./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor481193115 <...> DUID 00:04:76:8b:f6:84:a4:3b:36:39:6c:68:e7:10:38:dd:b7:2c forked to background, child pid 4659 [ 29.225727][ T4660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.235526][ T4660] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.187' (ECDSA) to the list of known hosts. execve("./syz-executor481193115", ["./syz-executor481193115"], 0x7fff62c14960 /* 10 vars */) = 0 brk(NULL) = 0x555556741000 brk(0x555556741c40) = 0x555556741c40 arch_prctl(ARCH_SET_FS, 0x555556741300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 set_tid_address(0x5555567415d0) = 4992 set_robust_list(0x5555567415e0, 24) = 0 rt_sigaction(SIGRTMIN, {sa_handler=0x7ff6876cea20, sa_mask=[], sa_flags=SA_RESTORER|SA_SIGINFO, sa_restorer=0x7ff6876cf0f0}, NULL, 8) = 0 rt_sigaction(SIGRT_1, {sa_handler=0x7ff6876ceac0, sa_mask=[], sa_flags=SA_RESTORER|SA_RESTART|SA_SIGINFO, sa_restorer=0x7ff6876cf0f0}, NULL, 8) = 0 rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor481193115", 4096) = 27 brk(0x555556762c40) = 0x555556762c40 brk(0x555556763000) = 0x555556763000 mprotect(0x7ff6877b5000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567415d0) = 4993 ./strace-static-x86_64: Process 4993 attached [pid 4992] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4993] set_robust_list(0x5555567415e0, 24) = 0 [pid 4993] getpid(./strace-static-x86_64: Process 4994 attached [pid 4992] <... clone resumed>, child_tidptr=0x5555567415d0) = 4994 [pid 4992] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4993] <... getpid resumed>) = 4993 [pid 4994] set_robust_list(0x5555567415e0, 24 [pid 4993] mkdir("./syzkaller.lVUVkM", 0700./strace-static-x86_64: Process 4995 attached [pid 4994] <... set_robust_list resumed>) = 0 [pid 4992] <... clone resumed>, child_tidptr=0x5555567415d0) = 4995 [pid 4992] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4993] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 4996 attached [pid 4992] <... clone resumed>, child_tidptr=0x5555567415d0) = 4996 [pid 4992] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4996] set_robust_list(0x5555567415e0, 24 [pid 4995] set_robust_list(0x5555567415e0, 24 [pid 4994] getpid( [pid 4993] chmod("./syzkaller.lVUVkM", 0777./strace-static-x86_64: Process 4997 attached [pid 4992] <... clone resumed>, child_tidptr=0x5555567415d0) = 4997 [pid 4993] <... chmod resumed>) = 0 [pid 4993] chdir("./syzkaller.lVUVkM") = 0 [pid 4993] mkdir("./0", 0777 [pid 4992] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4997] set_robust_list(0x5555567415e0, 24 [pid 4996] <... set_robust_list resumed>) = 0 [pid 4993] <... mkdir resumed>) = 0 [pid 4995] <... set_robust_list resumed>) = 0 [pid 4993] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4993] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4993] close(3) = 0 [pid 4993] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567415d0) = 4999 ./strace-static-x86_64: Process 4998 attached [pid 4998] set_robust_list(0x5555567415e0, 24) = 0 [pid 4998] getpid() = 4998 [pid 4998] mkdir("./syzkaller.PL7eda", 0700./strace-static-x86_64: Process 4999 attached [pid 4999] set_robust_list(0x5555567415e0, 24 [pid 4998] <... mkdir resumed>) = 0 [pid 4999] <... set_robust_list resumed>) = 0 [pid 4998] chmod("./syzkaller.PL7eda", 0777 [pid 4999] chdir("./0" [pid 4998] <... chmod resumed>) = 0 [pid 4999] <... chdir resumed>) = 0 [pid 4999] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4998] chdir("./syzkaller.PL7eda" [pid 4999] setpgid(0, 0 [pid 4998] <... chdir resumed>) = 0 [pid 4999] <... setpgid resumed>) = 0 [pid 4998] mkdir("./0", 0777 [pid 4999] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4992] <... clone resumed>, child_tidptr=0x5555567415d0) = 4998 [pid 4999] write(3, "1000", 4) = 4 [pid 4999] close(3) = 0 [pid 4999] symlink("/dev/binderfs", "./binderfs" [pid 4998] <... mkdir resumed>) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 4999] <... symlink resumed>) = 0 [pid 4999] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4999] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 4999] <... mmap resumed>) = 0x7ff68769d000 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] close(3 [pid 4999] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE [pid 4995] getpid( [pid 4998] <... close resumed>) = 0 [pid 4999] <... mprotect resumed>) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4997] <... set_robust_list resumed>) = 0 [pid 4994] <... getpid resumed>) = 4994 [pid 4996] getpid( [pid 4997] getpid( [pid 4999] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4995] <... getpid resumed>) = 4995 [pid 4994] mkdir("./syzkaller.20fUYQ", 0700 [pid 4995] mkdir("./syzkaller.txkbmS", 0700 [pid 4996] <... getpid resumed>) = 4996 [pid 4999] <... clone resumed>, parent_tid=[5000], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5000 [pid 4999] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4999] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4994] <... mkdir resumed>) = 0 [pid 4996] mkdir("./syzkaller.crriMX", 0700 [pid 4998] <... clone resumed>, child_tidptr=0x5555567415d0) = 5001 [pid 4995] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 5001 attached [pid 5001] set_robust_list(0x5555567415e0, 24) = 0 [pid 4996] <... mkdir resumed>) = 0 [pid 4997] <... getpid resumed>) = 4997 [pid 5001] chdir("./0") = 0 [pid 4997] mkdir("./syzkaller.hTAWL1", 0700 [pid 5001] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5001] setpgid(0, 0) = 0 [pid 5001] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 5000 attached [pid 5000] set_robust_list(0x7ff6876bd9e0, 24 [pid 4997] <... mkdir resumed>) = 0 [pid 4996] chmod("./syzkaller.crriMX", 0777 [pid 4995] chmod("./syzkaller.txkbmS", 0777 [pid 5000] <... set_robust_list resumed>) = 0 [pid 5001] <... openat resumed>) = 3 [pid 5001] write(3, "1000", 4 [pid 5000] memfd_create("syzkaller", 0 [pid 4996] <... chmod resumed>) = 0 [pid 5001] <... write resumed>) = 4 [pid 5001] close(3 [pid 4995] <... chmod resumed>) = 0 [pid 4994] chmod("./syzkaller.20fUYQ", 0777 [pid 5001] <... close resumed>) = 0 [pid 5001] symlink("/dev/binderfs", "./binderfs" [pid 4997] chmod("./syzkaller.hTAWL1", 0777 [pid 4996] chdir("./syzkaller.crriMX" [pid 4995] chdir("./syzkaller.txkbmS" [pid 4994] <... chmod resumed>) = 0 [pid 4997] <... chmod resumed>) = 0 [pid 4996] <... chdir resumed>) = 0 [pid 4995] <... chdir resumed>) = 0 [pid 4994] chdir("./syzkaller.20fUYQ" [pid 5001] <... symlink resumed>) = 0 [pid 4996] mkdir("./0", 0777 [pid 4997] chdir("./syzkaller.hTAWL1" [pid 4995] mkdir("./0", 0777 [pid 4994] <... chdir resumed>) = 0 [pid 5001] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5001] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5001] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE [pid 4994] mkdir("./0", 0777 [pid 5001] <... mprotect resumed>) = 0 [pid 5001] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4996] <... mkdir resumed>) = 0 [pid 5001] <... clone resumed>, parent_tid=[5003], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5003 [pid 5001] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] <... mkdir resumed>) = 0 [pid 5001] <... futex resumed>) = 0 [pid 5001] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5003 attached [pid 5003] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 4994] <... mkdir resumed>) = 0 [pid 4997] <... chdir resumed>) = 0 [pid 4996] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4995] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4994] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 4997] mkdir("./0", 0777 [pid 5003] memfd_create("syzkaller", 0 [pid 4994] <... openat resumed>) = 3 [pid 5003] <... memfd_create resumed>) = 3 [pid 5003] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 4997] <... mkdir resumed>) = 0 [pid 4995] <... openat resumed>) = 3 [pid 4996] <... openat resumed>) = 3 [pid 4994] ioctl(3, LOOP_CLR_FD [pid 4997] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4995] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4994] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4996] ioctl(3, LOOP_CLR_FD [pid 4995] close(3 [pid 4997] <... openat resumed>) = 3 [pid 4994] close(3 [pid 4996] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4994] <... close resumed>) = 0 [pid 4995] <... close resumed>) = 0 [pid 4994] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4997] ioctl(3, LOOP_CLR_FD [pid 4996] close(3 [pid 4995] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4996] <... close resumed>) = 0 [pid 4997] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4996] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4995] <... clone resumed>, child_tidptr=0x5555567415d0) = 5004 [pid 4997] close(3 [pid 4994] <... clone resumed>, child_tidptr=0x5555567415d0) = 5005 [pid 5000] <... memfd_create resumed>) = 3 [pid 5000] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4997] <... close resumed>) = 0 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] <... mmap resumed>) = 0x7ff67f29d000 [pid 4996] <... clone resumed>, child_tidptr=0x5555567415d0) = 5006 [pid 4997] <... clone resumed>, child_tidptr=0x5555567415d0) = 5007 ./strace-static-x86_64: Process 5006 attached [pid 5006] set_robust_list(0x5555567415e0, 24./strace-static-x86_64: Process 5004 attached ) = 0 [pid 5006] chdir("./0") = 0 [pid 5006] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5004] set_robust_list(0x5555567415e0, 24./strace-static-x86_64: Process 5007 attached ./strace-static-x86_64: Process 5005 attached [pid 5006] setpgid(0, 0 [pid 5004] <... set_robust_list resumed>) = 0 syzkaller login: [ 56.269652][ T5000] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5000 'syz-executor481' [pid 5007] set_robust_list(0x5555567415e0, 24 [pid 5006] <... setpgid resumed>) = 0 [pid 5005] set_robust_list(0x5555567415e0, 24 [pid 5004] chdir("./0" [pid 5007] <... set_robust_list resumed>) = 0 [pid 5006] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5005] <... set_robust_list resumed>) = 0 [pid 5004] <... chdir resumed>) = 0 [pid 5005] chdir("./0" [pid 5007] chdir("./0" [pid 5005] <... chdir resumed>) = 0 [pid 5004] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5006] <... openat resumed>) = 3 [pid 5004] <... prctl resumed>) = 0 [pid 5007] <... chdir resumed>) = 0 [pid 5004] setpgid(0, 0 [pid 5005] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5007] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5006] write(3, "1000", 4 [pid 5005] <... prctl resumed>) = 0 [pid 5004] <... setpgid resumed>) = 0 [pid 5004] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5007] <... prctl resumed>) = 0 [pid 5005] setpgid(0, 0 [pid 5004] <... openat resumed>) = 3 [pid 5007] setpgid(0, 0 [pid 5006] <... write resumed>) = 4 [pid 5005] <... setpgid resumed>) = 0 [pid 5004] write(3, "1000", 4 [pid 5007] <... setpgid resumed>) = 0 [pid 5005] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5007] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5006] close(3 [pid 5007] <... openat resumed>) = 3 [pid 5006] <... close resumed>) = 0 [pid 5005] <... openat resumed>) = 3 [pid 5007] write(3, "1000", 4 [pid 5006] symlink("/dev/binderfs", "./binderfs" [pid 5005] write(3, "1000", 4 [pid 5004] <... write resumed>) = 4 [pid 5006] <... symlink resumed>) = 0 [pid 5007] <... write resumed>) = 4 [pid 5006] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] <... write resumed>) = 4 [pid 5004] close(3) = 0 [pid 5007] close(3 [pid 5005] close(3 [pid 5007] <... close resumed>) = 0 [pid 5006] <... futex resumed>) = 0 [pid 5004] symlink("/dev/binderfs", "./binderfs" [pid 5005] <... close resumed>) = 0 [pid 5004] <... symlink resumed>) = 0 [pid 5007] symlink("/dev/binderfs", "./binderfs" [pid 5006] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5005] symlink("/dev/binderfs", "./binderfs" [pid 5004] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5007] <... symlink resumed>) = 0 [pid 5006] <... mmap resumed>) = 0x7ff68769d000 [pid 5005] <... symlink resumed>) = 0 [pid 5004] <... futex resumed>) = 0 [pid 5007] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5006] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE [pid 5005] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5006] <... mprotect resumed>) = 0 [pid 5004] <... mmap resumed>) = 0x7ff68769d000 [pid 5005] <... futex resumed>) = 0 [pid 5007] <... futex resumed>) = 0 [pid 5005] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5007] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5004] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE [pid 5006] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5005] <... mmap resumed>) = 0x7ff68769d000 [pid 5007] <... mmap resumed>) = 0x7ff68769d000 [pid 5004] <... mprotect resumed>) = 0 [pid 5007] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE [pid 5005] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE [pid 5007] <... mprotect resumed>) = 0 [pid 5005] <... mprotect resumed>) = 0 [pid 5004] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5005] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5007] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5006] <... clone resumed>, parent_tid=[5008], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5008 [pid 5007] <... clone resumed>, parent_tid=[5011], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5011 [pid 5005] <... clone resumed>, parent_tid=[5010], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5010 [pid 5004] <... clone resumed>, parent_tid=[5009], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5009 [pid 5006] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5007] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5007] <... futex resumed>) = 0 [pid 5006] <... futex resumed>) = 0 [pid 5005] <... futex resumed>) = 0 [pid 5006] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5007] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5005] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5004] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5011 attached [pid 5011] set_robust_list(0x7ff6876bd9e0, 24) = 0 ./strace-static-x86_64: Process 5008 attached [pid 5008] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5011] memfd_create("syzkaller", 0./strace-static-x86_64: Process 5010 attached ./strace-static-x86_64: Process 5009 attached [pid 5008] memfd_create("syzkaller", 0 [pid 5011] <... memfd_create resumed>) = 3 [pid 5010] set_robust_list(0x7ff6876bd9e0, 24 [pid 5009] set_robust_list(0x7ff6876bd9e0, 24 [pid 5008] <... memfd_create resumed>) = 3 [pid 5010] <... set_robust_list resumed>) = 0 [pid 5009] <... set_robust_list resumed>) = 0 [pid 5008] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5011] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5010] memfd_create("syzkaller", 0 [pid 5009] memfd_create("syzkaller", 0 [pid 5008] <... mmap resumed>) = 0x7ff67f29d000 [pid 5011] <... mmap resumed>) = 0x7ff67f29d000 [pid 5010] <... memfd_create resumed>) = 3 [pid 5009] <... memfd_create resumed>) = 3 [pid 5010] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5009] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5010] <... mmap resumed>) = 0x7ff67f29d000 [pid 5009] <... mmap resumed>) = 0x7ff67f29d000 [pid 5000] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5003] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5011] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5009] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5010] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5008] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5000] <... write resumed>) = 16777216 [pid 5000] munmap(0x7ff67f29d000, 16777216) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5000] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5000] close(3) = 0 [pid 5000] mkdir("./bus", 0777) = 0 [ 57.181533][ T5000] loop0: detected capacity change from 0 to 32768 [pid 5000] mount("/dev/loop0", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "") = 0 [pid 5000] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5000] chdir("./bus") = 0 [pid 5000] ioctl(4, LOOP_CLR_FD) = 0 [pid 5000] close(4) = 0 [pid 5000] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4999] <... futex resumed>) = 0 [pid 4999] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4999] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5000] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5000] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4999] <... futex resumed>) = 0 [pid 4999] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4999] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5000] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5011] <... write resumed>) = 16777216 [pid 5003] <... write resumed>) = 16777216 [pid 5000] <... open resumed>) = 5 [pid 5011] munmap(0x7ff67f29d000, 16777216 [pid 5003] munmap(0x7ff67f29d000, 16777216 [pid 5000] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4999] <... futex resumed>) = 0 [pid 5000] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 4999] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4999] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5000] <... mmap resumed>) = 0x20000000 [pid 5000] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4999] <... futex resumed>) = 0 [pid 4999] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] ftruncate(4, 33587199 [pid 4999] <... futex resumed>) = 0 [pid 4999] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5000] <... ftruncate resumed>) = 0 [pid 5000] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4999] <... futex resumed>) = 0 [pid 4999] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4999] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5000] open("./bus", O_RDONLY) = 6 [pid 5000] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5011] <... munmap resumed>) = 0 [pid 5008] <... write resumed>) = 16777216 [pid 5000] <... futex resumed>) = 1 [pid 4999] <... futex resumed>) = 0 [pid 4999] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4999] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5009] <... write resumed>) = 16777216 [pid 5009] munmap(0x7ff67f29d000, 16777216 [pid 5000] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5011] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5000] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4999] <... futex resumed>) = 0 [pid 4999] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4999] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5000] dup(7 [pid 5011] <... openat resumed>) = 4 [pid 5000] <... dup resumed>) = 8 [pid 5000] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4999] <... futex resumed>) = 0 [pid 4999] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4999] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5011] ioctl(4, LOOP_SET_FD, 3 [pid 5000] memfd_create("syzkaller", 0) = 9 [ 57.323577][ T27] audit: type=1804 audit(1686284862.167:2): pid=5000 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor481" name="/root/syzkaller.lVUVkM/0/bus/bus" dev="loop0" ino=7 res=1 errno=0 [pid 5009] <... munmap resumed>) = 0 [pid 5008] munmap(0x7ff67f29d000, 16777216 [pid 5000] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5011] <... ioctl resumed>) = 0 [pid 5008] <... munmap resumed>) = 0 [pid 5003] <... munmap resumed>) = 0 [pid 5000] <... mmap resumed>) = 0x7ff677e9d000 [pid 5011] close(3 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5009] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5009] ioctl(4, LOOP_SET_FD, 3 [pid 5011] <... close resumed>) = 0 [pid 5010] <... write resumed>) = 16777216 [pid 5003] <... openat resumed>) = 4 [pid 5011] mkdir("./bus", 0777 [pid 5010] munmap(0x7ff67f29d000, 16777216 [pid 5003] ioctl(4, LOOP_SET_FD, 3 [pid 5011] <... mkdir resumed>) = 0 [pid 5008] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5008] ioctl(4, LOOP_SET_FD, 3 [ 57.375770][ T5011] loop4: detected capacity change from 0 to 32768 [ 57.398871][ T5009] loop2: detected capacity change from 0 to 32768 [ 57.407345][ T5003] loop5: detected capacity change from 0 to 32768 [ 57.409946][ T5008] loop3: detected capacity change from 0 to 32768 [pid 5011] mount("/dev/loop4", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "") = 0 [pid 5010] <... munmap resumed>) = 0 [pid 5009] <... ioctl resumed>) = 0 [pid 5008] <... ioctl resumed>) = 0 [pid 5003] <... ioctl resumed>) = 0 [pid 5000] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5011] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5010] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5003] close(3 [pid 5011] <... openat resumed>) = 3 [pid 5010] <... openat resumed>) = 4 [pid 5003] <... close resumed>) = 0 [pid 5011] chdir("./bus" [pid 5010] ioctl(4, LOOP_SET_FD, 3 [pid 5003] mkdir("./bus", 0777 [pid 5011] <... chdir resumed>) = 0 [pid 5009] close(3 [pid 5008] close(3 [pid 5003] <... mkdir resumed>) = 0 [pid 5011] ioctl(4, LOOP_CLR_FD [pid 5009] <... close resumed>) = 0 [pid 5008] <... close resumed>) = 0 [pid 5003] mount("/dev/loop5", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5011] <... ioctl resumed>) = 0 [pid 5010] <... ioctl resumed>) = 0 [pid 5009] mkdir("./bus", 0777 [pid 5008] mkdir("./bus", 0777 [pid 5000] <... write resumed>) = 2097152 [pid 5011] close(4 [pid 5010] close(3 [pid 5009] <... mkdir resumed>) = 0 [pid 5003] <... mount resumed>) = 0 [pid 5000] munmap(0x7ff677e9d000, 2097152 [pid 5008] <... mkdir resumed>) = 0 [pid 5011] <... close resumed>) = 0 [pid 5009] mount("/dev/loop2", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5011] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5008] mount("/dev/loop3", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5000] <... munmap resumed>) = 0 [pid 5011] <... futex resumed>) = 1 [pid 5007] <... futex resumed>) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5011] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5007] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5011] <... open resumed>) = 4 [pid 5007] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5000] <... openat resumed>) = 10 [pid 5011] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] ioctl(10, LOOP_SET_FD, 9 [pid 5011] <... futex resumed>) = 1 [pid 5007] <... futex resumed>) = 0 [pid 5000] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5011] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5007] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] ioctl(10, LOOP_CLR_FD [pid 5011] <... open resumed>) = 5 [pid 5007] <... futex resumed>) = 0 [pid 5000] <... ioctl resumed>) = 0 [pid 5011] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5009] <... mount resumed>) = 0 [pid 5008] <... mount resumed>) = 0 [pid 5007] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5003] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5011] <... futex resumed>) = 0 [pid 5010] <... close resumed>) = 0 [pid 5009] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5008] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5007] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5003] <... openat resumed>) = 3 [ 57.421736][ T27] audit: type=1804 audit(1686284862.207:3): pid=5000 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor481" name="/root/syzkaller.lVUVkM/0/bus/bus" dev="loop0" ino=7 res=1 errno=0 [ 57.443923][ T5010] loop1: detected capacity change from 0 to 32768 [pid 5011] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5010] mkdir("./bus", 0777 [pid 5009] <... openat resumed>) = 3 [pid 5008] <... openat resumed>) = 3 [pid 5007] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5003] chdir("./bus" [pid 5011] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5009] chdir("./bus" [pid 5008] chdir("./bus" [pid 5007] <... futex resumed>) = 0 [pid 5003] <... chdir resumed>) = 0 [pid 5000] ioctl(10, LOOP_SET_FD, 9 [pid 5010] <... mkdir resumed>) = 0 [pid 5011] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5009] <... chdir resumed>) = 0 [pid 5008] <... chdir resumed>) = 0 [pid 5007] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5003] ioctl(4, LOOP_CLR_FD [pid 5000] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5009] ioctl(4, LOOP_CLR_FD [pid 5000] close(10 [pid 5009] <... ioctl resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 5009] close(4 [pid 5000] close(9 [pid 5011] <... mmap resumed>) = 0x20000000 [pid 5010] mount("/dev/loop1", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5009] <... close resumed>) = 0 [pid 5008] ioctl(4, LOOP_CLR_FD [pid 5003] <... ioctl resumed>) = 0 [pid 5011] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5009] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5008] <... ioctl resumed>) = 0 [pid 5003] close(4 [pid 5000] <... close resumed>) = 0 [pid 5011] <... futex resumed>) = 1 [pid 5009] <... futex resumed>) = 1 [pid 5008] close(4 [pid 5007] <... futex resumed>) = 0 [pid 5004] <... futex resumed>) = 0 [pid 5003] <... close resumed>) = 0 [pid 5011] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5009] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5008] <... close resumed>) = 0 [pid 5007] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5003] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5011] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5009] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5008] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5007] <... futex resumed>) = 0 [pid 5004] <... futex resumed>) = 0 [pid 5003] <... futex resumed>) = 1 [pid 5001] <... futex resumed>) = 0 [pid 5011] ftruncate(4, 33587199 [pid 5010] <... mount resumed>) = 0 [pid 5009] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5008] <... futex resumed>) = 1 [pid 5007] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5006] <... futex resumed>) = 0 [pid 5004] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5003] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5001] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5011] <... ftruncate resumed>) = 0 [pid 5010] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5008] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5006] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5011] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5010] <... openat resumed>) = 3 [pid 5009] <... open resumed>) = 4 [pid 5008] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5006] <... futex resumed>) = 0 [pid 5003] <... open resumed>) = 4 [pid 5001] <... futex resumed>) = 0 [pid 5000] <... futex resumed>) = 1 [pid 4999] <... futex resumed>) = 0 [pid 5011] <... futex resumed>) = 1 [pid 5010] chdir("./bus" [pid 5008] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5007] <... futex resumed>) = 0 [pid 5006] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5003] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5011] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5010] <... chdir resumed>) = 0 [pid 5009] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5000] sendfile(8, 6, NULL, 281474978811908 [pid 4999] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5011] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5010] ioctl(4, LOOP_CLR_FD [pid 5009] <... futex resumed>) = 1 [pid 5008] <... open resumed>) = 4 [pid 5007] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] <... futex resumed>) = 0 [pid 5003] <... futex resumed>) = 0 [pid 5001] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4999] <... futex resumed>) = 0 [pid 5011] open("./bus", O_RDONLY [pid 5010] <... ioctl resumed>) = 0 [pid 5009] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5008] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5007] <... futex resumed>) = 0 [pid 5004] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5003] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5001] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5011] <... open resumed>) = 6 [pid 5010] close(4 [pid 5009] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5001] <... futex resumed>) = 0 [pid 5011] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5010] <... close resumed>) = 0 [pid 5009] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5008] <... futex resumed>) = 1 [pid 5007] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5006] <... futex resumed>) = 0 [pid 5004] <... futex resumed>) = 0 [pid 5003] <... open resumed>) = 5 [pid 5001] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5011] <... futex resumed>) = 0 [pid 5010] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5009] <... open resumed>) = 5 [pid 5008] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5007] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5006] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5003] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5011] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5010] <... futex resumed>) = 1 [pid 5009] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5008] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5007] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5006] <... futex resumed>) = 0 [pid 5005] <... futex resumed>) = 0 [pid 5004] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5003] <... futex resumed>) = 0 [pid 5001] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5011] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5010] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5009] <... futex resumed>) = 0 [pid 5008] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5007] <... futex resumed>) = 0 [pid 5006] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5005] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5003] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5001] <... futex resumed>) = 0 [pid 5011] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5010] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5009] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5008] <... open resumed>) = 5 [pid 5007] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5005] <... futex resumed>) = 0 [pid 5004] <... futex resumed>) = 0 [pid 5001] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5011] <... open resumed>) = 7 [pid 5010] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5009] <... mmap resumed>) = 0x20000000 [pid 5008] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5004] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5003] <... mmap resumed>) = 0x20000000 [pid 5011] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5009] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5010] <... open resumed>) = 4 [pid 5008] <... futex resumed>) = 1 [pid 5011] <... futex resumed>) = 1 [pid 5010] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5009] <... futex resumed>) = 0 [pid 5007] <... futex resumed>) = 0 [pid 5006] <... futex resumed>) = 0 [pid 5004] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5003] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5008] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5011] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5010] <... futex resumed>) = 1 [pid 5009] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5008] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5007] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5006] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] <... futex resumed>) = 0 [pid 5004] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5003] <... futex resumed>) = 1 [pid 5001] <... futex resumed>) = 0 [pid 5011] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5010] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5009] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5008] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5007] <... futex resumed>) = 0 [pid 5006] <... futex resumed>) = 0 [pid 5005] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] <... futex resumed>) = 0 [pid 5003] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5001] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5011] dup(7 [pid 5010] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5009] ftruncate(4, 33587199 [pid 5011] <... dup resumed>) = 8 [pid 5010] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5009] <... ftruncate resumed>) = 0 [pid 5008] <... mmap resumed>) = 0x20000000 [pid 5007] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5006] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5005] <... futex resumed>) = 0 [pid 5004] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5003] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5001] <... futex resumed>) = 0 [pid 5011] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5010] <... open resumed>) = 5 [pid 5009] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5008] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5007] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5005] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5004] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5003] ftruncate(4, 33587199 [pid 5001] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5011] <... futex resumed>) = 0 [pid 5010] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5009] <... futex resumed>) = 0 [pid 5008] <... futex resumed>) = 1 [pid 5007] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5006] <... futex resumed>) = 0 [pid 5005] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5004] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5003] <... ftruncate resumed>) = 0 [ 57.528663][ T27] audit: type=1804 audit(1686284862.367:4): pid=5011 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor481" name="/root/syzkaller.hTAWL1/0/bus/bus" dev="loop4" ino=7 res=1 errno=0 [pid 5009] open("./bus", O_RDONLY [pid 5011] memfd_create("syzkaller", 0 [pid 5010] <... futex resumed>) = 0 [pid 5009] <... open resumed>) = 6 [pid 5008] ftruncate(4, 33587199 [pid 5007] <... futex resumed>) = 0 [pid 5006] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] <... futex resumed>) = 0 [pid 5003] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5011] <... memfd_create resumed>) = 9 [pid 5010] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5009] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5008] <... ftruncate resumed>) = 0 [pid 5007] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5006] <... futex resumed>) = 0 [pid 5005] <... futex resumed>) = 0 [pid 5004] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5003] <... futex resumed>) = 1 [pid 5001] <... futex resumed>) = 0 [pid 5010] <... mmap resumed>) = 0x20000000 [pid 5009] <... futex resumed>) = 0 [pid 5006] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5005] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5004] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5001] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5011] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5010] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5009] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5008] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5003] open("./bus", O_RDONLY [pid 5001] <... futex resumed>) = 0 [pid 5011] <... mmap resumed>) = 0x7ff677e9d000 [pid 5010] <... futex resumed>) = 1 [pid 5009] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5008] <... futex resumed>) = 1 [pid 5006] <... futex resumed>) = 0 [pid 5005] <... futex resumed>) = 0 [pid 5004] <... futex resumed>) = 0 [pid 5001] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5010] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5009] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5008] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5006] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5003] <... open resumed>) = 6 [pid 4999] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5010] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5009] <... open resumed>) = 7 [pid 5008] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5006] <... futex resumed>) = 0 [pid 5005] <... futex resumed>) = 0 [pid 5003] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... futex resumed>) = 0 [pid 5010] ftruncate(4, 33587199 [pid 5009] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5008] open("./bus", O_RDONLY [pid 5006] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5005] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5003] <... futex resumed>) = 1 [pid 5001] <... futex resumed>) = 0 [pid 4999] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5010] <... ftruncate resumed>) = 0 [pid 5009] <... futex resumed>) = 1 [pid 5008] <... open resumed>) = 6 [pid 5004] <... futex resumed>) = 0 [pid 5003] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5001] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... mmap resumed>) = 0x7ff67807c000 [pid 5010] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5009] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5008] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5003] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5001] <... futex resumed>) = 0 [pid 4999] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5010] <... futex resumed>) = 1 [pid 5009] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5008] <... futex resumed>) = 1 [pid 5006] <... futex resumed>) = 0 [pid 5005] <... futex resumed>) = 0 [pid 5004] <... futex resumed>) = 0 [pid 5003] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5001] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] <... mprotect resumed>) = 0 [pid 5010] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5009] dup(7 [pid 5008] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5006] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5010] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5009] <... dup resumed>) = 8 [pid 5008] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5006] <... futex resumed>) = 0 [pid 5005] <... futex resumed>) = 0 [pid 5003] <... open resumed>) = 7 [pid 5009] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... clone resumed>, parent_tid=[5014], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5014 [pid 5009] <... futex resumed>) = 1 [pid 4999] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5010] open("./bus", O_RDONLY) = 6 [pid 5009] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5008] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5006] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5005] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5004] <... futex resumed>) = 0 [pid 5003] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5014 attached [pid 5010] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5008] <... open resumed>) = 7 [pid 5005] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5004] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5003] <... futex resumed>) = 1 [pid 5001] <... futex resumed>) = 0 [pid 4999] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5014] set_robust_list(0x7ff67809c9e0, 24 [pid 5010] <... futex resumed>) = 0 [pid 5009] <... futex resumed>) = 0 [pid 5008] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] <... futex resumed>) = 1 [pid 5003] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5001] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5014] <... set_robust_list resumed>) = 0 [ 57.612436][ T27] audit: type=1804 audit(1686284862.407:5): pid=5011 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor481" name="/root/syzkaller.hTAWL1/0/bus/bus" dev="loop4" ino=7 res=1 errno=0 [pid 5010] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5009] memfd_create("syzkaller", 0 [pid 5014] sync( [pid 5010] <... open resumed>) = 7 [pid 5009] <... memfd_create resumed>) = 9 [pid 5008] <... futex resumed>) = 1 [pid 5006] <... futex resumed>) = 0 [pid 5005] <... futex resumed>) = 0 [pid 5004] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5003] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5001] <... futex resumed>) = 0 [pid 5010] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5009] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5008] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5006] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5003] dup(7 [pid 5001] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5010] <... futex resumed>) = 0 [pid 5009] <... mmap resumed>) = 0x7ff677e9d000 [pid 5008] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5006] <... futex resumed>) = 0 [pid 5005] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5003] <... dup resumed>) = 8 [pid 5011] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5010] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5008] dup(7 [pid 5006] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5005] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5003] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5010] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 57.687215][ T27] audit: type=1804 audit(1686284862.427:6): pid=5009 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor481" name="/root/syzkaller.txkbmS/0/bus/bus" dev="loop2" ino=7 res=1 errno=0 [pid 5008] <... dup resumed>) = 8 [pid 5005] <... futex resumed>) = 0 [pid 5003] <... futex resumed>) = 1 [pid 5001] <... futex resumed>) = 0 [pid 4999] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5011] <... write resumed>) = 2097152 [pid 5010] dup(7 [pid 5008] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5003] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5001] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5011] munmap(0x7ff677e9d000, 2097152 [pid 5010] <... dup resumed>) = 8 [pid 5008] <... futex resumed>) = 1 [pid 5003] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5001] <... futex resumed>) = 0 [pid 5011] <... munmap resumed>) = 0 [pid 5010] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5006] <... futex resumed>) = 0 [pid 5001] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5010] <... futex resumed>) = 1 [pid 5008] memfd_create("syzkaller", 0 [pid 5006] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] <... futex resumed>) = 0 [pid 5011] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5010] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5008] <... memfd_create resumed>) = 9 [pid 5006] <... futex resumed>) = 0 [pid 5005] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5003] memfd_create("syzkaller", 0 [pid 5011] <... openat resumed>) = 10 [pid 5010] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5009] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5008] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5006] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5005] <... futex resumed>) = 0 [pid 5003] <... memfd_create resumed>) = 9 [pid 5011] ioctl(10, LOOP_SET_FD, 9 [pid 5010] memfd_create("syzkaller", 0 [pid 5008] <... mmap resumed>) = 0x7ff677e9d000 [pid 5005] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5003] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [ 57.731072][ T27] audit: type=1804 audit(1686284862.447:7): pid=5003 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor481" name="/root/syzkaller.PL7eda/0/bus/bus" dev="loop5" ino=7 res=1 errno=0 [ 57.754474][ T27] audit: type=1804 audit(1686284862.447:8): pid=5009 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor481" name="/root/syzkaller.txkbmS/0/bus/bus" dev="loop2" ino=7 res=1 errno=0 [pid 5011] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5010] <... memfd_create resumed>) = 9 [pid 5003] <... mmap resumed>) = 0x7ff677e9d000 [pid 5011] ioctl(10, LOOP_CLR_FD [pid 5010] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5011] <... ioctl resumed>) = 0 [pid 5010] <... mmap resumed>) = 0x7ff677e9d000 [pid 5011] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5011] close(10) = 0 [pid 5011] close(9) = 0 [pid 5011] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5009] <... write resumed>) = 2097152 [pid 5007] <... futex resumed>) = 0 [pid 5011] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5007] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5011] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5009] munmap(0x7ff677e9d000, 2097152 [pid 5007] <... futex resumed>) = 0 [pid 5011] sendfile(8, 6, NULL, 281474978811908 [pid 5007] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5009] <... munmap resumed>) = 0 [pid 5009] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 10 [pid 5009] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5009] ioctl(10, LOOP_CLR_FD) = 0 [pid 5008] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5010] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5009] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5007] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5009] close(10) = 0 [pid 5009] close(9) = 0 [pid 5003] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5007] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5007] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff67807c000 [pid 5007] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5007] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5017], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5017 [pid 5007] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 57.922674][ T27] audit: type=1804 audit(1686284862.457:9): pid=5008 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor481" name="/root/syzkaller.crriMX/0/bus/bus" dev="loop3" ino=7 res=1 errno=0 [pid 5007] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5017 attached [pid 5017] set_robust_list(0x7ff67809c9e0, 24 [pid 5009] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5017] <... set_robust_list resumed>) = 0 [pid 5009] <... futex resumed>) = 1 [pid 5004] <... futex resumed>) = 0 [pid 5009] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5004] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5009] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5004] <... futex resumed>) = 0 [pid 5009] sendfile(8, 6, NULL, 281474978811908 [pid 5004] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5017] sync( [pid 5010] <... write resumed>) = 2097152 [pid 5008] <... write resumed>) = 2097152 [pid 5007] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5010] munmap(0x7ff677e9d000, 2097152 [pid 5008] munmap(0x7ff677e9d000, 2097152 [pid 5010] <... munmap resumed>) = 0 [pid 5008] <... munmap resumed>) = 0 [pid 5010] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5008] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5010] <... openat resumed>) = 10 [pid 5008] <... openat resumed>) = 10 [pid 5010] ioctl(10, LOOP_SET_FD, 9 [pid 5008] ioctl(10, LOOP_SET_FD, 9 [pid 5010] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5008] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5004] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5010] ioctl(10, LOOP_CLR_FD [pid 5008] ioctl(10, LOOP_CLR_FD [pid 5004] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5010] <... ioctl resumed>) = 0 [pid 5008] <... ioctl resumed>) = 0 [pid 5004] <... futex resumed>) = 0 [pid 5004] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff67807c000 [pid 5010] ioctl(10, LOOP_SET_FD, 9 [pid 5008] ioctl(10, LOOP_SET_FD, 9 [pid 5004] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5010] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5008] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5004] <... mprotect resumed>) = 0 [pid 5010] close(10 [pid 5008] close(10 [pid 5004] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5010] <... close resumed>) = 0 [pid 5008] <... close resumed>) = 0 [pid 5003] <... write resumed>) = 2097152 [pid 5010] close(9 [pid 5008] close(9) = 0 [pid 5004] <... clone resumed>, parent_tid=[5018], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5018 [pid 5004] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5004] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5010] <... close resumed>) = 0 [pid 5003] munmap(0x7ff677e9d000, 2097152./strace-static-x86_64: Process 5018 attached [pid 5018] set_robust_list(0x7ff67809c9e0, 24 [pid 5008] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5018] <... set_robust_list resumed>) = 0 [pid 5010] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5008] <... futex resumed>) = 1 [pid 5006] <... futex resumed>) = 0 [pid 5018] sync( [pid 5010] <... futex resumed>) = 1 [pid 5008] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5006] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] <... futex resumed>) = 0 [pid 5010] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5008] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5006] <... futex resumed>) = 0 [pid 5005] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5003] <... munmap resumed>) = 0 [pid 5010] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5008] sendfile(8, 6, NULL, 281474978811908 [pid 5006] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5005] <... futex resumed>) = 0 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5010] sendfile(8, 6, NULL, 281474978811908 [pid 5005] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5004] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5003] <... openat resumed>) = 10 [pid 5003] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5003] ioctl(10, LOOP_CLR_FD) = 0 [pid 5003] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5003] close(10) = 0 [ 58.131283][ T27] audit: type=1804 audit(1686284862.487:10): pid=5003 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor481" name="/root/syzkaller.PL7eda/0/bus/bus" dev="loop5" ino=7 res=1 errno=0 [pid 5003] close(9) = 0 [pid 5003] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5001] <... futex resumed>) = 0 [pid 5003] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5001] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5006] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5003] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5001] <... futex resumed>) = 0 [pid 5006] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5003] sendfile(8, 6, NULL, 281474978811908 [pid 5001] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5006] <... futex resumed>) = 0 [pid 5005] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5006] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5005] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5006] <... mmap resumed>) = 0x7ff67807c000 [pid 5005] <... futex resumed>) = 0 [pid 5006] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5005] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5006] <... mprotect resumed>) = 0 [pid 5005] <... mmap resumed>) = 0x7ff67807c000 [pid 5006] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5005] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5006] <... clone resumed>, parent_tid=[5019], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5019 [pid 5005] <... mprotect resumed>) = 0 [pid 5006] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5019 attached [pid 5006] <... futex resumed>) = 0 [pid 5019] set_robust_list(0x7ff67809c9e0, 24 [pid 5006] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5005] <... clone resumed>, parent_tid=[5020], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5020 ./strace-static-x86_64: Process 5020 attached [pid 5019] <... set_robust_list resumed>) = 0 [pid 5005] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5020] set_robust_list(0x7ff67809c9e0, 24 [pid 5019] sync( [pid 5005] <... futex resumed>) = 0 [pid 5001] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5020] <... set_robust_list resumed>) = 0 [pid 5005] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5001] <... futex resumed>) = 0 [pid 5020] sync( [pid 5001] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff67807c000 [pid 5006] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5001] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5005] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5001] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5021], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5021 [ 58.316319][ T27] audit: type=1804 audit(1686284862.507:11): pid=5010 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor481" name="/root/syzkaller.20fUYQ/0/bus/bus" dev="loop1" ino=7 res=1 errno=0 [pid 5001] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5021 attached ) = 0 [pid 5021] set_robust_list(0x7ff67809c9e0, 24 [pid 5001] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5021] <... set_robust_list resumed>) = 0 [pid 5021] sync( [pid 4999] exit_group(0 [pid 5000] <... sendfile resumed>) = ? [pid 4999] <... exit_group resumed>) = ? [pid 5000] +++ exited with 0 +++ [pid 5001] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5007] exit_group(0 [pid 5011] <... sendfile resumed>) = ? [pid 5007] <... exit_group resumed>) = ? [pid 5011] +++ exited with 0 +++ [pid 5004] exit_group(0) = ? [pid 5009] <... sendfile resumed>) = ? [pid 5009] +++ exited with 0 +++ [pid 5006] exit_group(0) = ? [pid 5008] <... sendfile resumed>) = ? [pid 5008] +++ exited with 0 +++ [pid 5005] exit_group(0) = ? [pid 5010] <... sendfile resumed>) = ? [pid 5010] +++ exited with 0 +++ [pid 5021] <... sync resumed>) = 0 [pid 5020] <... sync resumed>) = ? [pid 5019] <... sync resumed>) = ? [pid 5018] <... sync resumed>) = ? [pid 5017] <... sync resumed>) = ? [pid 5014] <... sync resumed>) = ? [pid 5021] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5020] +++ exited with 0 +++ [pid 5017] +++ exited with 0 +++ [pid 5007] +++ exited with 0 +++ [pid 5005] +++ exited with 0 +++ [pid 5021] <... futex resumed>) = 0 [pid 5019] +++ exited with 0 +++ [pid 5014] +++ exited with 0 +++ [pid 5006] +++ exited with 0 +++ [pid 4999] +++ exited with 0 +++ [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5007, si_uid=0, si_status=0, si_utime=12 /* 0.12 s */, si_stime=33 /* 0.33 s */} --- [pid 4994] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5005, si_uid=0, si_status=0, si_utime=13 /* 0.13 s */, si_stime=38 /* 0.38 s */} --- [pid 5018] +++ exited with 0 +++ [pid 5004] +++ exited with 0 +++ [pid 5021] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4995] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5004, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=37 /* 0.37 s */} --- [pid 4997] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5006, si_uid=0, si_status=0, si_utime=12 /* 0.12 s */, si_stime=27 /* 0.27 s */} --- [pid 4994] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4993] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4999, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=40 /* 0.40 s */} --- [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4996] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4993] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4993] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4996] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4993] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] <... openat resumed>) = 3 [pid 4996] <... openat resumed>) = 3 [pid 4994] <... openat resumed>) = 3 [pid 4993] <... openat resumed>) = 3 [pid 4997] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] fstat(3, [pid 4994] fstat(3, [pid 4993] fstat(3, [pid 4997] getdents64(3, [pid 4996] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4993] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] <... getdents64 resumed>0x555556742620 /* 4 entries */, 32768) = 104 [pid 4996] getdents64(3, [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] getdents64(3, [pid 4993] getdents64(3, [pid 4997] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] <... getdents64 resumed>0x555556742620 /* 4 entries */, 32768) = 104 [pid 4995] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4994] <... getdents64 resumed>0x555556742620 /* 4 entries */, 32768) = 104 [pid 4993] <... getdents64 resumed>0x555556742620 /* 4 entries */, 32768) = 104 [pid 4996] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] <... openat resumed>) = 3 [pid 4994] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4993] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] getdents64(3, 0x555556742620 /* 4 entries */, 32768) = 104 [pid 4995] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] exit_group(0 [pid 5021] <... futex resumed>) = ? [pid 5001] <... exit_group resumed>) = ? [pid 5021] +++ exited with 0 +++ [pid 5003] <... sendfile resumed>) = ? [pid 5003] +++ exited with 0 +++ [pid 5001] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5001, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=41 /* 0.41 s */} --- [pid 4998] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x555556742620 /* 4 entries */, 32768) = 104 [pid 4998] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... umount2 resumed>) = 0 [pid 4997] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./0/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./0/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4997] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4997] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4997] close(4) = 0 [pid 4997] rmdir("./0/bus") = 0 [pid 4997] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] unlink("./0/binderfs") = 0 [pid 4997] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4997] close(3) = 0 [pid 4997] rmdir("./0") = 0 [pid 4997] mkdir("./1", 0777) = 0 [pid 4997] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 4997] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4997] close(3) = 0 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567415d0) = 5023 ./strace-static-x86_64: Process 5023 attached [pid 5023] set_robust_list(0x5555567415e0, 24) = 0 [pid 5023] chdir("./1") = 0 [pid 5023] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5023] setpgid(0, 0) = 0 [pid 5023] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5023] write(3, "1000", 4) = 4 [pid 5023] close(3) = 0 [pid 5023] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5023] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5023] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5023] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5023] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5024], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5024 [pid 5023] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5023] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5024 attached [pid 5024] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 4994] <... umount2 resumed>) = 0 [pid 5024] memfd_create("syzkaller", 0 [pid 4994] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] lstat("./0/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5024] <... memfd_create resumed>) = 3 [pid 5024] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4994] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] openat(AT_FDCWD, "./0/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4994] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] getdents64(4, [pid 5024] <... mmap resumed>) = 0x7ff67f29d000 [pid 4994] <... getdents64 resumed>0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4996] <... umount2 resumed>) = 0 [pid 4993] <... umount2 resumed>) = 0 [pid 4996] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4994] close(4) = 0 [pid 4994] rmdir("./0/bus") = 0 [pid 4994] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4994] unlink("./0/binderfs") = 0 [pid 4994] getdents64(3, [pid 4993] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] <... getdents64 resumed>0x555556742620 /* 0 entries */, 32768) = 0 [pid 4994] close(3 [pid 4993] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] <... close resumed>) = 0 [pid 4993] lstat("./0/bus", [pid 4994] rmdir("./0" [pid 4993] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] <... rmdir resumed>) = 0 [pid 4994] mkdir("./1", 0777 [pid 4993] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4993] openat(AT_FDCWD, "./0/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4993] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] <... mkdir resumed>) = 0 [pid 4993] getdents64(4, [pid 4994] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 4993] <... getdents64 resumed>0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4993] getdents64(4, [pid 4994] <... openat resumed>) = 3 [pid 4993] <... getdents64 resumed>0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4993] close(4) = 0 [pid 4993] rmdir("./0/bus" [pid 4994] ioctl(3, LOOP_CLR_FD [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4996] lstat("./0/bus", [pid 4994] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4993] <... rmdir resumed>) = 0 [pid 4994] close(3) = 0 [pid 4994] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567415d0) = 5025 [pid 4996] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] openat(AT_FDCWD, "./0/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4993] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] fstat(4, [pid 4993] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5025 attached [pid 4996] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4993] lstat("./0/binderfs", [pid 5025] set_robust_list(0x5555567415e0, 24) = 0 [pid 4996] getdents64(4, [pid 4993] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5025] chdir("./1" [pid 4996] <... getdents64 resumed>0x55555674a660 /* 2 entries */, 32768) = 48 [pid 5025] <... chdir resumed>) = 0 [pid 4996] getdents64(4, [pid 4993] unlink("./0/binderfs" [pid 5025] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4996] <... getdents64 resumed>0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4993] <... unlink resumed>) = 0 [pid 5025] setpgid(0, 0 [pid 4996] close(4 [pid 5025] <... setpgid resumed>) = 0 [pid 4996] <... close resumed>) = 0 [pid 4993] getdents64(3, [pid 5025] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4996] rmdir("./0/bus" [pid 4993] <... getdents64 resumed>0x555556742620 /* 0 entries */, 32768) = 0 [pid 5025] <... openat resumed>) = 3 [pid 4996] <... rmdir resumed>) = 0 [pid 4993] close(3 [pid 5025] write(3, "1000", 4 [pid 4996] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4993] <... close resumed>) = 0 [pid 5025] <... write resumed>) = 4 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4993] rmdir("./0" [pid 5025] close(3 [pid 4996] lstat("./0/binderfs", [pid 4993] <... rmdir resumed>) = 0 [pid 5025] <... close resumed>) = 0 [pid 4996] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4993] mkdir("./1", 0777 [pid 5025] symlink("/dev/binderfs", "./binderfs" [pid 4996] unlink("./0/binderfs" [pid 4993] <... mkdir resumed>) = 0 [pid 5025] <... symlink resumed>) = 0 [pid 4996] <... unlink resumed>) = 0 [pid 4993] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5025] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] getdents64(3, [pid 4993] <... openat resumed>) = 3 [pid 5025] <... futex resumed>) = 0 [pid 4996] <... getdents64 resumed>0x555556742620 /* 0 entries */, 32768) = 0 [pid 4993] ioctl(3, LOOP_CLR_FD [pid 5025] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4996] close(3 [pid 4993] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5025] <... mmap resumed>) = 0x7ff68769d000 [pid 4996] <... close resumed>) = 0 [pid 4993] close(3 [pid 5025] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE [pid 4996] rmdir("./0" [pid 4993] <... close resumed>) = 0 [pid 5025] <... mprotect resumed>) = 0 [pid 4996] <... rmdir resumed>) = 0 [pid 4993] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5025] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4996] mkdir("./1", 0777) = 0 [pid 4993] <... clone resumed>, child_tidptr=0x5555567415d0) = 5026 [pid 5025] <... clone resumed>, parent_tid=[5027], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5027 [pid 4996] openat(AT_FDCWD, "/dev/loop3", O_RDWR./strace-static-x86_64: Process 5027 attached ./strace-static-x86_64: Process 5026 attached [pid 5025] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... openat resumed>) = 3 [pid 5027] set_robust_list(0x7ff6876bd9e0, 24 [pid 5026] set_robust_list(0x5555567415e0, 24 [pid 5025] <... futex resumed>) = 0 [pid 4996] ioctl(3, LOOP_CLR_FD [pid 5027] <... set_robust_list resumed>) = 0 [pid 5026] <... set_robust_list resumed>) = 0 [pid 5025] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4996] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5027] memfd_create("syzkaller", 0 [pid 4996] close(3 [pid 5027] <... memfd_create resumed>) = 3 [pid 5026] chdir("./1" [pid 4996] <... close resumed>) = 0 [pid 4996] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567415d0) = 5028 [pid 5027] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5026] <... chdir resumed>) = 0 [pid 5027] <... mmap resumed>) = 0x7ff67f29d000 [pid 5026] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5026] setpgid(0, 0) = 0 [pid 5026] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5026] write(3, "1000", 4) = 4 [pid 5026] close(3) = 0 [pid 5026] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5026] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5026] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5026] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5026] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5029], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5029 ./strace-static-x86_64: Process 5028 attached [pid 5026] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5028] set_robust_list(0x5555567415e0, 24 [pid 5026] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5028] <... set_robust_list resumed>) = 0 [pid 5028] chdir("./1"./strace-static-x86_64: Process 5029 attached [pid 5029] set_robust_list(0x7ff6876bd9e0, 24 [pid 5028] <... chdir resumed>) = 0 [pid 5029] <... set_robust_list resumed>) = 0 [pid 5029] memfd_create("syzkaller", 0) = 3 [pid 5029] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 5028] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5028] setpgid(0, 0) = 0 [pid 5028] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5028] write(3, "1000", 4) = 4 [pid 5028] close(3) = 0 [pid 5028] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5028] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5028] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5028] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5028] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5030], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5030 [pid 5028] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5028] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5024] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216./strace-static-x86_64: Process 5030 attached [pid 5030] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5030] memfd_create("syzkaller", 0) = 3 [pid 5030] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 4998] <... umount2 resumed>) = 0 [pid 4998] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./0/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./0/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./0/bus") = 0 [pid 4998] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./0/binderfs") = 0 [pid 4998] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./0") = 0 [pid 4998] mkdir("./1", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567415d0) = 5031 ./strace-static-x86_64: Process 5031 attached [pid 5031] set_robust_list(0x5555567415e0, 24 [pid 5027] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5031] <... set_robust_list resumed>) = 0 [pid 5031] chdir("./1") = 0 [pid 5031] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5031] setpgid(0, 0) = 0 [pid 5031] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5031] write(3, "1000", 4) = 4 [pid 5031] close(3) = 0 [pid 5031] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5031] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5031] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5030] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5031] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5031] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5032], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5032 [pid 5031] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5031] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5032 attached [pid 5032] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5032] memfd_create("syzkaller", 0) = 3 [pid 5032] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 4995] <... umount2 resumed>) = 0 [pid 4995] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4995] lstat("./0/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4995] openat(AT_FDCWD, "./0/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4995] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4995] getdents64(4, [pid 5029] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 4995] <... getdents64 resumed>0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4995] close(4) = 0 [pid 4995] rmdir("./0/bus") = 0 [pid 4995] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4995] lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4995] unlink("./0/binderfs") = 0 [pid 4995] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4995] close(3) = 0 [pid 4995] rmdir("./0") = 0 [pid 4995] mkdir("./1", 0777) = 0 [pid 4995] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 4995] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4995] close(3) = 0 [pid 4995] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567415d0) = 5033 ./strace-static-x86_64: Process 5033 attached [pid 5033] set_robust_list(0x5555567415e0, 24) = 0 [pid 5033] chdir("./1") = 0 [pid 5033] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5033] setpgid(0, 0) = 0 [pid 5033] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5033] write(3, "1000", 4) = 4 [pid 5033] close(3) = 0 [pid 5033] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5033] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5033] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5033] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE [pid 5024] <... write resumed>) = 16777216 [pid 5033] <... mprotect resumed>) = 0 [pid 5033] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5024] munmap(0x7ff67f29d000, 16777216 [pid 5033] <... clone resumed>, parent_tid=[5034], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5034 [pid 5033] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5033] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5034 attached [pid 5034] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5034] memfd_create("syzkaller", 0) = 3 [pid 5034] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 5024] <... munmap resumed>) = 0 [pid 5024] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5024] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5024] close(3) = 0 [pid 5024] mkdir("./bus", 0777) = 0 [pid 5024] mount("/dev/loop4", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "") = 0 [pid 5024] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5024] chdir("./bus") = 0 [pid 5024] ioctl(4, LOOP_CLR_FD) = 0 [pid 5024] close(4) = 0 [ 59.921874][ T5024] loop4: detected capacity change from 0 to 32768 [pid 5024] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5023] <... futex resumed>) = 0 [pid 5024] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5023] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5024] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5023] <... futex resumed>) = 0 [pid 5024] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5023] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5024] <... open resumed>) = 4 [pid 5024] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5023] <... futex resumed>) = 0 [pid 5027] <... write resumed>) = 16777216 [pid 5024] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5023] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5027] munmap(0x7ff67f29d000, 16777216 [pid 5024] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5023] <... futex resumed>) = 0 [pid 5023] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5027] <... munmap resumed>) = 0 [pid 5024] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5027] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5024] <... open resumed>) = 5 [pid 5027] <... openat resumed>) = 4 [pid 5024] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5027] ioctl(4, LOOP_SET_FD, 3 [pid 5024] <... futex resumed>) = 1 [pid 5023] <... futex resumed>) = 0 [pid 5023] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5023] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5024] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 0 [pid 5024] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5023] <... futex resumed>) = 0 [pid 5027] close(3 [pid 5024] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5023] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5027] <... close resumed>) = 0 [pid 5024] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5023] <... futex resumed>) = 0 [pid 5027] mkdir("./bus", 0777 [pid 5024] ftruncate(4, 33587199 [pid 5023] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5024] <... ftruncate resumed>) = 0 [pid 5027] <... mkdir resumed>) = 0 [pid 5024] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5027] mount("/dev/loop1", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5024] <... futex resumed>) = 1 [pid 5023] <... futex resumed>) = 0 [pid 5024] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5023] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5030] <... write resumed>) = 16777216 [pid 5024] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5023] <... futex resumed>) = 0 [pid 5023] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5030] munmap(0x7ff67f29d000, 16777216 [pid 5024] open("./bus", O_RDONLY [pid 5027] <... mount resumed>) = 0 [pid 5024] <... open resumed>) = 6 [pid 5027] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5024] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5032] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5027] <... openat resumed>) = 3 [pid 5024] <... futex resumed>) = 1 [pid 5023] <... futex resumed>) = 0 [pid 5023] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5023] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5027] chdir("./bus" [pid 5024] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5030] <... munmap resumed>) = 0 [pid 5030] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5027] <... chdir resumed>) = 0 [pid 5024] <... open resumed>) = 7 [pid 5030] <... openat resumed>) = 4 [pid 5027] ioctl(4, LOOP_CLR_FD [pid 5024] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5030] ioctl(4, LOOP_SET_FD, 3 [pid 5027] <... ioctl resumed>) = 0 [pid 5024] <... futex resumed>) = 1 [pid 5023] <... futex resumed>) = 0 [ 60.047779][ T5027] loop1: detected capacity change from 0 to 32768 [pid 5023] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5023] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5027] close(4 [pid 5024] dup(7 [pid 5027] <... close resumed>) = 0 [pid 5027] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5030] <... ioctl resumed>) = 0 [pid 5024] <... dup resumed>) = 8 [pid 5030] close(3 [pid 5027] <... futex resumed>) = 1 [pid 5025] <... futex resumed>) = 0 [pid 5024] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5030] <... close resumed>) = 0 [pid 5027] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5025] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5024] <... futex resumed>) = 1 [pid 5023] <... futex resumed>) = 0 [pid 5030] mkdir("./bus", 0777 [pid 5027] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5025] <... futex resumed>) = 0 [pid 5024] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5023] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5030] <... mkdir resumed>) = 0 [pid 5027] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5025] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5024] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5023] <... futex resumed>) = 0 [pid 5030] mount("/dev/loop3", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5023] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5027] <... open resumed>) = 4 [pid 5024] memfd_create("syzkaller", 0 [pid 5027] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5025] <... futex resumed>) = 0 [pid 5027] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5025] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5027] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5025] <... futex resumed>) = 0 [pid 5027] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5025] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5027] <... open resumed>) = 5 [pid 5027] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5025] <... futex resumed>) = 0 [pid 5030] <... mount resumed>) = 0 [pid 5024] <... memfd_create resumed>) = 9 [pid 5030] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5027] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5025] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5024] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5030] <... openat resumed>) = 3 [ 60.107679][ T5030] loop3: detected capacity change from 0 to 32768 [pid 5027] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5025] <... futex resumed>) = 0 [pid 5024] <... mmap resumed>) = 0x7ff677e9d000 [pid 5030] chdir("./bus" [pid 5027] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5025] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5027] <... mmap resumed>) = 0x20000000 [pid 5030] <... chdir resumed>) = 0 [pid 5027] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5030] ioctl(4, LOOP_CLR_FD [pid 5027] <... futex resumed>) = 1 [pid 5025] <... futex resumed>) = 0 [pid 5030] <... ioctl resumed>) = 0 [pid 5030] close(4 [pid 5027] ftruncate(4, 33587199 [pid 5025] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5030] <... close resumed>) = 0 [pid 5030] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5025] <... futex resumed>) = 0 [pid 5030] <... futex resumed>) = 1 [pid 5028] <... futex resumed>) = 0 [pid 5027] <... ftruncate resumed>) = 0 [pid 5025] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5030] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5028] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5027] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5025] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5030] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5028] <... futex resumed>) = 0 [pid 5027] <... futex resumed>) = 0 [pid 5025] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5030] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5028] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5030] <... open resumed>) = 4 [pid 5027] open("./bus", O_RDONLY [pid 5025] <... futex resumed>) = 0 [pid 5030] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5027] <... open resumed>) = 6 [pid 5025] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5030] <... futex resumed>) = 1 [pid 5028] <... futex resumed>) = 0 [pid 5027] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5025] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5030] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5028] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5027] <... futex resumed>) = 0 [pid 5025] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5030] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5028] <... futex resumed>) = 0 [pid 5027] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5025] <... futex resumed>) = 0 [pid 5030] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5028] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5027] <... open resumed>) = 7 [pid 5025] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5030] <... open resumed>) = 5 [pid 5027] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5025] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5030] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5027] <... futex resumed>) = 0 [pid 5025] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5030] <... futex resumed>) = 1 [pid 5028] <... futex resumed>) = 0 [pid 5027] dup(7 [pid 5025] <... futex resumed>) = 0 [pid 5030] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5028] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5027] <... dup resumed>) = 8 [pid 5025] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5030] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5028] <... futex resumed>) = 0 [pid 5027] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5025] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5030] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5028] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5027] <... futex resumed>) = 0 [pid 5025] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5024] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5030] <... mmap resumed>) = 0x20000000 [pid 5027] memfd_create("syzkaller", 0 [pid 5030] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5025] <... futex resumed>) = 0 [pid 5030] <... futex resumed>) = 1 [pid 5028] <... futex resumed>) = 0 [pid 5025] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5030] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5028] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5027] <... memfd_create resumed>) = 9 [pid 5030] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5028] <... futex resumed>) = 0 [pid 5027] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5030] ftruncate(4, 33587199 [pid 5028] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5030] <... ftruncate resumed>) = 0 [pid 5027] <... mmap resumed>) = 0x7ff677e9d000 [pid 5030] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5028] <... futex resumed>) = 0 [pid 5030] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5028] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5030] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5028] <... futex resumed>) = 0 [pid 5030] open("./bus", O_RDONLY [pid 5028] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5030] <... open resumed>) = 6 [pid 5030] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5028] <... futex resumed>) = 0 [pid 5030] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5028] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5030] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5028] <... futex resumed>) = 0 [pid 5030] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5028] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5030] <... open resumed>) = 7 [pid 5030] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5028] <... futex resumed>) = 0 [pid 5030] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5028] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5030] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5028] <... futex resumed>) = 0 [pid 5030] dup(7 [pid 5028] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5030] <... dup resumed>) = 8 [pid 5030] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5028] <... futex resumed>) = 0 [pid 5024] <... write resumed>) = 2097152 [pid 5030] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5028] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5024] munmap(0x7ff677e9d000, 2097152 [pid 5030] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5028] <... futex resumed>) = 0 [pid 5030] memfd_create("syzkaller", 0 [pid 5028] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5027] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5030] <... memfd_create resumed>) = 9 [pid 5030] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff677e9d000 [pid 5024] <... munmap resumed>) = 0 [pid 5024] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 10 [pid 5024] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5024] ioctl(10, LOOP_CLR_FD) = 0 [pid 5024] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5024] close(10) = 0 [pid 5024] close(9) = 0 [pid 5030] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5024] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5023] <... futex resumed>) = 0 [pid 5024] sendfile(8, 6, NULL, 281474978811908 [pid 5023] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5027] <... write resumed>) = 2097152 [pid 5023] <... futex resumed>) = 0 [pid 5023] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5027] munmap(0x7ff677e9d000, 2097152) = 0 [pid 5027] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 10 [pid 5027] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5034] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5027] ioctl(10, LOOP_CLR_FD) = 0 [pid 5029] <... write resumed>) = 16777216 [pid 5027] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5029] munmap(0x7ff67f29d000, 16777216 [pid 5027] close(10 [pid 5030] <... write resumed>) = 2097152 [pid 5029] <... munmap resumed>) = 0 [pid 5027] <... close resumed>) = 0 [pid 5027] close(9 [pid 5023] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5023] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5023] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff67807c000 [pid 5023] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5023] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5035], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5035 [pid 5023] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5023] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5035 attached [pid 5035] set_robust_list(0x7ff67809c9e0, 24) = 0 [pid 5027] <... close resumed>) = 0 [pid 5035] sync( [pid 5029] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5027] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5029] <... openat resumed>) = 4 [pid 5027] <... futex resumed>) = 1 [pid 5025] <... futex resumed>) = 0 [pid 5029] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5025] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5030] munmap(0x7ff677e9d000, 2097152 [pid 5027] sendfile(8, 6, NULL, 281474978811908 [pid 5025] <... futex resumed>) = 0 [pid 5025] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5035] <... sync resumed>) = 0 [pid 5035] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5023] <... futex resumed>) = 0 [pid 5035] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5030] <... munmap resumed>) = 0 [pid 5030] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 10 [pid 5030] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5030] ioctl(10, LOOP_CLR_FD) = 0 [pid 5032] <... write resumed>) = 16777216 [ 60.483563][ T5029] loop0: detected capacity change from 0 to 32768 [pid 5029] close(3 [pid 5030] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5029] <... close resumed>) = 0 [pid 5030] close(10) = 0 [pid 5029] mkdir("./bus", 0777) = 0 [pid 5029] mount("/dev/loop0", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5025] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5030] close(9 [pid 5025] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5025] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff67807c000 [pid 5025] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5029] <... mount resumed>) = 0 [pid 5025] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5029] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5025] <... clone resumed>, parent_tid=[5036], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5036 [pid 5029] chdir("./bus" [pid 5025] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5029] <... chdir resumed>) = 0 [pid 5025] <... futex resumed>) = 0 [pid 5032] munmap(0x7ff67f29d000, 16777216 [pid 5030] <... close resumed>) = 0 [pid 5029] ioctl(4, LOOP_CLR_FD [pid 5025] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5029] <... ioctl resumed>) = 0 [pid 5029] close(4 [pid 5030] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5029] <... close resumed>) = 0 ./strace-static-x86_64: Process 5036 attached [pid 5030] <... futex resumed>) = 1 [pid 5029] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5028] <... futex resumed>) = 0 [pid 5036] set_robust_list(0x7ff67809c9e0, 24 [pid 5030] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5029] <... futex resumed>) = 1 [pid 5028] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5026] <... futex resumed>) = 0 [pid 5036] <... set_robust_list resumed>) = 0 [pid 5030] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5029] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5028] <... futex resumed>) = 0 [pid 5026] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5036] sync( [pid 