4996] umount2("./12/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] <... close resumed>) = 0 [pid 5228] <... write resumed>) = 4 [pid 4995] rmdir("./11" [pid 5228] close(3 [pid 4995] <... rmdir resumed>) =