5030] sendfile(8, 6, NULL, 281474978811908 [pid 5029] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5028] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5026] <... futex resumed>) = 0 [pid 5029] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5026] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5029] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5026] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5029] <... futex resumed>) = 0 [pid 5026] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5029] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5026] <... futex resumed>) = 0 [pid 5036] <... sync resumed>) = 0 [pid 5029] <... open resumed>) = 5 [pid 5026] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5036] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5029] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5026] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5036] <... futex resumed>) = 1 [pid 5029] <... futex resumed>) = 0 [pid 5026] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5025] <... futex resumed>) = 0 [pid 5036] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5029] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5026] <... futex resumed>) = 0 [pid 5029] <... mmap resumed>) = 0x20000000 [pid 5026] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5029] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5026] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5029] <... futex resumed>) = 0 [pid 5026] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5029] ftruncate(4, 33587199 [pid 5028] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5026] <... futex resumed>) = 0 [pid 5029] <... ftruncate resumed>) = 0 [pid 5028] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5026] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5029] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5028] <... futex resumed>) = 0 [pid 5026] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5029] <... futex resumed>) = 0 [pid 5028] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5026] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5032] <... munmap resumed>) = 0 [pid 5029] open("./bus", O_RDONLY [pid 5028] <... mmap resumed>) = 0x7ff67807c000 [pid 5026] <... futex resumed>) = 0 [pid 5029] <... open resumed>) = 6 [pid 5028] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5026] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5029] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5028] <... mprotect resumed>) = 0 [pid 5026] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5032] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5029] <... futex resumed>) = 0 [pid 5028] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5026] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5032] <... openat resumed>) = 4 [pid 5029] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5026] <... futex resumed>) = 0 [pid 5032] ioctl(4, LOOP_SET_FD, 3 [pid 5029] <... open resumed>) = 7 [pid 5028] <... clone resumed>, parent_tid=[5037], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5037 [pid 5026] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5029] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5037 attached ) = 0 [pid 5037] set_robust_list(0x7ff67809c9e0, 24 [pid 5029] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5037] <... set_robust_list resumed>) = 0 [pid 5037] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5028] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5026] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5037] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5028] <... futex resumed>) = 0 [pid 5026] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5037] sync( [pid 5029] <... futex resumed>) = 0 [pid 5028] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5026] <... futex resumed>) = 1 [pid 5029] dup(7 [pid 5026] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5029] <... dup resumed>) = 8 [pid 5029] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5037] <... sync resumed>) = 0 [pid 5032] <... ioctl resumed>) = 0 [pid 5029] <... futex resumed>) = 1 [pid 5026] <... futex resumed>) = 0 [pid 5037] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5032] close(3 [pid 5029] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5026] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5037] <... futex resumed>) = 1 [pid 5032] <... close resumed>) = 0 [pid 5029] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5028] <... futex resumed>) = 0 [pid 5026] <... futex resumed>) = 0 [pid 5037] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5032] mkdir("./bus", 0777 [pid 5029] memfd_create("syzkaller", 0 [pid 5026] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5032] <... mkdir resumed>) = 0 [pid 5029] <... memfd_create resumed>) = 9 [pid 5032] mount("/dev/loop5", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5029] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff677e9d000 [ 60.665751][ T5032] loop5: detected capacity change from 0 to 32768 [pid 5032] <... mount resumed>) = 0 [pid 5032] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5032] chdir("./bus") = 0 [pid 5032] ioctl(4, LOOP_CLR_FD) = 0 [pid 5029] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5032] close(4) = 0 [pid 5032] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5031] <... futex resumed>) = 0 [pid 5032] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5031] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5032] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5031] <... futex resumed>) = 0 [pid 5032] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5031] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5032] <... open resumed>) = 4 [pid 5032] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5031] <... futex resumed>) = 0 [pid 5032] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5031] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5032] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5031] <... futex resumed>) = 0 [pid 5032] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5031] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5032] <... open resumed>) = 5 [pid 5032] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5031] <... futex resumed>) = 0 [pid 5032] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5031] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5032] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5031] <... futex resumed>) = 0 [pid 5032] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5031] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5032] <... mmap resumed>) = 0x20000000 [pid 5032] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5031] <... futex resumed>) = 0 [pid 5032] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5031] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5032] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5031] <... futex resumed>) = 0 [pid 5032] ftruncate(4, 33587199 [pid 5031] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5032] <... ftruncate resumed>) = 0 [pid 5032] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5031] <... futex resumed>) = 0 [pid 5032] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5031] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5032] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5031] <... futex resumed>) = 0 [pid 5032] open("./bus", O_RDONLY [pid 5031] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5032] <... open resumed>) = 6 [pid 5032] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5031] <... futex resumed>) = 0 [pid 5032] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5031] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5032] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5031] <... futex resumed>) = 0 [pid 5032] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5031] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5032] <... open resumed>) = 7 [pid 5032] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5031] <... futex resumed>) = 0 [pid 5032] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5031] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5032] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5031] <... futex resumed>) = 0 [pid 5032] dup(7 [pid 5031] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5032] <... dup resumed>) = 8 [pid 5032] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5029] <... write resumed>) = 2097152 [pid 5032] <... futex resumed>) = 1 [pid 5031] <... futex resumed>) = 0 [pid 5032] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5031] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5032] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5031] <... futex resumed>) = 0 [pid 5029] munmap(0x7ff677e9d000, 2097152 [pid 5032] memfd_create("syzkaller", 0 [pid 5031] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5032] <... memfd_create resumed>) = 9 [pid 5029] <... munmap resumed>) = 0 [pid 5032] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5029] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5032] <... mmap resumed>) = 0x7ff677e9d000 [pid 5029] <... openat resumed>) = 10 [pid 5029] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5029] ioctl(10, LOOP_CLR_FD) = 0 [pid 5029] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5029] close(10) = 0 [pid 5029] close(9) = 0 [pid 5029] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5026] <... futex resumed>) = 0 [pid 5029] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5026] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5029] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5026] <... futex resumed>) = 0 [pid 5029] sendfile(8, 6, NULL, 281474978811908 [pid 5026] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5032] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5034] <... write resumed>) = 16777216 [pid 5026] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5026] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5026] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff67807c000 [pid 5026] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5026] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5038], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5038 [pid 5026] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5026] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5038 attached [pid 5038] set_robust_list(0x7ff67809c9e0, 24) = 0 [pid 5038] sync( [pid 5034] munmap(0x7ff67f29d000, 16777216 [pid 5038] <... sync resumed>) = 0 [pid 5038] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5026] <... futex resumed>) = 0 [pid 5038] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5034] <... munmap resumed>) = 0 [pid 5034] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5034] ioctl(4, LOOP_SET_FD, 3 [pid 5023] exit_group(0 [pid 5035] <... futex resumed>) = ? [pid 5023] <... exit_group resumed>) = ? [pid 5035] +++ exited with 0 +++ [pid 5024] <... sendfile resumed>) = ? [pid 5034] <... ioctl resumed>) = 0 [pid 5034] close(3) = 0 [pid 5034] mkdir("./bus", 0777) = 0 [pid 5034] mount("/dev/loop2", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5032] <... write resumed>) = 2097152 [pid 5024] +++ exited with 0 +++ [pid 5023] +++ exited with 0 +++ [pid 5032] munmap(0x7ff677e9d000, 2097152 [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5023, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=36 /* 0.36 s */} --- [pid 5032] <... munmap resumed>) = 0 [pid 5034] <... mount resumed>) = 0 [pid 5034] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 4997] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5034] <... openat resumed>) = 3 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5034] chdir("./bus" [pid 4997] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5034] <... chdir resumed>) = 0 [pid 4997] <... openat resumed>) = 3 [pid 5034] ioctl(4, LOOP_CLR_FD [pid 4997] fstat(3, [pid 5034] <... ioctl resumed>) = 0 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 61.100479][ T5034] loop2: detected capacity change from 0 to 32768 [pid 5034] close(4 [pid 5032] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 4997] getdents64(3, [pid 5034] <... close resumed>) = 0 [pid 5032] <... openat resumed>) = 10 [pid 4997] <... getdents64 resumed>0x555556742620 /* 4 entries */, 32768) = 104 [pid 5034] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5032] ioctl(10, LOOP_SET_FD, 9 [pid 4997] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5034] <... futex resumed>) = 1 [pid 5033] <... futex resumed>) = 0 [pid 5032] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5034] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5033] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5032] ioctl(10, LOOP_CLR_FD [pid 5025] exit_group(0 [pid 5036] <... futex resumed>) = ? [pid 5034] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5033] <... futex resumed>) = 0 [pid 5032] <... ioctl resumed>) = 0 [pid 5025] <... exit_group resumed>) = ? [pid 5036] +++ exited with 0 +++ [pid 5034] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5033] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5034] <... open resumed>) = 4 [pid 5034] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5027] <... sendfile resumed>) = ? [pid 5034] <... futex resumed>) = 1 [pid 5033] <... futex resumed>) = 0 [pid 5032] ioctl(10, LOOP_SET_FD, 9 [pid 5034] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5033] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5032] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5027] +++ exited with 0 +++ [pid 5025] +++ exited with 0 +++ [pid 5034] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5033] <... futex resumed>) = 0 [pid 5032] close(10 [pid 4994] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5025, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=28 /* 0.28 s */} --- [pid 5034] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5033] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5032] <... close resumed>) = 0 [pid 4994] restart_syscall(<... resuming interrupted clone ...> [pid 5034] <... open resumed>) = 5 [pid 5032] close(9 [pid 4994] <... restart_syscall resumed>) = 0 [pid 5034] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5033] <... futex resumed>) = 0 [pid 5034] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5033] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5034] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5033] <... futex resumed>) = 0 [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5034] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5033] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5032] <... close resumed>) = 0 [pid 4994] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5034] <... mmap resumed>) = 0x20000000 [pid 4994] <... openat resumed>) = 3 [pid 5034] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] fstat(3, [pid 5034] <... futex resumed>) = 1 [pid 5033] <... futex resumed>) = 0 [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5034] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5033] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5032] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] getdents64(3, [pid 5034] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5033] <... futex resumed>) = 0 [pid 5032] <... futex resumed>) = 1 [pid 5031] <... futex resumed>) = 0 [pid 4994] <... getdents64 resumed>0x555556742620 /* 4 entries */, 32768) = 104 [pid 5034] ftruncate(4, 33587199 [pid 5033] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5032] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5031] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5034] <... ftruncate resumed>) = 0 [pid 5032] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5031] <... futex resumed>) = 0 [pid 5034] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5032] sendfile(8, 6, NULL, 281474978811908 [pid 5031] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5034] <... futex resumed>) = 1 [pid 5033] <... futex resumed>) = 0 [pid 5034] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5033] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5034] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5033] <... futex resumed>) = 0 [pid 5034] open("./bus", O_RDONLY [pid 5033] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5034] <... open resumed>) = 6 [pid 5034] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5033] <... futex resumed>) = 0 [pid 5034] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5033] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5034] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5033] <... futex resumed>) = 0 [pid 5034] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5033] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5034] <... open resumed>) = 7 [pid 5034] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5033] <... futex resumed>) = 0 [pid 5034] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5033] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5034] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5033] <... futex resumed>) = 0 [pid 5034] dup(7 [pid 5033] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5034] <... dup resumed>) = 8 [pid 5034] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5033] <... futex resumed>) = 0 [pid 5034] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5033] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5034] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5033] <... futex resumed>) = 0 [pid 5034] memfd_create("syzkaller", 0 [pid 5033] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5034] <... memfd_create resumed>) = 9 [pid 5034] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff677e9d000 [pid 5031] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5031] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5031] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff67807c000 [pid 5031] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5028] exit_group(0 [pid 5037] <... futex resumed>) = ? [pid 5031] <... mprotect resumed>) = 0 [pid 5030] <... sendfile resumed>) = ? [pid 5028] <... exit_group resumed>) = ? [pid 5037] +++ exited with 0 +++ [pid 5031] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5039], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5039 [pid 5031] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5031] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5039 attached [pid 5030] +++ exited with 0 +++ [pid 5028] +++ exited with 0 +++ [pid 5039] set_robust_list(0x7ff67809c9e0, 24) = 0 [pid 4996] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5028, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=44 /* 0.44 s */} --- [pid 5039] sync( [pid 4996] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4996] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4996] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] getdents64(3, 0x555556742620 /* 4 entries */, 32768) = 104 [pid 4996] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5034] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5031] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5034] <... write resumed>) = 2097152 [pid 5034] munmap(0x7ff677e9d000, 2097152) = 0 [pid 5034] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 10 [pid 5034] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5034] ioctl(10, LOOP_CLR_FD) = 0 [pid 5034] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5034] close(10) = 0 [pid 5034] close(9) = 0 [pid 5026] exit_group(0 [pid 5038] <... futex resumed>) = ? [pid 5026] <... exit_group resumed>) = ? [pid 5038] +++ exited with 0 +++ [pid 5029] <... sendfile resumed>) = ? [pid 5029] +++ exited with 0 +++ [pid 5026] +++ exited with 0 +++ [pid 4993] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5026, si_uid=0, si_status=0, si_utime=11 /* 0.11 s */, si_stime=37 /* 0.37 s */} --- [pid 5034] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 4993] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5034] <... futex resumed>) = 1 [pid 5033] <... futex resumed>) = 0 [pid 4993] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5034] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5033] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4993] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5034] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5033] <... futex resumed>) = 0 [pid 4993] <... openat resumed>) = 3 [pid 5034] sendfile(8, 6, NULL, 281474978811908 [pid 5033] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4993] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4993] getdents64(3, 0x555556742620 /* 4 entries */, 32768) = 104 [pid 4994] <... umount2 resumed>) = 0 [pid 4993] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] lstat("./1/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] openat(AT_FDCWD, "./1/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4994] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4994] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 5033] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4994] close(4 [pid 5033] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] <... close resumed>) = 0 [pid 5033] <... futex resumed>) = 0 [pid 4994] rmdir("./1/bus" [pid 5033] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff67807c000 [pid 4994] <... rmdir resumed>) = 0 [pid 5033] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 4994] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5033] <... mprotect resumed>) = 0 [pid 5033] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5033] <... clone resumed>, parent_tid=[5040], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5040 [pid 4994] lstat("./1/binderfs", [pid 5033] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4994] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5033] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4994] unlink("./1/binderfs") = 0 [pid 4994] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4994] close(3./strace-static-x86_64: Process 5040 attached [pid 5040] set_robust_list(0x7ff67809c9e0, 24 [pid 4994] <... close resumed>) = 0 [pid 5040] <... set_robust_list resumed>) = 0 [pid 4994] rmdir("./1" [pid 5040] sync( [pid 4994] <... rmdir resumed>) = 0 [pid 4994] mkdir("./2", 0777) = 0 [pid 4994] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4994] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4994] close(3) = 0 [pid 5039] <... sync resumed>) = 0 [pid 4994] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5040] <... sync resumed>) = 0 [pid 5039] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5040] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5039] <... futex resumed>) = 0 [pid 5039] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5040] <... futex resumed>) = 1 [pid 5033] <... futex resumed>) = 0 [pid 4994] <... clone resumed>, child_tidptr=0x5555567415d0) = 5041 [pid 5040] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 5041 attached [pid 5041] set_robust_list(0x5555567415e0, 24) = 0 [pid 5041] chdir("./2") = 0 [pid 5041] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5041] setpgid(0, 0) = 0 [pid 5041] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5041] write(3, "1000", 4) = 4 [pid 5041] close(3) = 0 [pid 5041] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5041] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5041] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5041] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5041] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5042], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5042 [pid 5041] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5041] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5042 attached [pid 5042] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5042] memfd_create("syzkaller", 0) = 3 [pid 5042] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 5031] exit_group(0) = ? [pid 5039] <... futex resumed>) = ? [pid 5039] +++ exited with 0 +++ [pid 5032] <... sendfile resumed>) = ? [pid 5032] +++ exited with 0 +++ [pid 5031] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5031, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=38 /* 0.38 s */} --- [pid 4998] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x555556742620 /* 4 entries */, 32768) = 104 [pid 4998] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... umount2 resumed>) = 0 [pid 4997] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./1/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4993] <... umount2 resumed>) = 0 [pid 4997] openat(AT_FDCWD, "./1/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4993] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] fstat(4, [pid 4993] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4993] lstat("./1/bus", [pid 4997] getdents64(4, [pid 4993] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] <... getdents64 resumed>0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4997] getdents64(4, [pid 4993] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... getdents64 resumed>0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4997] close(4 [pid 4993] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] <... close resumed>) = 0 [pid 4993] openat(AT_FDCWD, "./1/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] rmdir("./1/bus" [pid 4993] <... openat resumed>) = 4 [pid 4997] <... rmdir resumed>) = 0 [pid 4993] fstat(4, [pid 4997] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4993] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4993] getdents64(4, [pid 4997] lstat("./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4993] <... getdents64 resumed>0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4997] unlink("./1/binderfs" [pid 4993] getdents64(4, [pid 4997] <... unlink resumed>) = 0 [pid 4997] getdents64(3, [pid 4993] <... getdents64 resumed>0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4997] <... getdents64 resumed>0x555556742620 /* 0 entries */, 32768) = 0 [pid 4993] close(4 [pid 4997] close(3) = 0 [pid 4993] <... close resumed>) = 0 [pid 4997] rmdir("./1" [pid 4993] rmdir("./1/bus" [pid 4997] <... rmdir resumed>) = 0 [pid 4997] mkdir("./2", 0777 [pid 4993] <... rmdir resumed>) = 0 [pid 4997] <... mkdir resumed>) = 0 [pid 4997] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4993] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... openat resumed>) = 3 [pid 4993] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] ioctl(3, LOOP_CLR_FD [pid 4993] lstat("./1/binderfs", [pid 4997] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4997] close(3 [pid 4993] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] <... close resumed>) = 0 [pid 4993] unlink("./1/binderfs" [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4993] <... unlink resumed>) = 0 [pid 4997] <... clone resumed>, child_tidptr=0x5555567415d0) = 5043 [pid 4993] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4993] close(3) = 0 [pid 4993] rmdir("./1") = 0 [pid 4993] mkdir("./2", 0777) = 0 [pid 4993] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4993] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4993] close(3) = 0 [pid 4993] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567415d0) = 5044 [pid 4996] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 5044 attached [pid 5044] set_robust_list(0x5555567415e0, 24 [pid 4996] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5044] <... set_robust_list resumed>) = 0 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5043 attached [pid 5044] chdir("./2" [pid 4996] lstat("./1/bus", [pid 5044] <... chdir resumed>) = 0 [pid 5043] set_robust_list(0x5555567415e0, 24 [pid 4996] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5044] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5043] <... set_robust_list resumed>) = 0 [pid 4996] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5044] <... prctl resumed>) = 0 [pid 5043] chdir("./2" [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5044] setpgid(0, 0 [pid 5043] <... chdir resumed>) = 0 [pid 5033] exit_group(0 [pid 4996] openat(AT_FDCWD, "./1/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5044] <... setpgid resumed>) = 0 [pid 5043] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5040] <... futex resumed>) = ? [pid 5033] <... exit_group resumed>) = ? [pid 4996] <... openat resumed>) = 4 [pid 5044] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5043] <... prctl resumed>) = 0 [pid 5040] +++ exited with 0 +++ [pid 4996] fstat(4, [pid 5044] <... openat resumed>) = 3 [pid 5043] setpgid(0, 0 [pid 4996] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5044] write(3, "1000", 4 [pid 5043] <... setpgid resumed>) = 0 [pid 4996] getdents64(4, [pid 5044] <... write resumed>) = 4 [pid 5043] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4996] <... getdents64 resumed>0x55555674a660 /* 2 entries */, 32768) = 48 [pid 5044] close(3 [pid 5043] <... openat resumed>) = 3 [pid 5034] <... sendfile resumed>) = ? [pid 4996] getdents64(4, [pid 5044] <... close resumed>) = 0 [pid 5043] write(3, "1000", 4 [pid 5034] +++ exited with 0 +++ [pid 5033] +++ exited with 0 +++ [pid 4996] <... getdents64 resumed>0x55555674a660 /* 0 entries */, 32768) = 0 [pid 5044] symlink("/dev/binderfs", "./binderfs" [pid 5043] <... write resumed>) = 4 [pid 4996] close(4 [pid 5044] <... symlink resumed>) = 0 [pid 5043] close(3 [pid 4996] <... close resumed>) = 0 [pid 4995] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5033, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=31 /* 0.31 s */} --- [pid 5044] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5043] <... close resumed>) = 0 [pid 4996] rmdir("./1/bus" [pid 4995] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5044] <... futex resumed>) = 0 [pid 5043] symlink("/dev/binderfs", "./binderfs" [pid 4996] <... rmdir resumed>) = 0 [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5044] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5043] <... symlink resumed>) = 0 [pid 4996] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5044] <... mmap resumed>) = 0x7ff68769d000 [pid 5043] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] <... openat resumed>) = 3 [pid 5044] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE [pid 5043] <... futex resumed>) = 0 [pid 4996] lstat("./1/binderfs", [pid 4995] fstat(3, [pid 5044] <... mprotect resumed>) = 0 [pid 5043] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4996] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5044] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5043] <... mmap resumed>) = 0x7ff68769d000 [pid 4996] unlink("./1/binderfs" [pid 4995] getdents64(3, [pid 5043] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE [pid 4996] <... unlink resumed>) = 0 [pid 4995] <... getdents64 resumed>0x555556742620 /* 4 entries */, 32768) = 104 [pid 5044] <... clone resumed>, parent_tid=[5045], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5045 [pid 5043] <... mprotect resumed>) = 0 [pid 4996] getdents64(3, [pid 4995] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5044] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5043] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4996] <... getdents64 resumed>0x555556742620 /* 0 entries */, 32768) = 0 [pid 5044] <... futex resumed>) = 0 [pid 4996] close(3 [pid 5044] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5043] <... clone resumed>, parent_tid=[5046], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5046 [pid 4996] <... close resumed>) = 0 [pid 5043] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] rmdir("./1" [pid 5043] <... futex resumed>) = 0 [pid 4996] <... rmdir resumed>) = 0 [pid 5043] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4996] mkdir("./2", 0777) = 0 [pid 4996] openat(AT_FDCWD, "/dev/loop3", O_RDWR./strace-static-x86_64: Process 5045 attached ) = 3 [pid 5045] set_robust_list(0x7ff6876bd9e0, 24 [pid 4996] ioctl(3, LOOP_CLR_FD [pid 5045] <... set_robust_list resumed>) = 0 [pid 4996] <... ioctl resumed>) = -1 ENXIO (No such device or address) ./strace-static-x86_64: Process 5046 attached [pid 5045] memfd_create("syzkaller", 0 [pid 4996] close(3 [pid 5046] set_robust_list(0x7ff6876bd9e0, 24 [pid 5045] <... memfd_create resumed>) = 3 [pid 4996] <... close resumed>) = 0 [pid 5046] <... set_robust_list resumed>) = 0 [pid 5045] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4996] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5046] memfd_create("syzkaller", 0 [pid 5045] <... mmap resumed>) = 0x7ff67f29d000 [pid 5046] <... memfd_create resumed>) = 3 [pid 4996] <... clone resumed>, child_tidptr=0x5555567415d0) = 5047 [pid 5046] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 ./strace-static-x86_64: Process 5047 attached [pid 5047] set_robust_list(0x5555567415e0, 24) = 0 [pid 5047] chdir("./2") = 0 [pid 5047] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5047] setpgid(0, 0) = 0 [pid 5047] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5047] write(3, "1000", 4) = 4 [pid 5047] close(3) = 0 [pid 5047] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5047] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5047] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5047] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5047] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5048], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5048 [pid 5047] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5047] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5048 attached [pid 5048] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5048] memfd_create("syzkaller", 0) = 3 [pid 5048] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5042] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5048] <... mmap resumed>) = 0x7ff67f29d000 [pid 4998] <... umount2 resumed>) = 0 [pid 4998] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./1/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./1/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./1/bus") = 0 [pid 4998] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./1/binderfs") = 0 [pid 4998] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./1") = 0 [pid 4998] mkdir("./2", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567415d0) = 5049 ./strace-static-x86_64: Process 5049 attached [pid 5049] set_robust_list(0x5555567415e0, 24) = 0 [pid 5049] chdir("./2") = 0 [pid 5049] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5049] setpgid(0, 0) = 0 [pid 5049] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5049] write(3, "1000", 4) = 4 [pid 5049] close(3) = 0 [pid 5049] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5049] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5049] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5049] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5049] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5050], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5050 [pid 5049] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5049] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5050 attached [pid 5050] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5050] memfd_create("syzkaller", 0) = 3 [pid 5050] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 5046] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5045] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5048] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 4995] <... umount2 resumed>) = 0 [pid 4995] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4995] lstat("./1/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4995] openat(AT_FDCWD, "./1/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5042] <... write resumed>) = 16777216 [pid 4995] <... openat resumed>) = 4 [pid 4995] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 5042] munmap(0x7ff67f29d000, 16777216 [pid 4995] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4995] close(4) = 0 [pid 4995] rmdir("./1/bus") = 0 [pid 4995] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4995] lstat("./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4995] unlink("./1/binderfs") = 0 [pid 4995] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4995] close(3) = 0 [pid 4995] rmdir("./1") = 0 [pid 4995] mkdir("./2", 0777) = 0 [pid 4995] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 4995] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4995] close(3) = 0 [pid 4995] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5042] <... munmap resumed>) = 0 [pid 4995] <... clone resumed>, child_tidptr=0x5555567415d0) = 5051 [pid 5042] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5042] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 5051 attached [pid 5051] set_robust_list(0x5555567415e0, 24) = 0 [pid 5042] <... ioctl resumed>) = 0 [pid 5051] chdir("./2") = 0 [pid 5051] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5051] setpgid(0, 0) = 0 [pid 5051] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5051] write(3, "1000", 4) = 4 [pid 5051] close(3 [pid 5042] close(3 [pid 5051] <... close resumed>) = 0 [pid 5051] symlink("/dev/binderfs", "./binderfs" [pid 5042] <... close resumed>) = 0 [pid 5051] <... symlink resumed>) = 0 [pid 5042] mkdir("./bus", 0777 [pid 5051] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5042] <... mkdir resumed>) = 0 [pid 5051] <... futex resumed>) = 0 [pid 5042] mount("/dev/loop1", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5051] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5050] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5051] <... mmap resumed>) = 0x7ff68769d000 [pid 5051] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5051] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5052], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5052 [ 62.600587][ T5042] loop1: detected capacity change from 0 to 32768 [pid 5042] <... mount resumed>) = 0 [pid 5051] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5042] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5051] <... futex resumed>) = 0 [pid 5042] <... openat resumed>) = 3 [pid 5051] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5042] chdir("./bus") = 0 ./strace-static-x86_64: Process 5052 attached [pid 5042] ioctl(4, LOOP_CLR_FD [pid 5052] set_robust_list(0x7ff6876bd9e0, 24 [pid 5042] <... ioctl resumed>) = 0 [pid 5052] <... set_robust_list resumed>) = 0 [pid 5042] close(4 [pid 5052] memfd_create("syzkaller", 0 [pid 5042] <... close resumed>) = 0 [pid 5052] <... memfd_create resumed>) = 3 [pid 5042] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5052] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5042] <... futex resumed>) = 1 [pid 5041] <... futex resumed>) = 0 [pid 5052] <... mmap resumed>) = 0x7ff67f29d000 [pid 5042] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5041] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5042] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5041] <... futex resumed>) = 0 [pid 5042] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5041] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5042] <... open resumed>) = 4 [pid 5042] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5041] <... futex resumed>) = 0 [pid 5042] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5041] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5042] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5041] <... futex resumed>) = 0 [pid 5042] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5041] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5042] <... open resumed>) = 5 [pid 5042] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5041] <... futex resumed>) = 0 [pid 5042] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5041] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5042] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5041] <... futex resumed>) = 0 [pid 5042] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5041] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5042] <... mmap resumed>) = 0x20000000 [pid 5042] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5041] <... futex resumed>) = 0 [pid 5042] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5041] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5042] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5041] <... futex resumed>) = 0 [pid 5042] ftruncate(4, 33587199 [pid 5041] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5042] <... ftruncate resumed>) = 0 [pid 5042] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5041] <... futex resumed>) = 0 [pid 5042] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5041] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5042] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5041] <... futex resumed>) = 0 [pid 5042] open("./bus", O_RDONLY [pid 5041] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5042] <... open resumed>) = 6 [pid 5042] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5041] <... futex resumed>) = 0 [pid 5042] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5041] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5042] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5041] <... futex resumed>) = 0 [pid 5042] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5041] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5042] <... open resumed>) = 7 [pid 5042] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5041] <... futex resumed>) = 0 [pid 5042] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5041] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5042] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5041] <... futex resumed>) = 0 [pid 5042] dup(7 [pid 5041] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5042] <... dup resumed>) = 8 [pid 5042] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5041] <... futex resumed>) = 0 [pid 5042] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5041] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5042] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5041] <... futex resumed>) = 0 [pid 5042] memfd_create("syzkaller", 0 [pid 5041] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5042] <... memfd_create resumed>) = 9 [pid 5042] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff677e9d000 [ 62.697394][ T27] kauditd_printk_skb: 14 callbacks suppressed [ 62.697408][ T27] audit: type=1804 audit(1686284867.537:26): pid=5042 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor481" name="/root/syzkaller.20fUYQ/2/bus/bus" dev="loop1" ino=7 res=1 errno=0 [ 62.779671][ T27] audit: type=1804 audit(1686284867.547:27): pid=5042 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor481" name="/root/syzkaller.20fUYQ/2/bus/bus" dev="loop1" ino=7 res=1 errno=0 [pid 5042] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5042] munmap(0x7ff677e9d000, 2097152) = 0 [pid 5042] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 10 [pid 5042] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5042] ioctl(10, LOOP_CLR_FD) = 0 [pid 5042] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5042] close(10) = 0 [pid 5042] close(9) = 0 [pid 5042] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5041] <... futex resumed>) = 0 [pid 5041] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5041] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5042] <... futex resumed>) = 1 [pid 5042] sendfile(8, 6, NULL, 281474978811908 [pid 5048] <... write resumed>) = 16777216 [pid 5048] munmap(0x7ff67f29d000, 16777216 [pid 5046] <... write resumed>) = 16777216 [pid 5048] <... munmap resumed>) = 0 [pid 5046] munmap(0x7ff67f29d000, 16777216 [pid 5041] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5041] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5041] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff67807c000 [pid 5041] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5041] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5053], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5053 [pid 5041] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5041] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5048] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5048] ioctl(4, LOOP_SET_FD, 3) = 0 ./strace-static-x86_64: Process 5053 attached [pid 5053] set_robust_list(0x7ff67809c9e0, 24) = 0 [pid 5048] close(3 [pid 5053] sync( [pid 5048] <... close resumed>) = 0 [pid 5048] mkdir("./bus", 0777 [pid 5045] <... write resumed>) = 16777216 [pid 5045] munmap(0x7ff67f29d000, 16777216 [pid 5053] <... sync resumed>) = 0 [pid 5053] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5041] <... futex resumed>) = 0 [pid 5053] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5048] <... mkdir resumed>) = 0 [pid 5048] mount("/dev/loop3", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5046] <... munmap resumed>) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5046] ioctl(4, LOOP_SET_FD, 3 [pid 5048] <... mount resumed>) = 0 [pid 5048] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5046] <... ioctl resumed>) = 0 [pid 5048] <... openat resumed>) = 3 [pid 5048] chdir("./bus") = 0 [pid 5048] ioctl(4, LOOP_CLR_FD [pid 5045] <... munmap resumed>) = 0 [pid 5048] <... ioctl resumed>) = 0 [ 63.012642][ T5048] loop3: detected capacity change from 0 to 32768 [ 63.047581][ T5046] loop4: detected capacity change from 0 to 32768 [pid 5048] close(4 [pid 5045] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5048] <... close resumed>) = 0 [pid 5045] <... openat resumed>) = 4 [pid 5045] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5045] close(3) = 0 [pid 5045] mkdir("./bus", 0777 [pid 5048] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5045] <... mkdir resumed>) = 0 [pid 5045] mount("/dev/loop0", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5048] <... futex resumed>) = 1 [pid 5047] <... futex resumed>) = 0 [pid 5047] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5048] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5047] <... futex resumed>) = 0 [pid 5048] <... open resumed>) = 4 [pid 5047] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5048] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5047] <... futex resumed>) = 0 [pid 5047] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5048] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 5047] <... futex resumed>) = 0 [pid 5047] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5048] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5047] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5048] <... futex resumed>) = 0 [pid 5047] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5048] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5047] <... futex resumed>) = 0 [pid 5048] <... mmap resumed>) = 0x20000000 [pid 5048] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5047] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5048] <... futex resumed>) = 0 [pid 5047] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5048] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5047] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5048] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5047] <... futex resumed>) = 0 [pid 5048] ftruncate(4, 33587199 [pid 5047] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5048] <... ftruncate resumed>) = 0 [pid 5046] close(3 [ 63.072534][ T5045] loop0: detected capacity change from 0 to 32768 [pid 5048] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5046] <... close resumed>) = 0 [pid 5048] <... futex resumed>) = 1 [pid 5047] <... futex resumed>) = 0 [pid 5047] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5048] open("./bus", O_RDONLY) = 6 [pid 5047] <... futex resumed>) = 0 [pid 5047] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5048] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5047] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5048] <... futex resumed>) = 0 [pid 5047] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5046] mkdir("./bus", 0777 [pid 5045] <... mount resumed>) = 0 [pid 5050] <... write resumed>) = 16777216 [pid 5048] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5047] <... futex resumed>) = 0 [pid 5046] <... mkdir resumed>) = 0 [pid 5045] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5052] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5048] <... open resumed>) = 7 [pid 5047] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5046] mount("/dev/loop4", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5045] <... openat resumed>) = 3 [pid 5048] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5047] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5045] chdir("./bus" [pid 5048] <... futex resumed>) = 0 [pid 5047] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5045] <... chdir resumed>) = 0 [pid 5048] dup(7 [pid 5047] <... futex resumed>) = 0 [pid 5045] ioctl(4, LOOP_CLR_FD [pid 5048] <... dup resumed>) = 8 [pid 5047] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5046] <... mount resumed>) = 0 [pid 5045] <... ioctl resumed>) = 0 [pid 5048] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5047] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5046] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5045] close(4 [pid 5048] <... futex resumed>) = 0 [pid 5047] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5046] <... openat resumed>) = 3 [pid 5045] <... close resumed>) = 0 [pid 5045] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 63.116157][ T27] audit: type=1804 audit(1686284867.957:28): pid=5048 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor481" name="/root/syzkaller.crriMX/2/bus/bus" dev="loop3" ino=7 res=1 errno=0 [pid 5045] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5048] memfd_create("syzkaller", 0 [pid 5047] <... futex resumed>) = 0 [pid 5046] chdir("./bus" [pid 5044] <... futex resumed>) = 0 [pid 5048] <... memfd_create resumed>) = 9 [pid 5047] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5046] <... chdir resumed>) = 0 [pid 5044] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5048] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5046] ioctl(4, LOOP_CLR_FD [pid 5045] <... futex resumed>) = 0 [pid 5044] <... futex resumed>) = 1 [pid 5048] <... mmap resumed>) = 0x7ff677e9d000 [pid 5046] <... ioctl resumed>) = 0 [pid 5045] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5044] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5045] <... open resumed>) = 4 [pid 5045] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5045] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5050] munmap(0x7ff67f29d000, 16777216 [pid 5046] close(4 [pid 5044] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5046] <... close resumed>) = 0 [pid 5044] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5046] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5045] <... futex resumed>) = 0 [pid 5044] <... futex resumed>) = 1 [pid 5046] <... futex resumed>) = 1 [pid 5045] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5044] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5043] <... futex resumed>) = 0 [pid 5046] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5045] <... open resumed>) = 5 [pid 5043] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5046] <... open resumed>) = 4 [pid 5045] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5043] <... futex resumed>) = 0 [pid 5045] <... futex resumed>) = 1 [pid 5043] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5045] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5046] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5044] <... futex resumed>) = 0 [pid 5046] <... futex resumed>) = 1 [pid 5044] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5043] <... futex resumed>) = 0 [pid 5046] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5045] <... futex resumed>) = 0 [pid 5044] <... futex resumed>) = 1 [pid 5043] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5046] <... open resumed>) = 5 [pid 5045] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5044] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5043] <... futex resumed>) = 0 [pid 5046] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5045] <... mmap resumed>) = 0x20000000 [pid 5043] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5046] <... futex resumed>) = 0 [pid 5045] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5043] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5046] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5045] <... futex resumed>) = 1 [pid 5044] <... futex resumed>) = 0 [pid 5043] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5046] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5045] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5044] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5043] <... futex resumed>) = 0 [pid 5048] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5046] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5045] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5044] <... futex resumed>) = 0 [pid 5043] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5050] <... munmap resumed>) = 0 [pid 5046] <... mmap resumed>) = 0x20000000 [pid 5045] ftruncate(4, 33587199 [pid 5044] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5050] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5046] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5045] <... ftruncate resumed>) = 0 [pid 5050] <... openat resumed>) = 4 [pid 5046] <... futex resumed>) = 1 [pid 5045] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5043] <... futex resumed>) = 0 [pid 5050] ioctl(4, LOOP_SET_FD, 3 [pid 5046] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5045] <... futex resumed>) = 1 [pid 5044] <... futex resumed>) = 0 [pid 5043] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5046] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5045] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5044] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5043] <... futex resumed>) = 0 [pid 5046] ftruncate(4, 33587199 [pid 5045] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5044] <... futex resumed>) = 0 [pid 5043] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5046] <... ftruncate resumed>) = 0 [pid 5045] open("./bus", O_RDONLY [pid 5044] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5046] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5045] <... open resumed>) = 6 [pid 5046] <... futex resumed>) = 1 [pid 5045] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5043] <... futex resumed>) = 0 [pid 5046] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5045] <... futex resumed>) = 1 [pid 5044] <... futex resumed>) = 0 [pid 5043] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5046] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5045] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5044] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5043] <... futex resumed>) = 0 [pid 5045] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5043] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5045] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5046] open("./bus", O_RDONLY [pid 5045] <... open resumed>) = 7 [pid 5044] <... futex resumed>) = 0 [pid 5046] <... open resumed>) = 6 [pid 5045] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5044] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5046] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5045] <... futex resumed>) = 0 [pid 5044] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5046] <... futex resumed>) = 1 [pid 5045] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5044] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5043] <... futex resumed>) = 0 [pid 5046] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5045] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5044] <... futex resumed>) = 0 [pid 5043] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5046] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5045] dup(7 [pid 5044] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5043] <... futex resumed>) = 0 [pid 5050] <... ioctl resumed>) = 0 [pid 5046] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5045] <... dup resumed>) = 8 [pid 5043] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5050] close(3 [pid 5046] <... open resumed>) = 7 [pid 5045] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5050] <... close resumed>) = 0 [pid 5046] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5045] <... futex resumed>) = 1 [pid 5044] <... futex resumed>) = 0 [pid 5050] mkdir("./bus", 0777 [pid 5046] <... futex resumed>) = 1 [pid 5045] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5044] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5043] <... futex resumed>) = 0 [pid 5050] <... mkdir resumed>) = 0 [pid 5046] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5045] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5044] <... futex resumed>) = 0 [pid 5043] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5050] mount("/dev/loop5", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5046] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5045] memfd_create("syzkaller", 0 [pid 5044] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5043] <... futex resumed>) = 0 [pid 5046] dup(7 [pid 5045] <... memfd_create resumed>) = 9 [pid 5043] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5046] <... dup resumed>) = 8 [pid 5045] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5050] <... mount resumed>) = 0 [pid 5046] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5045] <... mmap resumed>) = 0x7ff677e9d000 [ 63.241225][ T27] audit: type=1804 audit(1686284867.987:29): pid=5048 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor481" name="/root/syzkaller.crriMX/2/bus/bus" dev="loop3" ino=7 res=1 errno=0 [ 63.267873][ T5050] loop5: detected capacity change from 0 to 32768 [pid 5050] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5046] <... futex resumed>) = 1 [pid 5043] <... futex resumed>) = 0 [pid 5050] <... openat resumed>) = 3 [pid 5043] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5050] chdir("./bus" [pid 5046] memfd_create("syzkaller", 0 [pid 5043] <... futex resumed>) = 0 [pid 5050] <... chdir resumed>) = 0 [pid 5046] <... memfd_create resumed>) = 9 [pid 5043] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5050] ioctl(4, LOOP_CLR_FD [pid 5046] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5050] <... ioctl resumed>) = 0 [pid 5050] close(4) = 0 [pid 5046] <... mmap resumed>) = 0x7ff677e9d000 [pid 5050] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5050] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5049] <... futex resumed>) = 0 [pid 5048] <... write resumed>) = 2097152 [pid 5049] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5048] munmap(0x7ff677e9d000, 2097152 [pid 5050] <... futex resumed>) = 0 [pid 5049] <... futex resumed>) = 1 [pid 5050] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5049] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5050] <... open resumed>) = 4 [pid 5050] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5049] <... futex resumed>) = 0 [pid 5050] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5049] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5050] <... futex resumed>) = 0 [pid 5049] <... futex resumed>) = 1 [pid 5050] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5049] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5050] <... open resumed>) = 5 [pid 5050] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5049] <... futex resumed>) = 0 [pid 5050] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5049] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5050] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5049] <... futex resumed>) = 0 [pid 5050] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5049] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5050] <... mmap resumed>) = 0x20000000 [pid 5050] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5049] <... futex resumed>) = 0 [pid 5050] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5049] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5050] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5049] <... futex resumed>) = 0 [pid 5050] ftruncate(4, 33587199 [pid 5049] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5050] <... ftruncate resumed>) = 0 [pid 5050] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5049] <... futex resumed>) = 0 [pid 5050] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5049] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5050] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5049] <... futex resumed>) = 0 [pid 5050] open("./bus", O_RDONLY [pid 5049] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5048] <... munmap resumed>) = 0 [pid 5050] <... open resumed>) = 6 [pid 5048] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5050] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5049] <... futex resumed>) = 0 [pid 5048] <... openat resumed>) = 10 [pid 5050] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5049] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5048] ioctl(10, LOOP_SET_FD, 9 [pid 5050] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5049] <... futex resumed>) = 0 [pid 5050] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5049] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5048] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [ 63.347109][ T27] audit: type=1804 audit(1686284868.117:30): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor481" name="/root/syzkaller.lVUVkM/2/bus/bus" dev="loop0" ino=7 res=1 errno=0 [pid 5050] <... open resumed>) = 7 [pid 5048] ioctl(10, LOOP_CLR_FD [pid 5045] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5050] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5048] <... ioctl resumed>) = 0 [pid 5050] <... futex resumed>) = 1 [pid 5049] <... futex resumed>) = 0 [pid 5050] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5049] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5050] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5049] <... futex resumed>) = 0 [pid 5050] dup(7) = 8 [pid 5049] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5050] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5049] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5048] ioctl(10, LOOP_SET_FD, 9 [pid 5050] <... futex resumed>) = 0 [pid 5049] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5050] memfd_create("syzkaller", 0 [pid 5049] <... futex resumed>) = 0 [pid 5048] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5050] <... memfd_create resumed>) = 9 [pid 5049] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5048] close(10 [pid 5050] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5048] <... close resumed>) = 0 [pid 5050] <... mmap resumed>) = 0x7ff677e9d000 [pid 5048] close(9) = 0 [pid 5046] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5048] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5047] <... futex resumed>) = 0 [pid 5048] <... futex resumed>) = 1 [pid 5048] sendfile(8, 6, NULL, 281474978811908 [pid 5047] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5047] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5045] <... write resumed>) = 2097152 [pid 5045] munmap(0x7ff677e9d000, 2097152) = 0 [pid 5041] exit_group(0 [pid 5053] <... futex resumed>) = ? [pid 5041] <... exit_group resumed>) = ? [pid 5053] +++ exited with 0 +++ [pid 5045] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 10 [pid 5045] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5050] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5045] ioctl(10, LOOP_CLR_FD) = 0 [pid 5045] ioctl(10, LOOP_SET_FD, 9 [pid 5042] <... sendfile resumed>) = ? [pid 5045] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5045] close(10 [pid 5047] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5045] <... close resumed>) = 0 [pid 5047] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5045] close(9 [pid 5047] <... futex resumed>) = 0 [pid 5045] <... close resumed>) = 0 [pid 5042] +++ exited with 0 +++ [pid 5041] +++ exited with 0 +++ [ 63.486539][ T27] audit: type=1804 audit(1686284868.127:31): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor481" name="/root/syzkaller.lVUVkM/2/bus/bus" dev="loop0" ino=7 res=1 errno=0 [pid 5047] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4994] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5041, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=25 /* 0.25 s */} --- [pid 5047] <... mmap resumed>) = 0x7ff67807c000 [pid 5047] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4994] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5047] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5047] <... clone resumed>, parent_tid=[5054], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5054 [pid 4994] <... openat resumed>) = 3 [pid 5047] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] fstat(3, [pid 5047] <... futex resumed>) = 0 [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5047] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4994] getdents64(3, 0x555556742620 /* 4 entries */, 32768) = 104 [pid 4994] umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5045] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5044] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5054 attached [pid 5045] sendfile(8, 6, NULL, 281474978811908 [pid 5044] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5044] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5054] set_robust_list(0x7ff67809c9e0, 24) = 0 [pid 5054] sync( [pid 5050] <... write resumed>) = 2097152 [pid 5046] <... write resumed>) = 2097152 [pid 5046] munmap(0x7ff677e9d000, 2097152 [pid 5047] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5050] munmap(0x7ff677e9d000, 2097152 [pid 5046] <... munmap resumed>) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 10 [pid 5046] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5050] <... munmap resumed>) = 0 [pid 5046] ioctl(10, LOOP_CLR_FD [pid 5044] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5050] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5046] <... ioctl resumed>) = 0 [pid 5044] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5050] <... openat resumed>) = 10 [pid 5044] <... futex resumed>) = 0 [pid 5050] ioctl(10, LOOP_SET_FD, 9 [pid 5044] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5050] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5044] <... mmap resumed>) = 0x7ff67807c000 [pid 5050] ioctl(10, LOOP_CLR_FD [pid 5046] ioctl(10, LOOP_SET_FD, 9 [pid 5044] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5050] <... ioctl resumed>) = 0 [pid 5046] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5044] <... mprotect resumed>) = 0 [pid 5046] close(10 [pid 5044] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5046] <... close resumed>) = 0 [pid 5050] ioctl(10, LOOP_SET_FD, 9 [ 63.615327][ T27] audit: type=1804 audit(1686284868.127:32): pid=5046 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor481" name="/root/syzkaller.hTAWL1/2/bus/bus" dev="loop4" ino=7 res=1 errno=0 [pid 5046] close(9 [pid 5044] <... clone resumed>, parent_tid=[5055], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5055 [pid 5050] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5046] <... close resumed>) = 0 [pid 5044] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5050] close(10 [pid 5044] <... futex resumed>) = 0 [pid 5050] <... close resumed>) = 0 [pid 5044] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5050] close(9./strace-static-x86_64: Process 5055 attached [pid 5055] set_robust_list(0x7ff67809c9e0, 24) = 0 [pid 5055] sync( [pid 5046] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5046] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5043] <... futex resumed>) = 0 [pid 5050] <... close resumed>) = 0 [pid 5043] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5046] <... futex resumed>) = 0 [pid 5043] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5046] sendfile(8, 6, NULL, 281474978811908 [pid 5050] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5049] <... futex resumed>) = 0 [pid 5050] sendfile(8, 6, NULL, 281474978811908 [pid 5049] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5049] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5044] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5043] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5043] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5043] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff67807c000 [pid 5043] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5043] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5056 attached [pid 5049] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5056] set_robust_list(0x7ff67809c9e0, 24 [pid 5049] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5043] <... clone resumed>, parent_tid=[5056], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5056 [pid 5056] <... set_robust_list resumed>) = 0 [pid 5049] <... futex resumed>) = 0 [pid 5043] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5056] sync( [pid 5049] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5043] <... futex resumed>) = 0 [pid 5049] <... mmap resumed>) = 0x7ff67807c000 [pid 5043] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5049] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5049] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5057], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5057 [pid 5049] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5049] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5057 attached [pid 5057] set_robust_list(0x7ff67809c9e0, 24) = 0 [ 63.761555][ T27] audit: type=1804 audit(1686284868.137:33): pid=5046 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor481" name="/root/syzkaller.hTAWL1/2/bus/bus" dev="loop4" ino=7 res=1 errno=0 [pid 5057] sync( [pid 5043] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5049] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5052] <... write resumed>) = 16777216 [pid 5052] munmap(0x7ff67f29d000, 16777216) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5052] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5052] close(3) = 0 [pid 5052] mkdir("./bus", 0777) = 0 [pid 5052] mount("/dev/loop2", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "") = 0 [pid 5052] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5052] chdir("./bus") = 0 [ 63.852878][ T27] audit: type=1804 audit(1686284868.247:34): pid=5050 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor481" name="/root/syzkaller.PL7eda/2/bus/bus" dev="loop5" ino=7 res=1 errno=0 [ 63.882830][ T5052] loop2: detected capacity change from 0 to 32768 [ 63.893385][ T27] audit: type=1804 audit(1686284868.247:35): pid=5050 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor481" name="/root/syzkaller.PL7eda/2/bus/bus" dev="loop5" ino=7 res=1 errno=0 [pid 5052] ioctl(4, LOOP_CLR_FD) = 0 [pid 5052] close(4) = 0 [pid 5052] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5052] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5051] <... futex resumed>) = 0 [pid 5051] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5052] <... futex resumed>) = 0 [pid 5051] <... futex resumed>) = 1 [pid 5052] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5051] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5052] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5051] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5052] <... futex resumed>) = 0 [pid 5051] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5052] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5051] <... futex resumed>) = 0 [pid 5052] <... open resumed>) = 5 [pid 5051] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5052] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5051] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5052] <... futex resumed>) = 0 [pid 5051] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5052] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5051] <... futex resumed>) = 0 [pid 5052] <... mmap resumed>) = 0x20000000 [pid 5051] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5052] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5051] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5052] <... futex resumed>) = 0 [pid 5051] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5052] ftruncate(4, 33587199 [pid 5051] <... futex resumed>) = 0 [pid 5052] <... ftruncate resumed>) = 0 [pid 5051] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5052] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5051] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5052] <... futex resumed>) = 0 [pid 5051] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5052] open("./bus", O_RDONLY [pid 5051] <... futex resumed>) = 0 [pid 5052] <... open resumed>) = 6 [pid 5051] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5052] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5051] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5052] <... futex resumed>) = 0 [pid 5051] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5052] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5051] <... futex resumed>) = 0 [pid 5052] <... open resumed>) = 7 [pid 5051] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5052] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5051] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5052] <... futex resumed>) = 0 [pid 5051] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5052] dup(7 [pid 5051] <... futex resumed>) = 0 [pid 5052] <... dup resumed>) = 8 [pid 5051] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5052] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5051] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5052] <... futex resumed>) = 0 [pid 5051] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5052] memfd_create("syzkaller", 0 [pid 5051] <... futex resumed>) = 0 [pid 5052] <... memfd_create resumed>) = 9 [pid 5051] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5052] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff677e9d000 [pid 5047] exit_group(0) = ? [pid 5048] <... sendfile resumed>) = ? [pid 5048] +++ exited with 0 +++ [pid 5052] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5057] <... sync resumed>) = 0 [pid 5056] <... sync resumed>) = 0 [pid 5055] <... sync resumed>) = 0 [pid 5054] <... sync resumed>) = ? [pid 5057] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5056] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5055] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5057] <... futex resumed>) = 0 [pid 5055] <... futex resumed>) = 0 [pid 5056] <... futex resumed>) = 0 [pid 5057] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5056] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5055] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5054] +++ exited with 0 +++ [pid 5047] +++ exited with 0 +++ [pid 4996] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5047, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=32 /* 0.32 s */} --- [pid 4996] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5044] exit_group(0 [pid 5055] <... futex resumed>) = ? [pid 5044] <... exit_group resumed>) = ? [pid 5055] +++ exited with 0 +++ [pid 4996] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5045] <... sendfile resumed>) = ? [pid 4996] <... openat resumed>) = 3 [pid 4996] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] getdents64(3, [pid 5045] +++ exited with 0 +++ [pid 5044] +++ exited with 0 +++ [pid 4996] <... getdents64 resumed>0x555556742620 /* 4 entries */, 32768) = 104 [pid 4996] umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4993] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5044, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=36 /* 0.36 s */} --- [pid 4993] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4993] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4993] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4993] getdents64(3, 0x555556742620 /* 4 entries */, 32768) = 104 [pid 5052] <... write resumed>) = 2097152 [pid 4993] umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5052] munmap(0x7ff677e9d000, 2097152) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 10 [pid 5052] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5052] ioctl(10, LOOP_CLR_FD) = 0 [pid 5052] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5052] close(10) = 0 [pid 5052] close(9) = 0 [pid 5052] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5052] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5051] <... futex resumed>) = 0 [pid 5051] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5052] <... futex resumed>) = 0 [pid 5052] sendfile(8, 6, NULL, 281474978811908 [pid 5051] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5049] exit_group(0 [pid 5057] <... futex resumed>) = ? [pid 5049] <... exit_group resumed>) = ? [pid 5057] +++ exited with 0 +++ [pid 5043] exit_group(0 [pid 5056] <... futex resumed>) = ? [pid 5046] <... sendfile resumed>) = ? [pid 5043] <... exit_group resumed>) = ? [pid 5056] +++ exited with 0 +++ [pid 5050] <... sendfile resumed>) = ? [pid 5046] +++ exited with 0 +++ [pid 5043] +++ exited with 0 +++ [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5043, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=37 /* 0.37 s */} --- [pid 5051] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5051] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5051] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4997] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5050] +++ exited with 0 +++ [pid 5049] +++ exited with 0 +++ [pid 5051] <... mmap resumed>) = 0x7ff67807c000 [pid 5051] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5049, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=39 /* 0.39 s */} --- [pid 5051] <... mprotect resumed>) = 0 [pid 4998] restart_syscall(<... resuming interrupted clone ...> [pid 4997] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5051] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4998] <... restart_syscall resumed>) = 0 [pid 4997] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5058 attached [pid 4997] fstat(3, [pid 5051] <... clone resumed>, parent_tid=[5058], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5058 [pid 4998] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5058] set_robust_list(0x7ff67809c9e0, 24 [pid 5051] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] getdents64(3, [pid 5058] <... set_robust_list resumed>) = 0 [pid 5051] <... futex resumed>) = 0 [pid 4998] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] <... getdents64 resumed>0x555556742620 /* 4 entries */, 32768) = 104 [pid 5058] sync( [pid 5051] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] <... openat resumed>) = 3 [pid 4997] umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x555556742620 /* 4 entries */, 32768) = 104 [pid 4998] umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5058] <... sync resumed>) = 0 [pid 5058] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5051] <... futex resumed>) = 0 [pid 5058] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4996] <... umount2 resumed>) = 0 [pid 4996] umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] lstat("./2/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] openat(AT_FDCWD, "./2/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4996] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4996] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4996] close(4) = 0 [pid 4996] rmdir("./2/bus") = 0 [pid 4996] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] lstat("./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4996] unlink("./2/binderfs") = 0 [pid 4996] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4996] close(3) = 0 [pid 4996] rmdir("./2") = 0 [pid 4996] mkdir("./3", 0777) = 0 [pid 4996] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 4996] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4996] close(3) = 0 [pid 4996] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567415d0) = 5059 ./strace-static-x86_64: Process 5059 attached [pid 5059] set_robust_list(0x5555567415e0, 24) = 0 [pid 5059] chdir("./3") = 0 [pid 5059] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5059] setpgid(0, 0) = 0 [pid 5059] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5059] write(3, "1000", 4) = 4 [pid 4994] <... umount2 resumed>) = 0 [pid 4994] umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] lstat("./2/bus", [pid 5059] close(3) = 0 [pid 5059] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4994] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5059] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5059] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4994] umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] <... mmap resumed>) = 0x7ff68769d000 [pid 4994] openat(AT_FDCWD, "./2/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4994] <... openat resumed>) = 4 [pid 5059] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4994] fstat(4, [pid 5059] <... clone resumed>, parent_tid=[5060], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5060 [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5059] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5059] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4994] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 5060 attached [pid 5060] set_robust_list(0x7ff6876bd9e0, 24 [pid 4994] getdents64(4, [pid 5060] <... set_robust_list resumed>) = 0 [pid 4994] <... getdents64 resumed>0x55555674a660 /* 0 entries */, 32768) = 0 [pid 5060] memfd_create("syzkaller", 0 [pid 4994] close(4 [pid 5060] <... memfd_create resumed>) = 3 [pid 4998] <... umount2 resumed>) = 0 [pid 4994] <... close resumed>) = 0 [pid 5060] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4994] rmdir("./2/bus") = 0 [pid 5060] <... mmap resumed>) = 0x7ff67f29d000 [pid 4994] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] lstat("./2/binderfs", [pid 4998] umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4994] unlink("./2/binderfs" [pid 4998] lstat("./2/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] <... unlink resumed>) = 0 [pid 4998] umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./2/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4994] close(3) = 0 [pid 4994] rmdir("./2" [pid 4998] <... openat resumed>) = 4 [pid 4994] <... rmdir resumed>) = 0 [pid 4998] fstat(4, [pid 4994] mkdir("./3", 0777) = 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, [pid 4994] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 4998] <... getdents64 resumed>0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, [pid 4994] <... openat resumed>) = 3 [pid 4998] <... getdents64 resumed>0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4994] ioctl(3, LOOP_CLR_FD [pid 4998] close(4 [pid 4994] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] <... close resumed>) = 0 [pid 4994] close(3 [pid 4998] rmdir("./2/bus" [pid 4994] <... close resumed>) = 0 [pid 4997] <... umount2 resumed>) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 4994] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] <... clone resumed>, child_tidptr=0x5555567415d0) = 5061 [pid 4998] lstat("./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5051] exit_group(0 [pid 5058] <... futex resumed>) = ? [pid 5051] <... exit_group resumed>) = ? [pid 5058] +++ exited with 0 +++ [pid 4998] unlink("./2/binderfs") = 0 [pid 5052] <... sendfile resumed>) = ? [pid 4998] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./2" [pid 5052] +++ exited with 0 +++ [pid 5051] +++ exited with 0 +++ [pid 4998] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 5061 attached [pid 4998] mkdir("./3", 0777 [pid 4995] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5051, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=29 /* 0.29 s */} --- [pid 5061] set_robust_list(0x5555567415e0, 24 [pid 4998] <... mkdir resumed>) = 0 [pid 5061] <... set_robust_list resumed>) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 4995] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] chdir("./3" [pid 4998] <... openat resumed>) = 3 [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... chdir resumed>) = 0 [pid 4995] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 4995] <... openat resumed>) = 3 [pid 5061] setpgid(0, 0 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4995] fstat(3, [pid 5061] <... setpgid resumed>) = 0 [pid 4998] close(3 [pid 5061] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4998] <... close resumed>) = 0 [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5061] <... openat resumed>) = 3 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] write(3, "1000", 4 [pid 4997] umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] getdents64(3, [pid 4998] <... clone resumed>, child_tidptr=0x5555567415d0) = 5062 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./2/bus", [pid 4995] <... getdents64 resumed>0x555556742620 /* 4 entries */, 32768) = 104 [pid 4995] umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5061] <... write resumed>) = 4 [pid 4997] umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4993] <... umount2 resumed>) = 0 [pid 5061] close(3 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./2/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4997] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(4, [pid 5061] <... close resumed>) = 0 [pid 4997] <... getdents64 resumed>0x55555674a660 /* 2 entries */, 32768) = 48 [pid 5061] symlink("/dev/binderfs", "./binderfs" [pid 4997] getdents64(4, [pid 5061] <... symlink resumed>) = 0 [pid 4997] <... getdents64 resumed>0x55555674a660 /* 0 entries */, 32768) = 0 [pid 5061] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] close(4 [pid 5061] <... futex resumed>) = 0 [pid 4997] <... close resumed>) = 0 [pid 5061] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4997] rmdir("./2/bus" [pid 4993] umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... mmap resumed>) = 0x7ff68769d000 [pid 4997] <... rmdir resumed>) = 0 [pid 5061] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE [pid 4997] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4993] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... mprotect resumed>) = 0 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4997] lstat("./2/binderfs", [pid 4993] lstat("./2/bus", [pid 4997] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 ./strace-static-x86_64: Process 5062 attached [pid 5061] <... clone resumed>, parent_tid=[5063], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5063 [pid 4997] unlink("./2/binderfs" [pid 4993] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] set_robust_list(0x5555567415e0, 24 [pid 5061] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] <... unlink resumed>) = 0 [pid 5062] <... set_robust_list resumed>) = 0 [pid 5061] <... futex resumed>) = 0 [pid 4997] getdents64(3, [pid 4993] umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] chdir("./3" [pid 5061] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4997] <... getdents64 resumed>0x555556742620 /* 0 entries */, 32768) = 0 [pid 4993] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5063 attached [pid 5062] <... chdir resumed>) = 0 [pid 4997] close(3 [pid 4993] openat(AT_FDCWD, "./2/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] set_robust_list(0x7ff6876bd9e0, 24 [pid 5062] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4997] <... close resumed>) = 0 [pid 4993] <... openat resumed>) = 4 [pid 5063] <... set_robust_list resumed>) = 0 [pid 5062] <... prctl resumed>) = 0 [pid 4997] rmdir("./2" [pid 4993] fstat(4, [pid 5063] memfd_create("syzkaller", 0 [pid 5062] setpgid(0, 0 [pid 4997] <... rmdir resumed>) = 0 [pid 4993] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... memfd_create resumed>) = 3 [pid 5062] <... setpgid resumed>) = 0 [pid 4997] mkdir("./3", 0777 [pid 4993] getdents64(4, [pid 5063] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5062] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4997] <... mkdir resumed>) = 0 [pid 4993] <... getdents64 resumed>0x55555674a660 /* 2 entries */, 32768) = 48 [pid 5063] <... mmap resumed>) = 0x7ff67f29d000 [pid 5062] <... openat resumed>) = 3 [pid 4997] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4993] getdents64(4, [pid 5062] write(3, "1000", 4 [pid 4997] <... openat resumed>) = 3 [pid 4993] <... getdents64 resumed>0x55555674a660 /* 0 entries */, 32768) = 0 [pid 5062] <... write resumed>) = 4 [pid 4997] ioctl(3, LOOP_CLR_FD [pid 4993] close(4 [pid 5062] close(3 [pid 4997] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4993] <... close resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 4997] close(3 [pid 4993] rmdir("./2/bus" [pid 5062] symlink("/dev/binderfs", "./binderfs" [pid 4997] <... close resumed>) = 0 [pid 4993] <... rmdir resumed>) = 0 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4993] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] <... clone resumed>, child_tidptr=0x5555567415d0) = 5064 [pid 4993] lstat("./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5062] <... symlink resumed>) = 0 [pid 4993] unlink("./2/binderfs" [pid 5062] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 4993] <... unlink resumed>) = 0 [pid 5062] <... futex resumed>) = 0 [pid 4993] getdents64(3, [pid 5062] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4993] <... getdents64 resumed>0x555556742620 /* 0 entries */, 32768) = 0 [pid 5062] <... mmap resumed>) = 0x7ff68769d000 [pid 4993] close(3./strace-static-x86_64: Process 5064 attached [pid 5062] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE [pid 4993] <... close resumed>) = 0 [pid 5064] set_robust_list(0x5555567415e0, 24 [pid 5062] <... mprotect resumed>) = 0 [pid 4993] rmdir("./2" [pid 5064] <... set_robust_list resumed>) = 0 [pid 5062] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4993] <... rmdir resumed>) = 0 [pid 5064] chdir("./3" [pid 4993] mkdir("./3", 0777 [pid 5064] <... chdir resumed>) = 0 [pid 5062] <... clone resumed>, parent_tid=[5065], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5065 [pid 4993] <... mkdir resumed>) = 0 [pid 5064] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5062] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4993] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5064] <... prctl resumed>) = 0 [pid 5062] <... futex resumed>) = 0 [pid 4993] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5065 attached [pid 5064] setpgid(0, 0 [pid 5062] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4993] ioctl(3, LOOP_CLR_FD [pid 5065] set_robust_list(0x7ff6876bd9e0, 24 [pid 5064] <... setpgid resumed>) = 0 [pid 4993] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5065] <... set_robust_list resumed>) = 0 [pid 5064] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4993] close(3 [pid 5065] memfd_create("syzkaller", 0 [pid 5064] <... openat resumed>) = 3 [pid 4993] <... close resumed>) = 0 [pid 5065] <... memfd_create resumed>) = 3 [pid 5064] write(3, "1000", 4 [pid 4993] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5064] <... write resumed>) = 4 [pid 5065] <... mmap resumed>) = 0x7ff67f29d000 [pid 5064] close(3 [pid 4993] <... clone resumed>, child_tidptr=0x5555567415d0) = 5066 [pid 5064] <... close resumed>) = 0 [pid 5064] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5064] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5064] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 5066 attached ) = 0x7ff68769d000 [pid 5066] set_robust_list(0x5555567415e0, 24 [pid 5064] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE [pid 5066] <... set_robust_list resumed>) = 0 [pid 5064] <... mprotect resumed>) = 0 [pid 5066] chdir("./3" [pid 5064] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5066] <... chdir resumed>) = 0 [pid 5066] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5064] <... clone resumed>, parent_tid=[5067], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5067 [pid 5066] <... prctl resumed>) = 0 [pid 5064] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] setpgid(0, 0 [pid 5064] <... futex resumed>) = 0 [pid 5066] <... setpgid resumed>) = 0 [pid 5064] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5066] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 ./strace-static-x86_64: Process 5067 attached [pid 5066] write(3, "1000", 4 [pid 5067] set_robust_list(0x7ff6876bd9e0, 24 [pid 5066] <... write resumed>) = 4 [pid 5066] close(3 [pid 5067] <... set_robust_list resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 5066] symlink("/dev/binderfs", "./binderfs" [pid 5067] memfd_create("syzkaller", 0 [pid 5066] <... symlink resumed>) = 0 [pid 5066] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... memfd_create resumed>) = 3 [pid 5066] <... futex resumed>) = 0 [pid 5067] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5066] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5067] <... mmap resumed>) = 0x7ff67f29d000 [pid 5066] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5066] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5068], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5068 [pid 5066] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5066] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5068 attached [pid 5068] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5068] memfd_create("syzkaller", 0) = 3 [pid 5068] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 4995] <... umount2 resumed>) = 0 [pid 4995] umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4995] lstat("./2/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4995] openat(AT_FDCWD, "./2/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4995] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4995] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4995] close(4) = 0 [pid 4995] rmdir("./2/bus") = 0 [pid 4995] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4995] lstat("./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4995] unlink("./2/binderfs") = 0 [pid 4995] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4995] close(3) = 0 [pid 4995] rmdir("./2") = 0 [pid 4995] mkdir("./3", 0777) = 0 [pid 4995] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 4995] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4995] close(3) = 0 [pid 4995] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567415d0) = 5069 [pid 5060] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216./strace-static-x86_64: Process 5069 attached [pid 5069] set_robust_list(0x5555567415e0, 24) = 0 [pid 5069] chdir("./3") = 0 [pid 5069] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5069] setpgid(0, 0) = 0 [pid 5069] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5069] write(3, "1000", 4) = 4 [pid 5069] close(3) = 0 [pid 5069] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5069] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5069] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5069] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5069] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5070], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5070 [pid 5069] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5069] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5070 attached [pid 5070] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5070] memfd_create("syzkaller", 0) = 3 [pid 5070] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 5065] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5063] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5067] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5068] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5070] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5060] <... write resumed>) = 16777216 [pid 5060] munmap(0x7ff67f29d000, 16777216) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5060] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5060] close(3) = 0 [pid 5060] mkdir("./bus", 0777) = 0 [pid 5060] mount("/dev/loop3", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "") = 0 [pid 5060] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5060] chdir("./bus") = 0 [pid 5060] ioctl(4, LOOP_CLR_FD) = 0 [ 65.542764][ T5060] loop3: detected capacity change from 0 to 32768 [pid 5060] close(4) = 0 [pid 5060] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5059] <... futex resumed>) = 0 [pid 5060] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5059] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5059] <... futex resumed>) = 0 [pid 5060] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5059] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5060] <... open resumed>) = 4 [pid 5060] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5059] <... futex resumed>) = 0 [pid 5060] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5059] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5059] <... futex resumed>) = 0 [pid 5060] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5059] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5060] <... open resumed>) = 5 [pid 5060] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5059] <... futex resumed>) = 0 [pid 5060] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5059] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5059] <... futex resumed>) = 0 [pid 5060] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5059] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5060] <... mmap resumed>) = 0x20000000 [pid 5060] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5059] <... futex resumed>) = 0 [pid 5060] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5059] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5059] <... futex resumed>) = 0 [pid 5060] ftruncate(4, 33587199 [pid 5059] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5060] <... ftruncate resumed>) = 0 [pid 5060] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5059] <... futex resumed>) = 0 [pid 5060] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5059] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5059] <... futex resumed>) = 0 [pid 5060] open("./bus", O_RDONLY [pid 5059] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5060] <... open resumed>) = 6 [pid 5060] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5059] <... futex resumed>) = 0 [pid 5060] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5059] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5059] <... futex resumed>) = 0 [pid 5060] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5059] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5060] <... open resumed>) = 7 [pid 5060] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5059] <... futex resumed>) = 0 [pid 5060] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5059] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5059] <... futex resumed>) = 0 [pid 5060] dup(7 [pid 5059] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5060] <... dup resumed>) = 8 [pid 5060] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5059] <... futex resumed>) = 0 [pid 5060] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5059] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5059] <... futex resumed>) = 0 [pid 5060] memfd_create("syzkaller", 0 [pid 5059] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5060] <... memfd_create resumed>) = 9 [pid 5060] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff677e9d000 [pid 5065] <... write resumed>) = 16777216 [pid 5063] <... write resumed>) = 16777216 [pid 5065] munmap(0x7ff67f29d000, 16777216 [pid 5063] munmap(0x7ff67f29d000, 16777216 [pid 5060] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5067] <... write resumed>) = 16777216 [pid 5067] munmap(0x7ff67f29d000, 16777216 [pid 5065] <... munmap resumed>) = 0 [pid 5063] <... munmap resumed>) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5063] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5065] <... openat resumed>) = 4 [pid 5065] ioctl(4, LOOP_SET_FD, 3 [pid 5063] ioctl(4, LOOP_SET_FD, 3 [pid 5068] <... write resumed>) = 16777216 [pid 5068] munmap(0x7ff67f29d000, 16777216 [pid 5065] <... ioctl resumed>) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 5065] close(3 [pid 5063] close(3 [pid 5065] <... close resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5068] <... munmap resumed>) = 0 [pid 5067] <... munmap resumed>) = 0 [pid 5065] mkdir("./bus", 0777 [pid 5063] mkdir("./bus", 0777 [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5065] <... mkdir resumed>) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5067] <... openat resumed>) = 4 [pid 5065] mount("/dev/loop5", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5063] mount("/dev/loop1", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5060] <... write resumed>) = 2097152 [pid 5060] munmap(0x7ff677e9d000, 2097152 [ 65.741980][ T5065] loop5: detected capacity change from 0 to 32768 [ 65.748866][ T5063] loop1: detected capacity change from 0 to 32768 [pid 5067] ioctl(4, LOOP_SET_FD, 3 [pid 5068] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5060] <... munmap resumed>) = 0 [pid 5068] <... openat resumed>) = 4 [pid 5068] ioctl(4, LOOP_SET_FD, 3 [pid 5063] <... mount resumed>) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5065] <... mount resumed>) = 0 [pid 5067] <... ioctl resumed>) = 0 [pid 5060] <... openat resumed>) = 10 [pid 5060] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5060] ioctl(10, LOOP_CLR_FD) = 0 [pid 5068] <... ioctl resumed>) = 0 [pid 5068] close(3 [pid 5065] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5063] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5067] close(3 [pid 5065] <... openat resumed>) = 3 [pid 5063] <... openat resumed>) = 3 [pid 5067] <... close resumed>) = 0 [pid 5065] chdir("./bus" [pid 5063] chdir("./bus" [pid 5060] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5067] mkdir("./bus", 0777 [pid 5065] <... chdir resumed>) = 0 [pid 5063] <... chdir resumed>) = 0 [pid 5060] close(10 [pid 5067] <... mkdir resumed>) = 0 [pid 5065] ioctl(4, LOOP_CLR_FD [pid 5063] ioctl(4, LOOP_CLR_FD [pid 5060] <... close resumed>) = 0 [pid 5067] mount("/dev/loop4", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5065] <... ioctl resumed>) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 5060] close(9 [pid 5067] <... mount resumed>) = 0 [pid 5065] close(4 [pid 5063] close(4 [pid 5060] <... close resumed>) = 0 [pid 5067] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5065] <... close resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5067] <... openat resumed>) = 3 [pid 5065] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] chdir("./bus" [pid 5065] <... futex resumed>) = 1 [pid 5063] <... futex resumed>) = 1 [pid 5062] <... futex resumed>) = 0 [pid 5061] <... futex resumed>) = 0 [pid 5067] <... chdir resumed>) = 0 [pid 5065] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5063] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5062] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] ioctl(4, LOOP_CLR_FD [pid 5065] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5063] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5062] <... futex resumed>) = 0 [pid 5061] <... futex resumed>) = 0 [pid 5067] <... ioctl resumed>) = 0 [pid 5065] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5063] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5062] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5061] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] <... close resumed>) = 0 [pid 5067] close(4 [pid 5068] mkdir("./bus", 0777 [pid 5065] <... open resumed>) = 4 [pid 5068] <... mkdir resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5065] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... open resumed>) = 4 [pid 5068] mount("/dev/loop0", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5067] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] <... futex resumed>) = 1 [pid 5063] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... futex resumed>) = 0 [pid 5067] <... futex resumed>) = 1 [pid 5065] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5064] <... futex resumed>) = 0 [pid 5063] <... futex resumed>) = 1 [pid 5062] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] <... futex resumed>) = 0 [pid 5067] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5065] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5064] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5062] <... futex resumed>) = 0 [ 65.782617][ T5067] loop4: detected capacity change from 0 to 32768 [ 65.784719][ T5068] loop0: detected capacity change from 0 to 32768 [pid 5061] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5065] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5064] <... futex resumed>) = 0 [pid 5063] <... open resumed>) = 5 [pid 5062] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5061] <... futex resumed>) = 0 [pid 5060] <... futex resumed>) = 1 [pid 5059] <... futex resumed>) = 0 [pid 5067] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5065] <... open resumed>) = 5 [pid 5064] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5063] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5060] sendfile(8, 6, NULL, 281474978811908 [pid 5059] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... mount resumed>) = 0 [pid 5067] <... open resumed>) = 4 [pid 5065] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... futex resumed>) = 0 [pid 5061] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5059] <... futex resumed>) = 0 [pid 5068] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5067] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] <... futex resumed>) = 1 [pid 5063] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5062] <... futex resumed>) = 0 [pid 5061] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] <... openat resumed>) = 3 [pid 5067] <... futex resumed>) = 1 [pid 5065] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5064] <... futex resumed>) = 0 [pid 5063] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5062] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] <... futex resumed>) = 0 [pid 5068] chdir("./bus" [pid 5067] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5065] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5064] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5062] <... futex resumed>) = 0 [pid 5061] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] <... chdir resumed>) = 0 [pid 5067] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5065] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5064] <... futex resumed>) = 0 [pid 5063] <... mmap resumed>) = 0x20000000 [pid 5062] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] ioctl(4, LOOP_CLR_FD [pid 5067] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5065] <... mmap resumed>) = 0x20000000 [pid 5064] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5063] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... write resumed>) = 16777216 [pid 5068] <... ioctl resumed>) = 0 [pid 5067] <... open resumed>) = 5 [pid 5065] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... futex resumed>) = 1 [pid 5061] <... futex resumed>) = 0 [pid 5070] munmap(0x7ff67f29d000, 16777216 [pid 5068] close(4 [pid 5067] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] <... futex resumed>) = 1 [pid 5063] ftruncate(4, 33587199 [pid 5062] <... futex resumed>) = 0 [pid 5061] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... close resumed>) = 0 [pid 5067] <... futex resumed>) = 1 [pid 5065] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5064] <... futex resumed>) = 0 [pid 5063] <... ftruncate resumed>) = 0 [pid 5062] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] <... futex resumed>) = 0 [pid 5068] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5065] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5064] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... futex resumed>) = 0 [pid 5061] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] <... futex resumed>) = 1 [pid 5067] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5066] <... futex resumed>) = 0 [pid 5065] ftruncate(4, 33587199 [pid 5064] <... futex resumed>) = 0 [pid 5063] <... futex resumed>) = 0 [pid 5062] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5061] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5068] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5067] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5066] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] <... ftruncate resumed>) = 0 [pid 5064] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5061] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5063] open("./bus", O_RDONLY [pid 5061] <... futex resumed>) = 0 [pid 5068] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5067] <... mmap resumed>) = 0x20000000 [pid 5066] <... futex resumed>) = 0 [pid 5065] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... open resumed>) = 6 [pid 5061] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] <... open resumed>) = 4 [pid 5066] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5065] <... futex resumed>) = 1 [pid 5062] <... futex resumed>) = 0 [pid 5067] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... munmap resumed>) = 0 [pid 5068] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... futex resumed>) = 1 [pid 5066] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5065] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5064] <... futex resumed>) = 0 [pid 5063] <... futex resumed>) = 1 [pid 5062] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] <... futex resumed>) = 0 [pid 5068] <... futex resumed>) = 0 [pid 5067] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5066] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5064] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5062] <... futex resumed>) = 0 [pid 5061] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5068] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5067] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5066] <... futex resumed>) = 0 [pid 5061] <... futex resumed>) = 0 [pid 5068] <... open resumed>) = 5 [pid 5067] ftruncate(4, 33587199 [pid 5066] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5065] open("./bus", O_RDONLY [pid 5064] <... futex resumed>) = 0 [pid 5063] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5062] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5061] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] <... openat resumed>) = 4 [pid 5068] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... ftruncate resumed>) = 0 [pid 5066] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5065] <... open resumed>) = 6 [pid 5064] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5063] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5070] ioctl(4, LOOP_SET_FD, 3 [pid 5068] <... futex resumed>) = 0 [pid 5067] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5064] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5063] <... open resumed>) = 7 [pid 5068] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5067] <... futex resumed>) = 0 [pid 5066] <... futex resumed>) = 0 [pid 5065] <... futex resumed>) = 1 [pid 5064] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... futex resumed>) = 0 [pid 5059] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5059] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... mmap resumed>) = 0x20000000 [pid 5059] <... futex resumed>) = 0 [pid 5068] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] open("./bus", O_RDONLY [pid 5066] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5065] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5064] <... futex resumed>) = 0 [pid 5063] <... futex resumed>) = 1 [pid 5062] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] <... futex resumed>) = 0 [pid 5059] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5070] <... ioctl resumed>) = 0 [pid 5068] <... futex resumed>) = 0 [pid 5067] <... open resumed>) = 6 [pid 5066] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5065] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5064] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5063] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5062] <... futex resumed>) = 0 [pid 5061] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] close(3 [pid 5068] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5067] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5064] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5063] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5062] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5061] <... futex resumed>) = 0 [pid 5059] <... mmap resumed>) = 0x7ff67807c000 [pid 5070] <... close resumed>) = 0 [pid 5068] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5067] <... futex resumed>) = 0 [pid 5066] <... futex resumed>) = 0 [pid 5065] <... open resumed>) = 7 [pid 5064] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] dup(7 [pid 5061] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5059] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5070] mkdir("./bus", 0777 [pid 5068] ftruncate(4, 33587199 [pid 5067] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5066] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5065] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5064] <... futex resumed>) = 0 [pid 5063] <... dup resumed>) = 8 [pid 5059] <... mprotect resumed>) = 0 [pid 5070] <... mkdir resumed>) = 0 [pid 5068] <... ftruncate resumed>) = 0 [pid 5067] <... open resumed>) = 7 [pid 5065] <... futex resumed>) = 1 [pid 5064] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5063] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... futex resumed>) = 0 [pid 5059] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5070] mount("/dev/loop2", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5068] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5064] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5063] <... futex resumed>) = 1 [pid 5062] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... futex resumed>) = 1 [pid 5067] <... futex resumed>) = 0 [pid 5066] <... futex resumed>) = 0 [pid 5065] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5064] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5062] <... futex resumed>) = 0 [pid 5068] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5067] dup(7 [pid 5066] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] dup(7 [pid 5064] <... futex resumed>) = 0 [pid 5062] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5067] <... dup resumed>) = 8 [pid 5066] <... futex resumed>) = 0 [pid 5065] <... dup resumed>) = 8 [pid 5064] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5061] <... futex resumed>) = 0 [pid 5070] <... mount resumed>) = 0 [pid 5068] open("./bus", O_RDONLY [pid 5067] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5065] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5064] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5061] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] <... clone resumed>, parent_tid=[5071], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5071 ./strace-static-x86_64: Process 5071 attached [pid 5070] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5068] <... open resumed>) = 6 [pid 5067] <... futex resumed>) = 0 [pid 5065] <... futex resumed>) = 1 [pid 5064] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... futex resumed>) = 0 [pid 5062] <... futex resumed>) = 0 [pid 5061] <... futex resumed>) = 1 [pid 5059] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5071] set_robust_list(0x7ff67809c9e0, 24 [pid 5070] <... openat resumed>) = 3 [pid 5068] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] memfd_create("syzkaller", 0 [pid 5065] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5064] <... futex resumed>) = 0 [pid 5063] memfd_create("syzkaller", 0 [pid 5062] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] chdir("./bus" [pid 5068] <... futex resumed>) = 1 [pid 5067] <... memfd_create resumed>) = 9 [pid 5066] <... futex resumed>) = 0 [pid 5065] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 65.909144][ T5070] loop2: detected capacity change from 0 to 32768 [pid 5064] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5063] <... memfd_create resumed>) = 9 [pid 5062] <... futex resumed>) = 0 [pid 5061] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5059] <... futex resumed>) = 0 [pid 5071] <... set_robust_list resumed>) = 0 [pid 5070] <... chdir resumed>) = 0 [pid 5068] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5067] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5066] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] memfd_create("syzkaller", 0 [pid 5063] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5062] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5059] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5071] sync( [pid 5070] ioctl(4, LOOP_CLR_FD [pid 5068] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5067] <... mmap resumed>) = 0x7ff677e9d000 [pid 5066] <... futex resumed>) = 0 [pid 5065] <... memfd_create resumed>) = 9 [pid 5063] <... mmap resumed>) = 0x7ff677e9d000 [pid 5070] <... ioctl resumed>) = 0 [pid 5068] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5066] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5065] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5071] <... sync resumed>) = 0 [pid 5070] close(4 [pid 5068] <... open resumed>) = 7 [pid 5065] <... mmap resumed>) = 0x7ff677e9d000 [pid 5071] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... close resumed>) = 0 [pid 5068] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5070] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... futex resumed>) = 1 [pid 5066] <... futex resumed>) = 0 [pid 5070] <... futex resumed>) = 1 [pid 5069] <... futex resumed>) = 0 [pid 5068] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5066] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5069] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5066] <... futex resumed>) = 0 [pid 5070] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5069] <... futex resumed>) = 0 [pid 5068] dup(7 [pid 5066] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5069] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] <... dup resumed>) = 8 [pid 5071] <... futex resumed>) = 0 [pid 5070] <... open resumed>) = 4 [pid 5068] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5071] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5070] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... futex resumed>) = 1 [pid 5066] <... futex resumed>) = 0 [pid 5070] <... futex resumed>) = 1 [pid 5069] <... futex resumed>) = 0 [pid 5068] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5066] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5069] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5066] <... futex resumed>) = 0 [pid 5070] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5069] <... futex resumed>) = 0 [pid 5068] memfd_create("syzkaller", 0 [pid 5066] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5070] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5069] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] <... memfd_create resumed>) = 9 [pid 5070] <... open resumed>) = 5 [pid 5068] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5070] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... mmap resumed>) = 0x7ff677e9d000 [pid 5070] <... futex resumed>) = 1 [pid 5069] <... futex resumed>) = 0 [pid 5070] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5069] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5069] <... futex resumed>) = 0 [pid 5070] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5069] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5067] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5070] <... mmap resumed>) = 0x20000000 [pid 5070] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5069] <... futex resumed>) = 0 [pid 5070] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5069] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5069] <... futex resumed>) = 0 [pid 5070] ftruncate(4, 33587199 [pid 5069] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] <... ftruncate resumed>) = 0 [pid 5068] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5063] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5070] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5069] <... futex resumed>) = 0 [pid 5070] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5069] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5069] <... futex resumed>) = 0 [pid 5070] open("./bus", O_RDONLY [pid 5069] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] <... open resumed>) = 6 [pid 5070] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5069] <... futex resumed>) = 0 [pid 5070] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5069] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5069] <... futex resumed>) = 0 [pid 5070] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5069] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] <... open resumed>) = 7 [pid 5070] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5069] <... futex resumed>) = 0 [pid 5070] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5069] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5069] <... futex resumed>) = 0 [pid 5070] dup(7 [pid 5069] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] <... dup resumed>) = 8 [pid 5070] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5070] <... futex resumed>) = 1 [pid 5069] <... futex resumed>) = 0 [pid 5070] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5069] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5069] <... futex resumed>) = 0 [pid 5070] memfd_create("syzkaller", 0 [pid 5069] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5070] <... memfd_create resumed>) = 9 [pid 5070] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff677e9d000 [pid 5068] <... write resumed>) = 2097152 [pid 5067] <... write resumed>) = 2097152 [pid 5068] munmap(0x7ff677e9d000, 2097152) = 0 [pid 5067] munmap(0x7ff677e9d000, 2097152 [pid 5068] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 10 [pid 5068] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5068] ioctl(10, LOOP_CLR_FD) = 0 [pid 5067] <... munmap resumed>) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 10 [pid 5068] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5067] ioctl(10, LOOP_SET_FD, 9 [pid 5068] close(10 [pid 5067] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5068] <... close resumed>) = 0 [pid 5065] <... write resumed>) = 2097152 [pid 5067] ioctl(10, LOOP_CLR_FD [pid 5068] close(9 [pid 5067] <... ioctl resumed>) = 0 [pid 5067] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5067] close(10) = 0 [pid 5067] close(9 [pid 5065] munmap(0x7ff677e9d000, 2097152) = 0 [pid 5068] <... close resumed>) = 0 [pid 5063] <... write resumed>) = 2097152 [pid 5065] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 10 [pid 5068] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] ioctl(10, LOOP_SET_FD, 9 [pid 5068] <... futex resumed>) = 1 [pid 5066] <... futex resumed>) = 0 [pid 5065] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] munmap(0x7ff677e9d000, 2097152 [pid 5070] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5068] sendfile(8, 6, NULL, 281474978811908 [pid 5067] <... close resumed>) = 0 [pid 5066] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] ioctl(10, LOOP_CLR_FD [pid 5063] <... munmap resumed>) = 0 [pid 5067] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] <... futex resumed>) = 0 [pid 5065] <... ioctl resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5066] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5065] ioctl(10, LOOP_SET_FD, 9 [pid 5063] <... openat resumed>) = 10 [pid 5067] <... futex resumed>) = 1 [pid 5065] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5064] <... futex resumed>) = 0 [pid 5063] ioctl(10, LOOP_SET_FD, 9 [pid 5067] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5065] close(10 [pid 5064] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5067] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5065] <... close resumed>) = 0 [pid 5064] <... futex resumed>) = 0 [pid 5063] ioctl(10, LOOP_CLR_FD [pid 5067] sendfile(8, 6, NULL, 281474978811908 [pid 5065] close(9 [pid 5064] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5063] <... ioctl resumed>) = 0 [pid 5063] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5063] close(10) = 0 [pid 5065] <... close resumed>) = 0 [pid 5063] close(9 [pid 5065] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... futex resumed>) = 0 [pid 5062] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5062] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5065] <... futex resumed>) = 1 [pid 5066] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5065] sendfile(8, 6, NULL, 281474978811908 [pid 5063] <... close resumed>) = 0 [pid 5066] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] <... futex resumed>) = 0 [pid 5061] <... futex resumed>) = 0 [pid 5063] <... futex resumed>) = 1 [pid 5066] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff67807c000 [pid 5063] sendfile(8, 6, NULL, 281474978811908 [pid 5061] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5061] <... futex resumed>) = 0 [pid 5066] <... mprotect resumed>) = 0 [pid 5061] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5066] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5072], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5072 [pid 5064] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5066] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5064] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] <... futex resumed>) = 0 [pid 5064] <... futex resumed>) = 0 [pid 5066] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5064] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 5072 attached ) = 0x7ff67807c000 [pid 5064] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5072] set_robust_list(0x7ff67809c9e0, 24 [pid 5064] <... mprotect resumed>) = 0 [pid 5072] <... set_robust_list resumed>) = 0 [pid 5064] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5072] sync( [pid 5062] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5064] <... clone resumed>, parent_tid=[5073], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5073 [pid 5062] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5064] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... futex resumed>) = 0 [pid 5064] <... futex resumed>) = 0 [pid 5062] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5072] <... sync resumed>) = 0 [pid 5070] <... write resumed>) = 2097152 [pid 5064] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5062] <... mmap resumed>) = 0x7ff67807c000 ./strace-static-x86_64: Process 5073 attached [pid 5072] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] munmap(0x7ff677e9d000, 2097152 [pid 5062] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5061] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5073] set_robust_list(0x7ff67809c9e0, 24 [pid 5072] <... futex resumed>) = 1 [pid 5066] <... futex resumed>) = 0 [pid 5062] <... mprotect resumed>) = 0 [pid 5061] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] <... set_robust_list resumed>) = 0 [pid 5072] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5062] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5061] <... futex resumed>) = 0 [pid 5073] sync( [pid 5070] <... munmap resumed>) = 0 [pid 5062] <... clone resumed>, parent_tid=[5074], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5074 [pid 5061] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 5074 attached [pid 5070] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5062] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] set_robust_list(0x7ff67809c9e0, 24 [pid 5070] <... openat resumed>) = 10 [pid 5062] <... futex resumed>) = 0 [pid 5074] <... set_robust_list resumed>) = 0 [pid 5070] ioctl(10, LOOP_SET_FD, 9 [pid 5062] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] sync( [pid 5070] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5061] <... mmap resumed>) = 0x7ff67807c000 [pid 5073] <... sync resumed>) = 0 [pid 5070] ioctl(10, LOOP_CLR_FD [pid 5061] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5073] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... ioctl resumed>) = 0 [pid 5061] <... mprotect resumed>) = 0 [pid 5074] <... sync resumed>) = 0 [pid 5073] <... futex resumed>) = 1 [pid 5064] <... futex resumed>) = 0 [pid 5061] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5074] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5074] <... futex resumed>) = 1 [pid 5062] <... futex resumed>) = 0 [pid 5074] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5061] <... clone resumed>, parent_tid=[5075], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5075 [pid 5070] ioctl(10, LOOP_SET_FD, 9 [pid 5061] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5061] <... futex resumed>) = 0 [pid 5070] close(10 [pid 5061] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] <... close resumed>) = 0 [pid 5070] close(9./strace-static-x86_64: Process 5075 attached [pid 5075] set_robust_list(0x7ff67809c9e0, 24) = 0 [pid 5075] sync( [pid 5070] <... close resumed>) = 0 [pid 5070] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5069] <... futex resumed>) = 0 [pid 5070] sendfile(8, 6, NULL, 281474978811908 [pid 5069] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... sync resumed>) = 0 [pid 5069] <... futex resumed>) = 0 [pid 5075] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5061] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5075] <... futex resumed>) = 0 [pid 5075] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5069] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5069] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5069] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff67807c000 [pid 5069] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5069] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5076], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5076 [pid 5069] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5069] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5076 attached [pid 5076] set_robust_list(0x7ff67809c9e0, 24) = 0 [pid 5076] sync() = 0 [pid 5076] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5069] <... futex resumed>) = 0 [pid 5076] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5059] exit_group(0 [pid 5071] <... futex resumed>) = ? [pid 5059] <... exit_group resumed>) = ? [pid 5071] +++ exited with 0 +++ [pid 5060] <... sendfile resumed>) = ? [pid 5060] +++ exited with 0 +++ [pid 5059] +++ exited with 0 +++ [pid 4996] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5059, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=39 /* 0.39 s */} --- [pid 4996] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4996] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4996] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] getdents64(3, 0x555556742620 /* 4 entries */, 32768) = 104 [pid 4996] umount2("./3/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] exit_group(0 [pid 5072] <... futex resumed>) = ? [pid 5068] <... sendfile resumed>) = ? [pid 5066] <... exit_group resumed>) = ? [pid 5072] +++ exited with 0 +++ [pid 5064] exit_group(0 [pid 5073] <... futex resumed>) = ? [pid 5064] <... exit_group resumed>) = ? [pid 5073] +++ exited with 0 +++ [pid 5068] +++ exited with 0 +++ [pid 5067] <... sendfile resumed>) = ? [pid 5066] +++ exited with 0 +++ [pid 4993] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5066, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=36 /* 0.36 s */} --- [pid 5067] +++ exited with 0 +++ [pid 5064] +++ exited with 0 +++ [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5064, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=36 /* 0.36 s */} --- [pid 4993] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4993] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4993] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4993] getdents64(3, [pid 4997] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4993] <... getdents64 resumed>0x555556742620 /* 4 entries */, 32768) = 104 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4993] umount2("./3/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4997] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(3, [pid 5062] exit_group(0 [pid 4997] <... getdents64 resumed>0x555556742620 /* 4 entries */, 32768) = 104 [pid 5074] <... futex resumed>) = ? [pid 5062] <... exit_group resumed>) = ? [pid 4997] umount2("./3/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] +++ exited with 0 +++ [pid 5065] <... sendfile resumed>) = ? [pid 5065] +++ exited with 0 +++ [pid 5062] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5062, si_uid=0, si_status=0, si_utime=16 /* 0.16 s */, si_stime=32 /* 0.32 s */} --- [pid 4998] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4998] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x555556742620 /* 4 entries */, 32768) = 104 [pid 4998] umount2("./3/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] exit_group(0 [pid 5076] <... futex resumed>) = ? [pid 5069] <... exit_group resumed>) = ? [pid 5076] +++ exited with 0 +++ [pid 5061] exit_group(0 [pid 5075] <... futex resumed>) = ? [pid 5061] <... exit_group resumed>) = ? [pid 5075] +++ exited with 0 +++ [pid 5070] <... sendfile resumed>) = ? [pid 5070] +++ exited with 0 +++ [pid 5069] +++ exited with 0 +++ [pid 5063] <... sendfile resumed>) = ? [pid 5063] +++ exited with 0 +++ [pid 5061] +++ exited with 0 +++ [pid 4995] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5069, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=35 /* 0.35 s */} --- [pid 4995] restart_syscall(<... resuming interrupted clone ...> [pid 4994] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5061, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=38 /* 0.38 s */} --- [pid 4995] <... restart_syscall resumed>) = 0 [pid 4994] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4995] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4994] <... openat resumed>) = 3 [pid 4995] <... openat resumed>) = 3 [pid 4994] fstat(3, [pid 4995] fstat(3, [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] getdents64(3, [pid 4995] getdents64(3, [pid 4994] <... getdents64 resumed>0x555556742620 /* 4 entries */, 32768) = 104 [pid 4995] <... getdents64 resumed>0x555556742620 /* 4 entries */, 32768) = 104 [pid 4994] umount2("./3/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] umount2("./3/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... umount2 resumed>) = 0 [pid 4997] umount2("./3/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./3/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./3/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./3/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4997] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4997] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4997] close(4) = 0 [pid 4997] rmdir("./3/bus") = 0 [pid 4997] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] unlink("./3/binderfs") = 0 [pid 4997] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4997] close(3) = 0 [pid 4997] rmdir("./3") = 0 [pid 4997] mkdir("./4", 0777) = 0 [pid 4997] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 4997] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4997] close(3) = 0 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567415d0) = 5077 [pid 4996] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 5077 attached [pid 5077] set_robust_list(0x5555567415e0, 24 [pid 4996] umount2("./3/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... set_robust_list resumed>) = 0 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] chdir("./4" [pid 4996] lstat("./3/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] <... chdir resumed>) = 0 [pid 4996] umount2("./3/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] setpgid(0, 0 [pid 4996] openat(AT_FDCWD, "./3/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5077] <... setpgid resumed>) = 0 [pid 4996] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] getdents64(4, [pid 5077] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4996] <... getdents64 resumed>0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4996] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4996] close(4 [pid 5077] <... openat resumed>) = 3 [pid 4996] <... close resumed>) = 0 [pid 4996] rmdir("./3/bus" [pid 5077] write(3, "1000", 4 [pid 4996] <... rmdir resumed>) = 0 [pid 5077] <... write resumed>) = 4 [pid 5077] close(3 [pid 4996] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... close resumed>) = 0 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] symlink("/dev/binderfs", "./binderfs" [pid 4996] lstat("./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5077] <... symlink resumed>) = 0 [pid 4996] unlink("./3/binderfs") = 0 [pid 5077] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] getdents64(3, [pid 5077] <... futex resumed>) = 0 [pid 4996] <... getdents64 resumed>0x555556742620 /* 0 entries */, 32768) = 0 [pid 5077] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4996] close(3) = 0 [pid 4996] rmdir("./3") = 0 [pid 5077] <... mmap resumed>) = 0x7ff68769d000 [pid 4996] mkdir("./4", 0777 [pid 5077] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE [pid 4996] <... mkdir resumed>) = 0 [pid 5077] <... mprotect resumed>) = 0 [pid 4996] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5077] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4996] <... openat resumed>) = 3 [pid 4996] ioctl(3, LOOP_CLR_FD [pid 4993] <... umount2 resumed>) = 0 [pid 5077] <... clone resumed>, parent_tid=[5078], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5078 [pid 5077] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5077] <... futex resumed>) = 0 [pid 4996] close(3 [pid 5077] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4996] <... close resumed>) = 0 [pid 4993] umount2("./3/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4993] lstat("./3/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4993] umount2("./3/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4993] openat(AT_FDCWD, "./3/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4993] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4993] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4993] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4993] close(4) = 0 [pid 4993] rmdir("./3/bus" [pid 4996] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4993] <... rmdir resumed>) = 0 [pid 4993] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] <... clone resumed>, child_tidptr=0x5555567415d0) = 5079 [pid 4993] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4993] lstat("./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4993] unlink("./3/binderfs") = 0 [pid 4993] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4993] close(3) = 0 [pid 4993] rmdir("./3") = 0 [pid 4993] mkdir("./4", 0777./strace-static-x86_64: Process 5078 attached [pid 5078] set_robust_list(0x7ff6876bd9e0, 24./strace-static-x86_64: Process 5079 attached ) = 0 [pid 4993] <... mkdir resumed>) = 0 [pid 4993] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4993] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4993] close(3) = 0 [pid 4993] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5078] memfd_create("syzkaller", 0 [pid 5079] set_robust_list(0x5555567415e0, 24 [pid 5078] <... memfd_create resumed>) = 3 [pid 4998] <... umount2 resumed>) = 0 [pid 5079] <... set_robust_list resumed>) = 0 [pid 5078] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5079] chdir("./4" [pid 4993] <... clone resumed>, child_tidptr=0x5555567415d0) = 5080 [pid 5079] <... chdir resumed>) = 0 [pid 5078] <... mmap resumed>) = 0x7ff67f29d000 [pid 5079] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 5080 attached [pid 5080] set_robust_list(0x5555567415e0, 24) = 0 [pid 5080] chdir("./4") = 0 [pid 5080] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5080] setpgid(0, 0) = 0 [pid 5080] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5080] write(3, "1000", 4) = 4 [pid 5080] close(3) = 0 [pid 5080] symlink("/dev/binderfs", "./binderfs" [pid 5079] <... prctl resumed>) = 0 [pid 5080] <... symlink resumed>) = 0 [pid 5079] setpgid(0, 0 [pid 5080] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... setpgid resumed>) = 0 [pid 5080] <... futex resumed>) = 0 [pid 5079] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5080] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5079] <... openat resumed>) = 3 [pid 5080] <... mmap resumed>) = 0x7ff68769d000 [pid 5079] write(3, "1000", 4 [pid 5080] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE [pid 5079] <... write resumed>) = 4 [pid 5080] <... mprotect resumed>) = 0 [pid 5079] close(3 [pid 5080] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5079] <... close resumed>) = 0 [pid 5079] symlink("/dev/binderfs", "./binderfs" [pid 5080] <... clone resumed>, parent_tid=[5081], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5081 [pid 5080] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5079] <... symlink resumed>) = 0 [pid 4998] umount2("./3/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5079] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] <... futex resumed>) = 0 [pid 4998] lstat("./3/bus", [pid 5079] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] <... mmap resumed>) = 0x7ff68769d000 [pid 4998] umount2("./3/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] <... mprotect resumed>) = 0 [pid 4998] openat(AT_FDCWD, "./3/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 5081 attached [pid 5079] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4998] <... openat resumed>) = 4 [pid 5081] set_robust_list(0x7ff6876bd9e0, 24 [pid 4998] fstat(4, [pid 5081] <... set_robust_list resumed>) = 0 [pid 5079] <... clone resumed>, parent_tid=[5082], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5082 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] memfd_create("syzkaller", 0 [pid 5079] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] getdents64(4, [pid 5081] <... memfd_create resumed>) = 3 [pid 5079] <... futex resumed>) = 0 [pid 4998] <... getdents64 resumed>0x55555674a660 /* 2 entries */, 32768) = 48 [pid 5081] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5079] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4998] getdents64(4, [pid 5081] <... mmap resumed>) = 0x7ff67f29d000 [pid 4998] <... getdents64 resumed>0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 ./strace-static-x86_64: Process 5082 attached [pid 4998] rmdir("./3/bus") = 0 [pid 5082] set_robust_list(0x7ff6876bd9e0, 24 [pid 4998] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5082] <... set_robust_list resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./3/binderfs", [pid 5082] memfd_create("syzkaller", 0 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5082] <... memfd_create resumed>) = 3 [pid 4998] unlink("./3/binderfs" [pid 5082] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4998] <... unlink resumed>) = 0 [pid 5082] <... mmap resumed>) = 0x7ff67f29d000 [pid 4998] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./3") = 0 [pid 4994] <... umount2 resumed>) = 0 [pid 4998] mkdir("./4", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4994] umount2("./3/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] <... clone resumed>, child_tidptr=0x5555567415d0) = 5083 [pid 4994] lstat("./3/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] umount2("./3/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] openat(AT_FDCWD, "./3/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4994] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 5083 attached [pid 4994] getdents64(4, [pid 5083] set_robust_list(0x5555567415e0, 24 [pid 4994] <... getdents64 resumed>0x55555674a660 /* 0 entries */, 32768) = 0 [pid 5083] <... set_robust_list resumed>) = 0 [pid 4994] close(4 [pid 5083] chdir("./4" [pid 4994] <... close resumed>) = 0 [pid 5083] <... chdir resumed>) = 0 [pid 4994] rmdir("./3/bus" [pid 5083] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4994] <... rmdir resumed>) = 0 [pid 5083] <... prctl resumed>) = 0 [pid 4994] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] setpgid(0, 0 [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] <... setpgid resumed>) = 0 [pid 4994] lstat("./3/binderfs", [pid 5083] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4994] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5083] <... openat resumed>) = 3 [pid 4994] unlink("./3/binderfs" [pid 5083] write(3, "1000", 4 [pid 4995] <... umount2 resumed>) = 0 [pid 4994] <... unlink resumed>) = 0 [pid 5083] <... write resumed>) = 4 [pid 4995] umount2("./3/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] getdents64(3, [pid 5083] close(3 [pid 4994] <... getdents64 resumed>0x555556742620 /* 0 entries */, 32768) = 0 [pid 5083] <... close resumed>) = 0 [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] close(3 [pid 5083] symlink("/dev/binderfs", "./binderfs" [pid 4994] <... close resumed>) = 0 [pid 5083] <... symlink resumed>) = 0 [pid 4995] lstat("./3/bus", [pid 4994] rmdir("./3" [pid 5083] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] <... rmdir resumed>) = 0 [pid 5083] <... futex resumed>) = 0 [pid 4995] umount2("./3/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] mkdir("./4", 0777 [pid 5083] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] <... mkdir resumed>) = 0 [pid 5083] <... mmap resumed>) = 0x7ff68769d000 [pid 4995] openat(AT_FDCWD, "./3/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4994] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5083] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE [pid 4995] <... openat resumed>) = 4 [pid 4994] <... openat resumed>) = 3 [pid 5083] <... mprotect resumed>) = 0 [pid 4995] fstat(4, [pid 4994] ioctl(3, LOOP_CLR_FD [pid 5083] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4994] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] close(3 [pid 5083] <... clone resumed>, parent_tid=[5084], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5084 [pid 4995] getdents64(4, [pid 4994] <... close resumed>) = 0 [pid 5083] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5083] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4994] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4995] <... getdents64 resumed>0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4995] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4995] close(4) = 0 [pid 4994] <... clone resumed>, child_tidptr=0x5555567415d0) = 5085 ./strace-static-x86_64: Process 5084 attached [pid 4995] rmdir("./3/bus" [pid 5084] set_robust_list(0x7ff6876bd9e0, 24 [pid 4995] <... rmdir resumed>) = 0 [pid 5084] <... set_robust_list resumed>) = 0 [pid 4995] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] memfd_create("syzkaller", 0 [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] <... memfd_create resumed>) = 3 [pid 4995] lstat("./3/binderfs", [pid 5084] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4995] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5084] <... mmap resumed>) = 0x7ff67f29d000 [pid 4995] unlink("./3/binderfs") = 0 ./strace-static-x86_64: Process 5085 attached [pid 4995] getdents64(3, [pid 5085] set_robust_list(0x5555567415e0, 24 [pid 4995] <... getdents64 resumed>0x555556742620 /* 0 entries */, 32768) = 0 [pid 5085] <... set_robust_list resumed>) = 0 [pid 4995] close(3 [pid 5085] chdir("./4" [pid 4995] <... close resumed>) = 0 [pid 5085] <... chdir resumed>) = 0 [pid 4995] rmdir("./3" [pid 5085] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4995] <... rmdir resumed>) = 0 [pid 5085] <... prctl resumed>) = 0 [pid 5085] setpgid(0, 0 [pid 4995] mkdir("./4", 0777 [pid 5085] <... setpgid resumed>) = 0 [pid 4995] <... mkdir resumed>) = 0 [pid 5085] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4995] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5085] <... openat resumed>) = 3 [pid 4995] <... openat resumed>) = 3 [pid 5085] write(3, "1000", 4 [pid 4995] ioctl(3, LOOP_CLR_FD [pid 5085] <... write resumed>) = 4 [pid 4995] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5085] close(3 [pid 4995] close(3 [pid 5085] <... close resumed>) = 0 [pid 4995] <... close resumed>) = 0 [pid 5085] symlink("/dev/binderfs", "./binderfs" [pid 4995] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5085] <... symlink resumed>) = 0 [pid 5085] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4995] <... clone resumed>, child_tidptr=0x5555567415d0) = 5086 [pid 5085] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5085] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5085] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5087], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5087 [pid 5085] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5085] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5086 attached [pid 5086] set_robust_list(0x5555567415e0, 24./strace-static-x86_64: Process 5087 attached ) = 0 [pid 5087] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5086] chdir("./4" [pid 5087] memfd_create("syzkaller", 0 [pid 5086] <... chdir resumed>) = 0 [pid 5087] <... memfd_create resumed>) = 3 [pid 5086] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5087] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5086] <... prctl resumed>) = 0 [pid 5087] <... mmap resumed>) = 0x7ff67f29d000 [pid 5086] setpgid(0, 0) = 0 [pid 5086] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5086] write(3, "1000", 4) = 4 [pid 5086] close(3) = 0 [pid 5086] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5086] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5086] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5086] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5086] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5088], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5088 [pid 5086] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5086] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5088 attached [pid 5088] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5088] memfd_create("syzkaller", 0) = 3 [pid 5088] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 5078] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5082] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5081] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5084] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5088] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5087] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5078] <... write resumed>) = 16777216 [pid 5078] munmap(0x7ff67f29d000, 16777216) = 0 [pid 5078] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5078] ioctl(4, LOOP_SET_FD, 3 [pid 5082] <... write resumed>) = 16777216 [pid 5078] <... ioctl resumed>) = 0 [pid 5078] close(3) = 0 [pid 5078] mkdir("./bus", 0777 [pid 5082] munmap(0x7ff67f29d000, 16777216 [pid 5078] <... mkdir resumed>) = 0 [pid 5078] mount("/dev/loop4", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "") = 0 [pid 5078] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5078] chdir("./bus") = 0 [pid 5078] ioctl(4, LOOP_CLR_FD) = 0 [ 68.198483][ T5078] loop4: detected capacity change from 0 to 32768 [pid 5078] close(4) = 0 [pid 5078] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5077] <... futex resumed>) = 0 [pid 5078] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5077] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5077] <... futex resumed>) = 0 [pid 5078] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5077] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] <... open resumed>) = 4 [pid 5078] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5077] <... futex resumed>) = 0 [pid 5078] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 5077] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5078] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 5077] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5078] <... futex resumed>) = 0 [pid 5077] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5077] <... futex resumed>) = 0 [pid 5077] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] <... mmap resumed>) = 0x20000000 [pid 5078] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5077] <... futex resumed>) = 0 [pid 5078] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5077] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5077] <... futex resumed>) = 0 [pid 5078] ftruncate(4, 33587199 [pid 5077] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5082] <... munmap resumed>) = 0 [pid 5078] <... ftruncate resumed>) = 0 [pid 5082] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5078] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] <... openat resumed>) = 4 [pid 5078] <... futex resumed>) = 1 [pid 5077] <... futex resumed>) = 0 [pid 5082] ioctl(4, LOOP_SET_FD, 3 [pid 5078] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5077] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5077] <... futex resumed>) = 0 [pid 5078] open("./bus", O_RDONLY [pid 5077] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] <... open resumed>) = 6 [pid 5081] <... write resumed>) = 16777216 [pid 5081] munmap(0x7ff67f29d000, 16777216 [pid 5078] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] <... ioctl resumed>) = 0 [pid 5078] <... futex resumed>) = 1 [pid 5077] <... futex resumed>) = 0 [pid 5082] close(3) = 0 [pid 5078] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5077] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5077] <... futex resumed>) = 0 [pid 5082] mkdir("./bus", 0777 [pid 5078] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5077] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] <... open resumed>) = 7 [pid 5078] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5077] <... futex resumed>) = 0 [pid 5082] <... mkdir resumed>) = 0 [pid 5078] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5077] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] mount("/dev/loop3", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5078] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5077] <... futex resumed>) = 0 [pid 5078] dup(7 [pid 5077] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] <... dup resumed>) = 8 [pid 5078] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5077] <... futex resumed>) = 0 [pid 5078] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5077] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5077] <... futex resumed>) = 0 [pid 5082] <... mount resumed>) = 0 [pid 5082] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5078] memfd_create("syzkaller", 0 [pid 5077] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5082] <... openat resumed>) = 3 [pid 5081] <... munmap resumed>) = 0 [pid 5078] <... memfd_create resumed>) = 9 [pid 5082] chdir("./bus" [pid 5078] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5082] <... chdir resumed>) = 0 [pid 5078] <... mmap resumed>) = 0x7ff677e9d000 [pid 5082] ioctl(4, LOOP_CLR_FD) = 0 [ 68.295915][ T5082] loop3: detected capacity change from 0 to 32768 [ 68.315317][ T27] kauditd_printk_skb: 14 callbacks suppressed [ 68.315331][ T27] audit: type=1804 audit(1686284873.157:50): pid=5078 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor481" name="/root/syzkaller.hTAWL1/4/bus/bus" dev="loop4" ino=7 res=1 errno=0 [pid 5082] close(4) = 0 [pid 5082] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5079] <... futex resumed>) = 0 [pid 5082] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5079] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5079] <... futex resumed>) = 0 [pid 5082] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5079] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5082] <... open resumed>) = 4 [pid 5081] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5082] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... openat resumed>) = 4 [pid 5088] <... write resumed>) = 16777216 [pid 5082] <... futex resumed>) = 1 [pid 5081] ioctl(4, LOOP_SET_FD, 3 [pid 5079] <... futex resumed>) = 0 [pid 5078] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5088] munmap(0x7ff67f29d000, 16777216 [pid 5082] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5079] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5082] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 5082] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5082] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5081] <... ioctl resumed>) = 0 [pid 5081] close(3) = 0 [pid 5081] mkdir("./bus", 0777 [pid 5088] <... munmap resumed>) = 0 [pid 5082] <... futex resumed>) = 0 [pid 5079] <... futex resumed>) = 1 [pid 5082] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5079] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5088] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5084] <... write resumed>) = 16777216 [pid 5079] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5079] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] munmap(0x7ff67f29d000, 16777216 [pid 5088] <... openat resumed>) = 4 [pid 5082] <... futex resumed>) = 0 [pid 5079] <... futex resumed>) = 1 [pid 5088] ioctl(4, LOOP_SET_FD, 3 [pid 5082] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5079] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5082] <... mmap resumed>) = 0x20000000 [pid 5081] <... mkdir resumed>) = 0 [pid 5082] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] mount("/dev/loop0", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5082] <... futex resumed>) = 1 [ 68.422270][ T27] audit: type=1804 audit(1686284873.187:51): pid=5078 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor481" name="/root/syzkaller.hTAWL1/4/bus/bus" dev="loop4" ino=7 res=1 errno=0 [ 68.445722][ T5081] loop0: detected capacity change from 0 to 32768 [pid 5082] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5079] <... futex resumed>) = 0 [pid 5079] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] <... futex resumed>) = 0 [pid 5079] <... futex resumed>) = 1 [pid 5082] ftruncate(4, 33587199 [pid 5081] <... mount resumed>) = 0 [pid 5079] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5082] <... ftruncate resumed>) = 0 [pid 5081] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5082] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... openat resumed>) = 3 [pid 5088] <... ioctl resumed>) = 0 [pid 5082] <... futex resumed>) = 1 [pid 5081] chdir("./bus" [pid 5079] <... futex resumed>) = 0 [pid 5088] close(3 [pid 5084] <... munmap resumed>) = 0 [pid 5082] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5081] <... chdir resumed>) = 0 [pid 5079] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5088] <... close resumed>) = 0 [pid 5084] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5082] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5081] ioctl(4, LOOP_CLR_FD [pid 5079] <... futex resumed>) = 0 [pid 5078] <... write resumed>) = 2097152 [pid 5088] mkdir("./bus", 0777 [pid 5084] <... openat resumed>) = 4 [pid 5082] open("./bus", O_RDONLY [pid 5081] <... ioctl resumed>) = 0 [pid 5079] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 68.469848][ T5088] loop2: detected capacity change from 0 to 32768 [pid 5078] munmap(0x7ff677e9d000, 2097152 [pid 5088] <... mkdir resumed>) = 0 [pid 5084] ioctl(4, LOOP_SET_FD, 3 [pid 5082] <... open resumed>) = 6 [pid 5081] close(4 [pid 5082] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... close resumed>) = 0 [pid 5082] <... futex resumed>) = 0 [pid 5081] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5081] <... futex resumed>) = 1 [pid 5080] <... futex resumed>) = 0 [pid 5081] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5080] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5080] <... futex resumed>) = 0 [pid 5081] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5080] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... open resumed>) = 4 [pid 5081] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5080] <... futex resumed>) = 0 [pid 5081] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5080] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5080] <... futex resumed>) = 0 [pid 5081] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5080] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... open resumed>) = 5 [pid 5081] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5080] <... futex resumed>) = 0 [pid 5081] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5080] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5080] <... futex resumed>) = 0 [pid 5081] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5080] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... mmap resumed>) = 0x20000000 [pid 5081] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5080] <... futex resumed>) = 0 [pid 5081] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5080] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5080] <... futex resumed>) = 0 [pid 5081] ftruncate(4, 33587199 [pid 5080] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... ftruncate resumed>) = 0 [pid 5081] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5080] <... futex resumed>) = 0 [pid 5081] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5080] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5080] <... futex resumed>) = 0 [pid 5081] open("./bus", O_RDONLY [pid 5080] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... open resumed>) = 6 [pid 5079] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5081] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5080] <... futex resumed>) = 0 [pid 5081] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5080] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5080] <... futex resumed>) = 0 [pid 5081] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5080] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] <... munmap resumed>) = 0 [pid 5087] <... write resumed>) = 16777216 [pid 5081] <... open resumed>) = 7 [pid 5081] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5080] <... futex resumed>) = 0 [pid 5079] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5080] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5080] <... futex resumed>) = 0 [pid 5081] dup(7 [pid 5080] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... dup resumed>) = 8 [pid 5081] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5080] <... futex resumed>) = 0 [pid 5081] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5080] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5080] <... futex resumed>) = 0 [pid 5088] mount("/dev/loop2", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5084] <... ioctl resumed>) = 0 [pid 5082] <... futex resumed>) = 0 [pid 5081] memfd_create("syzkaller", 0 [pid 5080] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5079] <... futex resumed>) = 1 [pid 5078] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5082] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5081] <... memfd_create resumed>) = 9 [pid 5079] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] <... openat resumed>) = 10 [pid 5082] <... open resumed>) = 7 [ 68.496247][ T27] audit: type=1804 audit(1686284873.337:52): pid=5082 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor481" name="/root/syzkaller.crriMX/4/bus/bus" dev="loop3" ino=7 res=1 errno=0 [ 68.530770][ T5084] loop5: detected capacity change from 0 to 32768 [pid 5081] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] ioctl(10, LOOP_SET_FD, 9 [pid 5088] <... mount resumed>) = 0 [pid 5084] close(3 [pid 5082] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... mmap resumed>) = 0x7ff677e9d000 [pid 5082] <... futex resumed>) = 1 [pid 5082] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5088] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5084] <... close resumed>) = 0 [pid 5079] <... futex resumed>) = 0 [pid 5078] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5088] <... openat resumed>) = 3 [pid 5084] mkdir("./bus", 0777 [pid 5079] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] ioctl(10, LOOP_CLR_FD [pid 5087] munmap(0x7ff67f29d000, 16777216) = 0 [pid 5088] chdir("./bus" [pid 5084] <... mkdir resumed>) = 0 [pid 5082] <... futex resumed>) = 0 [ 68.546785][ T27] audit: type=1804 audit(1686284873.357:53): pid=5081 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor481" name="/root/syzkaller.lVUVkM/4/bus/bus" dev="loop0" ino=7 res=1 errno=0 [ 68.569693][ T27] audit: type=1804 audit(1686284873.357:54): pid=5081 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor481" name="/root/syzkaller.lVUVkM/4/bus/bus" dev="loop0" ino=7 res=1 errno=0 [pid 5079] <... futex resumed>) = 1 [pid 5078] <... ioctl resumed>) = 0 [pid 5088] <... chdir resumed>) = 0 [pid 5082] dup(7) = 8 [pid 5082] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5082] <... futex resumed>) = 0 [pid 5082] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5087] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5087] ioctl(4, LOOP_SET_FD, 3 [pid 5088] ioctl(4, LOOP_CLR_FD [pid 5084] mount("/dev/loop5", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5079] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5088] <... ioctl resumed>) = 0 [pid 5084] <... mount resumed>) = 0 [pid 5079] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5088] close(4 [pid 5084] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5079] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] ioctl(10, LOOP_SET_FD, 9 [pid 5088] <... close resumed>) = 0 [pid 5087] <... ioctl resumed>) = 0 [pid 5082] <... futex resumed>) = 0 [pid 5081] <... write resumed>) = 2097152 [pid 5079] <... futex resumed>) = 1 [pid 5078] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5084] <... openat resumed>) = 3 [pid 5088] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5087] close(3 [pid 5081] munmap(0x7ff677e9d000, 2097152 [pid 5079] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5078] close(10 [pid 5088] <... futex resumed>) = 1 [pid 5087] <... close resumed>) = 0 [pid 5086] <... futex resumed>) = 0 [pid 5084] chdir("./bus" [pid 5082] memfd_create("syzkaller", 0 [pid 5081] <... munmap resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 5088] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5087] mkdir("./bus", 0777 [pid 5086] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... chdir resumed>) = 0 [pid 5082] <... memfd_create resumed>) = 9 [pid 5081] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5078] close(9 [pid 5088] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5087] <... mkdir resumed>) = 0 [pid 5086] <... futex resumed>) = 0 [pid 5084] ioctl(4, LOOP_CLR_FD [pid 5082] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5081] <... openat resumed>) = 10 [pid 5084] <... ioctl resumed>) = 0 [pid 5082] <... mmap resumed>) = 0x7ff677e9d000 [pid 5088] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5087] mount("/dev/loop1", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5086] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] close(4 [pid 5081] ioctl(10, LOOP_SET_FD, 9 [pid 5078] <... close resumed>) = 0 [pid 5084] <... close resumed>) = 0 [ 68.593103][ T27] audit: type=1804 audit(1686284873.387:55): pid=5082 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor481" name="/root/syzkaller.crriMX/4/bus/bus" dev="loop3" ino=7 res=1 errno=0 [ 68.613530][ T5087] loop1: detected capacity change from 0 to 32768 [pid 5084] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5083] <... futex resumed>) = 0 [pid 5084] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5083] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5083] <... futex resumed>) = 0 [pid 5084] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5083] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] <... open resumed>) = 4 [pid 5088] <... open resumed>) = 4 [pid 5084] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5088] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5087] <... mount resumed>) = 0 [pid 5084] <... futex resumed>) = 1 [pid 5083] <... futex resumed>) = 0 [pid 5081] ioctl(10, LOOP_CLR_FD [pid 5078] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5088] <... futex resumed>) = 1 [pid 5087] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5086] <... futex resumed>) = 0 [pid 5084] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5083] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5088] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5087] <... openat resumed>) = 3 [pid 5086] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5083] <... futex resumed>) = 0 [pid 5081] <... ioctl resumed>) = 0 [pid 5078] <... futex resumed>) = 1 [pid 5077] <... futex resumed>) = 0 [pid 5088] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5087] chdir("./bus" [pid 5086] <... futex resumed>) = 0 [pid 5084] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5083] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5088] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5087] <... chdir resumed>) = 0 [pid 5086] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] <... open resumed>) = 5 [pid 5078] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5077] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5088] <... open resumed>) = 5 [pid 5087] ioctl(4, LOOP_CLR_FD [pid 5084] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5077] <... futex resumed>) = 0 [pid 5088] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5087] <... ioctl resumed>) = 0 [pid 5084] <... futex resumed>) = 1 [pid 5083] <... futex resumed>) = 0 [pid 5081] ioctl(10, LOOP_SET_FD, 9 [pid 5078] sendfile(8, 6, NULL, 281474978811908 [pid 5077] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5088] <... futex resumed>) = 1 [pid 5087] close(4 [pid 5086] <... futex resumed>) = 0 [pid 5084] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5083] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5088] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5087] <... close resumed>) = 0 [pid 5086] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5083] <... futex resumed>) = 0 [pid 5081] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5088] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5087] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5086] <... futex resumed>) = 0 [pid 5084] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5083] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] close(10 [pid 5088] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5087] <... futex resumed>) = 1 [pid 5086] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5085] <... futex resumed>) = 0 [pid 5084] <... mmap resumed>) = 0x20000000 [pid 5081] <... close resumed>) = 0 [pid 5087] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5084] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5087] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5084] <... futex resumed>) = 1 [pid 5083] <... futex resumed>) = 0 [pid 5088] <... mmap resumed>) = 0x20000000 [pid 5087] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5085] <... futex resumed>) = 0 [pid 5084] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5083] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5088] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5087] <... open resumed>) = 4 [pid 5085] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5083] <... futex resumed>) = 0 [pid 5081] close(9 [pid 5088] <... futex resumed>) = 1 [pid 5087] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5086] <... futex resumed>) = 0 [pid 5085] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5084] ftruncate(4, 33587199 [pid 5083] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5087] <... futex resumed>) = 0 [pid 5084] <... ftruncate resumed>) = 0 [pid 5087] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5084] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5083] <... futex resumed>) = 0 [pid 5084] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5083] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5083] <... futex resumed>) = 0 [pid 5084] open("./bus", O_RDONLY [pid 5083] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] <... open resumed>) = 6 [pid 5084] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5083] <... futex resumed>) = 0 [pid 5084] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5083] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5083] <... futex resumed>) = 0 [pid 5084] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5083] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] <... open resumed>) = 7 [pid 5084] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5083] <... futex resumed>) = 0 [pid 5084] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5083] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5084] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5083] <... futex resumed>) = 0 [pid 5084] dup(7 [pid 5083] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] <... dup resumed>) = 8 [pid 5084] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5083] <... futex resumed>) = 0 [pid 5084] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5083] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5083] <... futex resumed>) = 0 [pid 5084] memfd_create("syzkaller", 0 [pid 5083] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5084] <... memfd_create resumed>) = 9 [pid 5084] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff677e9d000 [pid 5088] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5086] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5088] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5087] <... futex resumed>) = 0 [pid 5086] <... futex resumed>) = 0 [pid 5085] <... futex resumed>) = 1 [pid 5081] <... close resumed>) = 0 [pid 5077] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5087] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 5088] ftruncate(4, 33587199 [pid 5087] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5088] <... ftruncate resumed>) = 0 [pid 5087] <... futex resumed>) = 0 [pid 5086] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5085] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... futex resumed>) = 0 [pid 5087] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5088] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5081] <... futex resumed>) = 1 [pid 5080] <... futex resumed>) = 0 [pid 5077] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5088] <... futex resumed>) = 1 [pid 5086] <... futex resumed>) = 0 [pid 5085] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] sendfile(8, 6, NULL, 281474978811908 [pid 5080] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5088] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5087] <... futex resumed>) = 0 [pid 5086] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] <... futex resumed>) = 1 [pid 5080] <... futex resumed>) = 0 [pid 5077] <... mmap resumed>) = 0x7ff67807c000 [pid 5088] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5087] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5086] <... futex resumed>) = 0 [pid 5085] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5077] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5088] open("./bus", O_RDONLY [pid 5087] <... mmap resumed>) = 0x20000000 [pid 5086] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5087] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... mprotect resumed>) = 0 [pid 5088] <... open resumed>) = 6 [pid 5088] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5087] <... futex resumed>) = 1 [pid 5085] <... futex resumed>) = 0 [pid 5077] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5088] <... futex resumed>) = 1 [pid 5087] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5086] <... futex resumed>) = 0 [pid 5088] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5085] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5088] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5087] <... futex resumed>) = 0 [pid 5086] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] <... futex resumed>) = 1 [pid 5088] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5087] ftruncate(4, 33587199 [pid 5086] <... futex resumed>) = 0 [pid 5088] <... open resumed>) = 7 [pid 5087] <... ftruncate resumed>) = 0 [ 68.720274][ T27] audit: type=1804 audit(1686284873.557:56): pid=5084 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor481" name="/root/syzkaller.PL7eda/4/bus/bus" dev="loop5" ino=7 res=1 errno=0 [pid 5086] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5085] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5077] <... clone resumed>, parent_tid=[5089], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5089 [pid 5088] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5087] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5086] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5085] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5077] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5089 attached [pid 5088] <... futex resumed>) = 0 [pid 5087] <... futex resumed>) = 0 [pid 5086] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... futex resumed>) = 0 [pid 5088] dup(7 [pid 5087] open("./bus", O_RDONLY [pid 5086] <... futex resumed>) = 0 [pid 5085] <... futex resumed>) = 0 [pid 5088] <... dup resumed>) = 8 [pid 5087] <... open resumed>) = 6 [pid 5077] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5085] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5087] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5086] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5087] <... futex resumed>) = 0 [pid 5087] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5085] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5088] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5088] <... futex resumed>) = 1 [pid 5087] <... futex resumed>) = 0 [pid 5086] <... futex resumed>) = 0 [pid 5085] <... futex resumed>) = 1 [pid 5088] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5087] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5086] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5089] set_robust_list(0x7ff67809c9e0, 24 [pid 5088] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5087] <... open resumed>) = 7 [pid 5086] <... futex resumed>) = 0 [pid 5089] <... set_robust_list resumed>) = 0 [pid 5088] memfd_create("syzkaller", 0 [pid 5087] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5086] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5084] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5089] sync( [pid 5088] <... memfd_create resumed>) = 9 [pid 5087] <... futex resumed>) = 1 [pid 5085] <... futex resumed>) = 0 [pid 5087] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5085] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5087] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5087] dup(7 [pid 5085] <... futex resumed>) = 0 [pid 5087] <... dup resumed>) = 8 [pid 5087] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5087] <... futex resumed>) = 0 [pid 5085] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5087] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5085] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5088] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5087] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5082] <... write resumed>) = 2097152 [pid 5080] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5088] <... mmap resumed>) = 0x7ff677e9d000 [pid 5087] memfd_create("syzkaller", 0 [pid 5085] <... futex resumed>) = 0 [pid 5080] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5087] <... memfd_create resumed>) = 9 [pid 5085] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5082] munmap(0x7ff677e9d000, 2097152 [pid 5080] <... futex resumed>) = 0 [pid 5089] <... sync resumed>) = 0 [pid 5087] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5082] <... munmap resumed>) = 0 [pid 5080] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5089] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5087] <... mmap resumed>) = 0x7ff677e9d000 [ 68.820505][ T27] audit: type=1804 audit(1686284873.567:57): pid=5084 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor481" name="/root/syzkaller.PL7eda/4/bus/bus" dev="loop5" ino=7 res=1 errno=0 [pid 5080] <... mmap resumed>) = 0x7ff67807c000 [pid 5089] <... futex resumed>) = 0 [pid 5080] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5082] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 10 [pid 5080] <... mprotect resumed>) = 0 [pid 5082] ioctl(10, LOOP_SET_FD, 9 [pid 5080] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5090], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5090 [pid 5089] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5080] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5080] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5090 attached [pid 5082] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5090] set_robust_list(0x7ff67809c9e0, 24) = 0 [pid 5082] ioctl(10, LOOP_CLR_FD) = 0 [pid 5090] sync( [pid 5082] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5082] close(10) = 0 [pid 5082] close(9 [pid 5090] <... sync resumed>) = 0 [pid 5090] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] <... close resumed>) = 0 [pid 5090] <... futex resumed>) = 1 [pid 5080] <... futex resumed>) = 0 [pid 5090] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5084] <... write resumed>) = 2097152 [pid 5082] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5082] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5079] <... futex resumed>) = 0 [pid 5079] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5079] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5082] <... futex resumed>) = 0 [pid 5082] sendfile(8, 6, NULL, 281474978811908 [pid 5087] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5084] munmap(0x7ff677e9d000, 2097152 [pid 5088] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5084] <... munmap resumed>) = 0 [pid 5079] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5084] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 10 [pid 5084] ioctl(10, LOOP_SET_FD, 9 [pid 5079] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5079] <... futex resumed>) = 0 [pid 5084] ioctl(10, LOOP_CLR_FD) = 0 [pid 5079] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5084] ioctl(10, LOOP_SET_FD, 9 [pid 5079] <... mmap resumed>) = 0x7ff67807c000 [pid 5084] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5084] close(10) = 0 [pid 5084] close(9) = 0 [pid 5079] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5079] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5091], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5091 [pid 5079] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5079] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5083] <... futex resumed>) = 0 [pid 5084] sendfile(8, 6, NULL, 281474978811908 [pid 5083] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5087] <... write resumed>) = 2097152 [pid 5083] <... futex resumed>) = 0 [ 68.999399][ T27] audit: type=1804 audit(1686284873.617:58): pid=5088 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor481" name="/root/syzkaller.txkbmS/4/bus/bus" dev="loop2" ino=7 res=1 errno=0 [pid 5083] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5091 attached [pid 5091] set_robust_list(0x7ff67809c9e0, 24 [pid 5087] munmap(0x7ff677e9d000, 2097152 [pid 5091] <... set_robust_list resumed>) = 0 [pid 5091] sync( [pid 5087] <... munmap resumed>) = 0 [pid 5091] <... sync resumed>) = 0 [pid 5091] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... futex resumed>) = 0 [pid 5091] <... futex resumed>) = 1 [pid 5091] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5087] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 10 [pid 5088] <... write resumed>) = 2097152 [pid 5087] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5087] ioctl(10, LOOP_CLR_FD) = 0 [pid 5087] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5087] close(10) = 0 [pid 5087] close(9 [pid 5083] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5083] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5088] munmap(0x7ff677e9d000, 2097152 [pid 5083] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff67807c000 [pid 5088] <... munmap resumed>) = 0 [pid 5087] <... close resumed>) = 0 [pid 5083] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5083] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5092], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5092 [pid 5088] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5083] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5083] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5092 attached [pid 5088] <... openat resumed>) = 10 [pid 5087] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5092] set_robust_list(0x7ff67809c9e0, 24 [pid 5087] <... futex resumed>) = 1 [pid 5092] <... set_robust_list resumed>) = 0 [pid 5087] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5092] sync( [pid 5085] <... futex resumed>) = 0 [pid 5092] <... sync resumed>) = 0 [pid 5088] ioctl(10, LOOP_SET_FD, 9 [pid 5085] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5092] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5088] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5087] <... futex resumed>) = 0 [pid 5085] <... futex resumed>) = 1 [pid 5092] <... futex resumed>) = 1 [pid 5087] sendfile(8, 6, NULL, 281474978811908 [pid 5083] <... futex resumed>) = 0 [pid 5092] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5088] ioctl(10, LOOP_CLR_FD [pid 5085] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5088] <... ioctl resumed>) = 0 [ 69.124185][ T27] audit: type=1804 audit(1686284873.617:59): pid=5088 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor481" name="/root/syzkaller.txkbmS/4/bus/bus" dev="loop2" ino=7 res=1 errno=0 [pid 5088] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5088] close(10) = 0 [pid 5088] close(9) = 0 [pid 5088] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5086] <... futex resumed>) = 0 [pid 5086] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5085] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5088] sendfile(8, 6, NULL, 281474978811908 [pid 5086] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5085] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5085] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff67807c000 [pid 5085] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5085] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5093], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5093 [pid 5085] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5085] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5093 attached [pid 5093] set_robust_list(0x7ff67809c9e0, 24) = 0 [pid 5093] sync( [pid 5086] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5086] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5086] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff67807c000 [pid 5086] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5086] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5093] <... sync resumed>) = 0 [pid 5086] <... clone resumed>, parent_tid=[5094], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5094 [pid 5093] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5086] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5094 attached [pid 5093] <... futex resumed>) = 1 [pid 5086] <... futex resumed>) = 0 [pid 5085] <... futex resumed>) = 0 [pid 5094] set_robust_list(0x7ff67809c9e0, 24 [pid 5093] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5086] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5094] <... set_robust_list resumed>) = 0 [pid 5094] sync() = 0 [pid 5094] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5086] <... futex resumed>) = 0 [pid 5094] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5077] exit_group(0 [pid 5089] <... futex resumed>) = ? [pid 5077] <... exit_group resumed>) = ? [pid 5089] +++ exited with 0 +++ [pid 5078] <... sendfile resumed>) = ? [pid 5078] +++ exited with 0 +++ [pid 5077] +++ exited with 0 +++ [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5077, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=30 /* 0.30 s */} --- [pid 4997] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4997] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(3, 0x555556742620 /* 4 entries */, 32768) = 104 [pid 4997] umount2("./4/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] exit_group(0 [pid 5090] <... futex resumed>) = ? [pid 5080] <... exit_group resumed>) = ? [pid 5090] +++ exited with 0 +++ [pid 5081] <... sendfile resumed>) = ? [pid 5081] +++ exited with 0 +++ [pid 5080] +++ exited with 0 +++ [pid 4993] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5080, si_uid=0, si_status=0, si_utime=14 /* 0.14 s */, si_stime=35 /* 0.35 s */} --- [pid 4993] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4993] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4993] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4993] getdents64(3, 0x555556742620 /* 4 entries */, 32768) = 104 [pid 4993] umount2("./4/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] exit_group(0 [pid 5092] <... futex resumed>) = ? [pid 5083] <... exit_group resumed>) = ? [pid 5092] +++ exited with 0 +++ [pid 5084] <... sendfile resumed>) = ? [pid 5084] +++ exited with 0 +++ [pid 5083] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5083, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=37 /* 0.37 s */} --- [pid 4998] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x555556742620 /* 4 entries */, 32768) = 104 [pid 4998] umount2("./4/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] exit_group(0 [pid 5091] <... futex resumed>) = ? [pid 5082] <... sendfile resumed>) = ? [pid 5079] <... exit_group resumed>) = ? [pid 5091] +++ exited with 0 +++ [pid 5082] +++ exited with 0 +++ [pid 5079] +++ exited with 0 +++ [pid 4996] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5079, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=28 /* 0.28 s */} --- [pid 4996] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4996] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4996] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] getdents64(3, 0x555556742620 /* 4 entries */, 32768) = 104 [pid 4996] umount2("./4/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5085] exit_group(0 [pid 5093] <... futex resumed>) = ? [pid 5085] <... exit_group resumed>) = ? [pid 5093] +++ exited with 0 +++ [pid 5087] <... sendfile resumed>) = ? [pid 5086] exit_group(0 [pid 5094] <... futex resumed>) = ? [pid 5086] <... exit_group resumed>) = ? [pid 5094] +++ exited with 0 +++ [pid 5088] <... sendfile resumed>) = ? [pid 5087] +++ exited with 0 +++ [pid 5085] +++ exited with 0 +++ [pid 5088] +++ exited with 0 +++ [pid 5086] +++ exited with 0 +++ [pid 4994] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5085, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=42 /* 0.42 s */} --- [pid 4995] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5086, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=30 /* 0.30 s */} --- [pid 4995] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4995] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4995] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4995] fstat(3, [pid 4994] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] getdents64(3, [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] <... getdents64 resumed>0x555556742620 /* 4 entries */, 32768) = 104 [pid 4995] umount2("./4/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4994] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] getdents64(3, 0x555556742620 /* 4 entries */, 32768) = 104 [pid 4994] umount2("./4/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] <... umount2 resumed>) = 0 [pid 4996] umount2("./4/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] lstat("./4/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] umount2("./4/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] openat(AT_FDCWD, "./4/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4996] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4996] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4996] close(4) = 0 [pid 4996] rmdir("./4/bus") = 0 [pid 4996] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] lstat("./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4996] unlink("./4/binderfs") = 0 [pid 4996] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4996] close(3) = 0 [pid 4996] rmdir("./4") = 0 [pid 4996] mkdir("./5", 0777) = 0 [pid 4996] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 4996] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4996] close(3) = 0 [pid 4996] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567415d0) = 5095 ./strace-static-x86_64: Process 5095 attached [pid 5095] set_robust_list(0x5555567415e0, 24) = 0 [pid 5095] chdir("./5") = 0 [pid 5095] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5095] setpgid(0, 0) = 0 [pid 5095] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5095] write(3, "1000", 4) = 4 [pid 5095] close(3) = 0 [pid 5095] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5095] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5095] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5095] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5095] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5096], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5096 [pid 5095] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5095] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5096 attached [pid 5096] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5096] memfd_create("syzkaller", 0) = 3 [pid 5096] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 4995] <... umount2 resumed>) = 0 [pid 4995] umount2("./4/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4995] lstat("./4/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] umount2("./4/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4995] openat(AT_FDCWD, "./4/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4995] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4995] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4995] close(4) = 0 [pid 4994] <... umount2 resumed>) = 0 [pid 4995] rmdir("./4/bus") = 0 [pid 4995] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4995] lstat("./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4995] unlink("./4/binderfs") = 0 [pid 4995] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4995] close(3) = 0 [pid 4995] rmdir("./4") = 0 [pid 4995] mkdir("./5", 0777) = 0 [pid 4995] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 4995] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4995] close(3) = 0 [pid 4995] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567415d0) = 5097 [pid 4994] umount2("./4/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] lstat("./4/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] umount2("./4/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] openat(AT_FDCWD, "./4/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4994] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4994] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4994] close(4) = 0 [pid 4994] rmdir("./4/bus") = 0 [pid 4994] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] lstat("./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4994] unlink("./4/binderfs") = 0 [pid 4994] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 5097 attached [pid 4994] close(3 [pid 5097] set_robust_list(0x5555567415e0, 24 [pid 4994] <... close resumed>) = 0 [pid 4994] rmdir("./4" [pid 5097] <... set_robust_list resumed>) = 0 [pid 5097] chdir("./5" [pid 4994] <... rmdir resumed>) = 0 [pid 5097] <... chdir resumed>) = 0 [pid 5097] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4994] mkdir("./5", 0777 [pid 5097] <... prctl resumed>) = 0 [pid 5097] setpgid(0, 0 [pid 4994] <... mkdir resumed>) = 0 [pid 5097] <... setpgid resumed>) = 0 [pid 5097] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4994] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5097] <... openat resumed>) = 3 [pid 5097] write(3, "1000", 4 [pid 4994] <... openat resumed>) = 3 [pid 5097] <... write resumed>) = 4 [pid 4994] ioctl(3, LOOP_CLR_FD [pid 5097] close(3 [pid 4994] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5097] <... close resumed>) = 0 [pid 5097] symlink("/dev/binderfs", "./binderfs" [pid 4994] close(3 [pid 5097] <... symlink resumed>) = 0 [pid 5097] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] <... close resumed>) = 0 [pid 5097] <... futex resumed>) = 0 [pid 5097] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4994] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5097] <... mmap resumed>) = 0x7ff68769d000 [pid 5097] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4994] <... clone resumed>, child_tidptr=0x5555567415d0) = 5098 [pid 5097] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5099], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5099 [pid 5097] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5097] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5098 attached [pid 5098] set_robust_list(0x5555567415e0, 24) = 0 [pid 5098] chdir("./5") = 0 [pid 5098] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5098] setpgid(0, 0) = 0 [pid 5098] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5098] write(3, "1000", 4) = 4 [pid 5098] close(3) = 0 [pid 5098] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5098] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5098] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5098] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5098] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5100], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5100 [pid 5098] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5098] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5100 attached [pid 5100] set_robust_list(0x7ff6876bd9e0, 24) = 0 ./strace-static-x86_64: Process 5099 attached [pid 5099] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5100] memfd_create("syzkaller", 0) = 3 [pid 5100] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 5099] memfd_create("syzkaller", 0) = 3 [pid 5099] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 4993] <... umount2 resumed>) = 0 [pid 4993] umount2("./4/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4993] lstat("./4/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4993] umount2("./4/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4993] openat(AT_FDCWD, "./4/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4993] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4993] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4993] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4993] close(4) = 0 [pid 4993] rmdir("./4/bus") = 0 [pid 4993] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4993] lstat("./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4993] unlink("./4/binderfs") = 0 [pid 4993] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4993] close(3) = 0 [pid 4993] rmdir("./4") = 0 [pid 4993] mkdir("./5", 0777) = 0 [pid 4993] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4993] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4993] close(3) = 0 [pid 4993] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567415d0) = 5101 ./strace-static-x86_64: Process 5101 attached [pid 5101] set_robust_list(0x5555567415e0, 24) = 0 [pid 5101] chdir("./5") = 0 [pid 5101] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5101] setpgid(0, 0) = 0 [pid 5101] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5101] write(3, "1000", 4) = 4 [pid 5101] close(3) = 0 [pid 5101] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5101] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5101] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5101] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5101] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5102], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5102 [pid 5101] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5101] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5102 attached [pid 5102] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 4998] <... umount2 resumed>) = 0 [pid 5102] memfd_create("syzkaller", 0 [pid 4998] umount2("./4/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5102] <... memfd_create resumed>) = 3 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5102] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 4998] lstat("./4/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./4/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./4/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./4/bus") = 0 [pid 4998] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./4/binderfs") = 0 [pid 4998] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./4") = 0 [pid 4998] mkdir("./5", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567415d0) = 5103 ./strace-static-x86_64: Process 5103 attached [pid 5103] set_robust_list(0x5555567415e0, 24) = 0 [pid 5103] chdir("./5") = 0 [pid 5103] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5103] setpgid(0, 0) = 0 [pid 5103] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5103] write(3, "1000", 4) = 4 [pid 5103] close(3) = 0 [pid 5103] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5103] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5103] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5103] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5103] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5104], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5104 [pid 5103] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5103] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5104 attached [pid 5104] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5104] memfd_create("syzkaller", 0) = 3 [pid 5104] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 5096] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5100] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 4997] <... umount2 resumed>) = 0 [pid 4997] umount2("./4/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./4/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./4/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./4/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4997] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4997] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4997] close(4) = 0 [pid 4997] rmdir("./4/bus") = 0 [pid 4997] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] unlink("./4/binderfs") = 0 [pid 4997] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4997] close(3) = 0 [pid 4997] rmdir("./4") = 0 [pid 4997] mkdir("./5", 0777) = 0 [pid 4997] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 4997] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4997] close(3 [pid 5099] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 4997] <... close resumed>) = 0 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567415d0) = 5105 ./strace-static-x86_64: Process 5105 attached [pid 5105] set_robust_list(0x5555567415e0, 24) = 0 [pid 5105] chdir("./5") = 0 [pid 5105] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5105] setpgid(0, 0) = 0 [pid 5105] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5105] write(3, "1000", 4) = 4 [pid 5105] close(3) = 0 [pid 5105] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5105] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5105] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5105] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5105] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5106], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5106 [pid 5105] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5105] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5106 attached [pid 5106] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5106] memfd_create("syzkaller", 0) = 3 [pid 5106] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 5102] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5104] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5096] <... write resumed>) = 16777216 [pid 5096] munmap(0x7ff67f29d000, 16777216) = 0 [pid 5096] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5096] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5096] close(3) = 0 [pid 5096] mkdir("./bus", 0777) = 0 [pid 5096] mount("/dev/loop3", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5100] <... write resumed>) = 16777216 [pid 5100] munmap(0x7ff67f29d000, 16777216 [pid 5099] <... write resumed>) = 16777216 [pid 5096] <... mount resumed>) = 0 [pid 5100] <... munmap resumed>) = 0 [pid 5099] munmap(0x7ff67f29d000, 16777216 [ 70.893863][ T5096] loop3: detected capacity change from 0 to 32768 [pid 5096] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5099] <... munmap resumed>) = 0 [pid 5096] chdir("./bus") = 0 [pid 5096] ioctl(4, LOOP_CLR_FD) = 0 [pid 5096] close(4) = 0 [pid 5106] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5100] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5099] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5096] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5100] <... openat resumed>) = 4 [pid 5099] <... openat resumed>) = 4 [pid 5100] ioctl(4, LOOP_SET_FD, 3 [pid 5099] ioctl(4, LOOP_SET_FD, 3 [pid 5096] <... futex resumed>) = 1 [pid 5095] <... futex resumed>) = 0 [pid 5100] <... ioctl resumed>) = 0 [pid 5096] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5095] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5096] <... open resumed>) = 4 [pid 5095] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5096] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5100] close(3 [pid 5099] <... ioctl resumed>) = 0 [pid 5096] <... futex resumed>) = 1 [pid 5095] <... futex resumed>) = 0 [pid 5100] <... close resumed>) = 0 [pid 5099] close(3 [pid 5096] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5095] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5100] mkdir("./bus", 0777 [pid 5099] <... close resumed>) = 0 [pid 5096] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5096] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5095] <... futex resumed>) = 0 [pid 5100] <... mkdir resumed>) = 0 [pid 5095] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5096] <... open resumed>) = 5 [pid 5100] mount("/dev/loop1", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5099] mkdir("./bus", 0777) = 0 [pid 5096] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5099] mount("/dev/loop2", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5096] <... futex resumed>) = 1 [pid 5095] <... futex resumed>) = 0 [pid 5096] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5095] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5096] <... mmap resumed>) = 0x20000000 [pid 5095] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5096] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5095] <... futex resumed>) = 0 [pid 5096] ftruncate(4, 33587199 [pid 5095] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5096] <... ftruncate resumed>) = 0 [pid 5095] <... futex resumed>) = 0 [pid 5096] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5095] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5096] <... futex resumed>) = 0 [pid 5095] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5095] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5096] open("./bus", O_RDONLY [pid 5095] <... futex resumed>) = 0 [pid 5095] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5096] <... open resumed>) = 6 [pid 5096] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5095] <... futex resumed>) = 0 [pid 5096] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5095] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5095] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5100] <... mount resumed>) = 0 [pid 5096] <... open resumed>) = 7 [pid 5100] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5096] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5100] <... openat resumed>) = 3 [pid 5095] <... futex resumed>) = 0 [pid 5100] chdir("./bus" [pid 5096] <... futex resumed>) = 1 [ 70.993812][ T5100] loop1: detected capacity change from 0 to 32768 [ 71.000492][ T5099] loop2: detected capacity change from 0 to 32768 [pid 5095] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5100] <... chdir resumed>) = 0 [pid 5099] <... mount resumed>) = 0 [pid 5096] dup(7 [pid 5095] <... futex resumed>) = 0 [pid 5100] ioctl(4, LOOP_CLR_FD [pid 5099] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5096] <... dup resumed>) = 8 [pid 5095] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5100] <... ioctl resumed>) = 0 [pid 5099] <... openat resumed>) = 3 [pid 5096] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5100] close(4 [pid 5096] <... futex resumed>) = 1 [pid 5095] <... futex resumed>) = 0 [pid 5100] <... close resumed>) = 0 [pid 5099] chdir("./bus" [pid 5096] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5100] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5099] <... chdir resumed>) = 0 [pid 5096] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5095] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5100] <... futex resumed>) = 1 [pid 5099] ioctl(4, LOOP_CLR_FD [pid 5098] <... futex resumed>) = 0 [pid 5098] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5098] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5096] memfd_create("syzkaller", 0 [pid 5095] <... futex resumed>) = 0 [pid 5100] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5099] <... ioctl resumed>) = 0 [pid 5095] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5099] close(4 [pid 5100] <... open resumed>) = 4 [pid 5100] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5099] <... close resumed>) = 0 [pid 5100] <... futex resumed>) = 1 [pid 5099] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5098] <... futex resumed>) = 0 [pid 5098] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5096] <... memfd_create resumed>) = 9 [pid 5098] <... futex resumed>) = 0 [pid 5098] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5100] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5099] <... futex resumed>) = 1 [pid 5097] <... futex resumed>) = 0 [pid 5099] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5097] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5096] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5100] <... open resumed>) = 5 [pid 5099] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5097] <... futex resumed>) = 0 [pid 5100] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5099] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5097] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5100] <... futex resumed>) = 1 [pid 5099] <... open resumed>) = 4 [pid 5098] <... futex resumed>) = 0 [pid 5096] <... mmap resumed>) = 0x7ff677e9d000 [pid 5100] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5099] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5098] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5100] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5099] <... futex resumed>) = 1 [pid 5098] <... futex resumed>) = 0 [pid 5097] <... futex resumed>) = 0 [pid 5098] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5097] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5097] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5100] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5099] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5100] <... mmap resumed>) = 0x20000000 [pid 5099] <... open resumed>) = 5 [pid 5100] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5099] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5098] <... futex resumed>) = 0 [pid 5098] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5098] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5100] ftruncate(4, 33587199 [pid 5099] <... futex resumed>) = 1 [pid 5097] <... futex resumed>) = 0 [pid 5099] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5097] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5100] <... ftruncate resumed>) = 0 [pid 5099] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5097] <... futex resumed>) = 0 [pid 5100] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5099] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5097] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5100] <... futex resumed>) = 1 [pid 5099] <... mmap resumed>) = 0x20000000 [pid 5098] <... futex resumed>) = 0 [pid 5098] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5098] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5100] open("./bus", O_RDONLY [pid 5099] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5097] <... futex resumed>) = 0 [pid 5099] ftruncate(4, 33587199 [pid 5097] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5100] <... open resumed>) = 6 [pid 5099] <... ftruncate resumed>) = 0 [pid 5097] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5100] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5099] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5097] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5100] <... futex resumed>) = 1 [pid 5099] <... futex resumed>) = 0 [pid 5098] <... futex resumed>) = 0 [pid 5097] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5100] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5099] open("./bus", O_RDONLY [pid 5098] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5097] <... futex resumed>) = 0 [pid 5100] <... open resumed>) = 7 [pid 5098] <... futex resumed>) = 0 [pid 5097] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5100] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5099] <... open resumed>) = 6 [pid 5098] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5100] <... futex resumed>) = 0 [pid 5099] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5098] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5100] dup(7 [pid 5099] <... futex resumed>) = 1 [pid 5098] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5097] <... futex resumed>) = 0 [pid 5100] <... dup resumed>) = 8 [pid 5099] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5098] <... futex resumed>) = 0 [pid 5097] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5100] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5099] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5098] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5097] <... futex resumed>) = 0 [pid 5100] <... futex resumed>) = 0 [pid 5099] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5098] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5097] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5100] memfd_create("syzkaller", 0 [pid 5099] <... open resumed>) = 7 [pid 5098] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5098] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5099] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5100] <... memfd_create resumed>) = 9 [pid 5099] <... futex resumed>) = 1 [pid 5097] <... futex resumed>) = 0 [pid 5100] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5099] dup(7 [pid 5097] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5100] <... mmap resumed>) = 0x7ff677e9d000 [pid 5099] <... dup resumed>) = 8 [pid 5097] <... futex resumed>) = 0 [pid 5097] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5099] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5097] <... futex resumed>) = 0 [pid 5097] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5097] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5099] memfd_create("syzkaller", 0) = 9 [pid 5096] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5099] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff677e9d000 [pid 5102] <... write resumed>) = 16777216 [pid 5102] munmap(0x7ff67f29d000, 16777216) = 0 [pid 5102] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5102] ioctl(4, LOOP_SET_FD, 3 [pid 5100] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5096] <... write resumed>) = 2097152 [pid 5096] munmap(0x7ff677e9d000, 2097152 [pid 5102] <... ioctl resumed>) = 0 [pid 5102] close(3) = 0 [pid 5102] mkdir("./bus", 0777) = 0 [pid 5102] mount("/dev/loop0", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5099] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5096] <... munmap resumed>) = 0 [pid 5096] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 10 [pid 5096] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5096] ioctl(10, LOOP_CLR_FD) = 0 [pid 5102] <... mount resumed>) = 0 [pid 5102] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5102] chdir("./bus" [pid 5096] ioctl(10, LOOP_SET_FD, 9 [pid 5102] <... chdir resumed>) = 0 [pid 5102] ioctl(4, LOOP_CLR_FD) = 0 [pid 5096] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5102] close(4) = 0 [ 71.227127][ T5102] loop0: detected capacity change from 0 to 32768 [pid 5102] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5101] <... futex resumed>) = 0 [pid 5102] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5101] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5102] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5101] <... futex resumed>) = 0 [pid 5102] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5101] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5096] close(10 [pid 5102] <... open resumed>) = 4 [pid 5102] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5101] <... futex resumed>) = 0 [pid 5102] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5101] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5102] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5101] <... futex resumed>) = 0 [pid 5102] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5101] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5102] <... open resumed>) = 5 [pid 5102] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5101] <... futex resumed>) = 0 [pid 5102] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5101] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5100] <... write resumed>) = 2097152 [pid 5096] <... close resumed>) = 0 [pid 5102] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5101] <... futex resumed>) = 0 [pid 5100] munmap(0x7ff677e9d000, 2097152 [pid 5096] close(9 [pid 5102] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5101] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5102] <... mmap resumed>) = 0x20000000 [pid 5102] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5096] <... close resumed>) = 0 [pid 5104] <... write resumed>) = 16777216 [pid 5102] <... futex resumed>) = 1 [pid 5101] <... futex resumed>) = 0 [pid 5102] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5101] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5102] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5101] <... futex resumed>) = 0 [pid 5102] ftruncate(4, 33587199 [pid 5101] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5104] munmap(0x7ff67f29d000, 16777216 [pid 5102] <... ftruncate resumed>) = 0 [pid 5102] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5101] <... futex resumed>) = 0 [pid 5102] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5101] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5102] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5101] <... futex resumed>) = 0 [pid 5102] open("./bus", O_RDONLY [pid 5101] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5099] <... write resumed>) = 2097152 [pid 5102] <... open resumed>) = 6 [pid 5102] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5101] <... futex resumed>) = 0 [pid 5102] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5101] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5102] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5101] <... futex resumed>) = 0 [pid 5102] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5101] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5102] <... open resumed>) = 7 [pid 5102] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5101] <... futex resumed>) = 0 [pid 5102] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5101] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5102] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5101] <... futex resumed>) = 0 [pid 5102] dup(7 [pid 5101] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5102] <... dup resumed>) = 8 [pid 5102] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5101] <... futex resumed>) = 0 [pid 5102] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5101] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5102] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5101] <... futex resumed>) = 0 [pid 5102] memfd_create("syzkaller", 0 [pid 5101] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5100] <... munmap resumed>) = 0 [pid 5096] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5102] <... memfd_create resumed>) = 9 [pid 5100] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5099] munmap(0x7ff677e9d000, 2097152 [pid 5096] <... futex resumed>) = 1 [pid 5095] <... futex resumed>) = 0 [pid 5104] <... munmap resumed>) = 0 [pid 5102] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5100] <... openat resumed>) = 10 [pid 5096] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5095] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5104] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5102] <... mmap resumed>) = 0x7ff677e9d000 [pid 5100] ioctl(10, LOOP_SET_FD, 9 [pid 5099] <... munmap resumed>) = 0 [pid 5096] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5095] <... futex resumed>) = 0 [pid 5106] <... write resumed>) = 16777216 [pid 5104] <... openat resumed>) = 4 [pid 5100] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5099] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5096] sendfile(8, 6, NULL, 281474978811908 [pid 5095] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5106] munmap(0x7ff67f29d000, 16777216 [pid 5104] ioctl(4, LOOP_SET_FD, 3 [pid 5102] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5100] ioctl(10, LOOP_CLR_FD [pid 5099] <... openat resumed>) = 10 [pid 5100] <... ioctl resumed>) = 0 [pid 5099] ioctl(10, LOOP_SET_FD, 9 [pid 5104] <... ioctl resumed>) = 0 [pid 5100] ioctl(10, LOOP_SET_FD, 9 [pid 5099] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5104] close(3 [pid 5100] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5104] <... close resumed>) = 0 [pid 5099] ioctl(10, LOOP_CLR_FD [pid 5104] mkdir("./bus", 0777 [pid 5100] close(10 [pid 5099] <... ioctl resumed>) = 0 [pid 5104] <... mkdir resumed>) = 0 [pid 5100] <... close resumed>) = 0 [pid 5100] close(9 [pid 5104] mount("/dev/loop5", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5100] <... close resumed>) = 0 [pid 5106] <... munmap resumed>) = 0 [pid 5095] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5099] ioctl(10, LOOP_SET_FD, 9 [pid 5095] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5099] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5095] <... futex resumed>) = 0 [pid 5104] <... mount resumed>) = 0 [pid 5099] close(10 [pid 5095] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5104] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5100] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5099] <... close resumed>) = 0 [pid 5095] <... mmap resumed>) = 0x7ff67807c000 [pid 5104] <... openat resumed>) = 3 [pid 5100] <... futex resumed>) = 1 [pid 5099] close(9 [pid 5098] <... futex resumed>) = 0 [pid 5095] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5104] chdir("./bus" [pid 5100] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5095] <... mprotect resumed>) = 0 [pid 5106] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5098] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5095] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5106] <... openat resumed>) = 4 [pid 5104] <... chdir resumed>) = 0 [pid 5100] <... futex resumed>) = 0 [ 71.399298][ T5104] loop5: detected capacity change from 0 to 32768 [pid 5098] <... futex resumed>) = 1 [pid 5106] ioctl(4, LOOP_SET_FD, 3 [pid 5104] ioctl(4, LOOP_CLR_FD [pid 5102] <... write resumed>) = 2097152 [pid 5100] sendfile(8, 6, NULL, 281474978811908 [pid 5099] <... close resumed>) = 0 [pid 5098] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5095] <... clone resumed>, parent_tid=[5107], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5107 [pid 5104] <... ioctl resumed>) = 0 [pid 5102] munmap(0x7ff677e9d000, 2097152 [pid 5099] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5095] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5104] close(4 [pid 5099] <... futex resumed>) = 1 [pid 5097] <... futex resumed>) = 0 [pid 5095] <... futex resumed>) = 0 [pid 5104] <... close resumed>) = 0 [pid 5099] sendfile(8, 6, NULL, 281474978811908 [pid 5097] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5095] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5107 attached [pid 5104] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5097] <... futex resumed>) = 0 [pid 5107] set_robust_list(0x7ff67809c9e0, 24 [pid 5104] <... futex resumed>) = 1 [pid 5103] <... futex resumed>) = 0 [pid 5097] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5107] <... set_robust_list resumed>) = 0 [pid 5104] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5103] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5107] sync( [pid 5104] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5103] <... futex resumed>) = 0 [pid 5104] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5103] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5102] <... munmap resumed>) = 0 [pid 5104] <... open resumed>) = 4 [pid 5102] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5104] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5103] <... futex resumed>) = 0 [pid 5102] <... openat resumed>) = 10 [pid 5104] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5103] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5102] ioctl(10, LOOP_SET_FD, 9 [pid 5104] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5103] <... futex resumed>) = 0 [pid 5102] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5106] <... ioctl resumed>) = 0 [pid 5104] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5103] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5102] ioctl(10, LOOP_CLR_FD [pid 5106] close(3 [pid 5104] <... open resumed>) = 5 [pid 5102] <... ioctl resumed>) = 0 [pid 5106] <... close resumed>) = 0 [pid 5104] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5106] mkdir("./bus", 0777 [pid 5104] <... futex resumed>) = 1 [pid 5103] <... futex resumed>) = 0 [pid 5104] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5103] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5102] ioctl(10, LOOP_SET_FD, 9 [pid 5104] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5103] <... futex resumed>) = 0 [pid 5102] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5104] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5103] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5102] close(10 [pid 5104] <... mmap resumed>) = 0x20000000 [pid 5102] <... close resumed>) = 0 [pid 5104] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5102] close(9 [pid 5106] <... mkdir resumed>) = 0 [ 71.466356][ T5106] loop4: detected capacity change from 0 to 32768 [pid 5106] mount("/dev/loop4", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5104] <... futex resumed>) = 1 [pid 5103] <... futex resumed>) = 0 [pid 5106] <... mount resumed>) = 0 [pid 5104] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5103] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5098] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5106] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5103] <... futex resumed>) = 0 [pid 5095] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5106] <... openat resumed>) = 3 [pid 5103] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5106] chdir("./bus" [pid 5104] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5098] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5097] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5107] <... sync resumed>) = 0 [pid 5106] <... chdir resumed>) = 0 [pid 5104] ftruncate(4, 33587199 [pid 5098] <... futex resumed>) = 0 [pid 5097] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5107] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5106] ioctl(4, LOOP_CLR_FD [pid 5104] <... ftruncate resumed>) = 0 [pid 5098] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5097] <... futex resumed>) = 0 [pid 5107] <... futex resumed>) = 0 [pid 5106] <... ioctl resumed>) = 0 [pid 5104] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5098] <... mmap resumed>) = 0x7ff67807c000 [pid 5097] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5107] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5106] close(4 [pid 5104] <... futex resumed>) = 1 [pid 5103] <... futex resumed>) = 0 [pid 5098] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5097] <... mmap resumed>) = 0x7ff67807c000 [pid 5106] <... close resumed>) = 0 [pid 5104] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5103] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5098] <... mprotect resumed>) = 0 [pid 5097] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5106] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5104] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5103] <... futex resumed>) = 0 [pid 5102] <... close resumed>) = 0 [pid 5098] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5097] <... mprotect resumed>) = 0 [pid 5106] <... futex resumed>) = 1 [pid 5105] <... futex resumed>) = 0 [pid 5104] open("./bus", O_RDONLY [pid 5103] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5106] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5105] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5104] <... open resumed>) = 6 [pid 5102] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5097] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5106] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5105] <... futex resumed>) = 0 [pid 5104] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5102] <... futex resumed>) = 1 [pid 5101] <... futex resumed>) = 0 [pid 5098] <... clone resumed>, parent_tid=[5108], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5108 ./strace-static-x86_64: Process 5108 attached [pid 5106] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5105] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5104] <... futex resumed>) = 1 [pid 5103] <... futex resumed>) = 0 [pid 5102] sendfile(8, 6, NULL, 281474978811908 [pid 5101] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5098] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5097] <... clone resumed>, parent_tid=[5109], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5109 ./strace-static-x86_64: Process 5109 attached [pid 5108] set_robust_list(0x7ff67809c9e0, 24 [pid 5106] <... open resumed>) = 4 [pid 5104] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5103] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5101] <... futex resumed>) = 0 [pid 5098] <... futex resumed>) = 0 [pid 5097] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5109] set_robust_list(0x7ff67809c9e0, 24 [pid 5108] <... set_robust_list resumed>) = 0 [pid 5106] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5104] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5103] <... futex resumed>) = 0 [pid 5101] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5098] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5097] <... futex resumed>) = 0 [pid 5109] <... set_robust_list resumed>) = 0 [pid 5108] sync( [pid 5106] <... futex resumed>) = 1 [pid 5105] <... futex resumed>) = 0 [pid 5104] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5103] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5097] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5109] sync( [pid 5106] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5105] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5104] <... open resumed>) = 7 [pid 5108] <... sync resumed>) = 0 [pid 5106] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5105] <... futex resumed>) = 0 [pid 5104] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5109] <... sync resumed>) = 0 [pid 5108] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5106] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5105] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5104] <... futex resumed>) = 1 [pid 5103] <... futex resumed>) = 0 [pid 5109] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5108] <... futex resumed>) = 1 [pid 5106] <... open resumed>) = 5 [pid 5104] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5103] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5098] <... futex resumed>) = 0 [pid 5109] <... futex resumed>) = 1 [pid 5108] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5106] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5104] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5103] <... futex resumed>) = 0 [pid 5097] <... futex resumed>) = 0 [pid 5109] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5106] <... futex resumed>) = 1 [pid 5105] <... futex resumed>) = 0 [pid 5104] dup(7 [pid 5103] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5106] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5105] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5104] <... dup resumed>) = 8 [pid 5106] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5105] <... futex resumed>) = 0 [pid 5104] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5106] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5105] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5104] <... futex resumed>) = 1 [pid 5103] <... futex resumed>) = 0 [pid 5106] <... mmap resumed>) = 0x20000000 [pid 5104] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5103] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5101] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5106] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5104] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5103] <... futex resumed>) = 0 [pid 5101] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5106] <... futex resumed>) = 1 [pid 5105] <... futex resumed>) = 0 [pid 5103] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5106] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5105] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5101] <... futex resumed>) = 0 [pid 5106] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5105] <... futex resumed>) = 0 [pid 5101] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5106] ftruncate(4, 33587199 [pid 5105] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5104] memfd_create("syzkaller", 0 [pid 5101] <... mmap resumed>) = 0x7ff67807c000 [pid 5106] <... ftruncate resumed>) = 0 [pid 5104] <... memfd_create resumed>) = 9 [pid 5101] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5106] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5104] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5101] <... mprotect resumed>) = 0 [pid 5106] <... futex resumed>) = 1 [pid 5105] <... futex resumed>) = 0 [pid 5104] <... mmap resumed>) = 0x7ff677e9d000 [pid 5101] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5106] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5105] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5106] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5105] <... futex resumed>) = 0 [pid 5101] <... clone resumed>, parent_tid=[5110], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5110 [pid 5106] open("./bus", O_RDONLY [pid 5105] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5101] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5106] <... open resumed>) = 6 [pid 5101] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5110 attached [pid 5106] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5101] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5110] set_robust_list(0x7ff67809c9e0, 24 [pid 5106] <... futex resumed>) = 1 [pid 5105] <... futex resumed>) = 0 [pid 5110] <... set_robust_list resumed>) = 0 [pid 5106] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5105] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5110] sync( [pid 5106] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5105] <... futex resumed>) = 0 [pid 5106] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5105] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5106] <... open resumed>) = 7 [pid 5106] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5105] <... futex resumed>) = 0 [pid 5110] <... sync resumed>) = 0 [pid 5106] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5105] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5110] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5106] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5105] <... futex resumed>) = 0 [pid 5110] <... futex resumed>) = 1 [pid 5106] dup(7 [pid 5105] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5101] <... futex resumed>) = 0 [pid 5110] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5106] <... dup resumed>) = 8 [pid 5106] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5105] <... futex resumed>) = 0 [pid 5106] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5105] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5106] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5105] <... futex resumed>) = 0 [pid 5106] memfd_create("syzkaller", 0 [pid 5105] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5106] <... memfd_create resumed>) = 9 [pid 5104] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5106] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff677e9d000 [pid 5106] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5104] <... write resumed>) = 2097152 [pid 5104] munmap(0x7ff677e9d000, 2097152) = 0 [pid 5104] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 10 [pid 5104] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5104] ioctl(10, LOOP_CLR_FD) = 0 [pid 5104] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5104] close(10) = 0 [pid 5104] close(9 [pid 5106] <... write resumed>) = 2097152 [pid 5106] munmap(0x7ff677e9d000, 2097152) = 0 [pid 5106] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5104] <... close resumed>) = 0 [pid 5106] <... openat resumed>) = 10 [pid 5104] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5106] ioctl(10, LOOP_SET_FD, 9 [pid 5104] <... futex resumed>) = 1 [pid 5103] <... futex resumed>) = 0 [pid 5106] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5104] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5103] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5106] ioctl(10, LOOP_CLR_FD [pid 5104] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5103] <... futex resumed>) = 0 [pid 5106] <... ioctl resumed>) = 0 [pid 5104] sendfile(8, 6, NULL, 281474978811908 [pid 5103] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5106] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5106] close(10) = 0 [pid 5106] close(9) = 0 [pid 5106] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5105] <... futex resumed>) = 0 [pid 5106] sendfile(8, 6, NULL, 281474978811908 [pid 5105] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5103] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5105] <... futex resumed>) = 0 [pid 5103] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5105] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5103] <... futex resumed>) = 0 [pid 5103] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff67807c000 [pid 5103] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5103] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5111], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5111 [pid 5103] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 5111 attached [pid 5103] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5111] set_robust_list(0x7ff67809c9e0, 24) = 0 [pid 5111] sync() = 0 [pid 5111] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5103] <... futex resumed>) = 0 [pid 5111] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5105] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5105] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5105] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff67807c000 [pid 5105] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5105] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5112], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5112 [pid 5105] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5105] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5112 attached [pid 5112] set_robust_list(0x7ff67809c9e0, 24) = 0 [pid 5112] sync() = 0 [pid 5112] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5105] <... futex resumed>) = 0 [pid 5112] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5098] exit_group(0 [pid 5108] <... futex resumed>) = ? [pid 5098] <... exit_group resumed>) = ? [pid 5108] +++ exited with 0 +++ [pid 5100] <... sendfile resumed>) = ? [pid 5095] exit_group(0 [pid 5107] <... futex resumed>) = ? [pid 5095] <... exit_group resumed>) = ? [pid 5107] +++ exited with 0 +++ [pid 5100] +++ exited with 0 +++ [pid 5098] +++ exited with 0 +++ [pid 5096] <... sendfile resumed>) = ? [pid 5096] +++ exited with 0 +++ [pid 5095] +++ exited with 0 +++ [pid 4996] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5095, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=40 /* 0.40 s */} --- [pid 4994] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5098, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=37 /* 0.37 s */} --- [pid 4994] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4996] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4996] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4994] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4996] <... openat resumed>) = 3 [pid 4994] <... openat resumed>) = 3 [pid 4996] fstat(3, [pid 4994] fstat(3, [pid 4996] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] getdents64(3, [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] <... getdents64 resumed>0x555556742620 /* 4 entries */, 32768) = 104 [pid 4994] getdents64(3, [pid 4996] umount2("./5/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] <... getdents64 resumed>0x555556742620 /* 4 entries */, 32768) = 104 [pid 4994] umount2("./5/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5101] exit_group(0 [pid 5097] exit_group(0 [pid 5110] <... futex resumed>) = ? [pid 5109] <... futex resumed>) = ? [pid 5101] <... exit_group resumed>) = ? [pid 5097] <... exit_group resumed>) = ? [pid 5110] +++ exited with 0 +++ [pid 5109] +++ exited with 0 +++ [pid 5099] <... sendfile resumed>) = ? [pid 5102] <... sendfile resumed>) = ? [pid 5099] +++ exited with 0 +++ [pid 5097] +++ exited with 0 +++ [pid 4995] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5097, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=39 /* 0.39 s */} --- [pid 4995] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5102] +++ exited with 0 +++ [pid 5101] +++ exited with 0 +++ [pid 4995] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4995] fstat(3, [pid 4993] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5101, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=35 /* 0.35 s */} --- [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4993] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] getdents64(3, [pid 4993] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] <... getdents64 resumed>0x555556742620 /* 4 entries */, 32768) = 104 [pid 4993] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4995] umount2("./5/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4993] <... openat resumed>) = 3 [pid 4993] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4993] getdents64(3, 0x555556742620 /* 4 entries */, 32768) = 104 [pid 4993] umount2("./5/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5103] exit_group(0) = ? [pid 5111] <... futex resumed>) = ? [pid 5111] +++ exited with 0 +++ [pid 5104] <... sendfile resumed>) = ? [pid 5105] exit_group(0) = ? [pid 5112] <... futex resumed>) = ? [pid 5106] <... sendfile resumed>) = ? [pid 5112] +++ exited with 0 +++ [pid 5104] +++ exited with 0 +++ [pid 5103] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5103, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=37 /* 0.37 s */} --- [pid 4998] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4998] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5106] +++ exited with 0 +++ [pid 5105] +++ exited with 0 +++ [pid 4998] <... openat resumed>) = 3 [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5105, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=36 /* 0.36 s */} --- [pid 4998] fstat(3, [pid 4997] restart_syscall(<... resuming interrupted clone ...> [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] <... restart_syscall resumed>) = 0 [pid 4998] getdents64(3, 0x555556742620 /* 4 entries */, 32768) = 104 [pid 4997] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] umount2("./5/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4997] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(3, 0x555556742620 /* 4 entries */, 32768) = 104 [pid 4997] umount2("./5/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] <... umount2 resumed>) = 0 [pid 4994] umount2("./5/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] lstat("./5/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] umount2("./5/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] openat(AT_FDCWD, "./5/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4994] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4994] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4994] close(4) = 0 [pid 4994] rmdir("./5/bus") = 0 [pid 4994] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] lstat("./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4994] unlink("./5/binderfs") = 0 [pid 4994] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4994] close(3) = 0 [pid 4994] rmdir("./5") = 0 [pid 4994] mkdir("./6", 0777) = 0 [pid 4994] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4994] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4994] close(3) = 0 [pid 4994] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567415d0) = 5113 ./strace-static-x86_64: Process 5113 attached [pid 5113] set_robust_list(0x5555567415e0, 24) = 0 [pid 5113] chdir("./6") = 0 [pid 5113] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5113] setpgid(0, 0) = 0 [pid 5113] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5113] write(3, "1000", 4) = 4 [pid 5113] close(3) = 0 [pid 5113] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5113] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5113] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5113] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5113] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5114], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5114 [pid 5113] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5113] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5114 attached [pid 5114] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5114] memfd_create("syzkaller", 0) = 3 [pid 5114] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 4996] <... umount2 resumed>) = 0 [pid 4996] umount2("./5/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] lstat("./5/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] umount2("./5/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] openat(AT_FDCWD, "./5/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4996] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4996] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4996] close(4) = 0 [pid 4996] rmdir("./5/bus") = 0 [pid 4996] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] lstat("./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4996] unlink("./5/binderfs") = 0 [pid 4996] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4996] close(3) = 0 [pid 4996] rmdir("./5") = 0 [pid 4996] mkdir("./6", 0777) = 0 [pid 4996] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 4996] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4996] close(3) = 0 [pid 4996] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567415d0) = 5115 ./strace-static-x86_64: Process 5115 attached [pid 5115] set_robust_list(0x5555567415e0, 24) = 0 [pid 5115] chdir("./6") = 0 [pid 5115] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5115] setpgid(0, 0) = 0 [pid 5115] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5115] write(3, "1000", 4) = 4 [pid 5115] close(3) = 0 [pid 5115] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5115] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5115] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5115] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5115] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5116], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5116 [pid 5115] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5115] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5116 attached [pid 5116] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5116] memfd_create("syzkaller", 0) = 3 [pid 5116] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 4998] <... umount2 resumed>) = 0 [pid 4998] umount2("./5/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./5/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./5/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./5/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./5/bus") = 0 [pid 4998] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./5/binderfs") = 0 [pid 4998] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./5") = 0 [pid 4998] mkdir("./6", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567415d0) = 5117 ./strace-static-x86_64: Process 5117 attached [pid 5117] set_robust_list(0x5555567415e0, 24) = 0 [pid 5117] chdir("./6") = 0 [pid 5117] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5117] setpgid(0, 0) = 0 [pid 5117] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5117] write(3, "1000", 4) = 4 [pid 5117] close(3) = 0 [pid 5117] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5117] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5117] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5117] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5117] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5118], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5118 [pid 5117] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5117] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5118 attached [pid 5118] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5118] memfd_create("syzkaller", 0) = 3 [pid 5118] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 4993] <... umount2 resumed>) = 0 [pid 4993] umount2("./5/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4993] lstat("./5/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4993] umount2("./5/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4993] openat(AT_FDCWD, "./5/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4993] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4993] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4993] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4995] <... umount2 resumed>) = 0 [pid 4993] close(4) = 0 [pid 4993] rmdir("./5/bus") = 0 [pid 4993] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4993] lstat("./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4995] umount2("./5/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4993] unlink("./5/binderfs" [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] lstat("./5/bus", [pid 4993] <... unlink resumed>) = 0 [pid 4995] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] umount2("./5/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4995] openat(AT_FDCWD, "./5/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4993] getdents64(3, [pid 4995] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4993] <... getdents64 resumed>0x555556742620 /* 0 entries */, 32768) = 0 [pid 4995] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4995] close(4) = 0 [pid 4995] rmdir("./5/bus") = 0 [pid 4993] close(3 [pid 4995] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4995] lstat("./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4995] unlink("./5/binderfs" [pid 4993] <... close resumed>) = 0 [pid 4995] <... unlink resumed>) = 0 [pid 4993] rmdir("./5" [pid 4995] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4995] close(3) = 0 [pid 4993] <... rmdir resumed>) = 0 [pid 4995] rmdir("./5") = 0 [pid 4993] mkdir("./6", 0777 [pid 4995] mkdir("./6", 0777) = 0 [pid 4995] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 4993] <... mkdir resumed>) = 0 [pid 4995] ioctl(3, LOOP_CLR_FD [pid 4993] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 4995] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4993] <... openat resumed>) = 3 [pid 4995] close(3 [pid 4993] ioctl(3, LOOP_CLR_FD [pid 4995] <... close resumed>) = 0 [pid 4995] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4993] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4995] <... clone resumed>, child_tidptr=0x5555567415d0) = 5119 [pid 4993] close(3) = 0 [pid 4993] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567415d0) = 5120 ./strace-static-x86_64: Process 5119 attached [pid 5119] set_robust_list(0x5555567415e0, 24) = 0 [pid 5119] chdir("./6") = 0 [pid 5119] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5119] setpgid(0, 0) = 0 [pid 5119] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5119] write(3, "1000", 4) = 4 [pid 5119] close(3) = 0 [pid 5119] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 5120 attached ) = 0 [pid 5119] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5120] set_robust_list(0x5555567415e0, 24 [pid 5119] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5119] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5120] <... set_robust_list resumed>) = 0 [pid 5119] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5120] chdir("./6") = 0 [pid 5119] <... clone resumed>, parent_tid=[5121], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5121 [pid 5119] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5119] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5121 attached [pid 5120] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5121] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5120] <... prctl resumed>) = 0 [pid 5121] memfd_create("syzkaller", 0 [pid 5120] setpgid(0, 0 [pid 5121] <... memfd_create resumed>) = 3 [pid 5120] <... setpgid resumed>) = 0 [pid 5121] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 5120] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5120] write(3, "1000", 4) = 4 [pid 5120] close(3) = 0 [pid 5120] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5120] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5120] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5120] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5120] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5122], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5122 [pid 5120] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5114] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5120] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5122 attached [pid 5122] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5122] memfd_create("syzkaller", 0) = 3 [pid 5122] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 4997] <... umount2 resumed>) = 0 [pid 4997] umount2("./5/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./5/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./5/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./5/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4997] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4997] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4997] close(4) = 0 [pid 4997] rmdir("./5/bus") = 0 [pid 4997] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] unlink("./5/binderfs") = 0 [pid 4997] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4997] close(3) = 0 [pid 4997] rmdir("./5") = 0 [pid 4997] mkdir("./6", 0777) = 0 [pid 4997] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 4997] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4997] close(3) = 0 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567415d0) = 5123 ./strace-static-x86_64: Process 5123 attached [pid 5123] set_robust_list(0x5555567415e0, 24) = 0 [pid 5123] chdir("./6") = 0 [pid 5123] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5123] setpgid(0, 0) = 0 [pid 5123] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5116] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5123] <... openat resumed>) = 3 [pid 5123] write(3, "1000", 4) = 4 [pid 5123] close(3) = 0 [pid 5123] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5123] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5123] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5123] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5123] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5124], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5124 [pid 5123] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5123] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5124 attached [pid 5124] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5124] memfd_create("syzkaller", 0) = 3 [pid 5124] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 5118] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5121] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5122] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5114] <... write resumed>) = 16777216 [pid 5114] munmap(0x7ff67f29d000, 16777216) = 0 [pid 5114] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5114] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5124] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5114] close(3) = 0 [pid 5114] mkdir("./bus", 0777) = 0 [pid 5114] mount("/dev/loop1", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "") = 0 [pid 5114] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5114] chdir("./bus") = 0 [pid 5114] ioctl(4, LOOP_CLR_FD) = 0 [pid 5114] close(4) = 0 [pid 5114] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5113] <... futex resumed>) = 0 [pid 5114] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [ 73.775373][ T5114] loop1: detected capacity change from 0 to 32768 [pid 5113] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5114] <... open resumed>) = 4 [pid 5113] <... futex resumed>) = 0 [pid 5114] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5113] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5114] <... futex resumed>) = 0 [pid 5113] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5114] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5113] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5114] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5113] <... futex resumed>) = 0 [pid 5114] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5113] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5114] <... open resumed>) = 5 [pid 5114] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5113] <... futex resumed>) = 0 [pid 5114] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5113] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5114] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5113] <... futex resumed>) = 0 [pid 5114] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5113] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5114] <... mmap resumed>) = 0x20000000 [pid 5114] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5113] <... futex resumed>) = 0 [pid 5113] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5114] ftruncate(4, 33587199 [pid 5113] <... futex resumed>) = 0 [pid 5114] <... ftruncate resumed>) = 0 [pid 5113] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5114] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5113] <... futex resumed>) = 0 [pid 5113] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5114] open("./bus", O_RDONLY [pid 5113] <... futex resumed>) = 0 [pid 5113] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5114] <... open resumed>) = 6 [pid 5116] <... write resumed>) = 16777216 [pid 5114] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5116] munmap(0x7ff67f29d000, 16777216 [pid 5114] <... futex resumed>) = 1 [pid 5113] <... futex resumed>) = 0 [pid 5116] <... munmap resumed>) = 0 [pid 5114] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5113] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5114] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5113] <... futex resumed>) = 0 [pid 5114] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5113] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5114] <... open resumed>) = 7 [pid 5114] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5113] <... futex resumed>) = 0 [pid 5116] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5114] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5113] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5114] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5113] <... futex resumed>) = 0 [pid 5116] <... openat resumed>) = 4 [pid 5113] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5114] dup(7) = 8 [pid 5114] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [ 73.880328][ T27] kauditd_printk_skb: 14 callbacks suppressed [ 73.880342][ T27] audit: type=1804 audit(1686284878.717:74): pid=5114 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor481" name="/root/syzkaller.20fUYQ/6/bus/bus" dev="loop1" ino=7 res=1 errno=0 [pid 5116] ioctl(4, LOOP_SET_FD, 3 [pid 5114] <... futex resumed>) = 1 [pid 5113] <... futex resumed>) = 0 [pid 5114] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5113] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5114] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5113] <... futex resumed>) = 0 [pid 5114] memfd_create("syzkaller", 0 [pid 5113] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5114] <... memfd_create resumed>) = 9 [pid 5114] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff677e9d000 [pid 5116] <... ioctl resumed>) = 0 [pid 5116] close(3) = 0 [pid 5116] mkdir("./bus", 0777) = 0 [pid 5116] mount("/dev/loop3", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "") = 0 [pid 5116] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5116] chdir("./bus") = 0 [pid 5116] ioctl(4, LOOP_CLR_FD) = 0 [pid 5116] close(4 [pid 5118] <... write resumed>) = 16777216 [pid 5116] <... close resumed>) = 0 [pid 5118] munmap(0x7ff67f29d000, 16777216 [pid 5116] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5115] <... futex resumed>) = 0 [ 73.935488][ T5116] loop3: detected capacity change from 0 to 32768 [pid 5116] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5115] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5118] <... munmap resumed>) = 0 [pid 5116] <... open resumed>) = 4 [pid 5115] <... futex resumed>) = 0 [pid 5116] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5115] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5116] <... futex resumed>) = 0 [pid 5115] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5116] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5115] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5116] <... open resumed>) = 5 [pid 5115] <... futex resumed>) = 0 [pid 5116] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5115] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5116] <... futex resumed>) = 0 [pid 5115] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5116] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5115] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5116] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5115] <... futex resumed>) = 0 [pid 5116] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5115] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5116] <... mmap resumed>) = 0x20000000 [pid 5116] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5115] <... futex resumed>) = 0 [pid 5116] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5115] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5116] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5115] <... futex resumed>) = 0 [pid 5116] ftruncate(4, 33587199 [pid 5115] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5116] <... ftruncate resumed>) = 0 [pid 5116] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5115] <... futex resumed>) = 0 [pid 5116] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5115] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5116] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5115] <... futex resumed>) = 0 [pid 5116] open("./bus", O_RDONLY [pid 5115] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5116] <... open resumed>) = 6 [pid 5116] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5115] <... futex resumed>) = 0 [pid 5116] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5115] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5116] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5115] <... futex resumed>) = 0 [pid 5116] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5115] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5116] <... open resumed>) = 7 [pid 5116] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5115] <... futex resumed>) = 0 [pid 5116] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5115] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5116] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5115] <... futex resumed>) = 0 [pid 5118] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5116] dup(7 [pid 5115] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5114] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5116] <... dup resumed>) = 8 [pid 5116] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5115] <... futex resumed>) = 0 [pid 5116] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5115] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5116] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5115] <... futex resumed>) = 0 [pid 5118] <... openat resumed>) = 4 [pid 5116] memfd_create("syzkaller", 0 [pid 5115] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5116] <... memfd_create resumed>) = 9 [pid 5116] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5118] ioctl(4, LOOP_SET_FD, 3 [pid 5116] <... mmap resumed>) = 0x7ff677e9d000 [pid 5118] <... ioctl resumed>) = 0 [pid 5118] close(3) = 0 [pid 5118] mkdir("./bus", 0777) = 0 [pid 5118] mount("/dev/loop5", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "") = 0 [pid 5118] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5118] chdir("./bus") = 0 [pid 5118] ioctl(4, LOOP_CLR_FD) = 0 [ 74.028881][ T27] audit: type=1804 audit(1686284878.767:75): pid=5114 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor481" name="/root/syzkaller.20fUYQ/6/bus/bus" dev="loop1" ino=7 res=1 errno=0 [ 74.058892][ T5118] loop5: detected capacity change from 0 to 32768 [pid 5118] close(4) = 0 [pid 5118] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5117] <... futex resumed>) = 0 [pid 5118] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5117] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5114] <... write resumed>) = 2097152 [pid 5118] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5117] <... futex resumed>) = 0 [pid 5114] munmap(0x7ff677e9d000, 2097152 [pid 5118] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5117] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5118] <... open resumed>) = 4 [pid 5114] <... munmap resumed>) = 0 [pid 5118] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5116] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5118] <... futex resumed>) = 1 [pid 5117] <... futex resumed>) = 0 [pid 5117] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5118] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5117] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5118] <... open resumed>) = 5 [pid 5114] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5118] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5117] <... futex resumed>) = 0 [pid 5118] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5117] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5118] <... mmap resumed>) = 0x20000000 [pid 5117] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5118] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5117] <... futex resumed>) = 0 [pid 5118] ftruncate(4, 33587199 [pid 5117] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5118] <... ftruncate resumed>) = 0 [pid 5117] <... futex resumed>) = 0 [pid 5118] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5117] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5118] <... futex resumed>) = 0 [pid 5117] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5118] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5117] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5118] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5117] <... futex resumed>) = 0 [pid 5114] <... openat resumed>) = 10 [pid 5122] <... write resumed>) = 16777216 [pid 5121] <... write resumed>) = 16777216 [pid 5118] open("./bus", O_RDONLY [pid 5117] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5116] <... write resumed>) = 2097152 [pid 5114] ioctl(10, LOOP_SET_FD, 9 [pid 5122] munmap(0x7ff67f29d000, 16777216 [pid 5121] munmap(0x7ff67f29d000, 16777216 [pid 5118] <... open resumed>) = 6 [pid 5116] munmap(0x7ff677e9d000, 2097152 [pid 5114] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [ 74.172710][ T27] audit: type=1804 audit(1686284878.867:76): pid=5116 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor481" name="/root/syzkaller.crriMX/6/bus/bus" dev="loop3" ino=7 res=1 errno=0 [ 74.196129][ T27] audit: type=1804 audit(1686284878.867:77): pid=5116 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor481" name="/root/syzkaller.crriMX/6/bus/bus" dev="loop3" ino=7 res=1 errno=0 [pid 5122] <... munmap resumed>) = 0 [pid 5121] <... munmap resumed>) = 0 [pid 5118] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5116] <... munmap resumed>) = 0 [pid 5114] ioctl(10, LOOP_CLR_FD [pid 5118] <... futex resumed>) = 1 [pid 5116] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5114] <... ioctl resumed>) = 0 [pid 5117] <... futex resumed>) = 0 [pid 5117] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5118] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5117] <... futex resumed>) = 0 [pid 5116] <... openat resumed>) = 10 [pid 5118] <... open resumed>) = 7 [pid 5117] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5116] ioctl(10, LOOP_SET_FD, 9 [pid 5114] ioctl(10, LOOP_SET_FD, 9 [pid 5116] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5114] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5118] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5117] <... futex resumed>) = 0 [pid 5114] close(10 [pid 5116] ioctl(10, LOOP_CLR_FD [pid 5117] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5114] <... close resumed>) = 0 [ 74.219140][ T27] audit: type=1804 audit(1686284879.037:78): pid=5118 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor481" name="/root/syzkaller.PL7eda/6/bus/bus" dev="loop5" ino=7 res=1 errno=0 [ 74.243527][ T27] audit: type=1804 audit(1686284879.087:79): pid=5118 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor481" name="/root/syzkaller.PL7eda/6/bus/bus" dev="loop5" ino=7 res=1 errno=0 [pid 5117] <... futex resumed>) = 0 [pid 5114] close(9 [pid 5116] <... ioctl resumed>) = 0 [pid 5118] dup(7 [pid 5117] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5121] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5122] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5121] <... openat resumed>) = 4 [pid 5122] <... openat resumed>) = 4 [pid 5121] ioctl(4, LOOP_SET_FD, 3 [pid 5122] ioctl(4, LOOP_SET_FD, 3 [pid 5121] <... ioctl resumed>) = 0 [pid 5118] <... dup resumed>) = 8 [pid 5114] <... close resumed>) = 0 [pid 5118] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5114] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5124] <... write resumed>) = 16777216 [pid 5122] <... ioctl resumed>) = 0 [pid 5121] close(3 [pid 5118] <... futex resumed>) = 1 [pid 5117] <... futex resumed>) = 0 [pid 5116] ioctl(10, LOOP_SET_FD, 9 [pid 5114] <... futex resumed>) = 1 [pid 5113] <... futex resumed>) = 0 [pid 5117] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5117] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5118] memfd_create("syzkaller", 0 [pid 5116] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5114] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5113] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5116] close(10 [pid 5114] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5113] <... futex resumed>) = 0 [pid 5124] munmap(0x7ff67f29d000, 16777216 [pid 5113] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5114] sendfile(8, 6, NULL, 281474978811908 [pid 5116] <... close resumed>) = 0 [pid 5116] close(9 [pid 5124] <... munmap resumed>) = 0 [pid 5122] close(3 [pid 5121] <... close resumed>) = 0 [pid 5118] <... memfd_create resumed>) = 9 [pid 5122] <... close resumed>) = 0 [pid 5121] mkdir("./bus", 0777 [ 74.275099][ T5121] loop2: detected capacity change from 0 to 32768 [ 74.282588][ T5122] loop0: detected capacity change from 0 to 32768 [pid 5118] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5124] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5122] mkdir("./bus", 0777 [pid 5121] <... mkdir resumed>) = 0 [pid 5118] <... mmap resumed>) = 0x7ff677e9d000 [pid 5116] <... close resumed>) = 0 [pid 5124] <... openat resumed>) = 4 [pid 5122] <... mkdir resumed>) = 0 [pid 5121] mount("/dev/loop2", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5116] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5124] ioctl(4, LOOP_SET_FD, 3 [pid 5122] mount("/dev/loop0", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5116] <... futex resumed>) = 1 [pid 5115] <... futex resumed>) = 0 [pid 5121] <... mount resumed>) = 0 [pid 5116] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5113] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5115] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5122] <... mount resumed>) = 0 [pid 5121] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5116] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5115] <... futex resumed>) = 0 [pid 5113] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5122] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5121] <... openat resumed>) = 3 [pid 5116] sendfile(8, 6, NULL, 281474978811908 [pid 5115] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5113] <... futex resumed>) = 0 [pid 5122] <... openat resumed>) = 3 [pid 5121] chdir("./bus" [pid 5113] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5122] chdir("./bus" [pid 5121] <... chdir resumed>) = 0 [pid 5113] <... mmap resumed>) = 0x7ff67807c000 [pid 5122] <... chdir resumed>) = 0 [pid 5121] ioctl(4, LOOP_CLR_FD [pid 5113] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5122] ioctl(4, LOOP_CLR_FD [pid 5121] <... ioctl resumed>) = 0 [pid 5113] <... mprotect resumed>) = 0 [pid 5124] <... ioctl resumed>) = 0 [pid 5122] <... ioctl resumed>) = 0 [pid 5121] close(4 [pid 5113] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5124] close(3 [pid 5122] close(4 [pid 5121] <... close resumed>) = 0 [pid 5124] <... close resumed>) = 0 [pid 5122] <... close resumed>) = 0 [pid 5113] <... clone resumed>, parent_tid=[5125], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5125 [pid 5124] mkdir("./bus", 0777 [pid 5122] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5113] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5124] <... mkdir resumed>) = 0 [pid 5122] <... futex resumed>) = 1 [pid 5120] <... futex resumed>) = 0 [pid 5113] <... futex resumed>) = 0 [pid 5124] mount("/dev/loop4", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5122] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5120] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5113] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5122] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5121] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5120] <... futex resumed>) = 0 [pid 5122] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5121] <... futex resumed>) = 1 [pid 5120] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5119] <... futex resumed>) = 0 [pid 5122] <... open resumed>) = 4 [pid 5121] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5119] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5125 attached [pid 5122] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5121] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5119] <... futex resumed>) = 0 [pid 5125] set_robust_list(0x7ff67809c9e0, 24 [pid 5124] <... mount resumed>) = 0 [pid 5122] <... futex resumed>) = 1 [pid 5121] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5120] <... futex resumed>) = 0 [pid 5119] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5125] <... set_robust_list resumed>) = 0 [pid 5124] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5122] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5121] <... open resumed>) = 4 [pid 5120] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5125] sync( [pid 5124] <... openat resumed>) = 3 [pid 5122] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5121] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5120] <... futex resumed>) = 0 [pid 5124] chdir("./bus" [pid 5122] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5121] <... futex resumed>) = 1 [pid 5120] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5119] <... futex resumed>) = 0 [pid 5124] <... chdir resumed>) = 0 [pid 5122] <... open resumed>) = 5 [pid 5121] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [ 74.357096][ T5124] loop4: detected capacity change from 0 to 32768 [pid 5119] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5124] ioctl(4, LOOP_CLR_FD [pid 5122] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5121] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5119] <... futex resumed>) = 0 [pid 5124] <... ioctl resumed>) = 0 [pid 5122] <... futex resumed>) = 1 [pid 5121] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5120] <... futex resumed>) = 0 [pid 5119] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5124] close(4 [pid 5122] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5121] <... open resumed>) = 5 [pid 5120] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5125] <... sync resumed>) = 0 [pid 5124] <... close resumed>) = 0 [pid 5122] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5121] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5120] <... futex resumed>) = 0 [pid 5118] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5115] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5125] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5124] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5122] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5121] <... futex resumed>) = 1 [pid 5120] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5119] <... futex resumed>) = 0 [pid 5115] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5113] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5125] <... futex resumed>) = 0 [pid 5124] <... futex resumed>) = 1 [pid 5123] <... futex resumed>) = 0 [pid 5122] <... mmap resumed>) = 0x20000000 [pid 5121] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5119] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5115] <... futex resumed>) = 0 [pid 5125] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5124] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5123] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5122] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5121] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5119] <... futex resumed>) = 0 [pid 5115] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5124] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5123] <... futex resumed>) = 0 [pid 5122] <... futex resumed>) = 1 [pid 5121] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5120] <... futex resumed>) = 0 [pid 5119] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5115] <... mmap resumed>) = 0x7ff67807c000 [pid 5124] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5123] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5122] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5121] <... mmap resumed>) = 0x20000000 [pid 5120] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5115] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5124] <... open resumed>) = 4 [pid 5122] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5121] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5120] <... futex resumed>) = 0 [pid 5115] <... mprotect resumed>) = 0 [pid 5124] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5122] ftruncate(4, 33587199 [pid 5121] <... futex resumed>) = 1 [pid 5120] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5119] <... futex resumed>) = 0 [pid 5115] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5124] <... futex resumed>) = 1 [pid 5123] <... futex resumed>) = 0 [pid 5122] <... ftruncate resumed>) = 0 [pid 5121] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5119] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5124] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5123] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5122] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5121] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5119] <... futex resumed>) = 0 [pid 5115] <... clone resumed>, parent_tid=[5126], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5126 [pid 5124] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5123] <... futex resumed>) = 0 [pid 5122] <... futex resumed>) = 1 [pid 5121] ftruncate(4, 33587199 [pid 5120] <... futex resumed>) = 0 [pid 5119] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5115] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5124] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5123] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5122] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5121] <... ftruncate resumed>) = 0 [pid 5120] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5115] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5126 attached [pid 5124] <... open resumed>) = 5 [pid 5122] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5121] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5120] <... futex resumed>) = 0 [pid 5115] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5126] set_robust_list(0x7ff67809c9e0, 24 [pid 5124] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5122] open("./bus", O_RDONLY [pid 5121] <... futex resumed>) = 1 [pid 5120] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5119] <... futex resumed>) = 0 [pid 5126] <... set_robust_list resumed>) = 0 [pid 5124] <... futex resumed>) = 1 [pid 5123] <... futex resumed>) = 0 [pid 5122] <... open resumed>) = 6 [pid 5124] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5123] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5122] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5124] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5123] <... futex resumed>) = 0 [pid 5122] <... futex resumed>) = 1 [pid 5120] <... futex resumed>) = 0 [pid 5124] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5123] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5122] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5120] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5124] <... mmap resumed>) = 0x20000000 [pid 5122] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5120] <... futex resumed>) = 0 [pid 5124] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5122] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5120] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5124] <... futex resumed>) = 1 [pid 5123] <... futex resumed>) = 0 [pid 5122] <... open resumed>) = 7 [pid 5124] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5123] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5122] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5124] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5123] <... futex resumed>) = 0 [pid 5122] <... futex resumed>) = 1 [pid 5120] <... futex resumed>) = 0 [pid 5124] ftruncate(4, 33587199 [pid 5123] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5122] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5120] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5124] <... ftruncate resumed>) = 0 [pid 5122] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5120] <... futex resumed>) = 0 [pid 5124] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5122] dup(7 [pid 5120] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5124] <... futex resumed>) = 1 [pid 5123] <... futex resumed>) = 0 [pid 5122] <... dup resumed>) = 8 [pid 5124] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5123] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5122] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5124] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5123] <... futex resumed>) = 0 [pid 5122] <... futex resumed>) = 1 [pid 5120] <... futex resumed>) = 0 [pid 5124] open("./bus", O_RDONLY [pid 5123] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5122] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5120] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5124] <... open resumed>) = 6 [pid 5122] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5120] <... futex resumed>) = 0 [pid 5126] sync( [pid 5124] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5122] memfd_create("syzkaller", 0 [pid 5121] open("./bus", O_RDONLY [pid 5120] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5119] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5126] <... sync resumed>) = 0 [pid 5124] <... futex resumed>) = 1 [pid 5123] <... futex resumed>) = 0 [pid 5122] <... memfd_create resumed>) = 9 [pid 5121] <... open resumed>) = 6 [pid 5119] <... futex resumed>) = 0 [pid 5126] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5124] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5123] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5122] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5121] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5119] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5126] <... futex resumed>) = 1 [pid 5124] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 74.485958][ T27] audit: type=1804 audit(1686284879.327:80): pid=5122 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor481" name="/root/syzkaller.lVUVkM/6/bus/bus" dev="loop0" ino=7 res=1 errno=0 [pid 5123] <... futex resumed>) = 0 [pid 5122] <... mmap resumed>) = 0x7ff677e9d000 [pid 5121] <... futex resumed>) = 0 [pid 5119] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5115] <... futex resumed>) = 0 [pid 5126] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5124] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5123] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5121] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5119] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5118] <... write resumed>) = 2097152 [pid 5124] <... open resumed>) = 7 [pid 5121] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5119] <... futex resumed>) = 0 [pid 5118] munmap(0x7ff677e9d000, 2097152 [pid 5124] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5121] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5119] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5124] <... futex resumed>) = 1 [pid 5123] <... futex resumed>) = 0 [pid 5121] <... open resumed>) = 7 [pid 5118] <... munmap resumed>) = 0 [pid 5124] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5123] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5121] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5118] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5124] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5123] <... futex resumed>) = 0 [pid 5121] <... futex resumed>) = 1 [pid 5119] <... futex resumed>) = 0 [pid 5124] dup(7 [pid 5123] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5121] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5119] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5118] <... openat resumed>) = 10 [pid 5124] <... dup resumed>) = 8 [pid 5121] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5119] <... futex resumed>) = 0 [pid 5124] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5121] dup(7 [pid 5119] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5118] ioctl(10, LOOP_SET_FD, 9 [pid 5124] <... futex resumed>) = 1 [pid 5123] <... futex resumed>) = 0 [pid 5121] <... dup resumed>) = 8 [pid 5118] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5124] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5123] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5121] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5118] ioctl(10, LOOP_CLR_FD [pid 5124] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5123] <... futex resumed>) = 0 [pid 5121] <... futex resumed>) = 1 [pid 5119] <... futex resumed>) = 0 [pid 5118] <... ioctl resumed>) = 0 [pid 5124] memfd_create("syzkaller", 0 [pid 5123] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5121] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5119] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5124] <... memfd_create resumed>) = 9 [pid 5121] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5119] <... futex resumed>) = 0 [pid 5124] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff677e9d000 [pid 5121] memfd_create("syzkaller", 0 [pid 5119] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5121] <... memfd_create resumed>) = 9 [pid 5118] ioctl(10, LOOP_SET_FD, 9 [pid 5121] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5118] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5121] <... mmap resumed>) = 0x7ff677e9d000 [pid 5118] close(10) = 0 [pid 5118] close(9 [pid 5122] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [ 74.612094][ T27] audit: type=1804 audit(1686284879.327:81): pid=5122 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor481" name="/root/syzkaller.lVUVkM/6/bus/bus" dev="loop0" ino=7 res=1 errno=0 [pid 5118] <... close resumed>) = 0 [pid 5124] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5118] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5117] <... futex resumed>) = 0 [pid 5118] <... futex resumed>) = 1 [pid 5118] sendfile(8, 6, NULL, 281474978811908 [pid 5117] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5117] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5122] <... write resumed>) = 2097152 [pid 5122] munmap(0x7ff677e9d000, 2097152 [pid 5121] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5122] <... munmap resumed>) = 0 [pid 5117] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5117] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5122] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5117] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5122] <... openat resumed>) = 10 [pid 5117] <... mmap resumed>) = 0x7ff67807c000 [pid 5122] ioctl(10, LOOP_SET_FD, 9 [pid 5117] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5122] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5122] ioctl(10, LOOP_CLR_FD [pid 5117] <... mprotect resumed>) = 0 [pid 5122] <... ioctl resumed>) = 0 [pid 5117] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5124] <... write resumed>) = 2097152 [pid 5117] <... clone resumed>, parent_tid=[5127], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5127 [pid 5117] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5122] ioctl(10, LOOP_SET_FD, 9 [pid 5117] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5127 attached [pid 5122] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5117] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5127] set_robust_list(0x7ff67809c9e0, 24 [pid 5122] close(10 [pid 5127] <... set_robust_list resumed>) = 0 [pid 5122] <... close resumed>) = 0 [pid 5127] sync( [ 74.734241][ T27] audit: type=1804 audit(1686284879.327:82): pid=5124 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor481" name="/root/syzkaller.hTAWL1/6/bus/bus" dev="loop4" ino=7 res=1 errno=0 [pid 5122] close(9) = 0 [pid 5124] munmap(0x7ff677e9d000, 2097152 [pid 5127] <... sync resumed>) = 0 [pid 5117] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5127] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5121] <... write resumed>) = 2097152 [pid 5127] <... futex resumed>) = 0 [pid 5124] <... munmap resumed>) = 0 [pid 5121] munmap(0x7ff677e9d000, 2097152 [pid 5127] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5124] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5122] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5124] <... openat resumed>) = 10 [pid 5122] <... futex resumed>) = 1 [pid 5121] <... munmap resumed>) = 0 [pid 5120] <... futex resumed>) = 0 [pid 5124] ioctl(10, LOOP_SET_FD, 9 [pid 5122] sendfile(8, 6, NULL, 281474978811908 [pid 5120] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5124] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5120] <... futex resumed>) = 0 [pid 5124] ioctl(10, LOOP_CLR_FD [pid 5120] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5124] <... ioctl resumed>) = 0 [pid 5124] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5124] close(10 [pid 5121] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5124] <... close resumed>) = 0 [pid 5121] <... openat resumed>) = 10 [pid 5124] close(9 [pid 5121] ioctl(10, LOOP_SET_FD, 9 [pid 5124] <... close resumed>) = 0 [pid 5124] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5123] <... futex resumed>) = 0 [pid 5123] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5124] <... futex resumed>) = 1 [pid 5123] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5124] sendfile(8, 6, NULL, 281474978811908 [pid 5120] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5120] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5121] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5120] <... futex resumed>) = 0 [pid 5121] ioctl(10, LOOP_CLR_FD [pid 5120] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5121] <... ioctl resumed>) = 0 [pid 5120] <... mmap resumed>) = 0x7ff67807c000 [pid 5120] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5121] ioctl(10, LOOP_SET_FD, 9 [ 74.882504][ T27] audit: type=1804 audit(1686284879.357:83): pid=5121 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor481" name="/root/syzkaller.txkbmS/6/bus/bus" dev="loop2" ino=7 res=1 errno=0 [pid 5120] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5121] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5123] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5121] close(10 [pid 5120] <... clone resumed>, parent_tid=[5128], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5128 ./strace-static-x86_64: Process 5128 attached [pid 5123] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5121] <... close resumed>) = 0 [pid 5120] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5128] set_robust_list(0x7ff67809c9e0, 24 [pid 5123] <... futex resumed>) = 0 [pid 5121] close(9 [pid 5120] <... futex resumed>) = 0 [pid 5128] <... set_robust_list resumed>) = 0 [pid 5123] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5120] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5123] <... mmap resumed>) = 0x7ff67807c000 [pid 5123] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5128] sync( [pid 5121] <... close resumed>) = 0 [pid 5123] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5128] <... sync resumed>) = 0 [pid 5123] <... clone resumed>, parent_tid=[5129], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5129 [pid 5128] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5123] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5121] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5129 attached [pid 5128] <... futex resumed>) = 1 [pid 5123] <... futex resumed>) = 0 [pid 5121] <... futex resumed>) = 1 [pid 5120] <... futex resumed>) = 0 [pid 5119] <... futex resumed>) = 0 [pid 5129] set_robust_list(0x7ff67809c9e0, 24 [pid 5128] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5123] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5121] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5119] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5129] <... set_robust_list resumed>) = 0 [pid 5121] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5119] <... futex resumed>) = 0 [pid 5129] sync( [pid 5121] sendfile(8, 6, NULL, 281474978811908 [pid 5119] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5129] <... sync resumed>) = 0 [pid 5129] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5123] <... futex resumed>) = 0 [pid 5129] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5119] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5119] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5119] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff67807c000 [pid 5119] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5119] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5130], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5130 ./strace-static-x86_64: Process 5130 attached [pid 5119] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5130] set_robust_list(0x7ff67809c9e0, 24 [pid 5119] <... futex resumed>) = 0 [pid 5130] <... set_robust_list resumed>) = 0 [pid 5119] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5130] sync() = 0 [pid 5130] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5119] <... futex resumed>) = 0 [pid 5130] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5113] exit_group(0 [pid 5125] <... futex resumed>) = ? [pid 5113] <... exit_group resumed>) = ? [pid 5125] +++ exited with 0 +++ [pid 5114] <... sendfile resumed>) = ? [pid 5114] +++ exited with 0 +++ [pid 5113] +++ exited with 0 +++ [pid 4994] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5113, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=37 /* 0.37 s */} --- [pid 4994] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4994] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] getdents64(3, 0x555556742620 /* 4 entries */, 32768) = 104 [pid 4994] umount2("./6/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5115] exit_group(0 [pid 5126] <... futex resumed>) = ? [pid 5116] <... sendfile resumed>) = ? [pid 5115] <... exit_group resumed>) = ? [pid 5126] +++ exited with 0 +++ [pid 5116] +++ exited with 0 +++ [pid 5115] +++ exited with 0 +++ [pid 4996] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5115, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=36 /* 0.36 s */} --- [pid 4996] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4996] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] getdents64(3, 0x555556742620 /* 4 entries */, 32768) = 104 [pid 4996] umount2("./6/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5117] exit_group(0 [pid 5127] <... futex resumed>) = ? [pid 5117] <... exit_group resumed>) = ? [pid 5127] +++ exited with 0 +++ [pid 5118] <... sendfile resumed>) = ? [pid 5118] +++ exited with 0 +++ [pid 5117] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5117, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=48 /* 0.48 s */} --- [pid 4998] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4998] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x555556742620 /* 4 entries */, 32768) = 104 [pid 4998] umount2("./6/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5123] exit_group(0 [pid 5129] <... futex resumed>) = ? [pid 5123] <... exit_group resumed>) = ? [pid 5129] +++ exited with 0 +++ [pid 5124] <... sendfile resumed>) = ? [pid 5124] +++ exited with 0 +++ [pid 5123] +++ exited with 0 +++ [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5123, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=41 /* 0.41 s */} --- [pid 4997] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5120] exit_group(0 [pid 5128] <... futex resumed>) = ? [pid 5120] <... exit_group resumed>) = ? [pid 4997] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5128] +++ exited with 0 +++ [pid 5122] <... sendfile resumed>) = ? [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4997] fstat(3, [pid 5122] +++ exited with 0 +++ [pid 5120] +++ exited with 0 +++ [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(3, 0x555556742620 /* 4 entries */, 32768) = 104 [pid 4993] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5120, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=34 /* 0.34 s */} --- [pid 4997] umount2("./6/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4993] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4993] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4993] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4993] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4993] getdents64(3, 0x555556742620 /* 4 entries */, 32768) = 104 [pid 4993] umount2("./6/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5119] exit_group(0 [pid 5130] <... futex resumed>) = ? [pid 5119] <... exit_group resumed>) = ? [pid 5130] +++ exited with 0 +++ [pid 5121] <... sendfile resumed>) = ? [pid 5121] +++ exited with 0 +++ [pid 5119] +++ exited with 0 +++ [pid 4995] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5119, si_uid=0, si_status=0, si_utime=11 /* 0.11 s */, si_stime=42 /* 0.42 s */} --- [pid 4995] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4995] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4995] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] getdents64(3, 0x555556742620 /* 4 entries */, 32768) = 104 [pid 4995] umount2("./6/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4993] <... umount2 resumed>) = 0 [pid 4997] <... umount2 resumed>) = 0 [pid 4993] umount2("./6/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4993] lstat("./6/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4993] umount2("./6/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4993] openat(AT_FDCWD, "./6/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4993] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4993] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4993] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4993] close(4) = 0 [pid 4993] rmdir("./6/bus") = 0 [pid 4993] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4993] lstat("./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4993] unlink("./6/binderfs") = 0 [pid 4993] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4993] close(3) = 0 [pid 4993] rmdir("./6" [pid 4997] umount2("./6/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4993] <... rmdir resumed>) = 0 [pid 4993] mkdir("./7", 0777 [pid 4997] lstat("./6/bus", [pid 4993] <... mkdir resumed>) = 0 [pid 4993] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 4997] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4993] <... openat resumed>) = 3 [pid 4993] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4993] close(3) = 0 [pid 4997] umount2("./6/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./6/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4997] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4997] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4997] close(4) = 0 [pid 4997] rmdir("./6/bus") = 0 [pid 4997] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./6/binderfs", [pid 4993] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4997] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] unlink("./6/binderfs") = 0 [pid 4997] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4997] close(3) = 0 [pid 4993] <... clone resumed>, child_tidptr=0x5555567415d0) = 5131 [pid 4997] rmdir("./6") = 0 [pid 4997] mkdir("./7", 0777) = 0 [pid 4997] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 4997] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4997] close(3) = 0 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5131 attached [pid 5131] set_robust_list(0x5555567415e0, 24) = 0 [pid 5131] chdir("./7") = 0 [pid 5131] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5131] setpgid(0, 0 [pid 4997] <... clone resumed>, child_tidptr=0x5555567415d0) = 5132 [pid 5131] <... setpgid resumed>) = 0 [pid 5131] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5131] write(3, "1000", 4 [pid 4995] <... umount2 resumed>) = 0 [pid 5131] <... write resumed>) = 4 [pid 5131] close(3) = 0 [pid 5131] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4995] umount2("./6/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5132 attached [pid 4995] lstat("./6/bus", [pid 5132] set_robust_list(0x5555567415e0, 24) = 0 [pid 4995] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5132] chdir("./7" [pid 4995] umount2("./6/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5132] <... chdir resumed>) = 0 [pid 4995] openat(AT_FDCWD, "./6/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5132] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5131] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] <... openat resumed>) = 4 [pid 5131] <... futex resumed>) = 0 [pid 5132] <... prctl resumed>) = 0 [pid 5131] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4995] fstat(4, [pid 5132] setpgid(0, 0 [pid 5131] <... mmap resumed>) = 0x7ff68769d000 [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5132] <... setpgid resumed>) = 0 [pid 5131] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE [pid 4995] getdents64(4, [pid 4994] <... umount2 resumed>) = 0 [pid 5132] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5131] <... mprotect resumed>) = 0 [pid 4995] <... getdents64 resumed>0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4995] getdents64(4, [pid 5132] <... openat resumed>) = 3 [pid 5131] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4995] <... getdents64 resumed>0x55555674a660 /* 0 entries */, 32768) = 0 [pid 5132] write(3, "1000", 4 [pid 4995] close(4 [pid 5132] <... write resumed>) = 4 [pid 5132] close(3 [pid 4995] <... close resumed>) = 0 [pid 5132] <... close resumed>) = 0 [pid 5131] <... clone resumed>, parent_tid=[5133], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5133 [pid 4995] rmdir("./6/bus" [pid 5132] symlink("/dev/binderfs", "./binderfs" [pid 5131] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4995] <... rmdir resumed>) = 0 [pid 5131] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4995] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5132] <... symlink resumed>) = 0 [pid 4995] lstat("./6/binderfs", [pid 5132] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 ./strace-static-x86_64: Process 5133 attached [pid 5132] <... futex resumed>) = 0 [pid 4995] unlink("./6/binderfs" [pid 5133] set_robust_list(0x7ff6876bd9e0, 24 [pid 5132] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5133] <... set_robust_list resumed>) = 0 [pid 4995] <... unlink resumed>) = 0 [pid 5133] memfd_create("syzkaller", 0 [pid 5132] <... mmap resumed>) = 0x7ff68769d000 [pid 4995] getdents64(3, [pid 5133] <... memfd_create resumed>) = 3 [pid 5132] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE [pid 4995] <... getdents64 resumed>0x555556742620 /* 0 entries */, 32768) = 0 [pid 5133] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5132] <... mprotect resumed>) = 0 [pid 4995] close(3 [pid 4994] umount2("./6/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5133] <... mmap resumed>) = 0x7ff67f29d000 [pid 5132] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4995] <... close resumed>) = 0 [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5134 attached [pid 4996] <... umount2 resumed>) = 0 [pid 4995] rmdir("./6" [pid 5134] set_robust_list(0x7ff6876bd9e0, 24 [pid 5132] <... clone resumed>, parent_tid=[5134], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5134 [pid 4996] umount2("./6/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] lstat("./6/bus", [pid 5132] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5134] <... set_robust_list resumed>) = 0 [pid 4995] <... rmdir resumed>) = 0 [pid 4994] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5134] memfd_create("syzkaller", 0 [pid 5132] <... futex resumed>) = 0 [pid 4996] lstat("./6/bus", [pid 4995] mkdir("./7", 0777 [pid 5134] <... memfd_create resumed>) = 3 [pid 5132] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4994] umount2("./6/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5134] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4996] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] <... mkdir resumed>) = 0 [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5134] <... mmap resumed>) = 0x7ff67f29d000 [pid 4996] umount2("./6/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4994] openat(AT_FDCWD, "./6/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] <... openat resumed>) = 3 [pid 4994] <... openat resumed>) = 4 [pid 4996] openat(AT_FDCWD, "./6/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4995] ioctl(3, LOOP_CLR_FD [pid 4994] fstat(4, [pid 4996] <... openat resumed>) = 4 [pid 4995] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] fstat(4, [pid 4995] close(3 [pid 4994] getdents64(4, [pid 4996] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] <... close resumed>) = 0 [pid 4994] <... getdents64 resumed>0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4994] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4994] close(4) = 0 [pid 4994] rmdir("./6/bus") = 0 [pid 4994] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] lstat("./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4994] unlink("./6/binderfs" [pid 4996] getdents64(4, [pid 4995] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4994] <... unlink resumed>) = 0 [pid 4996] <... getdents64 resumed>0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4994] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4996] getdents64(4, [pid 4994] close(3 [pid 4996] <... getdents64 resumed>0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4995] <... clone resumed>, child_tidptr=0x5555567415d0) = 5135 [pid 4994] <... close resumed>) = 0 [pid 4996] close(4 [pid 4994] rmdir("./6" [pid 4996] <... close resumed>) = 0 [pid 4994] <... rmdir resumed>) = 0 [pid 4996] rmdir("./6/bus" [pid 4994] mkdir("./7", 0777 [pid 4996] <... rmdir resumed>) = 0 [pid 4994] <... mkdir resumed>) = 0 [pid 4994] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4994] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4996] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] close(3 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] <... close resumed>) = 0 [pid 4996] lstat("./6/binderfs", [pid 4994] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4996] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 ./strace-static-x86_64: Process 5135 attached [pid 4996] unlink("./6/binderfs" [pid 4994] <... clone resumed>, child_tidptr=0x5555567415d0) = 5136 [pid 4996] <... unlink resumed>) = 0 [pid 5135] set_robust_list(0x5555567415e0, 24 [pid 4996] getdents64(3, [pid 5135] <... set_robust_list resumed>) = 0 [pid 4996] <... getdents64 resumed>0x555556742620 /* 0 entries */, 32768) = 0 [pid 5135] chdir("./7" [pid 4996] close(3 [pid 5135] <... chdir resumed>) = 0 [pid 5135] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4996] <... close resumed>) = 0 ./strace-static-x86_64: Process 5136 attached [pid 5135] <... prctl resumed>) = 0 [pid 4996] rmdir("./6" [pid 5136] set_robust_list(0x5555567415e0, 24) = 0 [pid 5135] setpgid(0, 0 [pid 4996] <... rmdir resumed>) = 0 [pid 5136] chdir("./7" [pid 5135] <... setpgid resumed>) = 0 [pid 4996] mkdir("./7", 0777 [pid 5136] <... chdir resumed>) = 0 [pid 5136] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5135] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4996] <... mkdir resumed>) = 0 [pid 5136] setpgid(0, 0 [pid 5135] <... openat resumed>) = 3 [pid 4996] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5136] <... setpgid resumed>) = 0 [pid 5135] write(3, "1000", 4 [pid 4996] <... openat resumed>) = 3 [pid 5136] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5135] <... write resumed>) = 4 [pid 4996] ioctl(3, LOOP_CLR_FD [pid 5136] <... openat resumed>) = 3 [pid 5135] close(3 [pid 4996] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5136] write(3, "1000", 4 [pid 5135] <... close resumed>) = 0 [pid 4996] close(3 [pid 5136] <... write resumed>) = 4 [pid 5135] symlink("/dev/binderfs", "./binderfs" [pid 4996] <... close resumed>) = 0 [pid 5136] close(3 [pid 5135] <... symlink resumed>) = 0 [pid 4996] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5136] <... close resumed>) = 0 [pid 5135] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5136] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5135] <... futex resumed>) = 0 [pid 5136] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5135] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4996] <... clone resumed>, child_tidptr=0x5555567415d0) = 5137 [pid 5136] <... futex resumed>) = 0 [pid 5136] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5135] <... mmap resumed>) = 0x7ff68769d000 ./strace-static-x86_64: Process 5137 attached [pid 5136] <... mmap resumed>) = 0x7ff68769d000 [pid 5135] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE [pid 5137] set_robust_list(0x5555567415e0, 24 [pid 5136] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE [pid 5135] <... mprotect resumed>) = 0 [pid 5137] <... set_robust_list resumed>) = 0 [pid 5136] <... mprotect resumed>) = 0 [pid 5135] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5137] chdir("./7" [pid 5136] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5137] <... chdir resumed>) = 0 [pid 5135] <... clone resumed>, parent_tid=[5138], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5138 [pid 5137] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5136] <... clone resumed>, parent_tid=[5139], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5139 [pid 5135] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5136] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5136] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5139 attached [pid 5139] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5137] <... prctl resumed>) = 0 [pid 5135] <... futex resumed>) = 0 [pid 5139] memfd_create("syzkaller", 0 [pid 5137] setpgid(0, 0 [pid 5135] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5139] <... memfd_create resumed>) = 3 [pid 5137] <... setpgid resumed>) = 0 ./strace-static-x86_64: Process 5138 attached [pid 5139] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5137] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5139] <... mmap resumed>) = 0x7ff67f29d000 [pid 5138] set_robust_list(0x7ff6876bd9e0, 24 [pid 5137] <... openat resumed>) = 3 [pid 5138] <... set_robust_list resumed>) = 0 [pid 5137] write(3, "1000", 4 [pid 5138] memfd_create("syzkaller", 0 [pid 5137] <... write resumed>) = 4 [pid 5138] <... memfd_create resumed>) = 3 [pid 5137] close(3 [pid 5138] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5137] <... close resumed>) = 0 [pid 5138] <... mmap resumed>) = 0x7ff67f29d000 [pid 5137] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5137] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5137] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5137] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5137] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5140], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5140 [pid 5137] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5137] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5140 attached [pid 5140] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5140] memfd_create("syzkaller", 0) = 3 [pid 5140] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 4998] <... umount2 resumed>) = 0 [pid 4998] umount2("./6/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./6/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./6/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./6/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./6/bus") = 0 [pid 4998] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./6/binderfs") = 0 [pid 4998] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./6") = 0 [pid 4998] mkdir("./7", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5134] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567415d0) = 5141 ./strace-static-x86_64: Process 5141 attached [pid 5141] set_robust_list(0x5555567415e0, 24) = 0 [pid 5141] chdir("./7") = 0 [pid 5141] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5141] setpgid(0, 0) = 0 [pid 5141] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5141] write(3, "1000", 4) = 4 [pid 5141] close(3) = 0 [pid 5141] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5141] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5141] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5141] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5141] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5142], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5142 [pid 5141] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5141] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5142 attached [pid 5142] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5142] memfd_create("syzkaller", 0) = 3 [pid 5142] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 5133] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5139] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5138] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5140] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [ 76.514597][ T2550] cfg80211: failed to load regulatory.db [pid 5142] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5134] <... write resumed>) = 16777216 [pid 5134] munmap(0x7ff67f29d000, 16777216) = 0 [pid 5134] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5134] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5134] close(3) = 0 [pid 5134] mkdir("./bus", 0777) = 0 [pid 5134] mount("/dev/loop4", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "") = 0 [pid 5134] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5134] chdir("./bus") = 0 [pid 5134] ioctl(4, LOOP_CLR_FD) = 0 [pid 5134] close(4) = 0 [pid 5134] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5132] <... futex resumed>) = 0 [pid 5134] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5132] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5134] <... open resumed>) = 4 [pid 5132] <... futex resumed>) = 0 [pid 5134] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5132] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5134] <... futex resumed>) = 0 [pid 5132] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5134] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5132] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5134] <... open resumed>) = 5 [pid 5132] <... futex resumed>) = 0 [pid 5134] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5132] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5134] <... futex resumed>) = 0 [pid 5132] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5134] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [ 76.636155][ T5134] loop4: detected capacity change from 0 to 32768 [pid 5132] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5134] <... mmap resumed>) = 0x20000000 [pid 5132] <... futex resumed>) = 0 [pid 5134] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5132] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5134] <... futex resumed>) = 0 [pid 5132] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5134] ftruncate(4, 33587199 [pid 5132] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5134] <... ftruncate resumed>) = 0 [pid 5132] <... futex resumed>) = 0 [pid 5134] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5132] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5134] <... futex resumed>) = 0 [pid 5132] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5134] open("./bus", O_RDONLY [pid 5132] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5134] <... open resumed>) = 6 [pid 5132] <... futex resumed>) = 0 [pid 5134] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5132] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5134] <... futex resumed>) = 0 [pid 5132] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5134] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5132] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5134] <... open resumed>) = 7 [pid 5132] <... futex resumed>) = 0 [pid 5134] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5132] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5134] <... futex resumed>) = 0 [pid 5132] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5134] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5133] <... write resumed>) = 16777216 [pid 5132] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5134] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5132] <... futex resumed>) = 0 [pid 5134] dup(7 [pid 5132] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5134] <... dup resumed>) = 8 [pid 5134] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5132] <... futex resumed>) = 0 [pid 5134] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5132] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5134] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5132] <... futex resumed>) = 0 [pid 5134] memfd_create("syzkaller", 0 [pid 5132] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5134] <... memfd_create resumed>) = 9 [pid 5134] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff677e9d000 [pid 5133] munmap(0x7ff67f29d000, 16777216) = 0 [pid 5133] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5134] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5133] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5133] close(3) = 0 [pid 5133] mkdir("./bus", 0777) = 0 [pid 5133] mount("/dev/loop0", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "") = 0 [pid 5133] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5133] chdir("./bus") = 0 [pid 5133] ioctl(4, LOOP_CLR_FD) = 0 [ 76.788861][ T5133] loop0: detected capacity change from 0 to 32768 [pid 5133] close(4) = 0 [pid 5133] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5138] <... write resumed>) = 16777216 [pid 5134] <... write resumed>) = 2097152 [pid 5133] <... futex resumed>) = 1 [pid 5131] <... futex resumed>) = 0 [pid 5133] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5131] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5133] <... futex resumed>) = 0 [pid 5133] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5131] <... futex resumed>) = 1 [pid 5133] <... open resumed>) = 4 [pid 5133] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5133] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5131] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5138] munmap(0x7ff67f29d000, 16777216 [pid 5131] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5131] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5133] <... futex resumed>) = 0 [pid 5131] <... futex resumed>) = 1 [pid 5133] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 5131] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5133] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5133] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5131] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5131] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5133] <... futex resumed>) = 0 [pid 5131] <... futex resumed>) = 1 [pid 5133] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5131] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5133] <... mmap resumed>) = 0x20000000 [pid 5133] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5131] <... futex resumed>) = 0 [pid 5133] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5131] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5133] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5131] <... futex resumed>) = 0 [pid 5133] ftruncate(4, 33587199) = 0 [pid 5131] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5133] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5131] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5133] <... futex resumed>) = 0 [pid 5131] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5133] open("./bus", O_RDONLY [pid 5131] <... futex resumed>) = 0 [pid 5133] <... open resumed>) = 6 [pid 5131] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5133] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5131] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5133] <... futex resumed>) = 0 [pid 5131] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5133] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5131] <... futex resumed>) = 0 [pid 5133] <... open resumed>) = 7 [pid 5131] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5133] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5131] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5133] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5131] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5133] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5131] <... futex resumed>) = 0 [pid 5133] dup(7 [pid 5131] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5133] <... dup resumed>) = 8 [pid 5133] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5131] <... futex resumed>) = 0 [pid 5133] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5131] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5133] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5133] memfd_create("syzkaller", 0 [pid 5131] <... futex resumed>) = 0 [pid 5133] <... memfd_create resumed>) = 9 [pid 5131] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5133] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5134] munmap(0x7ff677e9d000, 2097152 [pid 5133] <... mmap resumed>) = 0x7ff677e9d000 [pid 5134] <... munmap resumed>) = 0 [pid 5134] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 10 [pid 5134] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5134] ioctl(10, LOOP_CLR_FD) = 0 [pid 5134] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5134] close(10 [pid 5140] <... write resumed>) = 16777216 [pid 5139] <... write resumed>) = 16777216 [pid 5138] <... munmap resumed>) = 0 [pid 5134] <... close resumed>) = 0 [pid 5134] close(9 [pid 5140] munmap(0x7ff67f29d000, 16777216 [pid 5139] munmap(0x7ff67f29d000, 16777216 [pid 5138] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5134] <... close resumed>) = 0 [pid 5140] <... munmap resumed>) = 0 [pid 5138] <... openat resumed>) = 4 [pid 5134] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5138] ioctl(4, LOOP_SET_FD, 3 [pid 5132] <... futex resumed>) = 0 [pid 5132] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5132] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5134] <... futex resumed>) = 1 [pid 5134] sendfile(8, 6, NULL, 281474978811908 [pid 5138] <... ioctl resumed>) = 0 [pid 5139] <... munmap resumed>) = 0 [pid 5138] close(3 [pid 5140] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5138] <... close resumed>) = 0 [pid 5138] mkdir("./bus", 0777 [pid 5140] <... openat resumed>) = 4 [pid 5140] ioctl(4, LOOP_SET_FD, 3 [pid 5138] <... mkdir resumed>) = 0 [pid 5138] mount("/dev/loop2", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5139] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5140] <... ioctl resumed>) = 0 [pid 5139] <... openat resumed>) = 4 [pid 5139] ioctl(4, LOOP_SET_FD, 3 [pid 5140] close(3 [pid 5133] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5140] <... close resumed>) = 0 [pid 5140] mkdir("./bus", 0777 [pid 5138] <... mount resumed>) = 0 [pid 5138] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5140] <... mkdir resumed>) = 0 [pid 5138] <... openat resumed>) = 3 [pid 5132] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5132] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5142] <... write resumed>) = 16777216 [pid 5140] mount("/dev/loop3", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5139] <... ioctl resumed>) = 0 [pid 5138] chdir("./bus" [pid 5132] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5132] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5142] munmap(0x7ff67f29d000, 16777216 [pid 5140] <... mount resumed>) = 0 [pid 5139] close(3 [pid 5138] <... chdir resumed>) = 0 [pid 5133] <... write resumed>) = 2097152 [pid 5132] <... mmap resumed>) = 0x7ff67807c000 [pid 5142] <... munmap resumed>) = 0 [pid 5140] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5139] <... close resumed>) = 0 [pid 5138] ioctl(4, LOOP_CLR_FD [pid 5133] munmap(0x7ff677e9d000, 2097152 [ 76.964970][ T5138] loop2: detected capacity change from 0 to 32768 [ 76.984329][ T5140] loop3: detected capacity change from 0 to 32768 [ 76.997009][ T5139] loop1: detected capacity change from 0 to 32768 [pid 5132] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5140] <... openat resumed>) = 3 [pid 5139] mkdir("./bus", 0777 [pid 5138] <... ioctl resumed>) = 0 [pid 5133] <... munmap resumed>) = 0 [pid 5132] <... mprotect resumed>) = 0 [pid 5142] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5140] chdir("./bus" [pid 5139] <... mkdir resumed>) = 0 [pid 5138] close(4 [pid 5132] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5142] <... openat resumed>) = 4 [pid 5140] <... chdir resumed>) = 0 [pid 5139] mount("/dev/loop1", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5138] <... close resumed>) = 0 [pid 5133] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5142] ioctl(4, LOOP_SET_FD, 3 [pid 5138] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5133] <... openat resumed>) = 10 [pid 5140] ioctl(4, LOOP_CLR_FD [pid 5139] <... mount resumed>) = 0 [pid 5138] <... futex resumed>) = 1 [pid 5135] <... futex resumed>) = 0 [pid 5133] ioctl(10, LOOP_SET_FD, 9 [pid 5140] <... ioctl resumed>) = 0 [pid 5139] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5138] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5135] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5133] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5132] <... clone resumed>, parent_tid=[5143], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5143 [pid 5140] close(4 [pid 5139] <... openat resumed>) = 3 [pid 5138] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5135] <... futex resumed>) = 0 [pid 5133] ioctl(10, LOOP_CLR_FD [pid 5132] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5140] <... close resumed>) = 0 [pid 5139] chdir("./bus" [pid 5138] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5135] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5133] <... ioctl resumed>) = 0 [pid 5140] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5139] <... chdir resumed>) = 0 [pid 5138] <... open resumed>) = 4 [pid 5132] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5143 attached [pid 5140] <... futex resumed>) = 1 [pid 5139] ioctl(4, LOOP_CLR_FD [pid 5138] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5137] <... futex resumed>) = 0 [pid 5132] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5143] set_robust_list(0x7ff67809c9e0, 24 [pid 5140] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5139] <... ioctl resumed>) = 0 [pid 5138] <... futex resumed>) = 1 [pid 5137] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5135] <... futex resumed>) = 0 [pid 5133] ioctl(10, LOOP_SET_FD, 9 [pid 5143] <... set_robust_list resumed>) = 0 [pid 5140] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5139] close(4 [pid 5138] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5137] <... futex resumed>) = 0 [pid 5135] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5133] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5143] sync( [pid 5142] <... ioctl resumed>) = 0 [pid 5140] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5139] <... close resumed>) = 0 [pid 5138] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5137] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5135] <... futex resumed>) = 0 [pid 5133] close(10 [pid 5142] close(3 [pid 5140] <... open resumed>) = 4 [pid 5139] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5138] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5135] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5133] <... close resumed>) = 0 [pid 5142] <... close resumed>) = 0 [pid 5140] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5139] <... futex resumed>) = 1 [pid 5138] <... open resumed>) = 5 [pid 5136] <... futex resumed>) = 0 [pid 5133] close(9 [pid 5143] <... sync resumed>) = 0 [pid 5142] mkdir("./bus", 0777 [pid 5140] <... futex resumed>) = 1 [pid 5139] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5138] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5137] <... futex resumed>) = 0 [pid 5136] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5143] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5142] <... mkdir resumed>) = 0 [pid 5140] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5139] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5138] <... futex resumed>) = 1 [pid 5137] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5136] <... futex resumed>) = 0 [pid 5135] <... futex resumed>) = 0 [pid 5143] <... futex resumed>) = 1 [pid 5142] mount("/dev/loop5", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5140] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5139] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5138] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5137] <... futex resumed>) = 0 [pid 5136] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5135] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5133] <... close resumed>) = 0 [pid 5132] <... futex resumed>) = 0 [pid 5143] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5140] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5139] <... open resumed>) = 4 [pid 5138] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5137] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5135] <... futex resumed>) = 0 [pid 5133] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5140] <... open resumed>) = 5 [pid 5139] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5138] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5135] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5133] <... futex resumed>) = 1 [pid 5131] <... futex resumed>) = 0 [ 77.060912][ T5142] loop5: detected capacity change from 0 to 32768 [pid 5142] <... mount resumed>) = 0 [pid 5140] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5139] <... futex resumed>) = 1 [pid 5138] <... mmap resumed>) = 0x20000000 [pid 5136] <... futex resumed>) = 0 [pid 5133] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5131] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5142] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5140] <... futex resumed>) = 1 [pid 5139] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5138] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5137] <... futex resumed>) = 0 [pid 5136] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5133] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5131] <... futex resumed>) = 0 [pid 5142] <... openat resumed>) = 3 [pid 5140] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5139] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5138] <... futex resumed>) = 1 [pid 5137] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5136] <... futex resumed>) = 0 [pid 5135] <... futex resumed>) = 0 [pid 5133] sendfile(8, 6, NULL, 281474978811908 [pid 5131] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5142] chdir("./bus" [pid 5140] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5139] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5138] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5137] <... futex resumed>) = 0 [pid 5136] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5135] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5142] <... chdir resumed>) = 0 [pid 5140] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5139] <... open resumed>) = 5 [pid 5138] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5137] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5135] <... futex resumed>) = 0 [pid 5142] ioctl(4, LOOP_CLR_FD [pid 5140] <... mmap resumed>) = 0x20000000 [pid 5139] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5138] ftruncate(4, 33587199 [pid 5135] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5142] <... ioctl resumed>) = 0 [pid 5140] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5139] <... futex resumed>) = 1 [pid 5138] <... ftruncate resumed>) = 0 [pid 5136] <... futex resumed>) = 0 [pid 5142] close(4 [pid 5140] <... futex resumed>) = 1 [pid 5139] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5138] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5137] <... futex resumed>) = 0 [pid 5136] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5142] <... close resumed>) = 0 [pid 5140] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5139] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5138] <... futex resumed>) = 1 [pid 5137] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5136] <... futex resumed>) = 0 [pid 5135] <... futex resumed>) = 0 [pid 5142] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5140] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5139] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5138] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5137] <... futex resumed>) = 0 [pid 5136] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5135] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5142] <... futex resumed>) = 1 [pid 5141] <... futex resumed>) = 0 [pid 5140] ftruncate(4, 33587199 [pid 5139] <... mmap resumed>) = 0x20000000 [pid 5138] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5137] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5135] <... futex resumed>) = 0 [pid 5142] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5141] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5140] <... ftruncate resumed>) = 0 [pid 5139] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5138] open("./bus", O_RDONLY [pid 5135] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5142] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5141] <... futex resumed>) = 0 [pid 5140] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5139] <... futex resumed>) = 1 [pid 5138] <... open resumed>) = 6 [pid 5136] <... futex resumed>) = 0 [pid 5142] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5141] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5140] <... futex resumed>) = 1 [pid 5139] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5138] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5137] <... futex resumed>) = 0 [pid 5136] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5142] <... open resumed>) = 4 [pid 5140] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5139] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5138] <... futex resumed>) = 1 [pid 5137] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5136] <... futex resumed>) = 0 [pid 5135] <... futex resumed>) = 0 [pid 5142] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5140] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5139] ftruncate(4, 33587199 [pid 5138] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5137] <... futex resumed>) = 0 [pid 5136] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5135] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5142] <... futex resumed>) = 1 [pid 5141] <... futex resumed>) = 0 [pid 5140] open("./bus", O_RDONLY [pid 5139] <... ftruncate resumed>) = 0 [pid 5138] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5137] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5135] <... futex resumed>) = 0 [pid 5131] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5142] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5141] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5140] <... open resumed>) = 6 [pid 5139] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5138] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5135] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5131] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5142] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5141] <... futex resumed>) = 0 [pid 5140] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5139] <... futex resumed>) = 1 [pid 5138] <... open resumed>) = 7 [pid 5136] <... futex resumed>) = 0 [pid 5131] <... futex resumed>) = 0 [pid 5142] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5141] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5140] <... futex resumed>) = 1 [pid 5139] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5138] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5137] <... futex resumed>) = 0 [pid 5136] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5131] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5142] <... open resumed>) = 5 [pid 5140] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5139] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5138] <... futex resumed>) = 1 [pid 5137] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5136] <... futex resumed>) = 0 [pid 5135] <... futex resumed>) = 0 [pid 5131] <... mmap resumed>) = 0x7ff67807c000 [pid 5142] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5140] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5139] open("./bus", O_RDONLY [pid 5138] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5137] <... futex resumed>) = 0 [pid 5136] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5135] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5131] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5142] <... futex resumed>) = 1 [pid 5141] <... futex resumed>) = 0 [pid 5140] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5139] <... open resumed>) = 6 [pid 5138] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5137] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5135] <... futex resumed>) = 0 [pid 5131] <... mprotect resumed>) = 0 [pid 5142] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5141] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5140] <... open resumed>) = 7 [pid 5139] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5138] dup(7 [pid 5135] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5131] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5142] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5141] <... futex resumed>) = 0 [pid 5140] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5139] <... futex resumed>) = 1 [pid 5138] <... dup resumed>) = 8 [pid 5136] <... futex resumed>) = 0 [pid 5142] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5141] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5140] <... futex resumed>) = 1 [pid 5139] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5138] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5137] <... futex resumed>) = 0 [pid 5136] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5131] <... clone resumed>, parent_tid=[5144], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5144 [pid 5142] <... mmap resumed>) = 0x20000000 [pid 5140] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5139] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5138] <... futex resumed>) = 1 [pid 5137] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5136] <... futex resumed>) = 0 [pid 5135] <... futex resumed>) = 0 [pid 5131] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5142] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5140] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5139] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5138] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5137] <... futex resumed>) = 0 [pid 5136] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5135] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5131] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5144 attached [pid 5142] <... futex resumed>) = 1 [pid 5141] <... futex resumed>) = 0 [pid 5140] dup(7 [pid 5139] <... open resumed>) = 7 [pid 5138] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5137] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5135] <... futex resumed>) = 0 [pid 5131] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5144] set_robust_list(0x7ff67809c9e0, 24 [pid 5142] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5141] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5140] <... dup resumed>) = 8 [pid 5139] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5138] memfd_create("syzkaller", 0 [pid 5135] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5144] <... set_robust_list resumed>) = 0 [pid 5142] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5141] <... futex resumed>) = 0 [pid 5140] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5139] <... futex resumed>) = 1 [pid 5138] <... memfd_create resumed>) = 9 [pid 5136] <... futex resumed>) = 0 [pid 5144] sync( [pid 5142] ftruncate(4, 33587199 [pid 5141] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5140] <... futex resumed>) = 1 [pid 5139] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5138] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5137] <... futex resumed>) = 0 [pid 5136] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5142] <... ftruncate resumed>) = 0 [pid 5140] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5139] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5138] <... mmap resumed>) = 0x7ff677e9d000 [pid 5137] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5136] <... futex resumed>) = 0 [pid 5144] <... sync resumed>) = 0 [pid 5142] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5140] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5139] dup(7 [pid 5137] <... futex resumed>) = 0 [pid 5136] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5144] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5142] <... futex resumed>) = 1 [pid 5141] <... futex resumed>) = 0 [pid 5144] <... futex resumed>) = 1 [pid 5142] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5141] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5131] <... futex resumed>) = 0 [pid 5144] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5142] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5141] <... futex resumed>) = 0 [pid 5140] memfd_create("syzkaller", 0 [pid 5139] <... dup resumed>) = 8 [pid 5137] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5142] open("./bus", O_RDONLY [pid 5141] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5140] <... memfd_create resumed>) = 9 [pid 5139] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5142] <... open resumed>) = 6 [pid 5140] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5139] <... futex resumed>) = 1 [pid 5138] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5136] <... futex resumed>) = 0 [pid 5142] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5140] <... mmap resumed>) = 0x7ff677e9d000 [pid 5136] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5142] <... futex resumed>) = 1 [pid 5141] <... futex resumed>) = 0 [pid 5136] <... futex resumed>) = 0 [pid 5142] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5141] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5136] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5142] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5141] <... futex resumed>) = 0 [pid 5142] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5141] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5142] <... open resumed>) = 7 [pid 5142] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5141] <... futex resumed>) = 0 [pid 5139] memfd_create("syzkaller", 0 [pid 5142] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5141] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5139] <... memfd_create resumed>) = 9 [pid 5142] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5141] <... futex resumed>) = 0 [pid 5139] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5142] dup(7 [pid 5141] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5139] <... mmap resumed>) = 0x7ff677e9d000 [pid 5142] <... dup resumed>) = 8 [pid 5142] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5141] <... futex resumed>) = 0 [pid 5142] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5141] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5142] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5141] <... futex resumed>) = 0 [pid 5142] memfd_create("syzkaller", 0 [pid 5141] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5142] <... memfd_create resumed>) = 9 [pid 5142] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff677e9d000 [pid 5139] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5142] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5140] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5138] <... write resumed>) = 2097152 [pid 5138] munmap(0x7ff677e9d000, 2097152) = 0 [pid 5138] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 10 [pid 5138] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5138] ioctl(10, LOOP_CLR_FD) = 0 [pid 5138] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5138] close(10) = 0 [pid 5138] close(9 [pid 5140] <... write resumed>) = 2097152 [pid 5138] <... close resumed>) = 0 [pid 5138] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5139] <... write resumed>) = 2097152 [pid 5138] <... futex resumed>) = 1 [pid 5135] <... futex resumed>) = 0 [pid 5139] munmap(0x7ff677e9d000, 2097152 [pid 5138] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5135] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5138] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5135] <... futex resumed>) = 0 [pid 5138] sendfile(8, 6, NULL, 281474978811908 [pid 5135] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5142] <... write resumed>) = 2097152 [pid 5140] munmap(0x7ff677e9d000, 2097152 [pid 5142] munmap(0x7ff677e9d000, 2097152 [pid 5139] <... munmap resumed>) = 0 [pid 5140] <... munmap resumed>) = 0 [pid 5139] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5142] <... munmap resumed>) = 0 [pid 5139] <... openat resumed>) = 10 [pid 5140] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5142] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5140] <... openat resumed>) = 10 [pid 5139] ioctl(10, LOOP_SET_FD, 9 [pid 5142] <... openat resumed>) = 10 [pid 5140] ioctl(10, LOOP_SET_FD, 9 [pid 5139] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5142] ioctl(10, LOOP_SET_FD, 9 [pid 5140] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5139] ioctl(10, LOOP_CLR_FD [pid 5142] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5140] ioctl(10, LOOP_CLR_FD [pid 5139] <... ioctl resumed>) = 0 [pid 5142] ioctl(10, LOOP_CLR_FD [pid 5140] <... ioctl resumed>) = 0 [pid 5142] <... ioctl resumed>) = 0 [pid 5139] ioctl(10, LOOP_SET_FD, 9 [pid 5142] ioctl(10, LOOP_SET_FD, 9 [pid 5140] ioctl(10, LOOP_SET_FD, 9 [pid 5139] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5142] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5140] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5139] close(10 [pid 5142] close(10 [pid 5140] close(10 [pid 5139] <... close resumed>) = 0 [pid 5135] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5142] <... close resumed>) = 0 [pid 5142] close(9 [pid 5140] <... close resumed>) = 0 [pid 5139] close(9 [pid 5135] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5140] close(9 [pid 5135] <... futex resumed>) = 0 [pid 5135] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff67807c000 [pid 5135] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5135] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5142] <... close resumed>) = 0 [pid 5135] <... clone resumed>, parent_tid=[5145], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5145 [pid 5135] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5135] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5145 attached [pid 5142] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5140] <... close resumed>) = 0 [pid 5139] <... close resumed>) = 0 [pid 5145] set_robust_list(0x7ff67809c9e0, 24 [pid 5142] <... futex resumed>) = 1 [pid 5141] <... futex resumed>) = 0 [pid 5140] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5139] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5145] <... set_robust_list resumed>) = 0 [pid 5142] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5141] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5140] <... futex resumed>) = 1 [pid 5139] <... futex resumed>) = 1 [pid 5137] <... futex resumed>) = 0 [pid 5136] <... futex resumed>) = 0 [pid 5145] sync( [pid 5142] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5141] <... futex resumed>) = 0 [pid 5140] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5139] sendfile(8, 6, NULL, 281474978811908 [pid 5137] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5136] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5141] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5136] <... futex resumed>) = 0 [pid 5142] sendfile(8, 6, NULL, 281474978811908 [pid 5140] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5137] <... futex resumed>) = 0 [pid 5136] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5140] sendfile(8, 6, NULL, 281474978811908 [pid 5137] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5135] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5145] <... sync resumed>) = 0 [pid 5145] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5145] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5141] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5141] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5141] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff67807c000 [pid 5136] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5141] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5136] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5141] <... mprotect resumed>) = 0 [pid 5137] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5136] <... futex resumed>) = 0 [pid 5141] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5137] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5136] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5137] <... futex resumed>) = 0 [pid 5136] <... mmap resumed>) = 0x7ff67807c000 [pid 5141] <... clone resumed>, parent_tid=[5146], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5146 [pid 5137] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5136] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5141] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5137] <... mmap resumed>) = 0x7ff67807c000 [pid 5136] <... mprotect resumed>) = 0 ./strace-static-x86_64: Process 5146 attached [pid 5141] <... futex resumed>) = 0 [pid 5137] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5136] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5146] set_robust_list(0x7ff67809c9e0, 24 [pid 5141] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5137] <... mprotect resumed>) = 0 [pid 5146] <... set_robust_list resumed>) = 0 [pid 5137] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5136] <... clone resumed>, parent_tid=[5147], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5147 [pid 5146] sync( [pid 5136] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5147 attached [pid 5137] <... clone resumed>, parent_tid=[5148], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5148 [pid 5136] <... futex resumed>) = 0 [pid 5147] set_robust_list(0x7ff67809c9e0, 24 [pid 5137] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5136] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5147] <... set_robust_list resumed>) = 0 [pid 5146] <... sync resumed>) = 0 [pid 5137] <... futex resumed>) = 0 [pid 5147] sync( [pid 5146] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5137] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5148 attached [pid 5147] <... sync resumed>) = 0 [pid 5146] <... futex resumed>) = 1 [pid 5141] <... futex resumed>) = 0 [pid 5148] set_robust_list(0x7ff67809c9e0, 24 [pid 5147] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5146] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5148] <... set_robust_list resumed>) = 0 [pid 5147] <... futex resumed>) = 1 [pid 5136] <... futex resumed>) = 0 [pid 5148] sync( [pid 5147] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5148] <... sync resumed>) = 0 [pid 5148] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5137] <... futex resumed>) = 0 [pid 5148] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5132] exit_group(0 [pid 5143] <... futex resumed>) = ? [pid 5132] <... exit_group resumed>) = ? [pid 5143] +++ exited with 0 +++ [pid 5134] <... sendfile resumed>) = ? [pid 5134] +++ exited with 0 +++ [pid 5132] +++ exited with 0 +++ [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5132, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=38 /* 0.38 s */} --- [pid 4997] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4997] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(3, 0x555556742620 /* 4 entries */, 32768) = 104 [pid 4997] umount2("./7/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5131] exit_group(0 [pid 5144] <... futex resumed>) = ? [pid 5131] <... exit_group resumed>) = ? [pid 5144] +++ exited with 0 +++ [pid 5133] <... sendfile resumed>) = ? [pid 5133] +++ exited with 0 +++ [pid 5131] +++ exited with 0 +++ [pid 4993] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5131, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=31 /* 0.31 s */} --- [pid 4993] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4993] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4993] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4993] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4993] getdents64(3, 0x555556742620 /* 4 entries */, 32768) = 104 [pid 4993] umount2("./7/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5136] exit_group(0 [pid 5147] <... futex resumed>) = ? [pid 5136] <... exit_group resumed>) = ? [pid 5147] +++ exited with 0 +++ [pid 5141] exit_group(0 [pid 5139] <... sendfile resumed>) = ? [pid 5141] <... exit_group resumed>) = ? [pid 5146] <... futex resumed>) = ? [pid 5146] +++ exited with 0 +++ [pid 5135] exit_group(0 [pid 5145] <... futex resumed>) = ? [pid 5142] <... sendfile resumed>) = ? [pid 5139] +++ exited with 0 +++ [pid 5138] <... sendfile resumed>) = ? [pid 5136] +++ exited with 0 +++ [pid 5135] <... exit_group resumed>) = ? [pid 5145] +++ exited with 0 +++ [pid 5138] +++ exited with 0 +++ [pid 4994] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5136, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=47 /* 0.47 s */} --- [pid 4994] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4994] fstat(3, [pid 5135] +++ exited with 0 +++ [pid 4995] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5135, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=48 /* 0.48 s */} --- [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] restart_syscall(<... resuming interrupted clone ...> [pid 4994] getdents64(3, [pid 4995] <... restart_syscall resumed>) = 0 [pid 4994] <... getdents64 resumed>0x555556742620 /* 4 entries */, 32768) = 104 [pid 4994] umount2("./7/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4995] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5142] +++ exited with 0 +++ [pid 5141] +++ exited with 0 +++ [pid 4995] <... openat resumed>) = 3 [pid 4995] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5137] exit_group(0 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5141, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=35 /* 0.35 s */} --- [pid 5148] <... futex resumed>) = ? [pid 5137] <... exit_group resumed>) = ? [pid 4995] getdents64(3, [pid 5148] +++ exited with 0 +++ [pid 4998] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] <... getdents64 resumed>0x555556742620 /* 4 entries */, 32768) = 104 [pid 5140] <... sendfile resumed>) = ? [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4995] umount2("./7/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5140] +++ exited with 0 +++ [pid 5137] +++ exited with 0 +++ [pid 4998] <... openat resumed>) = 3 [pid 4998] fstat(3, [pid 4996] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5137, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=33 /* 0.33 s */} --- [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x555556742620 /* 4 entries */, 32768) = 104 [pid 4998] umount2("./7/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4996] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] getdents64(3, 0x555556742620 /* 4 entries */, 32768) = 104 [pid 4996] umount2("./7/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... umount2 resumed>) = 0 [pid 4998] umount2("./7/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./7/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./7/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./7/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./7/bus") = 0 [pid 4998] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./7/binderfs") = 0 [pid 4998] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./7") = 0 [pid 4998] mkdir("./8", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567415d0) = 5149 ./strace-static-x86_64: Process 5149 attached [pid 5149] set_robust_list(0x5555567415e0, 24) = 0 [pid 5149] chdir("./8") = 0 [pid 5149] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5149] setpgid(0, 0) = 0 [pid 5149] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5149] write(3, "1000", 4) = 4 [pid 5149] close(3) = 0 [pid 5149] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5149] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5149] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5149] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5149] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5150], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5150 [pid 5149] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] <... umount2 resumed>) = 0 [pid 5149] <... futex resumed>) = 0 [pid 5149] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5150 attached [pid 5150] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5150] memfd_create("syzkaller", 0) = 3 [pid 5150] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 4996] <... umount2 resumed>) = 0 [pid 4996] umount2("./7/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] lstat("./7/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] umount2("./7/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] openat(AT_FDCWD, "./7/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4996] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4996] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4996] close(4) = 0 [pid 4996] rmdir("./7/bus") = 0 [pid 4996] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] lstat("./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4996] unlink("./7/binderfs") = 0 [pid 4996] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4996] close(3) = 0 [pid 4996] rmdir("./7") = 0 [pid 4996] mkdir("./8", 0777) = 0 [pid 4996] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 4996] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4996] close(3) = 0 [pid 4996] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567415d0) = 5151 [pid 4994] umount2("./7/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] lstat("./7/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] umount2("./7/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] openat(AT_FDCWD, "./7/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4994] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] <... umount2 resumed>) = 0 [pid 4994] getdents64(4, [pid 4995] umount2("./7/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] <... getdents64 resumed>0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] getdents64(4, [pid 4995] lstat("./7/bus", [pid 4994] <... getdents64 resumed>0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4994] close(4 [pid 4995] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] <... close resumed>) = 0 [pid 4994] rmdir("./7/bus" [pid 4995] umount2("./7/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] <... rmdir resumed>) = 0 [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] openat(AT_FDCWD, "./7/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4994] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4995] <... openat resumed>) = 4 [pid 4994] lstat("./7/binderfs", [pid 4995] fstat(4, [pid 4994] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] unlink("./7/binderfs" [pid 4995] getdents64(4, [pid 4994] <... unlink resumed>) = 0 [pid 4994] getdents64(3, [pid 4995] <... getdents64 resumed>0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4995] getdents64(4, [pid 4994] <... getdents64 resumed>0x555556742620 /* 0 entries */, 32768) = 0 [pid 4995] <... getdents64 resumed>0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4995] close(4 [pid 4994] close(3 [pid 4995] <... close resumed>) = 0 [pid 4994] <... close resumed>) = 0 [pid 4995] rmdir("./7/bus" [pid 4994] rmdir("./7"./strace-static-x86_64: Process 5151 attached [pid 5151] set_robust_list(0x5555567415e0, 24 [pid 4994] <... rmdir resumed>) = 0 [pid 4995] <... rmdir resumed>) = 0 [pid 5151] <... set_robust_list resumed>) = 0 [pid 4995] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] mkdir("./8", 0777 [pid 5151] chdir("./8" [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5151] <... chdir resumed>) = 0 [pid 5151] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4995] lstat("./7/binderfs", [pid 4994] <... mkdir resumed>) = 0 [pid 5151] <... prctl resumed>) = 0 [pid 4994] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5151] setpgid(0, 0 [pid 4995] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5151] <... setpgid resumed>) = 0 [pid 4995] unlink("./7/binderfs" [pid 4994] <... openat resumed>) = 3 [pid 5151] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4995] <... unlink resumed>) = 0 [pid 4994] ioctl(3, LOOP_CLR_FD [pid 4993] <... umount2 resumed>) = 0 [pid 5151] write(3, "1000", 4 [pid 4995] getdents64(3, [pid 4994] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5151] <... write resumed>) = 4 [pid 4993] umount2("./7/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] <... getdents64 resumed>0x555556742620 /* 0 entries */, 32768) = 0 [pid 5151] close(3 [pid 4994] close(3 [pid 5151] <... close resumed>) = 0 [pid 4995] close(3 [pid 4993] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5151] symlink("/dev/binderfs", "./binderfs" [pid 4994] <... close resumed>) = 0 [pid 5151] <... symlink resumed>) = 0 [pid 4995] <... close resumed>) = 0 [pid 4994] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4993] lstat("./7/bus", [pid 5151] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] rmdir("./7" [pid 5151] <... futex resumed>) = 0 [pid 5151] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 4993] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5151] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4995] <... rmdir resumed>) = 0 [pid 4994] <... clone resumed>, child_tidptr=0x5555567415d0) = 5152 [pid 4993] umount2("./7/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5151] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4995] mkdir("./8", 0777 [pid 4993] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5151] <... clone resumed>, parent_tid=[5153], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5153 [pid 5151] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] <... mkdir resumed>) = 0 [pid 4993] openat(AT_FDCWD, "./7/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5151] <... futex resumed>) = 0 [pid 4995] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5151] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4993] <... openat resumed>) = 4 [pid 4995] <... openat resumed>) = 3 [pid 4993] fstat(4, ./strace-static-x86_64: Process 5152 attached [pid 5152] set_robust_list(0x5555567415e0, 24 [pid 4995] ioctl(3, LOOP_CLR_FD [pid 4993] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 5153 attached [pid 5153] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5153] memfd_create("syzkaller", 0) = 3 [pid 5153] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 4995] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4993] getdents64(4, [pid 5152] <... set_robust_list resumed>) = 0 [pid 4995] close(3 [pid 4993] <... getdents64 resumed>0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4995] <... close resumed>) = 0 [pid 4993] getdents64(4, [pid 4995] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4993] <... getdents64 resumed>0x55555674a660 /* 0 entries */, 32768) = 0 [pid 5152] chdir("./8" [pid 4993] close(4 [pid 4995] <... clone resumed>, child_tidptr=0x5555567415d0) = 5154 [pid 5152] <... chdir resumed>) = 0 [pid 4993] <... close resumed>) = 0 [pid 5152] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4993] rmdir("./7/bus" [pid 5152] setpgid(0, 0 [pid 4993] <... rmdir resumed>) = 0 [pid 5152] <... setpgid resumed>) = 0 ./strace-static-x86_64: Process 5154 attached [pid 5154] set_robust_list(0x5555567415e0, 24) = 0 [pid 5154] chdir("./8") = 0 [pid 5154] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5154] setpgid(0, 0) = 0 [pid 5154] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5154] write(3, "1000", 4) = 4 [pid 5154] close(3) = 0 [pid 5154] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5154] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5154] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5154] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5154] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5152] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4993] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5154] <... clone resumed>, parent_tid=[5155], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5155 [pid 5152] <... openat resumed>) = 3 [pid 4993] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5152] write(3, "1000", 4 [pid 4993] lstat("./7/binderfs", [pid 5152] <... write resumed>) = 4 [pid 5154] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5152] close(3 [pid 4993] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5154] <... futex resumed>) = 0 [pid 5152] <... close resumed>) = 0 [pid 4993] unlink("./7/binderfs" [pid 5154] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5152] symlink("/dev/binderfs", "./binderfs" [pid 4993] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 5155 attached [pid 5152] <... symlink resumed>) = 0 [pid 4993] getdents64(3, [pid 5152] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 4993] <... getdents64 resumed>0x555556742620 /* 0 entries */, 32768) = 0 [pid 5152] <... futex resumed>) = 0 [pid 4993] close(3 [pid 5152] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4993] <... close resumed>) = 0 [pid 5155] set_robust_list(0x7ff6876bd9e0, 24 [pid 5152] <... mmap resumed>) = 0x7ff68769d000 [pid 4993] rmdir("./7" [pid 5155] <... set_robust_list resumed>) = 0 [pid 5152] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE [pid 5155] memfd_create("syzkaller", 0 [pid 5152] <... mprotect resumed>) = 0 [pid 4993] <... rmdir resumed>) = 0 [pid 5155] <... memfd_create resumed>) = 3 [pid 5152] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4993] mkdir("./8", 0777 [pid 5155] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 ./strace-static-x86_64: Process 5156 attached [pid 5152] <... clone resumed>, parent_tid=[5156], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5156 [pid 4993] <... mkdir resumed>) = 0 [pid 5156] set_robust_list(0x7ff6876bd9e0, 24 [pid 5152] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] <... umount2 resumed>) = 0 [pid 5156] <... set_robust_list resumed>) = 0 [pid 5152] <... futex resumed>) = 0 [pid 4997] umount2("./7/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4993] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5156] memfd_create("syzkaller", 0 [pid 5152] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5156] <... memfd_create resumed>) = 3 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4993] <... openat resumed>) = 3 [pid 5156] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4993] ioctl(3, LOOP_CLR_FD [pid 5156] <... mmap resumed>) = 0x7ff67f29d000 [pid 4997] lstat("./7/bus", [pid 4993] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4993] close(3) = 0 [pid 4993] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567415d0) = 5157 [pid 4997] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./7/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./7/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4997] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4997] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4997] close(4) = 0 [pid 4997] rmdir("./7/bus"./strace-static-x86_64: Process 5157 attached ) = 0 [pid 5157] set_robust_list(0x5555567415e0, 24) = 0 [pid 4997] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5157] chdir("./8" [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5157] <... chdir resumed>) = 0 [pid 4997] lstat("./7/binderfs", [pid 5157] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4997] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5157] <... prctl resumed>) = 0 [pid 4997] unlink("./7/binderfs" [pid 5157] setpgid(0, 0) = 0 [pid 4997] <... unlink resumed>) = 0 [pid 5157] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4997] getdents64(3, [pid 5157] <... openat resumed>) = 3 [pid 4997] <... getdents64 resumed>0x555556742620 /* 0 entries */, 32768) = 0 [pid 5157] write(3, "1000", 4 [pid 4997] close(3 [pid 5157] <... write resumed>) = 4 [pid 5157] close(3 [pid 4997] <... close resumed>) = 0 [pid 5157] <... close resumed>) = 0 [pid 4997] rmdir("./7" [pid 5157] symlink("/dev/binderfs", "./binderfs" [pid 4997] <... rmdir resumed>) = 0 [pid 5157] <... symlink resumed>) = 0 [pid 4997] mkdir("./8", 0777 [pid 5157] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4997] <... mkdir resumed>) = 0 [pid 5157] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4997] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5157] <... mmap resumed>) = 0x7ff68769d000 [pid 4997] <... openat resumed>) = 3 [pid 5157] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE [pid 4997] ioctl(3, LOOP_CLR_FD [pid 5157] <... mprotect resumed>) = 0 [pid 4997] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5157] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4997] close(3) = 0 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5157] <... clone resumed>, parent_tid=[5158], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5158 [pid 5157] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4997] <... clone resumed>, child_tidptr=0x5555567415d0) = 5159 [pid 5157] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5159 attached [pid 5159] set_robust_list(0x5555567415e0, 24./strace-static-x86_64: Process 5158 attached ) = 0 [pid 5159] chdir("./8" [pid 5158] set_robust_list(0x7ff6876bd9e0, 24 [pid 5159] <... chdir resumed>) = 0 [pid 5159] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5158] <... set_robust_list resumed>) = 0 [pid 5159] setpgid(0, 0) = 0 [pid 5158] memfd_create("syzkaller", 0 [pid 5159] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5159] write(3, "1000", 4) = 4 [pid 5158] <... memfd_create resumed>) = 3 [pid 5159] close(3 [pid 5158] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5159] <... close resumed>) = 0 [pid 5159] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5158] <... mmap resumed>) = 0x7ff67f29d000 [pid 5159] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5159] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5159] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5159] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5160], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5160 [pid 5159] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5159] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5160 attached [pid 5160] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5160] memfd_create("syzkaller", 0) = 3 [pid 5160] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 5153] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5150] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5155] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5158] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5156] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5160] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5153] <... write resumed>) = 16777216 [pid 5153] munmap(0x7ff67f29d000, 16777216) = 0 [pid 5150] <... write resumed>) = 16777216 [pid 5153] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5150] munmap(0x7ff67f29d000, 16777216 [pid 5153] <... openat resumed>) = 4 [pid 5153] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5150] <... munmap resumed>) = 0 [pid 5153] close(3 [pid 5150] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5153] <... close resumed>) = 0 [pid 5150] <... openat resumed>) = 4 [pid 5153] mkdir("./bus", 0777 [ 79.431125][ T5153] loop3: detected capacity change from 0 to 32768 [pid 5150] ioctl(4, LOOP_SET_FD, 3 [pid 5153] <... mkdir resumed>) = 0 [pid 5153] mount("/dev/loop3", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "") = 0 [pid 5153] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5153] chdir("./bus") = 0 [pid 5155] <... write resumed>) = 16777216 [pid 5153] ioctl(4, LOOP_CLR_FD [pid 5150] <... ioctl resumed>) = 0 [pid 5158] <... write resumed>) = 16777216 [pid 5155] munmap(0x7ff67f29d000, 16777216 [pid 5153] <... ioctl resumed>) = 0 [pid 5150] close(3 [pid 5158] munmap(0x7ff67f29d000, 16777216 [pid 5156] <... write resumed>) = 16777216 [pid 5156] munmap(0x7ff67f29d000, 16777216 [pid 5155] <... munmap resumed>) = 0 [pid 5153] close(4 [pid 5150] <... close resumed>) = 0 [pid 5158] <... munmap resumed>) = 0 [pid 5153] <... close resumed>) = 0 [pid 5150] mkdir("./bus", 0777) = 0 [pid 5153] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5151] <... futex resumed>) = 0 [pid 5150] mount("/dev/loop5", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5153] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [ 79.476242][ T5150] loop5: detected capacity change from 0 to 32768 [pid 5151] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5153] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5151] <... futex resumed>) = 0 [pid 5153] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5151] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5153] <... open resumed>) = 4 [pid 5153] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5150] <... mount resumed>) = 0 [pid 5153] <... futex resumed>) = 1 [pid 5151] <... futex resumed>) = 0 [pid 5150] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5153] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5151] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5150] <... openat resumed>) = 3 [pid 5156] <... munmap resumed>) = 0 [pid 5153] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5151] <... futex resumed>) = 0 [pid 5153] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5151] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5150] chdir("./bus" [pid 5158] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5155] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5153] <... open resumed>) = 5 [pid 5150] <... chdir resumed>) = 0 [pid 5158] <... openat resumed>) = 4 [pid 5155] <... openat resumed>) = 4 [pid 5153] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5150] ioctl(4, LOOP_CLR_FD [pid 5158] ioctl(4, LOOP_SET_FD, 3 [pid 5156] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5155] ioctl(4, LOOP_SET_FD, 3 [pid 5153] <... futex resumed>) = 1 [pid 5151] <... futex resumed>) = 0 [pid 5150] <... ioctl resumed>) = 0 [pid 5151] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5151] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5156] <... openat resumed>) = 4 [pid 5155] <... ioctl resumed>) = 0 [pid 5153] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5150] close(4 [pid 5156] ioctl(4, LOOP_SET_FD, 3 [pid 5153] <... mmap resumed>) = 0x20000000 [pid 5150] <... close resumed>) = 0 [pid 5155] close(3 [pid 5158] <... ioctl resumed>) = 0 [pid 5155] <... close resumed>) = 0 [pid 5158] close(3 [pid 5155] mkdir("./bus", 0777 [pid 5158] <... close resumed>) = 0 [pid 5155] <... mkdir resumed>) = 0 [pid 5153] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5150] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5160] <... write resumed>) = 16777216 [pid 5158] mkdir("./bus", 0777 [pid 5156] <... ioctl resumed>) = 0 [pid 5155] mount("/dev/loop2", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5153] <... futex resumed>) = 1 [pid 5151] <... futex resumed>) = 0 [pid 5150] <... futex resumed>) = 1 [pid 5149] <... futex resumed>) = 0 [pid 5160] munmap(0x7ff67f29d000, 16777216 [pid 5158] <... mkdir resumed>) = 0 [pid 5156] close(3 [pid 5153] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5151] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5150] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5149] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5160] <... munmap resumed>) = 0 [pid 5156] <... close resumed>) = 0 [pid 5153] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5151] <... futex resumed>) = 0 [pid 5150] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5158] mount("/dev/loop0", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5149] <... futex resumed>) = 0 [pid 5160] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5156] mkdir("./bus", 0777 [pid 5153] ftruncate(4, 33587199 [pid 5151] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5150] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5149] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5160] <... openat resumed>) = 4 [pid 5156] <... mkdir resumed>) = 0 [pid 5153] <... ftruncate resumed>) = 0 [pid 5150] <... open resumed>) = 4 [ 79.566745][ T5158] loop0: detected capacity change from 0 to 32768 [ 79.573789][ T5155] loop2: detected capacity change from 0 to 32768 [ 79.599882][ T5156] loop1: detected capacity change from 0 to 32768 [pid 5160] ioctl(4, LOOP_SET_FD, 3 [pid 5156] mount("/dev/loop1", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5153] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5150] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5158] <... mount resumed>) = 0 [pid 5155] <... mount resumed>) = 0 [pid 5153] <... futex resumed>) = 1 [pid 5151] <... futex resumed>) = 0 [pid 5150] <... futex resumed>) = 1 [pid 5149] <... futex resumed>) = 0 [pid 5153] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5151] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5150] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5149] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5153] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5151] <... futex resumed>) = 0 [pid 5150] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5149] <... futex resumed>) = 0 [pid 5153] open("./bus", O_RDONLY [pid 5151] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5150] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5149] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5153] <... open resumed>) = 6 [pid 5150] <... open resumed>) = 5 [pid 5153] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5150] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5153] <... futex resumed>) = 0 [pid 5150] <... futex resumed>) = 0 [pid 5153] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5150] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5160] <... ioctl resumed>) = 0 [pid 5160] close(3) = 0 [pid 5160] mkdir("./bus", 0777) = 0 [pid 5160] mount("/dev/loop4", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5158] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5158] chdir("./bus") = 0 [pid 5158] ioctl(4, LOOP_CLR_FD) = 0 [pid 5158] close(4) = 0 [pid 5158] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5157] <... futex resumed>) = 0 [pid 5157] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5158] <... futex resumed>) = 1 [pid 5157] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5158] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5158] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5157] <... futex resumed>) = 0 [pid 5157] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5158] <... futex resumed>) = 1 [pid 5157] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5158] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 5160] <... mount resumed>) = 0 [pid 5158] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5156] <... mount resumed>) = 0 [pid 5155] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5151] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5149] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5160] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5158] <... futex resumed>) = 1 [pid 5157] <... futex resumed>) = 0 [pid 5156] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5155] <... openat resumed>) = 3 [pid 5151] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [ 79.629730][ T5160] loop4: detected capacity change from 0 to 32768 [ 79.640640][ T27] kauditd_printk_skb: 14 callbacks suppressed [ 79.640653][ T27] audit: type=1804 audit(1686284884.477:98): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor481" name="/root/syzkaller.crriMX/8/bus/bus" dev="loop3" ino=7 res=1 errno=0 [pid 5149] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5160] <... openat resumed>) = 3 [pid 5158] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5157] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5156] <... openat resumed>) = 3 [pid 5155] chdir("./bus" [pid 5153] <... futex resumed>) = 0 [pid 5151] <... futex resumed>) = 1 [pid 5150] <... futex resumed>) = 0 [pid 5149] <... futex resumed>) = 1 [pid 5160] chdir("./bus" [pid 5157] <... futex resumed>) = 0 [pid 5156] chdir("./bus" [pid 5155] <... chdir resumed>) = 0 [pid 5153] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5151] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5150] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5149] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5160] <... chdir resumed>) = 0 [pid 5157] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5156] <... chdir resumed>) = 0 [pid 5155] ioctl(4, LOOP_CLR_FD [pid 5158] <... mmap resumed>) = 0x20000000 [pid 5153] <... open resumed>) = 7 [pid 5150] <... mmap resumed>) = 0x20000000 [pid 5160] ioctl(4, LOOP_CLR_FD [pid 5158] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5153] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5150] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5160] <... ioctl resumed>) = 0 [pid 5158] <... futex resumed>) = 1 [pid 5157] <... futex resumed>) = 0 [pid 5153] <... futex resumed>) = 1 [pid 5150] <... futex resumed>) = 1 [pid 5160] close(4 [pid 5158] ftruncate(4, 33587199 [pid 5157] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5153] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5150] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5160] <... close resumed>) = 0 [pid 5158] <... ftruncate resumed>) = 0 [pid 5157] <... futex resumed>) = 0 [pid 5160] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5158] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5157] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5160] <... futex resumed>) = 1 [pid 5158] <... futex resumed>) = 0 [pid 5157] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5160] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5158] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5157] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5158] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5157] <... futex resumed>) = 0 [pid 5159] <... futex resumed>) = 0 [pid 5158] open("./bus", O_RDONLY [pid 5157] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5156] ioctl(4, LOOP_CLR_FD [pid 5155] <... ioctl resumed>) = 0 [pid 5151] <... futex resumed>) = 0 [pid 5149] <... futex resumed>) = 0 [pid 5159] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5158] <... open resumed>) = 6 [pid 5158] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5157] <... futex resumed>) = 0 [pid 5158] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5157] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5158] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5157] <... futex resumed>) = 0 [pid 5158] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5157] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5158] <... open resumed>) = 7 [pid 5158] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5157] <... futex resumed>) = 0 [pid 5158] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5157] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5158] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5157] <... futex resumed>) = 0 [pid 5158] dup(7 [pid 5157] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5158] <... dup resumed>) = 8 [pid 5158] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5157] <... futex resumed>) = 0 [pid 5158] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5157] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5158] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5157] <... futex resumed>) = 0 [pid 5158] memfd_create("syzkaller", 0 [pid 5157] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5158] <... memfd_create resumed>) = 9 [ 79.685238][ T27] audit: type=1804 audit(1686284884.527:99): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor481" name="/root/syzkaller.crriMX/8/bus/bus" dev="loop3" ino=7 res=1 errno=0 [ 79.708317][ T27] audit: type=1804 audit(1686284884.547:100): pid=5158 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor481" name="/root/syzkaller.lVUVkM/8/bus/bus" dev="loop0" ino=7 res=1 errno=0 [pid 5158] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff677e9d000 [pid 5160] <... futex resumed>) = 0 [pid 5159] <... futex resumed>) = 1 [pid 5156] <... ioctl resumed>) = 0 [pid 5155] close(4 [pid 5151] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5149] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5160] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5160] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5160] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5159] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5156] close(4 [pid 5159] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5155] <... close resumed>) = 0 [pid 5153] <... futex resumed>) = 0 [pid 5151] <... futex resumed>) = 1 [pid 5150] <... futex resumed>) = 0 [pid 5149] <... futex resumed>) = 1 [pid 5156] <... close resumed>) = 0 [pid 5159] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5156] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5155] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5153] dup(7 [pid 5151] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5150] ftruncate(4, 33587199 [pid 5149] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5160] <... futex resumed>) = 0 [pid 5159] <... futex resumed>) = 1 [pid 5156] <... futex resumed>) = 1 [pid 5155] <... futex resumed>) = 1 [pid 5154] <... futex resumed>) = 0 [pid 5153] <... dup resumed>) = 8 [pid 5152] <... futex resumed>) = 0 [pid 5150] <... ftruncate resumed>) = 0 [pid 5160] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5159] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5156] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5155] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5154] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5153] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5152] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5150] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5160] <... open resumed>) = 5 [pid 5156] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5155] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5154] <... futex resumed>) = 0 [pid 5153] <... futex resumed>) = 1 [pid 5152] <... futex resumed>) = 0 [pid 5151] <... futex resumed>) = 0 [pid 5150] <... futex resumed>) = 1 [pid 5149] <... futex resumed>) = 0 [pid 5160] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5158] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5156] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5155] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5154] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5153] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5152] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5151] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5150] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5149] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5160] <... futex resumed>) = 1 [pid 5159] <... futex resumed>) = 0 [pid 5153] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5151] <... futex resumed>) = 0 [pid 5150] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5160] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5159] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5156] <... open resumed>) = 4 [pid 5155] <... open resumed>) = 4 [pid 5153] memfd_create("syzkaller", 0 [pid 5151] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5150] open("./bus", O_RDONLY [pid 5149] <... futex resumed>) = 0 [ 79.732581][ T27] audit: type=1804 audit(1686284884.557:101): pid=5158 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor481" name="/root/syzkaller.lVUVkM/8/bus/bus" dev="loop0" ino=7 res=1 errno=0 [pid 5160] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5159] <... futex resumed>) = 0 [pid 5156] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5155] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5153] <... memfd_create resumed>) = 9 [pid 5150] <... open resumed>) = 6 [pid 5160] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5153] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5150] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5160] <... mmap resumed>) = 0x20000000 [pid 5153] <... mmap resumed>) = 0x7ff677e9d000 [pid 5150] <... futex resumed>) = 0 [pid 5160] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5150] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5160] <... futex resumed>) = 0 [pid 5160] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5149] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5159] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5156] <... futex resumed>) = 1 [pid 5159] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5156] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5155] <... futex resumed>) = 1 [pid 5154] <... futex resumed>) = 0 [pid 5149] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5159] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5155] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5154] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5149] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5159] <... futex resumed>) = 1 [pid 5155] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5154] <... futex resumed>) = 0 [pid 5149] <... futex resumed>) = 1 [pid 5159] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5155] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5154] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5149] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5160] <... futex resumed>) = 0 [pid 5155] <... open resumed>) = 5 [pid 5152] <... futex resumed>) = 0 [pid 5150] <... futex resumed>) = 0 [pid 5155] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5154] <... futex resumed>) = 0 [pid 5155] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5154] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5155] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5154] <... futex resumed>) = 0 [pid 5155] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5154] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5160] ftruncate(4, 33587199 [pid 5155] <... mmap resumed>) = 0x20000000 [pid 5152] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5150] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5160] <... ftruncate resumed>) = 0 [pid 5156] <... futex resumed>) = 0 [pid 5155] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5152] <... futex resumed>) = 1 [pid 5150] <... open resumed>) = 7 [pid 5160] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5156] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5155] <... futex resumed>) = 1 [pid 5154] <... futex resumed>) = 0 [pid 5152] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5150] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5160] <... futex resumed>) = 1 [pid 5159] <... futex resumed>) = 0 [pid 5156] <... open resumed>) = 5 [pid 5155] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5154] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5150] <... futex resumed>) = 1 [pid 5149] <... futex resumed>) = 0 [pid 5160] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5159] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5158] <... write resumed>) = 2097152 [pid 5156] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5155] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5154] <... futex resumed>) = 0 [pid 5150] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5160] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5160] open("./bus", O_RDONLY) = 6 [pid 5160] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5153] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5160] <... futex resumed>) = 0 [ 79.788483][ T27] audit: type=1804 audit(1686284884.627:102): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor481" name="/root/syzkaller.PL7eda/8/bus/bus" dev="loop5" ino=7 res=1 errno=0 [pid 5160] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL) = 0 [pid 5159] <... futex resumed>) = 1 [pid 5158] munmap(0x7ff677e9d000, 2097152 [pid 5156] <... futex resumed>) = 1 [pid 5155] ftruncate(4, 33587199 [pid 5154] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5152] <... futex resumed>) = 0 [pid 5149] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5160] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5152] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5150] <... futex resumed>) = 0 [pid 5149] <... futex resumed>) = 1 [pid 5152] <... futex resumed>) = 0 [pid 5150] dup(7 [pid 5149] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5152] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5150] <... dup resumed>) = 8 [pid 5150] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5149] <... futex resumed>) = 0 [pid 5150] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5149] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5159] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5150] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5149] <... futex resumed>) = 0 [pid 5159] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5158] <... munmap resumed>) = 0 [pid 5156] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5155] <... ftruncate resumed>) = 0 [pid 5150] memfd_create("syzkaller", 0 [pid 5149] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5159] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5158] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5156] <... mmap resumed>) = 0x20000000 [pid 5155] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5150] <... memfd_create resumed>) = 9 [pid 5160] <... futex resumed>) = 0 [pid 5159] <... futex resumed>) = 1 [pid 5158] <... openat resumed>) = 10 [pid 5156] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5155] <... futex resumed>) = 1 [pid 5154] <... futex resumed>) = 0 [pid 5150] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [ 79.824054][ T27] audit: type=1804 audit(1686284884.657:103): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor481" name="/root/syzkaller.PL7eda/8/bus/bus" dev="loop5" ino=7 res=1 errno=0 [ 79.846258][ T27] audit: type=1804 audit(1686284884.667:104): pid=5160 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor481" name="/root/syzkaller.hTAWL1/8/bus/bus" dev="loop4" ino=7 res=1 errno=0 [pid 5160] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5159] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5158] ioctl(10, LOOP_SET_FD, 9 [pid 5156] <... futex resumed>) = 1 [pid 5155] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5154] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5152] <... futex resumed>) = 0 [pid 5150] <... mmap resumed>) = 0x7ff677e9d000 [pid 5160] <... open resumed>) = 7 [pid 5158] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5154] <... futex resumed>) = 0 [pid 5153] <... write resumed>) = 2097152 [pid 5152] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5160] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5158] ioctl(10, LOOP_CLR_FD [pid 5154] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5152] <... futex resumed>) = 0 [pid 5160] <... futex resumed>) = 1 [pid 5159] <... futex resumed>) = 0 [pid 5158] <... ioctl resumed>) = 0 [pid 5152] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5160] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5159] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5160] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5159] <... futex resumed>) = 0 [pid 5160] dup(7 [pid 5159] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5160] <... dup resumed>) = 8 [pid 5160] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5158] ioctl(10, LOOP_SET_FD, 9 [pid 5160] <... futex resumed>) = 1 [pid 5159] <... futex resumed>) = 0 [pid 5158] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5156] ftruncate(4, 33587199 [pid 5155] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5160] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5159] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5158] close(10 [pid 5153] munmap(0x7ff677e9d000, 2097152 [pid 5160] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5159] <... futex resumed>) = 0 [pid 5158] <... close resumed>) = 0 [pid 5156] <... ftruncate resumed>) = 0 [pid 5155] open("./bus", O_RDONLY [pid 5160] memfd_create("syzkaller", 0 [ 79.899887][ T27] audit: type=1804 audit(1686284884.737:105): pid=5160 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor481" name="/root/syzkaller.hTAWL1/8/bus/bus" dev="loop4" ino=7 res=1 errno=0 [pid 5159] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5158] close(9 [pid 5156] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5160] <... memfd_create resumed>) = 9 [pid 5158] <... close resumed>) = 0 [pid 5155] <... open resumed>) = 6 [pid 5153] <... munmap resumed>) = 0 [pid 5160] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff677e9d000 [pid 5156] <... futex resumed>) = 1 [pid 5155] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5153] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5152] <... futex resumed>) = 0 [pid 5150] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5158] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5156] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5155] <... futex resumed>) = 1 [pid 5154] <... futex resumed>) = 0 [pid 5153] <... openat resumed>) = 10 [pid 5152] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5158] <... futex resumed>) = 1 [pid 5157] <... futex resumed>) = 0 [pid 5156] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5155] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5154] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5153] ioctl(10, LOOP_SET_FD, 9 [pid 5152] <... futex resumed>) = 0 [pid 5158] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5157] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5156] open("./bus", O_RDONLY [pid 5155] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5154] <... futex resumed>) = 0 [pid 5152] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5153] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5158] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5157] <... futex resumed>) = 0 [pid 5156] <... open resumed>) = 6 [pid 5155] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5154] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 79.940103][ T27] audit: type=1804 audit(1686284884.777:106): pid=5155 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor481" name="/root/syzkaller.txkbmS/8/bus/bus" dev="loop2" ino=7 res=1 errno=0 [pid 5157] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5150] <... write resumed>) = 2097152 [pid 5150] munmap(0x7ff677e9d000, 2097152 [pid 5158] sendfile(8, 6, NULL, 281474978811908 [pid 5153] ioctl(10, LOOP_CLR_FD [pid 5156] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5155] <... open resumed>) = 7 [pid 5160] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5156] <... futex resumed>) = 1 [pid 5155] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5153] <... ioctl resumed>) = 0 [pid 5152] <... futex resumed>) = 0 [pid 5150] <... munmap resumed>) = 0 [pid 5156] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5155] <... futex resumed>) = 1 [pid 5155] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5154] <... futex resumed>) = 0 [pid 5152] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5154] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5153] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5153] close(10 [pid 5156] <... futex resumed>) = 0 [pid 5155] <... futex resumed>) = 0 [pid 5154] <... futex resumed>) = 1 [pid 5153] <... close resumed>) = 0 [pid 5152] <... futex resumed>) = 1 [pid 5156] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5155] dup(7 [pid 5154] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5153] close(9 [pid 5152] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5157] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5156] <... open resumed>) = 7 [pid 5155] <... dup resumed>) = 8 [pid 5150] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5156] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5155] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5156] <... futex resumed>) = 0 [pid 5155] <... futex resumed>) = 1 [pid 5156] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5155] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5152] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5157] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5154] <... futex resumed>) = 0 [pid 5157] <... futex resumed>) = 0 [pid 5154] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5152] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5150] <... openat resumed>) = 10 [pid 5157] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5156] <... futex resumed>) = 0 [pid 5155] <... futex resumed>) = 0 [pid 5154] <... futex resumed>) = 1 [pid 5152] <... futex resumed>) = 1 [pid 5157] <... mmap resumed>) = 0x7ff67807c000 [pid 5156] dup(7 [pid 5155] memfd_create("syzkaller", 0 [pid 5154] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5152] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5150] ioctl(10, LOOP_SET_FD, 9 [pid 5157] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5156] <... dup resumed>) = 8 [pid 5155] <... memfd_create resumed>) = 9 [pid 5157] <... mprotect resumed>) = 0 [pid 5156] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5155] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5153] <... close resumed>) = 0 [pid 5152] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5150] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5157] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5156] <... futex resumed>) = 0 [ 79.977602][ T27] audit: type=1804 audit(1686284884.817:107): pid=5156 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor481" name="/root/syzkaller.20fUYQ/8/bus/bus" dev="loop1" ino=7 res=1 errno=0 [pid 5155] <... mmap resumed>) = 0x7ff677e9d000 [pid 5153] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5152] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5161 attached [pid 5156] memfd_create("syzkaller", 0 [pid 5153] <... futex resumed>) = 1 [pid 5151] <... futex resumed>) = 0 [pid 5150] ioctl(10, LOOP_CLR_FD [pid 5156] <... memfd_create resumed>) = 9 [pid 5153] sendfile(8, 6, NULL, 281474978811908 [pid 5151] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5161] set_robust_list(0x7ff67809c9e0, 24 [pid 5157] <... clone resumed>, parent_tid=[5161], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5161 [pid 5156] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5152] <... futex resumed>) = 0 [pid 5151] <... futex resumed>) = 0 [pid 5150] <... ioctl resumed>) = 0 [pid 5161] <... set_robust_list resumed>) = 0 [pid 5160] <... write resumed>) = 2097152 [pid 5157] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5156] <... mmap resumed>) = 0x7ff677e9d000 [pid 5155] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5152] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5151] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5161] sync( [pid 5160] munmap(0x7ff677e9d000, 2097152 [pid 5157] <... futex resumed>) = 0 [pid 5160] <... munmap resumed>) = 0 [pid 5157] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5160] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5150] ioctl(10, LOOP_SET_FD, 9 [pid 5160] <... openat resumed>) = 10 [pid 5150] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5160] ioctl(10, LOOP_SET_FD, 9 [pid 5150] close(10 [pid 5161] <... sync resumed>) = 0 [pid 5160] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5150] <... close resumed>) = 0 [pid 5161] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5160] ioctl(10, LOOP_CLR_FD [pid 5156] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5150] close(9 [pid 5161] <... futex resumed>) = 1 [pid 5160] <... ioctl resumed>) = 0 [pid 5157] <... futex resumed>) = 0 [pid 5155] <... write resumed>) = 2097152 [pid 5151] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5161] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5155] munmap(0x7ff677e9d000, 2097152 [pid 5151] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5150] <... close resumed>) = 0 [pid 5155] <... munmap resumed>) = 0 [pid 5151] <... futex resumed>) = 0 [pid 5160] ioctl(10, LOOP_SET_FD, 9 [pid 5151] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5160] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5155] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5151] <... mmap resumed>) = 0x7ff67807c000 [pid 5150] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5160] close(10 [pid 5155] <... openat resumed>) = 10 [pid 5151] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5150] <... futex resumed>) = 1 [pid 5149] <... futex resumed>) = 0 [pid 5160] <... close resumed>) = 0 [pid 5155] ioctl(10, LOOP_SET_FD, 9 [pid 5151] <... mprotect resumed>) = 0 [pid 5150] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5149] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5160] close(9 [pid 5156] <... write resumed>) = 2097152 [pid 5155] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5151] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5149] <... futex resumed>) = 0 [pid 5156] munmap(0x7ff677e9d000, 2097152) = 0 [pid 5151] <... clone resumed>, parent_tid=[5162], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5162 [pid 5151] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5151] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5156] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 10 [pid 5156] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5156] ioctl(10, LOOP_CLR_FD) = 0 [pid 5156] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5156] close(10) = 0 [pid 5156] close(9 [pid 5160] <... close resumed>) = 0 ./strace-static-x86_64: Process 5162 attached [pid 5155] ioctl(10, LOOP_CLR_FD [pid 5150] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5149] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5160] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5162] set_robust_list(0x7ff67809c9e0, 24 [pid 5160] <... futex resumed>) = 1 [pid 5159] <... futex resumed>) = 0 [pid 5156] <... close resumed>) = 0 [pid 5155] <... ioctl resumed>) = 0 [pid 5150] sendfile(8, 6, NULL, 281474978811908 [pid 5162] <... set_robust_list resumed>) = 0 [pid 5160] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5159] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5162] sync( [pid 5160] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5159] <... futex resumed>) = 0 [pid 5160] sendfile(8, 6, NULL, 281474978811908 [pid 5159] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5155] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5155] close(10) = 0 [pid 5155] close(9 [pid 5156] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5156] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5152] <... futex resumed>) = 0 [pid 5152] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5156] <... futex resumed>) = 0 [pid 5152] <... futex resumed>) = 1 [pid 5162] <... sync resumed>) = 0 [pid 5155] <... close resumed>) = 0 [pid 5151] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5162] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5152] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5162] <... futex resumed>) = 0 [pid 5155] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5162] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5155] <... futex resumed>) = 1 [pid 5154] <... futex resumed>) = 0 [pid 5156] sendfile(8, 6, NULL, 281474978811908 [pid 5154] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5155] sendfile(8, 6, NULL, 281474978811908 [pid 5154] <... futex resumed>) = 0 [pid 5149] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5154] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5149] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5149] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff67807c000 [pid 5159] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5159] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5149] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5159] <... futex resumed>) = 0 [pid 5149] <... mprotect resumed>) = 0 [pid 5159] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5149] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5159] <... mmap resumed>) = 0x7ff67807c000 [pid 5159] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5149] <... clone resumed>, parent_tid=[5163], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5163 [pid 5159] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5149] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5152] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5149] <... futex resumed>) = 0 [pid 5159] <... clone resumed>, parent_tid=[5164], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5164 [pid 5152] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5149] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5159] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5152] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5164 attached ./strace-static-x86_64: Process 5163 attached [pid 5159] <... futex resumed>) = 0 [pid 5154] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5152] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5164] set_robust_list(0x7ff67809c9e0, 24 [pid 5163] set_robust_list(0x7ff67809c9e0, 24 [pid 5159] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5154] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5152] <... mmap resumed>) = 0x7ff67807c000 [pid 5164] <... set_robust_list resumed>) = 0 [pid 5163] <... set_robust_list resumed>) = 0 [pid 5154] <... futex resumed>) = 0 [pid 5152] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5164] sync( [pid 5163] sync( [pid 5154] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5152] <... mprotect resumed>) = 0 [pid 5164] <... sync resumed>) = 0 [pid 5163] <... sync resumed>) = 0 [pid 5154] <... mmap resumed>) = 0x7ff67807c000 [pid 5152] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5164] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5163] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5154] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5164] <... futex resumed>) = 1 [pid 5163] <... futex resumed>) = 1 [pid 5159] <... futex resumed>) = 0 [pid 5154] <... mprotect resumed>) = 0 [pid 5152] <... clone resumed>, parent_tid=[5165], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5165 [pid 5149] <... futex resumed>) = 0 [pid 5164] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5163] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5154] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5152] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 5165 attached [pid 5154] <... clone resumed>, parent_tid=[5166], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5166 [pid 5152] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5165] set_robust_list(0x7ff67809c9e0, 24 [pid 5154] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5165] <... set_robust_list resumed>) = 0 [pid 5154] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5166 attached [pid 5165] sync( [pid 5154] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5166] set_robust_list(0x7ff67809c9e0, 24 [pid 5165] <... sync resumed>) = 0 [pid 5166] <... set_robust_list resumed>) = 0 [pid 5165] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5166] sync( [pid 5165] <... futex resumed>) = 1 [pid 5152] <... futex resumed>) = 0 [pid 5165] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5166] <... sync resumed>) = 0 [pid 5166] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5154] <... futex resumed>) = 0 [pid 5166] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5157] exit_group(0 [pid 5161] <... futex resumed>) = ? [pid 5157] <... exit_group resumed>) = ? [pid 5161] +++ exited with 0 +++ [pid 5158] <... sendfile resumed>) = ? [pid 5158] +++ exited with 0 +++ [pid 5157] +++ exited with 0 +++ [pid 4993] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5157, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=45 /* 0.45 s */} --- [pid 4993] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4993] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4993] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4993] getdents64(3, 0x555556742620 /* 4 entries */, 32768) = 104 [pid 4993] umount2("./8/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5151] exit_group(0 [pid 5162] <... futex resumed>) = ? [pid 5151] <... exit_group resumed>) = ? [pid 5162] +++ exited with 0 +++ [pid 5153] <... sendfile resumed>) = ? [pid 5153] +++ exited with 0 +++ [pid 5151] +++ exited with 0 +++ [pid 4996] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5151, si_uid=0, si_status=0, si_utime=11 /* 0.11 s */, si_stime=38 /* 0.38 s */} --- [pid 4996] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4996] fstat(3, [pid 5159] exit_group(0 [pid 4996] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5164] <... futex resumed>) = ? [pid 5159] <... exit_group resumed>) = ? [pid 4996] getdents64(3, 0x555556742620 /* 4 entries */, 32768) = 104 [pid 5164] +++ exited with 0 +++ [pid 5160] <... sendfile resumed>) = ? [pid 4996] umount2("./8/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5160] +++ exited with 0 +++ [pid 5159] +++ exited with 0 +++ [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5159, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=41 /* 0.41 s */} --- [pid 4997] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4997] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4997] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(3, 0x555556742620 /* 4 entries */, 32768) = 104 [pid 4997] umount2("./8/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5152] exit_group(0 [pid 5165] <... futex resumed>) = ? [pid 5152] <... exit_group resumed>) = ? [pid 5165] +++ exited with 0 +++ [pid 5149] exit_group(0 [pid 5163] <... futex resumed>) = ? [pid 5149] <... exit_group resumed>) = ? [pid 5163] +++ exited with 0 +++ [pid 5156] <... sendfile resumed>) = ? [pid 5154] exit_group(0 [pid 5166] <... futex resumed>) = ? [pid 5154] <... exit_group resumed>) = ? [pid 5166] +++ exited with 0 +++ [pid 5155] <... sendfile resumed>) = ? [pid 5156] +++ exited with 0 +++ [pid 5152] +++ exited with 0 +++ [pid 4994] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5152, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=35 /* 0.35 s */} --- [pid 4994] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5150] <... sendfile resumed>) = ? [pid 5155] +++ exited with 0 +++ [pid 5154] +++ exited with 0 +++ [pid 4995] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5154, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=35 /* 0.35 s */} --- [pid 4994] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5150] +++ exited with 0 +++ [pid 5149] +++ exited with 0 +++ [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5149, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=30 /* 0.30 s */} --- [pid 4994] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] <... openat resumed>) = 3 [pid 4998] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... openat resumed>) = 3 [pid 4994] fstat(3, [pid 4998] fstat(3, [pid 4995] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, [pid 4995] <... openat resumed>) = 3 [pid 4998] <... getdents64 resumed>0x555556742620 /* 4 entries */, 32768) = 104 [pid 4995] fstat(3, [pid 4994] getdents64(3, [pid 4998] umount2("./8/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] <... getdents64 resumed>0x555556742620 /* 4 entries */, 32768) = 104 [pid 4995] getdents64(3, [pid 4994] umount2("./8/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] <... getdents64 resumed>0x555556742620 /* 4 entries */, 32768) = 104 [pid 4995] umount2("./8/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] <... umount2 resumed>) = 0 [pid 4996] umount2("./8/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] lstat("./8/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] umount2("./8/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] openat(AT_FDCWD, "./8/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4996] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4996] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4996] close(4) = 0 [pid 4996] rmdir("./8/bus") = 0 [pid 4996] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] lstat("./8/binderfs", [pid 4994] <... umount2 resumed>) = 0 [pid 4996] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4994] umount2("./8/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] unlink("./8/binderfs") = 0 [pid 4996] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4996] close(3) = 0 [pid 4996] rmdir("./8") = 0 [pid 4996] mkdir("./9", 0777 [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] lstat("./8/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] <... mkdir resumed>) = 0 [pid 4994] umount2("./8/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] openat(AT_FDCWD, "./8/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4994] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4994] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4994] close(4) = 0 [pid 4994] rmdir("./8/bus" [pid 4996] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4994] <... rmdir resumed>) = 0 [pid 4996] <... openat resumed>) = 3 [pid 4994] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4996] close(3) = 0 [pid 4996] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567415d0) = 5167 ./strace-static-x86_64: Process 5167 attached [pid 5167] set_robust_list(0x5555567415e0, 24) = 0 [pid 5167] chdir("./9") = 0 [pid 5167] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5167] setpgid(0, 0) = 0 [pid 5167] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5167] write(3, "1000", 4) = 4 [pid 5167] close(3) = 0 [pid 5167] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5167] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5167] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5167] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5167] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5168], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5168 [pid 5167] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5167] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5168 attached [pid 5168] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5168] memfd_create("syzkaller", 0) = 3 [pid 5168] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] lstat("./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4994] unlink("./8/binderfs") = 0 [pid 4994] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4994] close(3) = 0 [pid 4994] rmdir("./8") = 0 [pid 4994] mkdir("./9", 0777) = 0 [pid 4994] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4994] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4994] close(3) = 0 [pid 4994] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567415d0) = 5169 ./strace-static-x86_64: Process 5169 attached [pid 5169] set_robust_list(0x5555567415e0, 24) = 0 [pid 5169] chdir("./9") = 0 [pid 5169] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5169] setpgid(0, 0) = 0 [pid 5169] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5169] write(3, "1000", 4) = 4 [pid 5169] close(3) = 0 [pid 5169] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5169] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5169] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5169] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5169] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5170], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5170 [pid 5169] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5169] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5170 attached [pid 5170] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5170] memfd_create("syzkaller", 0) = 3 [pid 5170] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 5168] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5170] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 4995] <... umount2 resumed>) = 0 [pid 4997] <... umount2 resumed>) = 0 [pid 4997] umount2("./8/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] umount2("./8/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./8/bus", [pid 4995] lstat("./8/bus", [pid 4997] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./8/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] umount2("./8/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./8/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4995] openat(AT_FDCWD, "./8/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] <... openat resumed>) = 4 [pid 4997] fstat(4, [pid 4995] <... openat resumed>) = 4 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] fstat(4, [pid 4997] getdents64(4, [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] <... getdents64 resumed>0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4995] getdents64(4, [pid 4997] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4995] <... getdents64 resumed>0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4997] close(4 [pid 4995] getdents64(4, [pid 4997] <... close resumed>) = 0 [pid 4995] <... getdents64 resumed>0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4997] rmdir("./8/bus" [pid 4995] close(4 [pid 4997] <... rmdir resumed>) = 0 [pid 4995] <... close resumed>) = 0 [pid 4997] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] rmdir("./8/bus" [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./8/binderfs", [pid 4995] <... rmdir resumed>) = 0 [pid 4997] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4995] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] unlink("./8/binderfs" [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] <... unlink resumed>) = 0 [pid 4995] lstat("./8/binderfs", [pid 4997] getdents64(3, [pid 4998] <... umount2 resumed>) = 0 [pid 4995] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] <... getdents64 resumed>0x555556742620 /* 0 entries */, 32768) = 0 [pid 4995] unlink("./8/binderfs" [pid 4997] close(3 [pid 4995] <... unlink resumed>) = 0 [pid 4997] <... close resumed>) = 0 [pid 4995] getdents64(3, [pid 4997] rmdir("./8" [pid 4995] <... getdents64 resumed>0x555556742620 /* 0 entries */, 32768) = 0 [pid 4997] <... rmdir resumed>) = 0 [pid 4995] close(3 [pid 4997] mkdir("./9", 0777 [pid 4995] <... close resumed>) = 0 [pid 4998] umount2("./8/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... mkdir resumed>) = 0 [pid 4995] rmdir("./8" [pid 4997] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4995] <... rmdir resumed>) = 0 [pid 4997] <... openat resumed>) = 3 [pid 4995] mkdir("./9", 0777 [pid 4997] ioctl(3, LOOP_CLR_FD [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] <... mkdir resumed>) = 0 [pid 4997] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4995] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4997] close(3 [pid 4998] lstat("./8/bus", [pid 4995] <... openat resumed>) = 3 [pid 4997] <... close resumed>) = 0 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./8/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./8/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./8/bus" [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4995] ioctl(3, LOOP_CLR_FD [pid 4997] <... clone resumed>, child_tidptr=0x5555567415d0) = 5171 [pid 4995] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] <... rmdir resumed>) = 0 [pid 4995] close(3 [pid 4998] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] <... close resumed>) = 0 [pid 4995] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567415d0) = 5172 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./8/binderfs") = 0 [pid 4998] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./8"./strace-static-x86_64: Process 5171 attached ) = 0 [pid 4998] mkdir("./9", 0777 [pid 5171] set_robust_list(0x5555567415e0, 24 [pid 4998] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 5172 attached [pid 5172] set_robust_list(0x5555567415e0, 24) = 0 [pid 5171] <... set_robust_list resumed>) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5172] chdir("./9" [pid 4998] <... openat resumed>) = 3 [pid 5172] <... chdir resumed>) = 0 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5172] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5171] chdir("./9" [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5172] <... prctl resumed>) = 0 [pid 5171] <... chdir resumed>) = 0 [pid 4998] close(3 [pid 5172] setpgid(0, 0 [pid 5171] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4998] <... close resumed>) = 0 [pid 5172] <... setpgid resumed>) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5172] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4998] <... clone resumed>, child_tidptr=0x5555567415d0) = 5173 [pid 5172] write(3, "1000", 4) = 4 [pid 5172] close(3) = 0 [pid 5172] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5172] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5171] <... prctl resumed>) = 0 [pid 5172] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5171] setpgid(0, 0 [pid 5172] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE [pid 5171] <... setpgid resumed>) = 0 [pid 5172] <... mprotect resumed>) = 0 [pid 5171] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5172] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5171] <... openat resumed>) = 3 [pid 5172] <... clone resumed>, parent_tid=[5174], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5174 [pid 5171] write(3, "1000", 4 [pid 5172] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5171] <... write resumed>) = 4 [pid 5172] <... futex resumed>) = 0 [pid 5171] close(3 [pid 5172] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5171] <... close resumed>) = 0 [pid 5171] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5171] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5171] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 ./strace-static-x86_64: Process 5174 attached [pid 5171] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE [pid 5174] set_robust_list(0x7ff6876bd9e0, 24 [pid 5171] <... mprotect resumed>) = 0 [pid 5174] <... set_robust_list resumed>) = 0 [pid 5174] memfd_create("syzkaller", 0 [pid 5171] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5174] <... memfd_create resumed>) = 3 [pid 5174] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 5171] <... clone resumed>, parent_tid=[5175], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5175 [pid 5171] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5171] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5175 attached ./strace-static-x86_64: Process 5173 attached [pid 5173] set_robust_list(0x5555567415e0, 24 [pid 5175] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5173] <... set_robust_list resumed>) = 0 [pid 5173] chdir("./9" [pid 5175] memfd_create("syzkaller", 0 [pid 5173] <... chdir resumed>) = 0 [pid 5173] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5175] <... memfd_create resumed>) = 3 [pid 5173] <... prctl resumed>) = 0 [pid 5175] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5173] setpgid(0, 0) = 0 [pid 5175] <... mmap resumed>) = 0x7ff67f29d000 [pid 5173] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5173] write(3, "1000", 4) = 4 [pid 5173] close(3) = 0 [pid 5173] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5168] <... write resumed>) = 16777216 [pid 5173] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5173] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5173] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5173] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5176], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5176 [pid 5173] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5173] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5176 attached [pid 5176] set_robust_list(0x7ff6876bd9e0, 24 [pid 5168] munmap(0x7ff67f29d000, 16777216 [pid 5176] <... set_robust_list resumed>) = 0 [pid 5176] memfd_create("syzkaller", 0) = 3 [pid 5176] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 5168] <... munmap resumed>) = 0 [pid 5168] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5168] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5168] close(3) = 0 [pid 5168] mkdir("./bus", 0777) = 0 [pid 5168] mount("/dev/loop3", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 4993] <... umount2 resumed>) = 0 [pid 4993] umount2("./8/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4993] lstat("./8/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5168] <... mount resumed>) = 0 [pid 4993] umount2("./8/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5168] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 4993] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4993] openat(AT_FDCWD, "./8/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4993] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5168] chdir("./bus" [ 81.619412][ T5168] loop3: detected capacity change from 0 to 32768 [pid 4993] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 5168] <... chdir resumed>) = 0 [pid 4993] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4993] close(4) = 0 [pid 4993] rmdir("./8/bus" [pid 5168] ioctl(4, LOOP_CLR_FD [pid 4993] <... rmdir resumed>) = 0 [pid 4993] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5168] <... ioctl resumed>) = 0 [pid 4993] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5168] close(4 [pid 4993] lstat("./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4993] unlink("./8/binderfs") = 0 [pid 4993] getdents64(3, [pid 5168] <... close resumed>) = 0 [pid 4993] <... getdents64 resumed>0x555556742620 /* 0 entries */, 32768) = 0 [pid 5168] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 4993] close(3 [pid 5168] <... futex resumed>) = 1 [pid 5167] <... futex resumed>) = 0 [pid 4993] <... close resumed>) = 0 [pid 5168] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5167] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4993] rmdir("./8" [pid 5168] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5167] <... futex resumed>) = 0 [pid 4993] <... rmdir resumed>) = 0 [pid 5168] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5167] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4993] mkdir("./9", 0777 [pid 5168] <... open resumed>) = 4 [pid 4993] <... mkdir resumed>) = 0 [pid 5168] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 4993] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5168] <... futex resumed>) = 1 [pid 5167] <... futex resumed>) = 0 [pid 4993] <... openat resumed>) = 3 [pid 5168] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5167] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4993] ioctl(3, LOOP_CLR_FD [pid 5168] <... open resumed>) = 5 [pid 5167] <... futex resumed>) = 0 [pid 4993] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5168] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5167] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4993] close(3 [pid 5168] <... futex resumed>) = 0 [pid 5167] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4993] <... close resumed>) = 0 [pid 5168] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5167] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4993] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5168] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5167] <... futex resumed>) = 0 [pid 5168] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5167] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4993] <... clone resumed>, child_tidptr=0x5555567415d0) = 5177 [pid 5168] <... mmap resumed>) = 0x20000000 [pid 5168] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5167] <... futex resumed>) = 0 [pid 5168] <... futex resumed>) = 1 [pid 5167] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5168] ftruncate(4, 33587199 [pid 5167] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5177 attached [pid 5167] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5168] <... ftruncate resumed>) = 0 [pid 5168] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5168] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5167] <... futex resumed>) = 0 [pid 5167] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5177] set_robust_list(0x5555567415e0, 24 [pid 5168] <... futex resumed>) = 0 [pid 5167] <... futex resumed>) = 1 [pid 5177] <... set_robust_list resumed>) = 0 [pid 5177] chdir("./9") = 0 [pid 5177] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5168] open("./bus", O_RDONLY [pid 5167] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5177] <... prctl resumed>) = 0 [pid 5177] setpgid(0, 0 [pid 5168] <... open resumed>) = 6 [pid 5177] <... setpgid resumed>) = 0 [pid 5177] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5168] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5177] <... openat resumed>) = 3 [pid 5168] <... futex resumed>) = 1 [pid 5167] <... futex resumed>) = 0 [pid 5177] write(3, "1000", 4 [pid 5168] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5167] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5177] <... write resumed>) = 4 [pid 5168] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5167] <... futex resumed>) = 0 [pid 5177] close(3 [pid 5168] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5167] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5177] <... close resumed>) = 0 [pid 5177] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5168] <... open resumed>) = 7 [pid 5177] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5168] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5177] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5168] <... futex resumed>) = 1 [pid 5167] <... futex resumed>) = 0 [pid 5177] <... mmap resumed>) = 0x7ff68769d000 [pid 5168] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5167] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5177] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE [pid 5168] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5177] <... mprotect resumed>) = 0 [pid 5168] dup(7 [pid 5167] <... futex resumed>) = 0 [pid 5177] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5168] <... dup resumed>) = 8 [pid 5167] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5177] <... clone resumed>, parent_tid=[5178], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5178 [pid 5168] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5177] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5168] <... futex resumed>) = 0 [pid 5167] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5177] <... futex resumed>) = 0 [pid 5168] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5167] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5177] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5168] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5167] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5178 attached [pid 5178] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5178] memfd_create("syzkaller", 0) = 3 [pid 5178] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5168] memfd_create("syzkaller", 0 [pid 5167] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5178] <... mmap resumed>) = 0x7ff67f29d000 [pid 5168] <... memfd_create resumed>) = 9 [pid 5168] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff677e9d000 [pid 5168] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5168] munmap(0x7ff677e9d000, 2097152) = 0 [pid 5168] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 10 [pid 5168] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5168] ioctl(10, LOOP_CLR_FD) = 0 [pid 5168] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5168] close(10) = 0 [pid 5168] close(9 [pid 5170] <... write resumed>) = 16777216 [pid 5170] munmap(0x7ff67f29d000, 16777216) = 0 [pid 5168] <... close resumed>) = 0 [pid 5168] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5167] <... futex resumed>) = 0 [pid 5168] sendfile(8, 6, NULL, 281474978811908 [pid 5167] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5174] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5167] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5170] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5170] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5170] close(3) = 0 [pid 5170] mkdir("./bus", 0777) = 0 [pid 5170] mount("/dev/loop1", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "") = 0 [pid 5170] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5170] chdir("./bus") = 0 [pid 5170] ioctl(4, LOOP_CLR_FD [pid 5175] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5170] <... ioctl resumed>) = 0 [pid 5167] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5170] close(4 [ 81.977313][ T5170] loop1: detected capacity change from 0 to 32768 [pid 5167] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5176] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5170] <... close resumed>) = 0 [pid 5170] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5167] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5170] <... futex resumed>) = 1 [pid 5169] <... futex resumed>) = 0 [pid 5170] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5169] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5167] <... mmap resumed>) = 0x7ff67807c000 [pid 5170] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5169] <... futex resumed>) = 0 [pid 5167] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5170] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5169] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5170] <... open resumed>) = 4 [pid 5167] <... mprotect resumed>) = 0 [pid 5170] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5169] <... futex resumed>) = 0 [pid 5167] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5169] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5169] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5170] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 5167] <... clone resumed>, parent_tid=[5179], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5179 [pid 5170] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5167] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5170] <... futex resumed>) = 1 [pid 5169] <... futex resumed>) = 0 [pid 5167] <... futex resumed>) = 0 [pid 5169] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5167] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5170] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5169] <... futex resumed>) = 0 [pid 5169] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5170] <... mmap resumed>) = 0x20000000 [pid 5170] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5169] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5179 attached [pid 5170] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5169] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5170] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5169] <... futex resumed>) = 0 [pid 5179] set_robust_list(0x7ff67809c9e0, 24 [pid 5169] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5170] ftruncate(4, 33587199) = 0 [pid 5170] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5169] <... futex resumed>) = 0 [pid 5170] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5169] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5179] <... set_robust_list resumed>) = 0 [pid 5170] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5169] <... futex resumed>) = 0 [pid 5169] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5170] open("./bus", O_RDONLY) = 6 [pid 5170] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5179] sync( [pid 5170] <... futex resumed>) = 1 [pid 5169] <... futex resumed>) = 0 [pid 5170] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5169] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5170] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5169] <... futex resumed>) = 0 [pid 5169] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5170] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5170] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5169] <... futex resumed>) = 0 [pid 5170] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5169] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5170] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5169] <... futex resumed>) = 0 [pid 5170] dup(7 [pid 5169] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5170] <... dup resumed>) = 8 [pid 5170] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5167] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5170] <... futex resumed>) = 1 [pid 5169] <... futex resumed>) = 0 [pid 5169] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5169] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5170] memfd_create("syzkaller", 0 [pid 5179] <... sync resumed>) = 0 [pid 5179] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5170] <... memfd_create resumed>) = 9 [pid 5179] <... futex resumed>) = 0 [pid 5170] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5179] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5170] <... mmap resumed>) = 0x7ff677e9d000 [pid 5170] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5178] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5170] <... write resumed>) = 2097152 [pid 5170] munmap(0x7ff677e9d000, 2097152) = 0 [pid 5170] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 10 [pid 5170] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5170] ioctl(10, LOOP_CLR_FD) = 0 [pid 5170] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5170] close(10) = 0 [pid 5170] close(9) = 0 [pid 5170] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5169] <... futex resumed>) = 0 [pid 5170] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5169] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5170] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5169] <... futex resumed>) = 0 [pid 5170] sendfile(8, 6, NULL, 281474978811908 [pid 5169] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5169] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5169] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff67807c000 [pid 5169] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5169] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5180], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5180 [pid 5169] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5169] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5180 attached [pid 5180] set_robust_list(0x7ff67809c9e0, 24) = 0 [pid 5180] sync() = 0 [pid 5180] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5169] <... futex resumed>) = 0 [pid 5180] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5167] exit_group(0 [pid 5179] <... futex resumed>) = ? [pid 5167] <... exit_group resumed>) = ? [pid 5179] +++ exited with 0 +++ [pid 5168] <... sendfile resumed>) = ? [pid 5168] +++ exited with 0 +++ [pid 5167] +++ exited with 0 +++ [pid 4996] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5167, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=35 /* 0.35 s */} --- [pid 4996] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4996] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4996] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] getdents64(3, 0x555556742620 /* 4 entries */, 32768) = 104 [pid 4996] umount2("./9/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5174] <... write resumed>) = 16777216 [pid 5174] munmap(0x7ff67f29d000, 16777216) = 0 [pid 5174] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5174] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5175] <... write resumed>) = 16777216 [pid 5175] munmap(0x7ff67f29d000, 16777216 [pid 5174] close(3) = 0 [pid 5174] mkdir("./bus", 0777) = 0 [pid 5174] mount("/dev/loop2", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5176] <... write resumed>) = 16777216 [pid 5176] munmap(0x7ff67f29d000, 16777216 [pid 5174] <... mount resumed>) = 0 [pid 5175] <... munmap resumed>) = 0 [pid 5174] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5175] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5174] <... openat resumed>) = 3 [pid 5175] <... openat resumed>) = 4 [pid 5174] chdir("./bus" [pid 5175] ioctl(4, LOOP_SET_FD, 3 [pid 5174] <... chdir resumed>) = 0 [ 82.587899][ T5174] loop2: detected capacity change from 0 to 32768 [pid 5174] ioctl(4, LOOP_CLR_FD) = 0 [pid 5174] close(4) = 0 [pid 5174] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5172] <... futex resumed>) = 0 [pid 5174] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5172] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5174] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5172] <... futex resumed>) = 0 [pid 5174] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5172] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5174] <... open resumed>) = 4 [pid 5174] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5172] <... futex resumed>) = 0 [pid 5174] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5172] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5174] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5172] <... futex resumed>) = 0 [pid 5174] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5172] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5174] <... open resumed>) = 5 [pid 5174] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5172] <... futex resumed>) = 0 [pid 5176] <... munmap resumed>) = 0 [pid 5174] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5172] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5176] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5175] <... ioctl resumed>) = 0 [pid 5174] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5172] <... futex resumed>) = 0 [pid 5175] close(3 [pid 5174] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5172] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5176] <... openat resumed>) = 4 [pid 5175] <... close resumed>) = 0 [pid 5174] <... mmap resumed>) = 0x20000000 [pid 5176] ioctl(4, LOOP_SET_FD, 3 [pid 5175] mkdir("./bus", 0777 [ 82.636678][ T5175] loop4: detected capacity change from 0 to 32768 [pid 5174] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5172] <... futex resumed>) = 0 [pid 5174] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5172] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5174] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5172] <... futex resumed>) = 0 [pid 5174] ftruncate(4, 33587199 [pid 5172] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5174] <... ftruncate resumed>) = 0 [pid 5174] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5172] <... futex resumed>) = 0 [pid 5174] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5172] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5174] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5172] <... futex resumed>) = 0 [pid 5175] <... mkdir resumed>) = 0 [pid 5174] open("./bus", O_RDONLY [pid 5172] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5175] mount("/dev/loop4", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5174] <... open resumed>) = 6 [pid 5174] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5172] <... futex resumed>) = 0 [pid 5174] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5172] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5174] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5172] <... futex resumed>) = 0 [pid 5174] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5172] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5175] <... mount resumed>) = 0 [pid 5174] <... open resumed>) = 7 [pid 5176] <... ioctl resumed>) = 0 [pid 5175] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5174] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5176] close(3 [pid 5175] <... openat resumed>) = 3 [pid 5174] <... futex resumed>) = 1 [pid 5172] <... futex resumed>) = 0 [pid 5176] <... close resumed>) = 0 [pid 5175] chdir("./bus" [pid 5174] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5172] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5176] mkdir("./bus", 0777 [pid 5175] <... chdir resumed>) = 0 [pid 5174] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5172] <... futex resumed>) = 0 [pid 5176] <... mkdir resumed>) = 0 [pid 5175] ioctl(4, LOOP_CLR_FD [pid 5174] dup(7 [pid 5172] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5176] mount("/dev/loop5", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5175] <... ioctl resumed>) = 0 [pid 5174] <... dup resumed>) = 8 [pid 5174] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5175] close(4 [pid 5174] <... futex resumed>) = 1 [pid 5172] <... futex resumed>) = 0 [pid 5176] <... mount resumed>) = 0 [pid 5175] <... close resumed>) = 0 [pid 5174] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5172] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5174] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5172] <... futex resumed>) = 0 [pid 5176] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5175] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5174] memfd_create("syzkaller", 0 [pid 5172] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5176] <... openat resumed>) = 3 [pid 5175] <... futex resumed>) = 1 [pid 5174] <... memfd_create resumed>) = 9 [pid 5171] <... futex resumed>) = 0 [pid 5176] chdir("./bus" [pid 5175] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5174] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [ 82.678715][ T5176] loop5: detected capacity change from 0 to 32768 [pid 5171] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5176] <... chdir resumed>) = 0 [pid 5175] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5174] <... mmap resumed>) = 0x7ff677e9d000 [pid 5171] <... futex resumed>) = 0 [pid 5178] <... write resumed>) = 16777216 [pid 5176] ioctl(4, LOOP_CLR_FD [pid 5175] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5171] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5176] <... ioctl resumed>) = 0 [pid 5175] <... open resumed>) = 4 [pid 5176] close(4 [pid 5175] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5176] <... close resumed>) = 0 [pid 5175] <... futex resumed>) = 1 [pid 5171] <... futex resumed>) = 0 [pid 5176] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5175] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5171] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5178] munmap(0x7ff67f29d000, 16777216 [pid 5176] <... futex resumed>) = 1 [pid 5175] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5173] <... futex resumed>) = 0 [pid 5171] <... futex resumed>) = 0 [pid 5178] <... munmap resumed>) = 0 [pid 5176] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5175] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5173] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5171] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5176] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5175] <... open resumed>) = 5 [pid 5173] <... futex resumed>) = 0 [pid 5178] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5176] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5175] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5173] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5178] <... openat resumed>) = 4 [pid 5178] ioctl(4, LOOP_SET_FD, 3 [pid 5176] <... open resumed>) = 4 [pid 5175] <... futex resumed>) = 1 [pid 5171] <... futex resumed>) = 0 [pid 5176] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5175] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5171] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5176] <... futex resumed>) = 1 [pid 5173] <... futex resumed>) = 0 [pid 5178] <... ioctl resumed>) = 0 [pid 5176] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5175] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5173] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5171] <... futex resumed>) = 0 [pid 5178] close(3 [pid 5176] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5175] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5174] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5173] <... futex resumed>) = 0 [pid 5171] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5178] <... close resumed>) = 0 [pid 5176] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5175] <... mmap resumed>) = 0x20000000 [pid 5178] mkdir("./bus", 0777 [pid 5176] <... open resumed>) = 5 [pid 5175] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5173] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5178] <... mkdir resumed>) = 0 [pid 5176] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5175] <... futex resumed>) = 1 [pid 5173] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5171] <... futex resumed>) = 0 [pid 5178] mount("/dev/loop0", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5176] <... futex resumed>) = 0 [pid 5175] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5173] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5171] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5173] <... futex resumed>) = 0 [pid 5171] <... futex resumed>) = 0 [pid 5176] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5175] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5173] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5171] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5176] <... mmap resumed>) = 0x20000000 [pid 5175] ftruncate(4, 33587199 [pid 5176] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5175] <... ftruncate resumed>) = 0 [pid 5176] <... futex resumed>) = 1 [pid 5175] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5173] <... futex resumed>) = 0 [pid 5178] <... mount resumed>) = 0 [pid 5176] ftruncate(4, 33587199 [pid 5175] <... futex resumed>) = 1 [pid 5173] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5171] <... futex resumed>) = 0 [pid 5178] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5176] <... ftruncate resumed>) = 0 [pid 5175] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5173] <... futex resumed>) = 0 [pid 5171] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5176] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5175] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5173] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5171] <... futex resumed>) = 0 [pid 5171] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5176] <... futex resumed>) = 0 [pid 5175] open("./bus", O_RDONLY [pid 5178] <... openat resumed>) = 3 [pid 5173] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5178] chdir("./bus" [pid 5176] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5175] <... open resumed>) = 6 [pid 5173] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5178] <... chdir resumed>) = 0 [pid 5176] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5175] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5173] <... futex resumed>) = 0 [ 82.776224][ T5178] loop0: detected capacity change from 0 to 32768 [pid 5173] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5178] ioctl(4, LOOP_CLR_FD [pid 5176] open("./bus", O_RDONLY [pid 5175] <... futex resumed>) = 1 [pid 5171] <... futex resumed>) = 0 [pid 5178] <... ioctl resumed>) = 0 [pid 5176] <... open resumed>) = 6 [pid 5175] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5174] <... write resumed>) = 2097152 [pid 5171] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5178] close(4 [pid 5176] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5175] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5174] munmap(0x7ff677e9d000, 2097152 [pid 5171] <... futex resumed>) = 0 [pid 5178] <... close resumed>) = 0 [pid 5176] <... futex resumed>) = 1 [pid 5175] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5174] <... munmap resumed>) = 0 [pid 5173] <... futex resumed>) = 0 [pid 5171] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5178] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5176] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5175] <... open resumed>) = 7 [pid 5173] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5178] <... futex resumed>) = 1 [pid 5177] <... futex resumed>) = 0 [pid 5176] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5175] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5173] <... futex resumed>) = 0 [pid 5178] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5177] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5176] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5175] <... futex resumed>) = 1 [pid 5174] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5173] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5171] <... futex resumed>) = 0 [pid 5178] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5177] <... futex resumed>) = 0 [pid 5176] <... open resumed>) = 7 [pid 5175] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5174] <... openat resumed>) = 10 [pid 5171] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5178] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5177] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5176] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5175] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5174] ioctl(10, LOOP_SET_FD, 9 [pid 5171] <... futex resumed>) = 0 [pid 5178] <... open resumed>) = 4 [pid 5176] <... futex resumed>) = 1 [pid 5175] dup(7 [pid 5174] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5173] <... futex resumed>) = 0 [pid 5171] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5178] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5176] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5175] <... dup resumed>) = 8 [pid 5174] ioctl(10, LOOP_CLR_FD [pid 5173] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5178] <... futex resumed>) = 1 [pid 5177] <... futex resumed>) = 0 [pid 5176] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5175] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5174] <... ioctl resumed>) = 0 [pid 5173] <... futex resumed>) = 0 [pid 5178] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5177] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5176] dup(7 [pid 5175] <... futex resumed>) = 1 [pid 5173] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5171] <... futex resumed>) = 0 [pid 5178] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5177] <... futex resumed>) = 0 [pid 5176] <... dup resumed>) = 8 [pid 5175] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5171] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5178] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5177] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5176] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5175] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5174] ioctl(10, LOOP_SET_FD, 9 [pid 5171] <... futex resumed>) = 0 [pid 5178] <... open resumed>) = 5 [pid 5176] <... futex resumed>) = 1 [pid 5174] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5174] close(10) = 0 [pid 5174] close(9 [pid 5173] <... futex resumed>) = 0 [pid 5171] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5174] <... close resumed>) = 0 [pid 5169] exit_group(0) = ? [pid 5174] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5172] <... futex resumed>) = 0 [pid 5172] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5172] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5174] <... futex resumed>) = 1 [pid 5174] sendfile(8, 6, NULL, 281474978811908 [pid 5180] <... futex resumed>) = ? [pid 5178] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5176] memfd_create("syzkaller", 0 [pid 5175] memfd_create("syzkaller", 0 [pid 5173] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5170] <... sendfile resumed>) = ? [pid 5180] +++ exited with 0 +++ [pid 5178] <... futex resumed>) = 1 [pid 5177] <... futex resumed>) = 0 [pid 5176] <... memfd_create resumed>) = 9 [pid 5175] <... memfd_create resumed>) = 9 [pid 5173] <... futex resumed>) = 0 [pid 5170] +++ exited with 0 +++ [pid 5169] +++ exited with 0 +++ [pid 5178] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5177] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5176] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5175] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5173] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4994] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5169, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=34 /* 0.34 s */} --- [pid 5178] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5177] <... futex resumed>) = 0 [pid 5176] <... mmap resumed>) = 0x7ff677e9d000 [pid 5175] <... mmap resumed>) = 0x7ff677e9d000 [pid 5178] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5177] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4994] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4994] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] getdents64(3, 0x555556742620 /* 4 entries */, 32768) = 104 [pid 4994] umount2("./9/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5178] <... mmap resumed>) = 0x20000000 [pid 5178] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5177] <... futex resumed>) = 0 [pid 5178] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5177] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5178] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5177] <... futex resumed>) = 0 [pid 5178] ftruncate(4, 33587199 [pid 5177] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5178] <... ftruncate resumed>) = 0 [pid 5178] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5172] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5178] <... futex resumed>) = 1 [pid 5177] <... futex resumed>) = 0 [pid 5172] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5178] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5177] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5172] <... futex resumed>) = 0 [pid 5178] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5177] <... futex resumed>) = 0 [pid 5172] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5178] open("./bus", O_RDONLY [pid 5177] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5172] <... mmap resumed>) = 0x7ff67807c000 [pid 5178] <... open resumed>) = 6 [pid 5172] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5178] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5172] <... mprotect resumed>) = 0 [pid 5178] <... futex resumed>) = 1 [pid 5177] <... futex resumed>) = 0 [pid 5172] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5178] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5177] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5178] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5177] <... futex resumed>) = 0 [pid 5172] <... clone resumed>, parent_tid=[5181], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5181 [pid 5178] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5177] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5172] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5178] <... open resumed>) = 7 [pid 5172] <... futex resumed>) = 0 [pid 5178] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5172] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5178] <... futex resumed>) = 1 [pid 5177] <... futex resumed>) = 0 [pid 5178] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5177] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5181 attached [pid 5178] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5177] <... futex resumed>) = 0 [pid 5181] set_robust_list(0x7ff67809c9e0, 24 [pid 5178] dup(7 [pid 5177] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5181] <... set_robust_list resumed>) = 0 [pid 5178] <... dup resumed>) = 8 [pid 5176] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5175] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5181] sync( [pid 5178] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5177] <... futex resumed>) = 0 [pid 5177] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5178] memfd_create("syzkaller", 0 [pid 5177] <... futex resumed>) = 0 [pid 5177] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5178] <... memfd_create resumed>) = 9 [pid 5178] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4996] <... umount2 resumed>) = 0 [pid 4996] umount2("./9/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5178] <... mmap resumed>) = 0x7ff677e9d000 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4996] lstat("./9/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] umount2("./9/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] openat(AT_FDCWD, "./9/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4996] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4996] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4996] close(4) = 0 [pid 4996] rmdir("./9/bus") = 0 [pid 4996] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] lstat("./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4996] unlink("./9/binderfs") = 0 [pid 4996] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 5172] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4996] close(3) = 0 [pid 4996] rmdir("./9") = 0 [pid 4996] mkdir("./10", 0777) = 0 [pid 4996] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 4996] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4996] close(3) = 0 [pid 4996] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567415d0) = 5182 ./strace-static-x86_64: Process 5182 attached [pid 5182] set_robust_list(0x5555567415e0, 24 [pid 5176] <... write resumed>) = 2097152 [pid 5182] <... set_robust_list resumed>) = 0 [pid 5175] <... write resumed>) = 2097152 [pid 5176] munmap(0x7ff677e9d000, 2097152 [pid 5182] chdir("./10" [pid 5178] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5175] munmap(0x7ff677e9d000, 2097152 [pid 5182] <... chdir resumed>) = 0 [pid 5176] <... munmap resumed>) = 0 [pid 5182] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5182] setpgid(0, 0) = 0 [pid 5176] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5175] <... munmap resumed>) = 0 [pid 5182] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5176] <... openat resumed>) = 10 [pid 5175] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5182] <... openat resumed>) = 3 [pid 5176] ioctl(10, LOOP_SET_FD, 9 [pid 5175] <... openat resumed>) = 10 [pid 5182] write(3, "1000", 4 [pid 5176] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5175] ioctl(10, LOOP_SET_FD, 9 [pid 5182] <... write resumed>) = 4 [pid 5176] ioctl(10, LOOP_CLR_FD [pid 5182] close(3 [pid 5176] <... ioctl resumed>) = 0 [pid 5175] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5182] <... close resumed>) = 0 [pid 5175] ioctl(10, LOOP_CLR_FD [pid 5182] symlink("/dev/binderfs", "./binderfs" [pid 5175] <... ioctl resumed>) = 0 [pid 5182] <... symlink resumed>) = 0 [pid 5182] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5176] ioctl(10, LOOP_SET_FD, 9 [pid 5182] <... futex resumed>) = 0 [pid 5176] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5182] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5176] close(10 [pid 5175] ioctl(10, LOOP_SET_FD, 9 [pid 5182] <... mmap resumed>) = 0x7ff68769d000 [pid 5176] <... close resumed>) = 0 [pid 5182] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5182] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5183], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5183 [pid 5182] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5182] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5183 attached [pid 5183] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5183] memfd_create("syzkaller", 0) = 3 [pid 5183] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 5176] close(9 [pid 5175] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5178] <... write resumed>) = 2097152 [pid 5176] <... close resumed>) = 0 [pid 5175] close(10) = 0 [pid 5175] close(9 [pid 5178] munmap(0x7ff677e9d000, 2097152 [pid 5175] <... close resumed>) = 0 [pid 5175] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5176] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5175] <... futex resumed>) = 1 [pid 5171] <... futex resumed>) = 0 [pid 5175] sendfile(8, 6, NULL, 281474978811908 [pid 5173] <... futex resumed>) = 0 [pid 5171] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5176] <... futex resumed>) = 1 [pid 5173] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5171] <... futex resumed>) = 0 [pid 5178] <... munmap resumed>) = 0 [pid 5176] sendfile(8, 6, NULL, 281474978811908 [pid 5173] <... futex resumed>) = 0 [pid 5171] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5173] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5178] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 10 [pid 5178] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5178] ioctl(10, LOOP_CLR_FD) = 0 [pid 5178] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5178] close(10) = 0 [pid 5178] close(9) = 0 [pid 5178] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5177] <... futex resumed>) = 0 [pid 5178] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5173] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5171] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5178] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5177] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5173] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5181] <... sync resumed>) = 0 [pid 5178] sendfile(8, 6, NULL, 281474978811908 [pid 5177] <... futex resumed>) = 0 [pid 5173] <... futex resumed>) = 0 [pid 5171] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5181] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5177] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5173] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5171] <... futex resumed>) = 0 [pid 5181] <... futex resumed>) = 0 [pid 5173] <... mmap resumed>) = 0x7ff67807c000 [pid 5181] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5173] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5171] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5173] <... mprotect resumed>) = 0 [pid 5173] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5171] <... mmap resumed>) = 0x7ff67807c000 [pid 5171] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5173] <... clone resumed>, parent_tid=[5184], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5184 [pid 5173] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5171] <... mprotect resumed>) = 0 [pid 5173] <... futex resumed>) = 0 [pid 5171] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5173] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5171] <... clone resumed>, parent_tid=[5185], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5185 [pid 5171] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5171] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5185 attached ./strace-static-x86_64: Process 5184 attached [pid 5185] set_robust_list(0x7ff67809c9e0, 24 [pid 5177] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5185] <... set_robust_list resumed>) = 0 [pid 5184] set_robust_list(0x7ff67809c9e0, 24 [pid 5177] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5185] sync( [pid 5184] <... set_robust_list resumed>) = 0 [pid 5177] <... futex resumed>) = 0 [pid 5185] <... sync resumed>) = 0 [pid 5184] sync( [pid 5177] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5185] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5177] <... mmap resumed>) = 0x7ff67807c000 [pid 5185] <... futex resumed>) = 1 [pid 5171] <... futex resumed>) = 0 [pid 5185] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5177] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5177] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5184] <... sync resumed>) = 0 [pid 5184] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5177] <... clone resumed>, parent_tid=[5186], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5186 [pid 5184] <... futex resumed>) = 1 [pid 5177] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5173] <... futex resumed>) = 0 [pid 5184] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5177] <... futex resumed>) = 0 [pid 5177] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5186 attached [pid 5186] set_robust_list(0x7ff67809c9e0, 24) = 0 [pid 5186] sync() = 0 [pid 5186] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5177] <... futex resumed>) = 0 [pid 5186] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5172] exit_group(0 [pid 5181] <... futex resumed>) = ? [pid 5172] <... exit_group resumed>) = ? [pid 5181] +++ exited with 0 +++ [pid 5174] <... sendfile resumed>) = ? [pid 5174] +++ exited with 0 +++ [pid 5172] +++ exited with 0 +++ [pid 4995] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5172, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=46 /* 0.46 s */} --- [pid 4995] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4995] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4995] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4995] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] getdents64(3, 0x555556742620 /* 4 entries */, 32768) = 104 [pid 4995] umount2("./9/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] <... umount2 resumed>) = 0 [pid 4994] umount2("./9/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] lstat("./9/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] umount2("./9/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] openat(AT_FDCWD, "./9/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4994] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4994] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4994] close(4) = 0 [pid 4994] rmdir("./9/bus") = 0 [pid 4994] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] lstat("./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4994] unlink("./9/binderfs") = 0 [pid 4994] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4994] close(3) = 0 [pid 4994] rmdir("./9") = 0 [pid 4994] mkdir("./10", 0777) = 0 [pid 4994] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4994] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4994] close(3) = 0 [pid 4994] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567415d0) = 5187 ./strace-static-x86_64: Process 5187 attached [pid 5187] set_robust_list(0x5555567415e0, 24) = 0 [pid 5187] chdir("./10") = 0 [pid 5187] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5183] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5187] setpgid(0, 0) = 0 [pid 5187] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5187] write(3, "1000", 4) = 4 [pid 5187] close(3) = 0 [pid 5187] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5187] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5187] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5187] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5187] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5188], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5188 [pid 5187] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5187] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5188 attached [pid 5188] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5188] memfd_create("syzkaller", 0) = 3 [pid 5188] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 5171] exit_group(0 [pid 5185] <... futex resumed>) = ? [pid 5171] <... exit_group resumed>) = ? [pid 5185] +++ exited with 0 +++ [pid 5175] <... sendfile resumed>) = ? [pid 5177] exit_group(0 [pid 5186] <... futex resumed>) = ? [pid 5177] <... exit_group resumed>) = ? [pid 5186] +++ exited with 0 +++ [pid 5175] +++ exited with 0 +++ [pid 5171] +++ exited with 0 +++ [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5171, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=39 /* 0.39 s */} --- [pid 4997] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4997] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(3, [pid 5173] exit_group(0 [pid 4997] <... getdents64 resumed>0x555556742620 /* 4 entries */, 32768) = 104 [pid 5184] <... futex resumed>) = ? [pid 5173] <... exit_group resumed>) = ? [pid 4997] umount2("./9/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5184] +++ exited with 0 +++ [pid 5178] <... sendfile resumed>) = ? [pid 5178] +++ exited with 0 +++ [pid 5177] +++ exited with 0 +++ [pid 5176] <... sendfile resumed>) = ? [pid 4993] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5177, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=36 /* 0.36 s */} --- [pid 5176] +++ exited with 0 +++ [pid 5173] +++ exited with 0 +++ [pid 4993] restart_syscall(<... resuming interrupted clone ...> [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5173, si_uid=0, si_status=0, si_utime=11 /* 0.11 s */, si_stime=36 /* 0.36 s */} --- [pid 4993] <... restart_syscall resumed>) = 0 [pid 4993] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4993] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4993] fstat(3, [pid 4998] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4993] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4993] getdents64(3, [pid 4998] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4993] <... getdents64 resumed>0x555556742620 /* 4 entries */, 32768) = 104 [pid 4998] <... openat resumed>) = 3 [pid 4993] umount2("./9/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x555556742620 /* 4 entries */, 32768) = 104 [pid 4998] umount2("./9/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... umount2 resumed>) = 0 [pid 4997] umount2("./9/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./9/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./9/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./9/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4997] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4997] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4997] close(4) = 0 [pid 4997] rmdir("./9/bus") = 0 [pid 4997] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] unlink("./9/binderfs") = 0 [pid 4997] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4997] close(3) = 0 [pid 4997] rmdir("./9") = 0 [pid 4997] mkdir("./10", 0777) = 0 [pid 4997] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 4997] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4997] close(3) = 0 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567415d0) = 5189 ./strace-static-x86_64: Process 5189 attached [pid 5189] set_robust_list(0x5555567415e0, 24) = 0 [pid 5189] chdir("./10") = 0 [pid 5188] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5189] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5189] setpgid(0, 0) = 0 [pid 5189] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5189] write(3, "1000", 4) = 4 [pid 5189] close(3) = 0 [pid 5189] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5189] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5189] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5189] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5189] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5190], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5190 [pid 5189] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5189] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5190 attached [pid 5190] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5190] memfd_create("syzkaller", 0) = 3 [pid 5190] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 4993] <... umount2 resumed>) = 0 [pid 4993] umount2("./9/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4993] lstat("./9/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4993] umount2("./9/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4993] openat(AT_FDCWD, "./9/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4993] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4993] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4993] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4993] close(4) = 0 [pid 4993] rmdir("./9/bus") = 0 [pid 4993] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4993] lstat("./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4993] unlink("./9/binderfs") = 0 [pid 4993] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4993] close(3) = 0 [pid 4993] rmdir("./9") = 0 [pid 4993] mkdir("./10", 0777) = 0 [pid 4993] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4993] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4993] close(3) = 0 [pid 4993] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567415d0) = 5191 ./strace-static-x86_64: Process 5191 attached [pid 5191] set_robust_list(0x5555567415e0, 24) = 0 [pid 5191] chdir("./10") = 0 [pid 5191] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5191] setpgid(0, 0) = 0 [pid 5191] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5191] write(3, "1000", 4) = 4 [pid 5191] close(3) = 0 [pid 5191] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5191] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5191] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5191] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE [pid 5183] <... write resumed>) = 16777216 [pid 5191] <... mprotect resumed>) = 0 [pid 5191] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5192], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5192 [pid 5183] munmap(0x7ff67f29d000, 16777216 [pid 5191] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5191] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5192 attached [pid 5192] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5192] memfd_create("syzkaller", 0) = 3 [pid 5183] <... munmap resumed>) = 0 [pid 5192] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 5183] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5183] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5183] close(3) = 0 [pid 5183] mkdir("./bus", 0777) = 0 [pid 5183] mount("/dev/loop3", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "") = 0 [pid 5183] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5183] chdir("./bus") = 0 [pid 5183] ioctl(4, LOOP_CLR_FD) = 0 [pid 5183] close(4) = 0 [ 84.190162][ T5183] loop3: detected capacity change from 0 to 32768 [pid 5183] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5182] <... futex resumed>) = 0 [pid 5183] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5182] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5183] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5182] <... futex resumed>) = 0 [pid 5183] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5182] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5183] <... open resumed>) = 4 [pid 5183] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5182] <... futex resumed>) = 0 [pid 5183] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5182] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5183] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5182] <... futex resumed>) = 0 [pid 5183] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5182] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5183] <... open resumed>) = 5 [pid 5183] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5182] <... futex resumed>) = 0 [pid 5183] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5182] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5183] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5182] <... futex resumed>) = 0 [pid 5183] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5182] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5183] <... mmap resumed>) = 0x20000000 [pid 5183] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5182] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5183] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5182] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5183] <... futex resumed>) = 0 [pid 5182] <... futex resumed>) = 1 [pid 5183] ftruncate(4, 33587199) = 0 [pid 5182] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5183] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5182] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5183] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5182] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5183] <... futex resumed>) = 0 [pid 5182] <... futex resumed>) = 1 [pid 5182] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5183] open("./bus", O_RDONLY) = 6 [pid 5183] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5182] <... futex resumed>) = 0 [pid 5183] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5182] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5183] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5182] <... futex resumed>) = 0 [pid 5183] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5182] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5183] <... open resumed>) = 7 [pid 5183] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5182] <... futex resumed>) = 0 [pid 5183] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5182] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5183] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5182] <... futex resumed>) = 0 [pid 5183] dup(7 [pid 5182] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5183] <... dup resumed>) = 8 [pid 5183] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5182] <... futex resumed>) = 0 [pid 5182] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5182] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5183] memfd_create("syzkaller", 0) = 9 [pid 5183] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff677e9d000 [pid 4995] <... umount2 resumed>) = 0 [pid 4995] umount2("./9/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4995] lstat("./9/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] umount2("./9/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4995] openat(AT_FDCWD, "./9/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4995] fstat(4, [pid 5183] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4995] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4995] close(4) = 0 [pid 4995] rmdir("./9/bus") = 0 [pid 4995] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4995] lstat("./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4995] unlink("./9/binderfs" [pid 5190] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 4995] <... unlink resumed>) = 0 [pid 4995] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4995] close(3) = 0 [pid 4995] rmdir("./9") = 0 [pid 4995] mkdir("./10", 0777) = 0 [pid 4995] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 4995] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4995] close(3 [pid 4998] <... umount2 resumed>) = 0 [pid 4995] <... close resumed>) = 0 [pid 4998] umount2("./9/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./9/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./9/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./9/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4995] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] <... openat resumed>) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, [pid 4995] <... clone resumed>, child_tidptr=0x5555567415d0) = 5193 [pid 4998] <... getdents64 resumed>0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./9/bus") = 0 ./strace-static-x86_64: Process 5193 attached [pid 4998] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5193] set_robust_list(0x5555567415e0, 24 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5193] <... set_robust_list resumed>) = 0 [pid 4998] lstat("./9/binderfs", [pid 5193] chdir("./10" [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5193] <... chdir resumed>) = 0 [pid 4998] unlink("./9/binderfs" [pid 5193] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4998] <... unlink resumed>) = 0 [pid 5193] <... prctl resumed>) = 0 [pid 4998] getdents64(3, [pid 5193] setpgid(0, 0 [pid 4998] <... getdents64 resumed>0x555556742620 /* 0 entries */, 32768) = 0 [pid 5193] <... setpgid resumed>) = 0 [pid 4998] close(3 [pid 5193] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4998] <... close resumed>) = 0 [pid 5193] <... openat resumed>) = 3 [pid 4998] rmdir("./9" [pid 5193] write(3, "1000", 4 [pid 4998] <... rmdir resumed>) = 0 [pid 5193] <... write resumed>) = 4 [pid 5183] <... write resumed>) = 2097152 [pid 4998] mkdir("./10", 0777 [pid 5193] close(3 [pid 4998] <... mkdir resumed>) = 0 [pid 5183] munmap(0x7ff677e9d000, 2097152 [pid 5193] <... close resumed>) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5193] symlink("/dev/binderfs", "./binderfs" [pid 4998] <... openat resumed>) = 3 [pid 5193] <... symlink resumed>) = 0 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5193] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5183] <... munmap resumed>) = 0 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5193] <... futex resumed>) = 0 [pid 4998] close(3 [pid 5193] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4998] <... close resumed>) = 0 [pid 5193] <... mmap resumed>) = 0x7ff68769d000 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5193] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4998] <... clone resumed>, child_tidptr=0x5555567415d0) = 5194 [pid 5193] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5195], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5195 [pid 5193] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5193] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5194 attached [pid 5194] set_robust_list(0x5555567415e0, 24) = 0 [pid 5194] chdir("./10") = 0 [pid 5194] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5194] setpgid(0, 0) = 0 [pid 5194] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5194] write(3, "1000", 4) = 4 [pid 5183] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5194] close(3 [pid 5183] <... openat resumed>) = 10 [pid 5183] ioctl(10, LOOP_SET_FD, 9 [pid 5194] <... close resumed>) = 0 [pid 5183] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) ./strace-static-x86_64: Process 5195 attached [pid 5194] symlink("/dev/binderfs", "./binderfs" [pid 5183] ioctl(10, LOOP_CLR_FD [pid 5195] set_robust_list(0x7ff6876bd9e0, 24 [pid 5194] <... symlink resumed>) = 0 [pid 5183] <... ioctl resumed>) = 0 [pid 5195] <... set_robust_list resumed>) = 0 [pid 5194] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5195] memfd_create("syzkaller", 0 [pid 5194] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5195] <... memfd_create resumed>) = 3 [pid 5194] <... mmap resumed>) = 0x7ff68769d000 [pid 5195] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5194] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE [pid 5183] ioctl(10, LOOP_SET_FD, 9 [pid 5195] <... mmap resumed>) = 0x7ff67f29d000 [pid 5194] <... mprotect resumed>) = 0 [pid 5183] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5194] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5183] close(10) = 0 [pid 5194] <... clone resumed>, parent_tid=[5196], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5196 [pid 5183] close(9 [pid 5194] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5194] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5196 attached [pid 5196] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5196] memfd_create("syzkaller", 0) = 3 [pid 5196] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5188] <... write resumed>) = 16777216 [pid 5183] <... close resumed>) = 0 [pid 5196] <... mmap resumed>) = 0x7ff67f29d000 [pid 5183] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5182] <... futex resumed>) = 0 [pid 5183] sendfile(8, 6, NULL, 281474978811908 [pid 5182] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5182] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5188] munmap(0x7ff67f29d000, 16777216) = 0 [pid 5188] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5182] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5182] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5182] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff67807c000 [pid 5182] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5182] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5197], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5197 [pid 5188] <... openat resumed>) = 4 [pid 5182] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5188] ioctl(4, LOOP_SET_FD, 3 [pid 5182] <... futex resumed>) = 0 [pid 5188] <... ioctl resumed>) = 0 [pid 5182] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5197 attached [pid 5197] set_robust_list(0x7ff67809c9e0, 24) = 0 [pid 5197] sync() = 0 [pid 5197] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5182] <... futex resumed>) = 0 [pid 5197] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5188] close(3) = 0 [pid 5188] mkdir("./bus", 0777) = 0 [pid 5188] mount("/dev/loop1", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "") = 0 [ 84.614481][ T5188] loop1: detected capacity change from 0 to 32768 [pid 5188] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5188] chdir("./bus") = 0 [pid 5188] ioctl(4, LOOP_CLR_FD) = 0 [pid 5188] close(4) = 0 [pid 5188] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5187] <... futex resumed>) = 0 [pid 5188] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5187] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5188] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5187] <... futex resumed>) = 0 [pid 5188] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5187] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5188] <... open resumed>) = 4 [pid 5188] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5187] <... futex resumed>) = 0 [pid 5188] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5187] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5188] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5187] <... futex resumed>) = 0 [pid 5188] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5187] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5188] <... open resumed>) = 5 [pid 5188] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5187] <... futex resumed>) = 0 [pid 5188] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5187] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5188] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5187] <... futex resumed>) = 0 [pid 5188] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5187] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5188] <... mmap resumed>) = 0x20000000 [pid 5188] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5187] <... futex resumed>) = 0 [pid 5188] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5187] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5188] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5187] <... futex resumed>) = 0 [pid 5188] ftruncate(4, 33587199 [pid 5187] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5188] <... ftruncate resumed>) = 0 [pid 5188] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5187] <... futex resumed>) = 0 [pid 5188] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5187] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5188] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5187] <... futex resumed>) = 0 [pid 5188] open("./bus", O_RDONLY [pid 5187] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5192] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5188] <... open resumed>) = 6 [pid 5188] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5187] <... futex resumed>) = 0 [pid 5188] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5187] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5188] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5187] <... futex resumed>) = 0 [pid 5188] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5187] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5188] <... open resumed>) = 7 [pid 5188] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5187] <... futex resumed>) = 0 [pid 5188] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5187] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5188] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5187] <... futex resumed>) = 0 [pid 5188] dup(7 [pid 5187] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5188] <... dup resumed>) = 8 [pid 5188] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5187] <... futex resumed>) = 0 [pid 5188] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5187] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5188] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5187] <... futex resumed>) = 0 [pid 5188] memfd_create("syzkaller", 0 [pid 5187] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5188] <... memfd_create resumed>) = 9 [pid 5188] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff677e9d000 [ 84.723388][ T27] kauditd_printk_skb: 16 callbacks suppressed [ 84.723401][ T27] audit: type=1804 audit(1686284889.567:124): pid=5188 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor481" name="/root/syzkaller.20fUYQ/10/bus/bus" dev="loop1" ino=7 res=1 errno=0 [ 84.852617][ T27] audit: type=1804 audit(1686284889.607:125): pid=5188 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor481" name="/root/syzkaller.20fUYQ/10/bus/bus" dev="loop1" ino=7 res=1 errno=0 [pid 5188] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5188] munmap(0x7ff677e9d000, 2097152) = 0 [pid 5188] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 10 [pid 5188] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5188] ioctl(10, LOOP_CLR_FD) = 0 [pid 5188] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5188] close(10) = 0 [pid 5188] close(9) = 0 [pid 5188] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5187] <... futex resumed>) = 0 [pid 5188] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5187] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5188] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5187] <... futex resumed>) = 0 [pid 5188] sendfile(8, 6, NULL, 281474978811908 [pid 5187] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5182] exit_group(0 [pid 5197] <... futex resumed>) = ? [pid 5182] <... exit_group resumed>) = ? [pid 5197] +++ exited with 0 +++ [pid 5183] <... sendfile resumed>) = ? [pid 5183] +++ exited with 0 +++ [pid 5182] +++ exited with 0 +++ [pid 4996] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5182, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=31 /* 0.31 s */} --- [pid 4996] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5196] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5187] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4996] <... openat resumed>) = 3 [pid 5187] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] fstat(3, [pid 5187] <... futex resumed>) = 0 [pid 4996] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5187] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4996] getdents64(3, [pid 5187] <... mmap resumed>) = 0x7ff67807c000 [pid 4996] <... getdents64 resumed>0x555556742620 /* 4 entries */, 32768) = 104 [pid 5187] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 4996] umount2("./10/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5187] <... mprotect resumed>) = 0 [pid 5187] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5198], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5198 [pid 5187] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5187] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5198 attached [pid 5198] set_robust_list(0x7ff67809c9e0, 24) = 0 [pid 5198] sync() = 0 [pid 5198] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5187] <... futex resumed>) = 0 [pid 5198] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5195] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5190] <... write resumed>) = 16777216 [pid 5190] munmap(0x7ff67f29d000, 16777216) = 0 [pid 5190] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5190] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5190] close(3) = 0 [pid 5190] mkdir("./bus", 0777) = 0 [pid 5190] mount("/dev/loop4", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "") = 0 [pid 5190] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5190] chdir("./bus") = 0 [pid 5190] ioctl(4, LOOP_CLR_FD) = 0 [pid 5190] close(4) = 0 [ 85.206160][ T5190] loop4: detected capacity change from 0 to 32768 [pid 5190] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5189] <... futex resumed>) = 0 [pid 5190] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5189] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5190] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5189] <... futex resumed>) = 0 [pid 5190] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5189] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5190] <... open resumed>) = 4 [pid 5190] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5189] <... futex resumed>) = 0 [pid 5190] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5189] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5190] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5189] <... futex resumed>) = 0 [pid 5190] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5189] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5190] <... open resumed>) = 5 [pid 5190] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5190] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5189] <... futex resumed>) = 0 [pid 5189] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5190] <... futex resumed>) = 0 [pid 5189] <... futex resumed>) = 1 [pid 5190] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5189] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5190] <... mmap resumed>) = 0x20000000 [pid 5190] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5189] <... futex resumed>) = 0 [pid 5190] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5189] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5190] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5189] <... futex resumed>) = 0 [pid 5190] ftruncate(4, 33587199 [pid 5189] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5190] <... ftruncate resumed>) = 0 [pid 5190] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5189] <... futex resumed>) = 0 [pid 5190] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5189] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5190] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5189] <... futex resumed>) = 0 [pid 5190] open("./bus", O_RDONLY [pid 5189] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5192] <... write resumed>) = 16777216 [pid 5190] <... open resumed>) = 6 [pid 4996] <... umount2 resumed>) = 0 [pid 5192] munmap(0x7ff67f29d000, 16777216 [pid 5190] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] umount2("./10/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5190] <... futex resumed>) = 1 [pid 5189] <... futex resumed>) = 0 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5190] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5189] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] lstat("./10/bus", [pid 5192] <... munmap resumed>) = 0 [pid 5190] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5189] <... futex resumed>) = 0 [pid 5192] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5190] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5189] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4996] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5192] <... openat resumed>) = 4 [pid 5190] <... open resumed>) = 7 [pid 4996] umount2("./10/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5192] ioctl(4, LOOP_SET_FD, 3 [ 85.326376][ T27] audit: type=1804 audit(1686284890.167:126): pid=5190 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor481" name="/root/syzkaller.hTAWL1/10/bus/bus" dev="loop4" ino=7 res=1 errno=0 [pid 5190] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5190] <... futex resumed>) = 1 [pid 5192] <... ioctl resumed>) = 0 [pid 5190] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5189] <... futex resumed>) = 0 [pid 4996] openat(AT_FDCWD, "./10/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5192] close(3 [pid 5189] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5192] <... close resumed>) = 0 [pid 5190] <... futex resumed>) = 0 [pid 5189] <... futex resumed>) = 1 [pid 4996] <... openat resumed>) = 4 [pid 5192] mkdir("./bus", 0777 [pid 5190] dup(7 [pid 5189] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4996] fstat(4, [pid 5192] <... mkdir resumed>) = 0 [pid 5190] <... dup resumed>) = 8 [pid 5192] mount("/dev/loop0", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5190] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5190] <... futex resumed>) = 1 [pid 5189] <... futex resumed>) = 0 [pid 4996] getdents64(4, [pid 5190] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5189] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5190] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5189] <... futex resumed>) = 0 [pid 4996] <... getdents64 resumed>0x55555674a660 /* 2 entries */, 32768) = 48 [pid 5189] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4996] getdents64(4, [pid 5192] <... mount resumed>) = 0 [pid 5190] memfd_create("syzkaller", 0 [pid 4996] <... getdents64 resumed>0x55555674a660 /* 0 entries */, 32768) = 0 [pid 5192] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5190] <... memfd_create resumed>) = 9 [pid 4996] close(4 [pid 5192] <... openat resumed>) = 3 [pid 5190] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4996] <... close resumed>) = 0 [pid 5192] chdir("./bus" [pid 5190] <... mmap resumed>) = 0x7ff677e9d000 [pid 4996] rmdir("./10/bus" [pid 5192] <... chdir resumed>) = 0 [pid 5192] ioctl(4, LOOP_CLR_FD) = 0 [ 85.378515][ T5192] loop0: detected capacity change from 0 to 32768 [ 85.400796][ T27] audit: type=1804 audit(1686284890.217:127): pid=5190 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor481" name="/root/syzkaller.hTAWL1/10/bus/bus" dev="loop4" ino=7 res=1 errno=0 [pid 5192] close(4) = 0 [pid 4996] <... rmdir resumed>) = 0 [pid 5192] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5192] <... futex resumed>) = 1 [pid 5191] <... futex resumed>) = 0 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5192] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5191] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] lstat("./10/binderfs", [pid 5192] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5191] <... futex resumed>) = 0 [pid 5196] <... write resumed>) = 16777216 [pid 5192] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5191] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4996] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5196] munmap(0x7ff67f29d000, 16777216 [pid 5192] <... open resumed>) = 4 [pid 5190] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 4996] unlink("./10/binderfs" [pid 5192] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... unlink resumed>) = 0 [pid 5192] <... futex resumed>) = 1 [pid 5191] <... futex resumed>) = 0 [pid 4996] getdents64(3, [pid 5192] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5191] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... getdents64 resumed>0x555556742620 /* 0 entries */, 32768) = 0 [pid 5192] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5191] <... futex resumed>) = 0 [pid 4996] close(3 [pid 5192] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5191] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4996] <... close resumed>) = 0 [pid 5192] <... open resumed>) = 5 [pid 4996] rmdir("./10" [pid 5192] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5191] <... futex resumed>) = 0 [pid 4996] <... rmdir resumed>) = 0 [pid 5192] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5191] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] mkdir("./11", 0777 [pid 5196] <... munmap resumed>) = 0 [pid 5192] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5191] <... futex resumed>) = 0 [pid 5192] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5191] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4996] <... mkdir resumed>) = 0 [pid 5196] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5192] <... mmap resumed>) = 0x20000000 [pid 4996] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5192] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... openat resumed>) = 3 [pid 5196] <... openat resumed>) = 4 [pid 5192] <... futex resumed>) = 1 [pid 5191] <... futex resumed>) = 0 [pid 4996] ioctl(3, LOOP_CLR_FD [pid 5196] ioctl(4, LOOP_SET_FD, 3 [pid 5192] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5191] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5196] <... ioctl resumed>) = 0 [pid 5192] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5191] <... futex resumed>) = 0 [pid 5190] <... write resumed>) = 2097152 [pid 4996] close(3 [pid 5192] ftruncate(4, 33587199 [pid 5191] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5187] exit_group(0 [pid 4996] <... close resumed>) = 0 [pid 5198] <... futex resumed>) = ? [pid 5192] <... ftruncate resumed>) = 0 [pid 5187] <... exit_group resumed>) = ? [pid 5198] +++ exited with 0 +++ [pid 5192] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5191] <... futex resumed>) = 0 [pid 5192] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5191] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5192] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5191] <... futex resumed>) = 0 [pid 5192] open("./bus", O_RDONLY [pid 5191] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5192] <... open resumed>) = 6 [pid 5192] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5191] <... futex resumed>) = 0 [pid 5192] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5191] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5192] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5191] <... futex resumed>) = 0 [pid 5192] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5191] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5192] <... open resumed>) = 7 [pid 5192] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5191] <... futex resumed>) = 0 [pid 5192] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5191] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5192] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5191] <... futex resumed>) = 0 [pid 5192] dup(7 [pid 5191] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5192] <... dup resumed>) = 8 [pid 5192] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5191] <... futex resumed>) = 0 [pid 5192] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5191] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5192] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5191] <... futex resumed>) = 0 [pid 5192] memfd_create("syzkaller", 0 [pid 5191] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5192] <... memfd_create resumed>) = 9 [pid 5192] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff677e9d000 [pid 4996] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567415d0) = 5199 [pid 5196] close(3) = 0 [pid 5190] munmap(0x7ff677e9d000, 2097152 [pid 5188] <... sendfile resumed>) = ? [pid 5196] mkdir("./bus", 0777) = 0 [ 85.519419][ T5196] loop5: detected capacity change from 0 to 32768 [ 85.540431][ T27] audit: type=1804 audit(1686284890.377:128): pid=5192 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor481" name="/root/syzkaller.lVUVkM/10/bus/bus" dev="loop0" ino=7 res=1 errno=0 [pid 5196] mount("/dev/loop5", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "") = 0 [pid 5190] <... munmap resumed>) = 0 [pid 5188] +++ exited with 0 +++ [pid 5187] +++ exited with 0 +++ [pid 4994] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5187, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=38 /* 0.38 s */} --- ./strace-static-x86_64: Process 5199 attached [pid 5199] set_robust_list(0x5555567415e0, 24) = 0 [pid 5199] chdir("./11") = 0 [pid 5196] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5190] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4994] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5199] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5196] <... openat resumed>) = 3 [pid 5190] <... openat resumed>) = 10 [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5199] <... prctl resumed>) = 0 [pid 5196] chdir("./bus" [pid 5192] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5190] ioctl(10, LOOP_SET_FD, 9 [pid 4994] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5199] setpgid(0, 0 [pid 5196] <... chdir resumed>) = 0 [pid 4994] <... openat resumed>) = 3 [pid 5199] <... setpgid resumed>) = 0 [pid 4994] fstat(3, [pid 5199] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5199] <... openat resumed>) = 3 [pid 4994] getdents64(3, [pid 5199] write(3, "1000", 4 [pid 4994] <... getdents64 resumed>0x555556742620 /* 4 entries */, 32768) = 104 [pid 5199] <... write resumed>) = 4 [pid 5196] ioctl(4, LOOP_CLR_FD [pid 5190] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 4994] umount2("./10/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5199] close(3 [pid 5196] <... ioctl resumed>) = 0 [pid 5190] ioctl(10, LOOP_CLR_FD [pid 5199] <... close resumed>) = 0 [pid 5196] close(4 [pid 5190] <... ioctl resumed>) = 0 [pid 5199] symlink("/dev/binderfs", "./binderfs" [pid 5196] <... close resumed>) = 0 [pid 5199] <... symlink resumed>) = 0 [pid 5199] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5199] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5199] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5196] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5199] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5196] <... futex resumed>) = 1 [pid 5194] <... futex resumed>) = 0 [pid 5196] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5194] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5199] <... clone resumed>, parent_tid=[5200], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5200 [pid 5196] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5194] <... futex resumed>) = 0 [pid 5199] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5196] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5194] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5190] ioctl(10, LOOP_SET_FD, 9 [pid 5199] <... futex resumed>) = 0 [pid 5199] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5196] <... open resumed>) = 4 [pid 5190] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5196] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5190] close(10 [pid 5196] <... futex resumed>) = 1 [pid 5194] <... futex resumed>) = 0 [pid 5190] <... close resumed>) = 0 [pid 5196] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5194] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5196] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5194] <... futex resumed>) = 0 [pid 5190] close(9 [pid 5196] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5194] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5200 attached [pid 5200] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5200] memfd_create("syzkaller", 0 [pid 5196] <... open resumed>) = 5 [pid 5200] <... memfd_create resumed>) = 3 [pid 5196] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5200] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5196] <... futex resumed>) = 1 [pid 5194] <... futex resumed>) = 0 [ 85.580189][ T27] audit: type=1804 audit(1686284890.377:129): pid=5192 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor481" name="/root/syzkaller.lVUVkM/10/bus/bus" dev="loop0" ino=7 res=1 errno=0 [pid 5200] <... mmap resumed>) = 0x7ff67f29d000 [pid 5196] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5194] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5196] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5194] <... futex resumed>) = 0 [pid 5190] <... close resumed>) = 0 [pid 5196] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5194] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5196] <... mmap resumed>) = 0x20000000 [pid 5196] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5196] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5194] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5194] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5196] <... futex resumed>) = 0 [pid 5194] <... futex resumed>) = 1 [pid 5196] ftruncate(4, 33587199) = 0 [pid 5194] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5196] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5196] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5194] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5194] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5196] <... futex resumed>) = 0 [pid 5194] <... futex resumed>) = 1 [pid 5194] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5196] open("./bus", O_RDONLY) = 6 [pid 5196] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5194] <... futex resumed>) = 0 [pid 5190] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5196] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5190] <... futex resumed>) = 1 [pid 5189] <... futex resumed>) = 0 [pid 5189] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5190] sendfile(8, 6, NULL, 281474978811908 [pid 5189] <... futex resumed>) = 0 [pid 5194] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5189] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5196] <... futex resumed>) = 0 [pid 5194] <... futex resumed>) = 1 [pid 5196] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5194] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5196] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5194] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5196] <... futex resumed>) = 0 [pid 5194] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5196] dup(7 [pid 5194] <... futex resumed>) = 0 [pid 5196] <... dup resumed>) = 8 [pid 5194] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5196] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5194] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5196] <... futex resumed>) = 0 [pid 5194] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5194] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5196] memfd_create("syzkaller", 0) = 9 [pid 5196] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff677e9d000 [ 85.651065][ T27] audit: type=1804 audit(1686284890.487:130): pid=5196 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor481" name="/root/syzkaller.PL7eda/10/bus/bus" dev="loop5" ino=7 res=1 errno=0 [pid 5192] <... write resumed>) = 2097152 [pid 5192] munmap(0x7ff677e9d000, 2097152) = 0 [pid 5189] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5192] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5189] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5189] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff67807c000 [pid 5192] <... openat resumed>) = 10 [pid 5189] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5192] ioctl(10, LOOP_SET_FD, 9 [pid 5189] <... mprotect resumed>) = 0 [pid 5192] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5189] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5192] ioctl(10, LOOP_CLR_FD) = 0 [pid 5189] <... clone resumed>, parent_tid=[5201], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5201 [pid 5189] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5189] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5192] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5192] close(10) = 0 [pid 5192] close(9./strace-static-x86_64: Process 5201 attached [pid 5201] set_robust_list(0x7ff67809c9e0, 24) = 0 [pid 5201] sync( [pid 5196] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5195] <... write resumed>) = 16777216 [pid 5192] <... close resumed>) = 0 [pid 5189] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5195] munmap(0x7ff67f29d000, 16777216 [pid 5192] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5195] <... munmap resumed>) = 0 [pid 5192] <... futex resumed>) = 1 [pid 5191] <... futex resumed>) = 0 [pid 5192] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5191] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5192] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5191] <... futex resumed>) = 0 [pid 5195] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5192] sendfile(8, 6, NULL, 281474978811908 [ 85.774885][ T27] audit: type=1804 audit(1686284890.517:131): pid=5196 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor481" name="/root/syzkaller.PL7eda/10/bus/bus" dev="loop5" ino=7 res=1 errno=0 [pid 5191] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5196] <... write resumed>) = 2097152 [pid 5195] <... openat resumed>) = 4 [pid 5196] munmap(0x7ff677e9d000, 2097152 [pid 5195] ioctl(4, LOOP_SET_FD, 3 [pid 5196] <... munmap resumed>) = 0 [pid 5195] <... ioctl resumed>) = 0 [pid 5196] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 10 [pid 5195] close(3 [pid 5196] ioctl(10, LOOP_SET_FD, 9 [pid 5195] <... close resumed>) = 0 [pid 5196] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5195] mkdir("./bus", 0777 [pid 5196] ioctl(10, LOOP_CLR_FD [pid 5195] <... mkdir resumed>) = 0 [pid 5196] <... ioctl resumed>) = 0 [pid 5195] mount("/dev/loop2", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5196] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5195] <... mount resumed>) = 0 [pid 5191] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5196] close(10 [pid 5195] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5191] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5196] <... close resumed>) = 0 [pid 5191] <... futex resumed>) = 0 [pid 5196] close(9 [pid 5195] <... openat resumed>) = 3 [pid 5191] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff67807c000 [pid 5191] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5191] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [ 85.853464][ T5195] loop2: detected capacity change from 0 to 32768 [pid 5195] chdir("./bus") = 0 [pid 5191] <... clone resumed>, parent_tid=[5202], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5202 [pid 5195] ioctl(4, LOOP_CLR_FD [pid 5191] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5195] <... ioctl resumed>) = 0 [pid 5191] <... futex resumed>) = 0 [pid 5201] <... sync resumed>) = 0 [pid 5195] close(4 [pid 5191] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5202 attached [pid 5201] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5195] <... close resumed>) = 0 [pid 5202] set_robust_list(0x7ff67809c9e0, 24 [pid 5201] <... futex resumed>) = 0 [pid 5195] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5202] <... set_robust_list resumed>) = 0 [pid 5202] sync( [pid 5201] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5195] <... futex resumed>) = 1 [pid 5193] <... futex resumed>) = 0 [pid 5195] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5193] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5195] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5193] <... futex resumed>) = 0 [pid 5202] <... sync resumed>) = 0 [pid 5195] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5193] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5202] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5195] <... open resumed>) = 4 [pid 5202] <... futex resumed>) = 1 [pid 5195] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5191] <... futex resumed>) = 0 [pid 5202] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5195] <... futex resumed>) = 1 [pid 5193] <... futex resumed>) = 0 [pid 5195] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5193] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5195] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5193] <... futex resumed>) = 0 [pid 5195] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5193] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5196] <... close resumed>) = 0 [pid 5195] <... open resumed>) = 5 [pid 5195] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5193] <... futex resumed>) = 0 [pid 5195] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5193] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5196] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5193] <... futex resumed>) = 0 [pid 5193] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5196] <... futex resumed>) = 1 [pid 5195] <... mmap resumed>) = 0x20000000 [pid 5194] <... futex resumed>) = 0 [pid 5196] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5195] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5194] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5196] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5195] <... futex resumed>) = 1 [pid 5194] <... futex resumed>) = 0 [pid 5193] <... futex resumed>) = 0 [pid 5196] sendfile(8, 6, NULL, 281474978811908 [pid 5195] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5194] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5193] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5195] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5193] <... futex resumed>) = 0 [pid 5195] ftruncate(4, 33587199 [pid 5193] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5195] <... ftruncate resumed>) = 0 [pid 5195] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5193] <... futex resumed>) = 0 [pid 5193] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5195] open("./bus", O_RDONLY [pid 5193] <... futex resumed>) = 0 [pid 5195] <... open resumed>) = 6 [pid 5193] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5195] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5193] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5195] <... futex resumed>) = 0 [pid 5193] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5195] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5194] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5193] <... futex resumed>) = 0 [pid 5195] <... open resumed>) = 7 [pid 5194] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5193] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5195] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5194] <... futex resumed>) = 0 [pid 5193] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5195] <... futex resumed>) = 0 [pid 5194] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5193] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5195] dup(7 [pid 5194] <... mmap resumed>) = 0x7ff67807c000 [pid 5193] <... futex resumed>) = 0 [pid 5195] <... dup resumed>) = 8 [pid 5194] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5193] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5200] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5195] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5194] <... mprotect resumed>) = 0 [pid 5193] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5195] <... futex resumed>) = 0 [pid 5194] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5193] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5194] <... clone resumed>, parent_tid=[5203], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5203 [pid 5193] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5194] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 85.968909][ T27] audit: type=1804 audit(1686284890.807:132): pid=5195 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor481" name="/root/syzkaller.txkbmS/10/bus/bus" dev="loop2" ino=7 res=1 errno=0 [pid 5194] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5203 attached [pid 5203] set_robust_list(0x7ff67809c9e0, 24) = 0 [pid 5203] sync( [pid 5195] memfd_create("syzkaller", 0) = 9 [pid 5195] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff677e9d000 [pid 5203] <... sync resumed>) = 0 [pid 5203] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5194] <... futex resumed>) = 0 [ 86.035572][ T27] audit: type=1804 audit(1686284890.847:133): pid=5195 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor481" name="/root/syzkaller.txkbmS/10/bus/bus" dev="loop2" ino=7 res=1 errno=0 [pid 5203] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5195] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5195] munmap(0x7ff677e9d000, 2097152) = 0 [pid 5195] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 10 [pid 5195] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5195] ioctl(10, LOOP_CLR_FD) = 0 [pid 5195] ioctl(10, LOOP_SET_FD, 9 [pid 4994] <... umount2 resumed>) = 0 [pid 5195] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5195] close(10 [pid 4994] umount2("./10/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5195] <... close resumed>) = 0 [pid 5195] close(9 [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] lstat("./10/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] umount2("./10/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] openat(AT_FDCWD, "./10/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5195] <... close resumed>) = 0 [pid 5195] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] <... openat resumed>) = 4 [pid 5195] <... futex resumed>) = 1 [pid 5193] <... futex resumed>) = 0 [pid 4994] fstat(4, [pid 5195] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5193] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5195] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5193] <... futex resumed>) = 0 [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5195] sendfile(8, 6, NULL, 281474978811908 [pid 5193] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4994] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4994] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4994] close(4) = 0 [pid 4994] rmdir("./10/bus") = 0 [pid 4994] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] lstat("./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4994] unlink("./10/binderfs" [pid 5193] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5193] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] <... unlink resumed>) = 0 [pid 5193] <... futex resumed>) = 0 [pid 4994] getdents64(3, [pid 5193] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff67807c000 [pid 4994] <... getdents64 resumed>0x555556742620 /* 0 entries */, 32768) = 0 [pid 5193] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 4994] close(3 [pid 5193] <... mprotect resumed>) = 0 [pid 5193] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4994] <... close resumed>) = 0 [pid 4994] rmdir("./10" [pid 5193] <... clone resumed>, parent_tid=[5204], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5204 [pid 5193] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] <... rmdir resumed>) = 0 [pid 5193] <... futex resumed>) = 0 [pid 4994] mkdir("./11", 0777./strace-static-x86_64: Process 5204 attached [pid 5193] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4994] <... mkdir resumed>) = 0 [pid 5204] set_robust_list(0x7ff67809c9e0, 24 [pid 4994] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5204] <... set_robust_list resumed>) = 0 [pid 5204] sync( [pid 4994] <... openat resumed>) = 3 [pid 4994] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5204] <... sync resumed>) = 0 [pid 4994] close(3 [pid 5204] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5193] <... futex resumed>) = 0 [pid 4994] <... close resumed>) = 0 [pid 5204] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4994] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567415d0) = 5205 ./strace-static-x86_64: Process 5205 attached [pid 5205] set_robust_list(0x5555567415e0, 24) = 0 [pid 5205] chdir("./11") = 0 [pid 5205] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5205] setpgid(0, 0) = 0 [pid 5205] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5191] exit_group(0 [pid 5202] <... futex resumed>) = ? [pid 5191] <... exit_group resumed>) = ? [pid 5205] write(3, "1000", 4 [pid 5202] +++ exited with 0 +++ [pid 5205] <... write resumed>) = 4 [pid 5192] <... sendfile resumed>) = ? [pid 5205] close(3) = 0 [pid 5205] symlink("/dev/binderfs", "./binderfs" [pid 5192] +++ exited with 0 +++ [pid 5191] +++ exited with 0 +++ [pid 5205] <... symlink resumed>) = 0 [pid 4993] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5191, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=35 /* 0.35 s */} --- [pid 5205] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 4993] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5205] <... futex resumed>) = 0 [pid 4993] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5205] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4993] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4993] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5205] <... mmap resumed>) = 0x7ff68769d000 [pid 4993] getdents64(3, [pid 5205] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE [pid 4993] <... getdents64 resumed>0x555556742620 /* 4 entries */, 32768) = 104 [pid 4993] umount2("./10/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5205] <... mprotect resumed>) = 0 [pid 5205] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5206], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5206 [pid 5205] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5205] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5189] exit_group(0./strace-static-x86_64: Process 5206 attached ) = ? [pid 5201] <... futex resumed>) = ? [pid 5206] set_robust_list(0x7ff6876bd9e0, 24 [pid 5201] +++ exited with 0 +++ [pid 5206] <... set_robust_list resumed>) = 0 [pid 5190] <... sendfile resumed>) = ? [pid 5194] exit_group(0 [pid 5203] <... futex resumed>) = ? [pid 5194] <... exit_group resumed>) = ? [pid 5203] +++ exited with 0 +++ [pid 5206] memfd_create("syzkaller", 0) = 3 [pid 5196] <... sendfile resumed>) = ? [pid 5206] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 5190] +++ exited with 0 +++ [pid 5189] +++ exited with 0 +++ [pid 5196] +++ exited with 0 +++ [pid 5194] +++ exited with 0 +++ [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5189, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=39 /* 0.39 s */} --- [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5194, si_uid=0, si_status=0, si_utime=11 /* 0.11 s */, si_stime=38 /* 0.38 s */} --- [pid 4998] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4998] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] fstat(3, [pid 4997] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] getdents64(3, [pid 4997] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... getdents64 resumed>0x555556742620 /* 4 entries */, 32768) = 104 [pid 4997] <... openat resumed>) = 3 [pid 4998] umount2("./10/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5200] <... write resumed>) = 16777216 [pid 4997] getdents64(3, 0x555556742620 /* 4 entries */, 32768) = 104 [pid 4997] umount2("./10/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5200] munmap(0x7ff67f29d000, 16777216) = 0 [pid 5200] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5200] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5200] close(3) = 0 [pid 5200] mkdir("./bus", 0777) = 0 [pid 5200] mount("/dev/loop3", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "") = 0 [pid 5200] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5200] chdir("./bus") = 0 [pid 5200] ioctl(4, LOOP_CLR_FD) = 0 [ 86.625649][ T5200] loop3: detected capacity change from 0 to 32768 [pid 5200] close(4) = 0 [pid 5200] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5199] <... futex resumed>) = 0 [pid 5200] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5199] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5200] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5199] <... futex resumed>) = 0 [pid 5200] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5199] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5200] <... open resumed>) = 4 [pid 5200] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5199] <... futex resumed>) = 0 [pid 5200] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5199] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5200] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5199] <... futex resumed>) = 0 [pid 5200] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5199] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5200] <... open resumed>) = 5 [pid 5200] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5199] <... futex resumed>) = 0 [pid 5200] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5199] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5200] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5199] <... futex resumed>) = 0 [pid 5200] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5199] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5200] <... mmap resumed>) = 0x20000000 [pid 5200] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5199] <... futex resumed>) = 0 [pid 5200] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5199] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5200] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5199] <... futex resumed>) = 0 [pid 5200] ftruncate(4, 33587199 [pid 5199] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5200] <... ftruncate resumed>) = 0 [pid 5200] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5199] <... futex resumed>) = 0 [pid 5200] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5199] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5200] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5199] <... futex resumed>) = 0 [pid 5200] open("./bus", O_RDONLY [pid 5199] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5200] <... open resumed>) = 6 [pid 5200] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5199] <... futex resumed>) = 0 [pid 5200] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5199] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5200] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5199] <... futex resumed>) = 0 [pid 5200] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5199] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5200] <... open resumed>) = 7 [pid 5200] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5199] <... futex resumed>) = 0 [pid 5200] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5199] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5200] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5199] <... futex resumed>) = 0 [pid 5200] dup(7 [pid 5199] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5200] <... dup resumed>) = 8 [pid 5200] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5199] <... futex resumed>) = 0 [pid 5200] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5199] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5200] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5199] <... futex resumed>) = 0 [pid 5200] memfd_create("syzkaller", 0 [pid 5199] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5200] <... memfd_create resumed>) = 9 [pid 5200] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff677e9d000 [pid 5193] exit_group(0 [pid 5204] <... futex resumed>) = ? [pid 5193] <... exit_group resumed>) = ? [pid 5204] +++ exited with 0 +++ [pid 5195] <... sendfile resumed>) = ? [pid 5195] +++ exited with 0 +++ [pid 5193] +++ exited with 0 +++ [pid 4995] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5193, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=39 /* 0.39 s */} --- [pid 4995] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4995] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4995] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] getdents64(3, 0x555556742620 /* 4 entries */, 32768) = 104 [pid 4995] umount2("./10/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... umount2 resumed>) = 0 [pid 4993] <... umount2 resumed>) = 0 [pid 4993] umount2("./10/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4993] lstat("./10/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4993] umount2("./10/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] umount2("./10/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4993] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./10/bus", [pid 4993] openat(AT_FDCWD, "./10/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./10/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4993] <... openat resumed>) = 4 [pid 4997] openat(AT_FDCWD, "./10/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4993] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] fstat(4, [pid 4993] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4993] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4993] close(4) = 0 [pid 4993] rmdir("./10/bus") = 0 [pid 4993] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4993] lstat("./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4993] unlink("./10/binderfs" [pid 4997] getdents64(4, [pid 4993] <... unlink resumed>) = 0 [pid 4993] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4993] close(3) = 0 [pid 4993] rmdir("./10") = 0 [pid 4993] mkdir("./11", 0777) = 0 [pid 4993] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 4997] <... getdents64 resumed>0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4997] getdents64(4, [pid 4993] <... openat resumed>) = 3 [pid 4997] <... getdents64 resumed>0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4997] close(4 [pid 4993] ioctl(3, LOOP_CLR_FD [pid 4997] <... close resumed>) = 0 [pid 4993] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4997] rmdir("./10/bus" [pid 4993] close(3) = 0 [pid 4997] <... rmdir resumed>) = 0 [pid 4993] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567415d0) = 5207 ./strace-static-x86_64: Process 5207 attached [pid 5207] set_robust_list(0x5555567415e0, 24) = 0 [pid 5207] chdir("./11") = 0 [pid 5207] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4997] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./10/binderfs", [pid 5207] setpgid(0, 0 [pid 4997] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5207] <... setpgid resumed>) = 0 [pid 4997] unlink("./10/binderfs" [pid 5207] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5200] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 4997] <... unlink resumed>) = 0 [pid 5207] <... openat resumed>) = 3 [pid 4997] getdents64(3, [pid 5207] write(3, "1000", 4 [pid 4997] <... getdents64 resumed>0x555556742620 /* 0 entries */, 32768) = 0 [pid 5207] <... write resumed>) = 4 [pid 4997] close(3 [pid 5207] close(3 [pid 4997] <... close resumed>) = 0 [pid 5207] <... close resumed>) = 0 [pid 5207] symlink("/dev/binderfs", "./binderfs" [pid 4997] rmdir("./10" [pid 5207] <... symlink resumed>) = 0 [pid 4997] <... rmdir resumed>) = 0 [pid 5207] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] mkdir("./11", 0777 [pid 5207] <... futex resumed>) = 0 [pid 5207] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4997] <... mkdir resumed>) = 0 [pid 5207] <... mmap resumed>) = 0x7ff68769d000 [pid 4997] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5207] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE [pid 4997] <... openat resumed>) = 3 [pid 5207] <... mprotect resumed>) = 0 [pid 4997] ioctl(3, LOOP_CLR_FD [pid 5207] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4997] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4997] close(3 [pid 5207] <... clone resumed>, parent_tid=[5208], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5208 [pid 4997] <... close resumed>) = 0 [pid 5207] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5207] <... futex resumed>) = 0 [pid 5207] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4997] <... clone resumed>, child_tidptr=0x5555567415d0) = 5209 ./strace-static-x86_64: Process 5208 attached [pid 5208] set_robust_list(0x7ff6876bd9e0, 24) = 0 ./strace-static-x86_64: Process 5209 attached [pid 5208] memfd_create("syzkaller", 0 [pid 5209] set_robust_list(0x5555567415e0, 24 [pid 5208] <... memfd_create resumed>) = 3 [pid 5209] <... set_robust_list resumed>) = 0 [pid 5208] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5209] chdir("./11" [pid 5208] <... mmap resumed>) = 0x7ff67f29d000 [pid 5209] <... chdir resumed>) = 0 [pid 5209] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5209] setpgid(0, 0) = 0 [pid 5209] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5209] write(3, "1000", 4) = 4 [pid 5209] close(3) = 0 [pid 5209] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5209] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5209] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5209] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5209] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5210], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5210 [pid 5209] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5209] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5210 attached [pid 5210] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5210] memfd_create("syzkaller", 0) = 3 [pid 5210] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 5200] <... write resumed>) = 2097152 [pid 5200] munmap(0x7ff677e9d000, 2097152) = 0 [pid 5200] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 10 [pid 5200] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5200] ioctl(10, LOOP_CLR_FD) = 0 [pid 5206] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5200] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5200] close(10) = 0 [pid 5200] close(9) = 0 [pid 5200] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5200] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5199] <... futex resumed>) = 0 [pid 5199] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5199] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5200] <... futex resumed>) = 0 [pid 5200] sendfile(8, 6, NULL, 281474978811908 [pid 5199] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5199] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5199] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff67807c000 [pid 5199] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5199] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5211], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5211 [pid 5199] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5199] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5211 attached [pid 5211] set_robust_list(0x7ff67809c9e0, 24) = 0 [pid 5211] sync() = 0 [pid 5211] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5199] <... futex resumed>) = 0 [pid 5211] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4995] <... umount2 resumed>) = 0 [pid 4995] umount2("./10/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4995] lstat("./10/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] umount2("./10/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4995] openat(AT_FDCWD, "./10/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4995] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4995] getdents64(4, [pid 4998] <... umount2 resumed>) = 0 [pid 4995] <... getdents64 resumed>0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4998] umount2("./10/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4995] close(4 [pid 4998] lstat("./10/bus", [pid 4995] <... close resumed>) = 0 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] rmdir("./10/bus" [pid 4998] umount2("./10/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] <... rmdir resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] openat(AT_FDCWD, "./10/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... openat resumed>) = 4 [pid 4998] fstat(4, [pid 4995] lstat("./10/binderfs", [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, [pid 4995] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] <... getdents64 resumed>0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4995] unlink("./10/binderfs" [pid 4998] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4995] <... unlink resumed>) = 0 [pid 4998] close(4 [pid 4995] getdents64(3, [pid 4998] <... close resumed>) = 0 [pid 4995] <... getdents64 resumed>0x555556742620 /* 0 entries */, 32768) = 0 [pid 4998] rmdir("./10/bus" [pid 4995] close(3 [pid 4998] <... rmdir resumed>) = 0 [pid 4998] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] <... close resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] rmdir("./10" [pid 4998] lstat("./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4995] <... rmdir resumed>) = 0 [pid 4998] unlink("./10/binderfs" [pid 4995] mkdir("./11", 0777 [pid 4998] <... unlink resumed>) = 0 [pid 4998] getdents64(3, [pid 4995] <... mkdir resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555556742620 /* 0 entries */, 32768) = 0 [pid 4995] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4998] close(3 [pid 4995] <... openat resumed>) = 3 [pid 4998] <... close resumed>) = 0 [pid 4995] ioctl(3, LOOP_CLR_FD [pid 4998] rmdir("./10" [pid 4995] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] <... rmdir resumed>) = 0 [pid 4995] close(3 [pid 4998] mkdir("./11", 0777 [pid 4995] <... close resumed>) = 0 [pid 4998] <... mkdir resumed>) = 0 [pid 4995] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 4995] <... clone resumed>, child_tidptr=0x5555567415d0) = 5212 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567415d0) = 5213 ./strace-static-x86_64: Process 5213 attached [pid 5213] set_robust_list(0x5555567415e0, 24) = 0 [pid 5213] chdir("./11") = 0 [pid 5213] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 ./strace-static-x86_64: Process 5212 attached [pid 5213] setpgid(0, 0) = 0 [pid 5212] set_robust_list(0x5555567415e0, 24) = 0 [pid 5213] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5212] chdir("./11" [pid 5213] <... openat resumed>) = 3 [pid 5212] <... chdir resumed>) = 0 [pid 5213] write(3, "1000", 4 [pid 5212] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5213] <... write resumed>) = 4 [pid 5212] <... prctl resumed>) = 0 [pid 5213] close(3 [pid 5212] setpgid(0, 0 [pid 5213] <... close resumed>) = 0 [pid 5212] <... setpgid resumed>) = 0 [pid 5213] symlink("/dev/binderfs", "./binderfs" [pid 5212] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5213] <... symlink resumed>) = 0 [pid 5212] <... openat resumed>) = 3 [pid 5213] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5212] write(3, "1000", 4 [pid 5213] <... futex resumed>) = 0 [pid 5212] <... write resumed>) = 4 [pid 5213] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5212] close(3 [pid 5213] <... mmap resumed>) = 0x7ff68769d000 [pid 5212] <... close resumed>) = 0 [pid 5213] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE [pid 5212] symlink("/dev/binderfs", "./binderfs" [pid 5213] <... mprotect resumed>) = 0 [pid 5212] <... symlink resumed>) = 0 [pid 5213] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5212] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5213] <... clone resumed>, parent_tid=[5214], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5214 [pid 5212] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5213] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5212] <... mmap resumed>) = 0x7ff68769d000 [pid 5213] <... futex resumed>) = 0 [pid 5212] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE [pid 5213] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5212] <... mprotect resumed>) = 0 [pid 5212] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5215], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5215 [pid 5212] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5212] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5214 attached [pid 5214] set_robust_list(0x7ff6876bd9e0, 24) = 0 ./strace-static-x86_64: Process 5215 attached [pid 5214] memfd_create("syzkaller", 0 [pid 5215] set_robust_list(0x7ff6876bd9e0, 24 [pid 5214] <... memfd_create resumed>) = 3 [pid 5215] <... set_robust_list resumed>) = 0 [pid 5214] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 5215] memfd_create("syzkaller", 0) = 3 [pid 5215] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 5210] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5208] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5206] <... write resumed>) = 16777216 [pid 5206] munmap(0x7ff67f29d000, 16777216) = 0 [pid 5206] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5206] ioctl(4, LOOP_SET_FD, 3 [pid 5199] exit_group(0 [pid 5211] <... futex resumed>) = ? [pid 5199] <... exit_group resumed>) = ? [pid 5211] +++ exited with 0 +++ [pid 5206] <... ioctl resumed>) = 0 [pid 5206] close(3 [pid 5200] <... sendfile resumed>) = ? [pid 5206] <... close resumed>) = 0 [pid 5200] +++ exited with 0 +++ [pid 5199] +++ exited with 0 +++ [pid 5206] mkdir("./bus", 0777 [pid 4996] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5199, si_uid=0, si_status=0, si_utime=13 /* 0.13 s */, si_stime=28 /* 0.28 s */} --- [pid 4996] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5206] <... mkdir resumed>) = 0 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5206] mount("/dev/loop1", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 4996] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4996] fstat(3, [pid 5206] <... mount resumed>) = 0 [pid 4996] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5206] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 4996] getdents64(3, [pid 5206] <... openat resumed>) = 3 [pid 4996] <... getdents64 resumed>0x555556742620 /* 4 entries */, 32768) = 104 [pid 5206] chdir("./bus" [pid 4996] umount2("./11/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5206] <... chdir resumed>) = 0 [pid 5206] ioctl(4, LOOP_CLR_FD) = 0 [pid 5206] close(4) = 0 [ 87.488189][ T5206] loop1: detected capacity change from 0 to 32768 [pid 5206] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5205] <... futex resumed>) = 0 [pid 5205] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5206] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5205] <... futex resumed>) = 0 [pid 5206] <... open resumed>) = 4 [pid 5205] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5206] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5205] <... futex resumed>) = 0 [pid 5205] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5206] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5205] <... futex resumed>) = 0 [pid 5205] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5206] <... open resumed>) = 5 [pid 5206] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5205] <... futex resumed>) = 0 [pid 5206] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5205] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5206] <... mmap resumed>) = 0x20000000 [pid 5206] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5205] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5206] <... futex resumed>) = 0 [pid 5205] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5206] ftruncate(4, 33587199 [pid 5205] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5206] <... ftruncate resumed>) = 0 [pid 5205] <... futex resumed>) = 0 [pid 5206] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5205] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5206] <... futex resumed>) = 0 [pid 5205] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5205] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5206] open("./bus", O_RDONLY [pid 5205] <... futex resumed>) = 0 [pid 5206] <... open resumed>) = 6 [pid 5205] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5206] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5205] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5206] <... futex resumed>) = 0 [pid 5205] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5206] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5205] <... futex resumed>) = 0 [pid 5206] <... open resumed>) = 7 [pid 5205] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5206] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5205] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5206] <... futex resumed>) = 0 [pid 5205] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5206] dup(7 [pid 5205] <... futex resumed>) = 0 [pid 5206] <... dup resumed>) = 8 [pid 5205] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5206] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5205] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5206] <... futex resumed>) = 0 [pid 5205] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5206] memfd_create("syzkaller", 0 [pid 5205] <... futex resumed>) = 0 [pid 5206] <... memfd_create resumed>) = 9 [pid 5205] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5206] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff677e9d000 [pid 5206] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5206] munmap(0x7ff677e9d000, 2097152 [pid 5215] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5206] <... munmap resumed>) = 0 [pid 5206] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 10 [pid 5214] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5206] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5206] ioctl(10, LOOP_CLR_FD) = 0 [pid 5206] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5206] close(10) = 0 [pid 5206] close(9) = 0 [pid 5206] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5205] <... futex resumed>) = 0 [pid 5206] <... futex resumed>) = 1 [pid 5205] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5206] sendfile(8, 6, NULL, 281474978811908 [pid 5205] <... futex resumed>) = 0 [pid 5205] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4996] <... umount2 resumed>) = 0 [pid 4996] umount2("./11/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5205] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5205] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] lstat("./11/bus", [pid 5205] <... futex resumed>) = 0 [pid 5205] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4996] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5205] <... mmap resumed>) = 0x7ff67807c000 [pid 4996] umount2("./11/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5205] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5205] <... mprotect resumed>) = 0 [pid 4996] openat(AT_FDCWD, "./11/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5205] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4996] <... openat resumed>) = 4 [pid 5205] <... clone resumed>, parent_tid=[5216], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5216 [pid 4996] fstat(4, [pid 5205] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5205] <... futex resumed>) = 0 [pid 4996] getdents64(4, [pid 5205] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4996] <... getdents64 resumed>0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4996] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4996] close(4) = 0 [pid 4996] rmdir("./11/bus") = 0 ./strace-static-x86_64: Process 5216 attached [pid 4996] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5216] set_robust_list(0x7ff67809c9e0, 24 [pid 4996] lstat("./11/binderfs", [pid 5216] <... set_robust_list resumed>) = 0 [pid 5216] sync( [pid 4996] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4996] unlink("./11/binderfs") = 0 [pid 4996] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4996] close(3) = 0 [pid 4996] rmdir("./11" [pid 5216] <... sync resumed>) = 0 [pid 4996] <... rmdir resumed>) = 0 [pid 5216] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5210] <... write resumed>) = 16777216 [pid 4996] mkdir("./12", 0777 [pid 5216] <... futex resumed>) = 1 [pid 5205] <... futex resumed>) = 0 [pid 5216] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4996] <... mkdir resumed>) = 0 [pid 5210] munmap(0x7ff67f29d000, 16777216 [pid 4996] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 4996] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4996] close(3) = 0 [pid 4996] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567415d0) = 5217 [pid 5208] <... write resumed>) = 16777216 ./strace-static-x86_64: Process 5217 attached [pid 5210] <... munmap resumed>) = 0 [pid 5217] set_robust_list(0x5555567415e0, 24) = 0 [pid 5217] chdir("./12" [pid 5210] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5217] <... chdir resumed>) = 0 [pid 5217] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5210] <... openat resumed>) = 4 [pid 5217] <... prctl resumed>) = 0 [pid 5210] ioctl(4, LOOP_SET_FD, 3 [pid 5217] setpgid(0, 0 [pid 5210] <... ioctl resumed>) = 0 [pid 5217] <... setpgid resumed>) = 0 [pid 5217] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5217] write(3, "1000", 4) = 4 [pid 5217] close(3) = 0 [pid 5217] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5217] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5217] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5217] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5217] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5218], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5218 [pid 5217] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5217] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5210] close(3) = 0 [pid 5208] munmap(0x7ff67f29d000, 16777216 [pid 5210] mkdir("./bus", 0777./strace-static-x86_64: Process 5218 attached ) = 0 [pid 5210] mount("/dev/loop4", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5218] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5218] memfd_create("syzkaller", 0) = 3 [pid 5218] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5210] <... mount resumed>) = 0 [pid 5218] <... mmap resumed>) = 0x7ff67f29d000 [pid 5210] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5210] chdir("./bus") = 0 [pid 5210] ioctl(4, LOOP_CLR_FD) = 0 [pid 5210] close(4) = 0 [pid 5210] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 87.995475][ T5210] loop4: detected capacity change from 0 to 32768 [pid 5210] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5208] <... munmap resumed>) = 0 [pid 5208] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5208] ioctl(4, LOOP_SET_FD, 3 [pid 5209] <... futex resumed>) = 0 [pid 5209] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5210] <... futex resumed>) = 0 [pid 5209] <... futex resumed>) = 1 [pid 5210] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5210] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5210] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5209] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5209] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5210] <... futex resumed>) = 0 [pid 5209] <... futex resumed>) = 1 [pid 5210] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5209] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5210] <... open resumed>) = 5 [pid 5210] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5209] <... futex resumed>) = 0 [pid 5210] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5209] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5210] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5209] <... futex resumed>) = 0 [pid 5210] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5209] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5210] <... mmap resumed>) = 0x20000000 [pid 5210] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5209] <... futex resumed>) = 0 [pid 5210] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5209] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5210] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5209] <... futex resumed>) = 0 [pid 5210] ftruncate(4, 33587199 [pid 5209] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5210] <... ftruncate resumed>) = 0 [pid 5210] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5209] <... futex resumed>) = 0 [pid 5210] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5209] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5210] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5209] <... futex resumed>) = 0 [pid 5210] open("./bus", O_RDONLY [pid 5209] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5210] <... open resumed>) = 6 [pid 5210] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5209] <... futex resumed>) = 0 [pid 5210] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5209] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5208] <... ioctl resumed>) = 0 [pid 5210] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5209] <... futex resumed>) = 0 [pid 5210] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5209] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5208] close(3 [pid 5210] <... open resumed>) = 7 [pid 5208] <... close resumed>) = 0 [pid 5210] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5208] mkdir("./bus", 0777 [pid 5210] <... futex resumed>) = 1 [ 88.061422][ T5208] loop0: detected capacity change from 0 to 32768 [pid 5209] <... futex resumed>) = 0 [pid 5208] <... mkdir resumed>) = 0 [pid 5210] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5209] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5208] mount("/dev/loop0", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5210] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5209] <... futex resumed>) = 0 [pid 5210] dup(7 [pid 5209] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5208] <... mount resumed>) = 0 [pid 5210] <... dup resumed>) = 8 [pid 5208] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5210] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5208] <... openat resumed>) = 3 [pid 5210] <... futex resumed>) = 1 [pid 5209] <... futex resumed>) = 0 [pid 5208] chdir("./bus" [pid 5210] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5209] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5208] <... chdir resumed>) = 0 [pid 5210] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5209] <... futex resumed>) = 0 [pid 5208] ioctl(4, LOOP_CLR_FD [pid 5210] memfd_create("syzkaller", 0 [pid 5209] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5208] <... ioctl resumed>) = 0 [pid 5210] <... memfd_create resumed>) = 9 [pid 5208] close(4 [pid 5210] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5208] <... close resumed>) = 0 [pid 5210] <... mmap resumed>) = 0x7ff677e9d000 [pid 5208] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5207] <... futex resumed>) = 0 [pid 5208] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5207] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5208] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5207] <... futex resumed>) = 0 [pid 5208] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5207] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5208] <... open resumed>) = 4 [pid 5208] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5207] <... futex resumed>) = 0 [pid 5208] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5207] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5208] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5207] <... futex resumed>) = 0 [pid 5208] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5207] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5208] <... open resumed>) = 5 [pid 5208] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5207] <... futex resumed>) = 0 [pid 5208] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5207] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5208] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5207] <... futex resumed>) = 0 [pid 5208] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5207] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5208] <... mmap resumed>) = 0x20000000 [pid 5208] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5215] <... write resumed>) = 16777216 [pid 5208] <... futex resumed>) = 1 [pid 5207] <... futex resumed>) = 0 [pid 5208] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5207] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5215] munmap(0x7ff67f29d000, 16777216 [pid 5208] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5207] <... futex resumed>) = 0 [pid 5208] ftruncate(4, 33587199 [pid 5207] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5208] <... ftruncate resumed>) = 0 [pid 5208] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5207] <... futex resumed>) = 0 [pid 5208] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5207] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5208] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5207] <... futex resumed>) = 0 [pid 5208] open("./bus", O_RDONLY [pid 5207] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5208] <... open resumed>) = 6 [pid 5208] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5207] <... futex resumed>) = 0 [pid 5208] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5207] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5208] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5207] <... futex resumed>) = 0 [pid 5215] <... munmap resumed>) = 0 [pid 5208] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5207] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5215] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5208] <... open resumed>) = 7 [pid 5208] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5207] <... futex resumed>) = 0 [pid 5208] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5207] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5208] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5207] <... futex resumed>) = 0 [pid 5208] dup(7 [pid 5207] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5208] <... dup resumed>) = 8 [pid 5208] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5207] <... futex resumed>) = 0 [pid 5208] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5207] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5208] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5207] <... futex resumed>) = 0 [pid 5215] <... openat resumed>) = 4 [pid 5208] memfd_create("syzkaller", 0 [pid 5207] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5215] ioctl(4, LOOP_SET_FD, 3 [pid 5208] <... memfd_create resumed>) = 9 [pid 5208] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff677e9d000 [pid 5215] <... ioctl resumed>) = 0 [pid 5215] close(3) = 0 [pid 5215] mkdir("./bus", 0777) = 0 [pid 5215] mount("/dev/loop2", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5210] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5215] <... mount resumed>) = 0 [pid 5215] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5215] chdir("./bus") = 0 [pid 5215] ioctl(4, LOOP_CLR_FD) = 0 [pid 5215] close(4) = 0 [pid 5215] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5212] <... futex resumed>) = 0 [pid 5212] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5212] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 88.266998][ T5215] loop2: detected capacity change from 0 to 32768 [pid 5215] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5215] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5212] <... futex resumed>) = 0 [pid 5215] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5212] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5215] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5212] <... futex resumed>) = 0 [pid 5215] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5212] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5215] <... open resumed>) = 5 [pid 5215] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5212] <... futex resumed>) = 0 [pid 5215] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5212] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5215] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5212] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5215] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 0 [pid 5215] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5212] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5215] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5212] <... futex resumed>) = 0 [pid 5215] ftruncate(4, 33587199 [pid 5212] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5215] <... ftruncate resumed>) = 0 [pid 5215] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5208] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5215] <... futex resumed>) = 1 [pid 5212] <... futex resumed>) = 0 [pid 5210] <... write resumed>) = 2097152 [pid 5215] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5212] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5215] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5212] <... futex resumed>) = 0 [pid 5212] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5215] open("./bus", O_RDONLY) = 6 [pid 5215] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5212] <... futex resumed>) = 0 [pid 5215] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5212] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5215] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5215] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5212] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5215] <... open resumed>) = 7 [pid 5215] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5212] <... futex resumed>) = 0 [pid 5215] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5212] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5210] munmap(0x7ff677e9d000, 2097152 [pid 5215] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5212] <... futex resumed>) = 0 [pid 5215] dup(7 [pid 5212] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5215] <... dup resumed>) = 8 [pid 5210] <... munmap resumed>) = 0 [pid 5215] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5212] <... futex resumed>) = 0 [pid 5215] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5212] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5215] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5212] <... futex resumed>) = 0 [pid 5212] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5210] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 10 [pid 5210] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5210] ioctl(10, LOOP_CLR_FD) = 0 [pid 5210] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5210] close(10 [pid 5215] memfd_create("syzkaller", 0 [pid 5210] <... close resumed>) = 0 [pid 5210] close(9 [pid 5218] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5215] <... memfd_create resumed>) = 9 [pid 5210] <... close resumed>) = 0 [pid 5215] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff677e9d000 [pid 5208] <... write resumed>) = 2097152 [pid 5210] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5210] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5208] munmap(0x7ff677e9d000, 2097152 [pid 5209] <... futex resumed>) = 0 [pid 5209] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5210] <... futex resumed>) = 0 [pid 5209] <... futex resumed>) = 1 [pid 5210] sendfile(8, 6, NULL, 281474978811908 [pid 5209] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5208] <... munmap resumed>) = 0 [pid 5208] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 10 [pid 5208] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5208] ioctl(10, LOOP_CLR_FD) = 0 [pid 5208] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5208] close(10 [pid 5214] <... write resumed>) = 16777216 [pid 5208] <... close resumed>) = 0 [pid 5209] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5208] close(9 [pid 5215] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5214] munmap(0x7ff67f29d000, 16777216 [pid 5209] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5208] <... close resumed>) = 0 [pid 5214] <... munmap resumed>) = 0 [pid 5209] <... futex resumed>) = 0 [pid 5209] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff67807c000 [pid 5209] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5209] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5219], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5219 [pid 5209] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5208] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5209] <... futex resumed>) = 0 [pid 5208] <... futex resumed>) = 1 [pid 5207] <... futex resumed>) = 0 [pid 5208] sendfile(8, 6, NULL, 281474978811908 [pid 5207] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5214] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5209] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5207] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5219 attached [pid 5219] set_robust_list(0x7ff67809c9e0, 24) = 0 [pid 5219] sync( [pid 5214] <... openat resumed>) = 4 [pid 5215] <... write resumed>) = 2097152 [pid 5214] ioctl(4, LOOP_SET_FD, 3 [pid 5215] munmap(0x7ff677e9d000, 2097152 [pid 5219] <... sync resumed>) = 0 [pid 5219] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5219] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5215] <... munmap resumed>) = 0 [pid 5209] <... futex resumed>) = 0 [pid 5215] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5214] <... ioctl resumed>) = 0 [pid 5215] <... openat resumed>) = 10 [pid 5214] close(3 [pid 5215] ioctl(10, LOOP_SET_FD, 9 [pid 5214] <... close resumed>) = 0 [pid 5215] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5214] mkdir("./bus", 0777 [pid 5215] ioctl(10, LOOP_CLR_FD [pid 5214] <... mkdir resumed>) = 0 [pid 5207] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5207] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5215] <... ioctl resumed>) = 0 [pid 5214] mount("/dev/loop5", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5207] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5214] <... mount resumed>) = 0 [pid 5207] <... mmap resumed>) = 0x7ff67807c000 [pid 5214] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5207] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5215] ioctl(10, LOOP_SET_FD, 9 [pid 5214] <... openat resumed>) = 3 [pid 5207] <... mprotect resumed>) = 0 [pid 5207] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5215] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5214] chdir("./bus" [pid 5215] close(10 [pid 5214] <... chdir resumed>) = 0 [pid 5207] <... clone resumed>, parent_tid=[5220], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5220 [pid 5207] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 88.561201][ T5214] loop5: detected capacity change from 0 to 32768 [pid 5207] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5215] <... close resumed>) = 0 [pid 5214] ioctl(4, LOOP_CLR_FD [pid 5215] close(9 [pid 5214] <... ioctl resumed>) = 0 [pid 5215] <... close resumed>) = 0 [pid 5214] close(4) = 0 ./strace-static-x86_64: Process 5220 attached [pid 5214] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5220] set_robust_list(0x7ff67809c9e0, 24 [pid 5214] <... futex resumed>) = 1 [pid 5213] <... futex resumed>) = 0 [pid 5214] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5213] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5214] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5213] <... futex resumed>) = 0 [pid 5220] <... set_robust_list resumed>) = 0 [pid 5215] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5220] sync( [pid 5215] <... futex resumed>) = 1 [pid 5214] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5213] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5212] <... futex resumed>) = 0 [pid 5215] sendfile(8, 6, NULL, 281474978811908 [pid 5214] <... open resumed>) = 4 [pid 5212] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5214] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5212] <... futex resumed>) = 0 [pid 5212] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5220] <... sync resumed>) = 0 [pid 5214] <... futex resumed>) = 1 [pid 5213] <... futex resumed>) = 0 [pid 5207] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5220] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5214] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5213] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5220] <... futex resumed>) = 0 [pid 5220] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5214] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5213] <... futex resumed>) = 0 [pid 5205] exit_group(0 [pid 5216] <... futex resumed>) = ? [pid 5214] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5213] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5205] <... exit_group resumed>) = ? [pid 5206] <... sendfile resumed>) = ? [pid 5216] +++ exited with 0 +++ [pid 5206] +++ exited with 0 +++ [pid 5214] <... open resumed>) = 5 [pid 5214] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5205] +++ exited with 0 +++ [pid 5214] <... futex resumed>) = 1 [pid 5213] <... futex resumed>) = 0 [pid 5214] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5213] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5205, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=42 /* 0.42 s */} --- [pid 5214] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5213] <... futex resumed>) = 0 [pid 4994] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5214] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5213] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5214] <... mmap resumed>) = 0x20000000 [pid 4994] <... openat resumed>) = 3 [pid 5214] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] fstat(3, [pid 5214] <... futex resumed>) = 1 [pid 5213] <... futex resumed>) = 0 [pid 5212] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5214] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5213] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5212] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] getdents64(3, [pid 5214] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5213] <... futex resumed>) = 0 [pid 5212] <... futex resumed>) = 0 [pid 5214] ftruncate(4, 33587199 [pid 5213] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5212] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4994] <... getdents64 resumed>0x555556742620 /* 4 entries */, 32768) = 104 [pid 5214] <... ftruncate resumed>) = 0 [pid 5212] <... mmap resumed>) = 0x7ff67807c000 [pid 5214] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5212] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 4994] umount2("./11/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5214] <... futex resumed>) = 1 [pid 5213] <... futex resumed>) = 0 [pid 5212] <... mprotect resumed>) = 0 [pid 5214] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5213] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5212] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5214] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5213] <... futex resumed>) = 0 [pid 5212] <... clone resumed>, parent_tid=[5221], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5221 [pid 5212] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5214] open("./bus", O_RDONLY [pid 5213] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5212] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5214] <... open resumed>) = 6 [pid 5214] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5213] <... futex resumed>) = 0 [pid 5214] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5213] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5214] <... open resumed>) = 7 [pid 5213] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5221 attached [pid 5214] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5213] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5221] set_robust_list(0x7ff67809c9e0, 24 [pid 5214] <... futex resumed>) = 0 [pid 5213] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5221] <... set_robust_list resumed>) = 0 [pid 5214] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5213] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5214] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5213] <... futex resumed>) = 0 [pid 5221] sync( [pid 5214] dup(7 [pid 5213] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5214] <... dup resumed>) = 8 [pid 5214] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5213] <... futex resumed>) = 0 [pid 5214] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 5213] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5214] memfd_create("syzkaller", 0 [pid 5213] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5214] <... memfd_create resumed>) = 9 [pid 5214] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff677e9d000 [pid 5212] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5214] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5218] <... write resumed>) = 16777216 [pid 5218] munmap(0x7ff67f29d000, 16777216) = 0 [pid 5218] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5218] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5218] close(3) = 0 [pid 5218] mkdir("./bus", 0777) = 0 [pid 5218] mount("/dev/loop3", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5214] <... write resumed>) = 2097152 [pid 5214] munmap(0x7ff677e9d000, 2097152 [pid 5218] <... mount resumed>) = 0 [pid 5214] <... munmap resumed>) = 0 [pid 5218] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5214] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5218] <... openat resumed>) = 3 [pid 5214] <... openat resumed>) = 10 [pid 5218] chdir("./bus" [pid 5214] ioctl(10, LOOP_SET_FD, 9 [pid 5218] <... chdir resumed>) = 0 [pid 5214] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5218] ioctl(4, LOOP_CLR_FD [pid 5214] ioctl(10, LOOP_CLR_FD [pid 5218] <... ioctl resumed>) = 0 [pid 5214] <... ioctl resumed>) = 0 [ 88.880230][ T5218] loop3: detected capacity change from 0 to 32768 [pid 5218] close(4) = 0 [pid 5218] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5214] ioctl(10, LOOP_SET_FD, 9 [pid 5218] <... futex resumed>) = 1 [pid 5217] <... futex resumed>) = 0 [pid 5214] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5218] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5217] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5214] close(10 [pid 5218] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5217] <... futex resumed>) = 0 [pid 5214] <... close resumed>) = 0 [pid 5218] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5217] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5214] close(9 [pid 5218] <... open resumed>) = 4 [pid 5214] <... close resumed>) = 0 [pid 5218] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5217] <... futex resumed>) = 0 [pid 5218] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5217] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5218] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5217] <... futex resumed>) = 0 [pid 5218] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5217] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5218] <... open resumed>) = 5 [pid 5218] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5214] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5218] <... futex resumed>) = 1 [pid 5217] <... futex resumed>) = 0 [pid 5214] <... futex resumed>) = 1 [pid 5213] <... futex resumed>) = 0 [pid 5218] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5217] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5214] sendfile(8, 6, NULL, 281474978811908 [pid 5213] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5218] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5217] <... futex resumed>) = 0 [pid 5213] <... futex resumed>) = 0 [pid 5218] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5217] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5213] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5218] <... mmap resumed>) = 0x20000000 [pid 5218] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5217] <... futex resumed>) = 0 [pid 5218] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5217] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5218] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5217] <... futex resumed>) = 0 [pid 5218] ftruncate(4, 33587199 [pid 5217] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5218] <... ftruncate resumed>) = 0 [pid 5218] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5217] <... futex resumed>) = 0 [pid 5221] <... sync resumed>) = 0 [pid 5218] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5217] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5221] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5218] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5217] <... futex resumed>) = 0 [pid 5221] <... futex resumed>) = 0 [pid 5218] open("./bus", O_RDONLY [pid 5217] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5221] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5218] <... open resumed>) = 6 [pid 5218] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5213] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5218] <... futex resumed>) = 1 [pid 5217] <... futex resumed>) = 0 [pid 5213] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5218] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5217] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5213] <... futex resumed>) = 0 [pid 5218] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5217] <... futex resumed>) = 0 [pid 5213] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5218] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5217] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5213] <... mmap resumed>) = 0x7ff67807c000 [pid 5218] <... open resumed>) = 7 [pid 5213] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5218] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5213] <... mprotect resumed>) = 0 [pid 5218] <... futex resumed>) = 1 [pid 5217] <... futex resumed>) = 0 [pid 5213] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5218] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5217] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5218] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5217] <... futex resumed>) = 0 [pid 5213] <... clone resumed>, parent_tid=[5222], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5222 [pid 5218] dup(7 [pid 5217] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5213] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5218] <... dup resumed>) = 8 [pid 5213] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5222 attached [pid 5218] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5213] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5222] set_robust_list(0x7ff67809c9e0, 24 [pid 5218] <... futex resumed>) = 1 [pid 5217] <... futex resumed>) = 0 [pid 5222] <... set_robust_list resumed>) = 0 [pid 5218] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5217] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5222] sync( [pid 5218] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5217] <... futex resumed>) = 0 [pid 5218] memfd_create("syzkaller", 0 [pid 5217] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5218] <... memfd_create resumed>) = 9 [pid 5218] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5222] <... sync resumed>) = 0 [pid 5218] <... mmap resumed>) = 0x7ff677e9d000 [pid 5222] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5213] <... futex resumed>) = 0 [pid 5222] <... futex resumed>) = 1 [pid 5222] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5218] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5209] exit_group(0 [pid 5219] <... futex resumed>) = ? [pid 5209] <... exit_group resumed>) = ? [pid 5219] +++ exited with 0 +++ [pid 5210] <... sendfile resumed>) = ? [pid 5210] +++ exited with 0 +++ [pid 5209] +++ exited with 0 +++ [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5209, si_uid=0, si_status=0, si_utime=11 /* 0.11 s */, si_stime=35 /* 0.35 s */} --- [pid 4997] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4997] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5218] <... write resumed>) = 2097152 [pid 4997] fstat(3, [pid 5207] exit_group(0 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5220] <... futex resumed>) = ? [pid 5218] munmap(0x7ff677e9d000, 2097152 [pid 5208] <... sendfile resumed>) = ? [pid 5207] <... exit_group resumed>) = ? [pid 4997] getdents64(3, [pid 5220] +++ exited with 0 +++ [pid 4997] <... getdents64 resumed>0x555556742620 /* 4 entries */, 32768) = 104 [pid 5218] <... munmap resumed>) = 0 [pid 5208] +++ exited with 0 +++ [pid 5207] +++ exited with 0 +++ [pid 4997] umount2("./11/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5218] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4993] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5207, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=43 /* 0.43 s */} --- [pid 5218] <... openat resumed>) = 10 [pid 5218] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5218] ioctl(10, LOOP_CLR_FD [pid 4993] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5218] <... ioctl resumed>) = 0 [pid 4993] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4993] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5218] ioctl(10, LOOP_SET_FD, 9 [pid 4993] fstat(3, [pid 5218] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5218] close(10 [pid 4993] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5218] <... close resumed>) = 0 [pid 4993] getdents64(3, [pid 5218] close(9 [pid 4993] <... getdents64 resumed>0x555556742620 /* 4 entries */, 32768) = 104 [pid 4993] umount2("./11/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] <... umount2 resumed>) = 0 [pid 5212] exit_group(0 [pid 5221] <... futex resumed>) = ? [pid 5212] <... exit_group resumed>) = ? [pid 4994] umount2("./11/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5221] +++ exited with 0 +++ [pid 5215] <... sendfile resumed>) = ? [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5215] +++ exited with 0 +++ [pid 5212] +++ exited with 0 +++ [pid 5218] <... close resumed>) = 0 [pid 4995] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5212, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=44 /* 0.44 s */} --- [pid 4994] lstat("./11/bus", [pid 5218] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] umount2("./11/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] openat(AT_FDCWD, "./11/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5218] <... futex resumed>) = 1 [pid 5217] <... futex resumed>) = 0 [pid 4995] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] fstat(4, [pid 5218] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5217] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5218] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5217] <... futex resumed>) = 0 [pid 4995] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4994] getdents64(4, [pid 5218] sendfile(8, 6, NULL, 281474978811908 [pid 5217] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4995] <... openat resumed>) = 3 [pid 4994] <... getdents64 resumed>0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4995] fstat(3, [pid 4994] getdents64(4, [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] <... getdents64 resumed>0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4995] getdents64(3, [pid 4994] close(4 [pid 4995] <... getdents64 resumed>0x555556742620 /* 4 entries */, 32768) = 104 [pid 4994] <... close resumed>) = 0 [pid 4995] umount2("./11/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] rmdir("./11/bus") = 0 [pid 4994] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] lstat("./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4994] unlink("./11/binderfs") = 0 [pid 4994] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4994] close(3) = 0 [pid 4994] rmdir("./11") = 0 [pid 4994] mkdir("./12", 0777) = 0 [pid 4994] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4994] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4994] close(3 [pid 5217] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4994] <... close resumed>) = 0 [pid 5217] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5217] <... futex resumed>) = 0 [pid 5217] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4994] <... clone resumed>, child_tidptr=0x5555567415d0) = 5223 [pid 5217] <... mmap resumed>) = 0x7ff67807c000 [pid 5217] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5217] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5224], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5224 ./strace-static-x86_64: Process 5223 attached [pid 5217] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5223] set_robust_list(0x5555567415e0, 24 [pid 5217] <... futex resumed>) = 0 [pid 5223] <... set_robust_list resumed>) = 0 [pid 5217] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5223] chdir("./12") = 0 [pid 5223] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5223] setpgid(0, 0) = 0 ./strace-static-x86_64: Process 5224 attached [pid 5223] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5224] set_robust_list(0x7ff67809c9e0, 24 [pid 5223] <... openat resumed>) = 3 [pid 5224] <... set_robust_list resumed>) = 0 [pid 5223] write(3, "1000", 4 [pid 5224] sync( [pid 5223] <... write resumed>) = 4 [pid 5223] close(3) = 0 [pid 5223] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5223] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5223] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5223] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5223] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5225], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5225 [pid 5224] <... sync resumed>) = 0 [pid 5223] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5224] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5223] <... futex resumed>) = 0 [pid 5224] <... futex resumed>) = 1 [pid 5223] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5217] <... futex resumed>) = 0 [pid 5224] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 5225 attached [pid 5225] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5225] memfd_create("syzkaller", 0) = 3 [pid 5225] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 5213] exit_group(0 [pid 5222] <... futex resumed>) = ? [pid 5213] <... exit_group resumed>) = ? [pid 5222] +++ exited with 0 +++ [pid 5214] <... sendfile resumed>) = ? [pid 5214] +++ exited with 0 +++ [pid 5213] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5213, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=42 /* 0.42 s */} --- [pid 4998] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x555556742620 /* 4 entries */, 32768) = 104 [pid 4998] umount2("./11/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... umount2 resumed>) = 0 [pid 4997] umount2("./11/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./11/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./11/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./11/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4997] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4997] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4997] close(4) = 0 [pid 4997] rmdir("./11/bus") = 0 [pid 4997] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] unlink("./11/binderfs") = 0 [pid 4997] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4997] close(3) = 0 [pid 4997] rmdir("./11") = 0 [pid 4997] mkdir("./12", 0777) = 0 [pid 4997] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 4997] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4997] close(3) = 0 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567415d0) = 5226 ./strace-static-x86_64: Process 5226 attached [pid 5226] set_robust_list(0x5555567415e0, 24) = 0 [pid 5226] chdir("./12") = 0 [pid 5226] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5226] setpgid(0, 0) = 0 [pid 5226] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5226] write(3, "1000", 4) = 4 [pid 5226] close(3) = 0 [pid 5226] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5226] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5226] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5226] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5226] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5227], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5227 [pid 5226] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5226] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5227 attached [pid 5227] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5227] memfd_create("syzkaller", 0) = 3 [pid 5227] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 4993] <... umount2 resumed>) = 0 [pid 4993] umount2("./11/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4993] lstat("./11/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4993] umount2("./11/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4993] openat(AT_FDCWD, "./11/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4993] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4993] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4993] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4993] close(4) = 0 [pid 4993] rmdir("./11/bus") = 0 [pid 4993] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4993] lstat("./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4993] unlink("./11/binderfs") = 0 [pid 4993] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4993] close(3) = 0 [pid 4993] rmdir("./11" [pid 4995] <... umount2 resumed>) = 0 [pid 4993] <... rmdir resumed>) = 0 [pid 4993] mkdir("./12", 0777) = 0 [pid 4993] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4995] umount2("./11/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4993] ioctl(3, LOOP_CLR_FD [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4993] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4995] lstat("./11/bus", [pid 4993] close(3 [pid 4995] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4993] <... close resumed>) = 0 [pid 4995] umount2("./11/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4993] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5217] exit_group(0 [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5224] <... futex resumed>) = ? [pid 5217] <... exit_group resumed>) = ? [pid 4995] openat(AT_FDCWD, "./11/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4993] <... clone resumed>, child_tidptr=0x5555567415d0) = 5228 [pid 5224] +++ exited with 0 +++ [pid 4995] <... openat resumed>) = 4 [pid 5218] <... sendfile resumed>) = ? [pid 4995] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4995] getdents64(4, [pid 5218] +++ exited with 0 +++ [pid 5217] +++ exited with 0 +++ [pid 4995] <... getdents64 resumed>0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4996] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5217, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=27 /* 0.27 s */} --- [pid 4995] close(4 [pid 4996] restart_syscall(<... resuming interrupted clone ...> [pid 4995] <... close resumed>) = 0 ./strace-static-x86_64: Process 5228 attached [pid 4996] <... restart_syscall resumed>) = 0 [pid 4995] rmdir("./11/bus" [pid 5228] set_robust_list(0x5555567415e0, 24 [pid 4995] <... rmdir resumed>) = 0 [pid 5228] <... set_robust_list resumed>) = 0 [pid 4995] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5228] chdir("./12" [pid 4996] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5228] <... chdir resumed>) = 0 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] lstat("./11/binderfs", [pid 5228] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4996] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4995] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5228] <... prctl resumed>) = 0 [pid 4996] <... openat resumed>) = 3 [pid 4995] unlink("./11/binderfs" [pid 5228] setpgid(0, 0 [pid 4996] fstat(3, [pid 4995] <... unlink resumed>) = 0 [pid 5228] <... setpgid resumed>) = 0 [pid 4996] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] getdents64(3, [pid 5228] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4996] getdents64(3, [pid 4995] <... getdents64 resumed>0x555556742620 /* 0 entries */, 32768) = 0 [pid 5228] <... openat resumed>) = 3 [pid 4996] <... getdents64 resumed>0x555556742620 /* 4 entries */, 32768) = 104 [pid 4995] close(3 [pid 5228] write(3, "1000", 4 [pid 4996] umount2("./12/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] <... close resumed>) = 0 [pid 5228] <... write resumed>) = 4 [pid 4995] rmdir("./11" [pid 5228] close(3 [pid 4995] <... rmdir resumed>) = 0 [pid 5228] <... close resumed>) = 0 [pid 4995] mkdir("./12", 0777 [pid 5228] symlink("/dev/binderfs", "./binderfs" [pid 4995] <... mkdir resumed>) = 0 [pid 5228] <... symlink resumed>) = 0 [pid 4995] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5228] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] <... openat resumed>) = 3 [pid 5228] <... futex resumed>) = 0 [pid 4995] ioctl(3, LOOP_CLR_FD [pid 5228] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4995] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5228] <... mmap resumed>) = 0x7ff68769d000 [pid 4995] close(3 [pid 5228] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE [pid 4995] <... close resumed>) = 0 [pid 5228] <... mprotect resumed>) = 0 [pid 4995] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5228] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4995] <... clone resumed>, child_tidptr=0x5555567415d0) = 5229 [pid 5228] <... clone resumed>, parent_tid=[5230], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5230 [pid 5228] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5228] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5230 attached [pid 5230] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5230] memfd_create("syzkaller", 0) = 3 [pid 5230] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 ./strace-static-x86_64: Process 5229 attached [pid 5229] set_robust_list(0x5555567415e0, 24) = 0 [pid 5229] chdir("./12") = 0 [pid 5229] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5229] setpgid(0, 0) = 0 [pid 5229] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5229] write(3, "1000", 4) = 4 [pid 5229] close(3) = 0 [pid 5229] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5229] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5225] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5229] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5229] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5229] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5231], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5231 [pid 5229] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5229] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4998] <... umount2 resumed>) = 0 [pid 4998] umount2("./11/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./11/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./11/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./11/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 5231 attached ) = 4 [pid 5231] set_robust_list(0x7ff6876bd9e0, 24 [pid 4998] fstat(4, [pid 5231] <... set_robust_list resumed>) = 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5231] memfd_create("syzkaller", 0 [pid 4998] getdents64(4, [pid 5231] <... memfd_create resumed>) = 3 [pid 4998] <... getdents64 resumed>0x55555674a660 /* 2 entries */, 32768) = 48 [pid 5231] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4998] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 5231] <... mmap resumed>) = 0x7ff67f29d000 [pid 4998] close(4) = 0 [pid 4998] rmdir("./11/bus") = 0 [pid 4998] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./11/binderfs") = 0 [pid 4998] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./11") = 0 [pid 4998] mkdir("./12", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567415d0) = 5232 ./strace-static-x86_64: Process 5232 attached [pid 5232] set_robust_list(0x5555567415e0, 24) = 0 [pid 5232] chdir("./12") = 0 [pid 5232] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5232] setpgid(0, 0) = 0 [pid 5232] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5232] write(3, "1000", 4) = 4 [pid 5232] close(3) = 0 [pid 5232] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5232] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5232] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5232] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5232] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5233], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5233 [pid 5232] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5232] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5233 attached [pid 5233] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5233] memfd_create("syzkaller", 0) = 3 [pid 5233] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 5227] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5230] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5225] <... write resumed>) = 16777216 [pid 5225] munmap(0x7ff67f29d000, 16777216 [pid 5231] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5225] <... munmap resumed>) = 0 [pid 5225] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5225] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 4996] <... umount2 resumed>) = 0 [pid 4996] umount2("./12/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] lstat("./12/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] umount2("./12/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] openat(AT_FDCWD, "./12/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4996] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4996] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 5233] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 4996] close(4) = 0 [pid 4996] rmdir("./12/bus" [pid 5225] close(3 [pid 4996] <... rmdir resumed>) = 0 [pid 5225] <... close resumed>) = 0 [pid 4996] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5225] mkdir("./bus", 0777 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5225] <... mkdir resumed>) = 0 [pid 4996] lstat("./12/binderfs", [pid 5225] mount("/dev/loop1", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 4996] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4996] unlink("./12/binderfs") = 0 [pid 4996] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4996] close(3) = 0 [pid 4996] rmdir("./12" [pid 5225] <... mount resumed>) = 0 [pid 4996] <... rmdir resumed>) = 0 [pid 5225] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 4996] mkdir("./13", 0777 [pid 5225] <... openat resumed>) = 3 [pid 4996] <... mkdir resumed>) = 0 [pid 5225] chdir("./bus" [pid 4996] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5225] <... chdir resumed>) = 0 [pid 4996] <... openat resumed>) = 3 [pid 5225] ioctl(4, LOOP_CLR_FD [pid 4996] ioctl(3, LOOP_CLR_FD [pid 5225] <... ioctl resumed>) = 0 [pid 4996] <... ioctl resumed>) = -1 ENXIO (No such device or address) [ 90.405109][ T5225] loop1: detected capacity change from 0 to 32768 [pid 5225] close(4 [pid 4996] close(3 [pid 5225] <... close resumed>) = 0 [pid 4996] <... close resumed>) = 0 [pid 5225] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5225] <... futex resumed>) = 1 [pid 5223] <... futex resumed>) = 0 [pid 5225] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5223] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... clone resumed>, child_tidptr=0x5555567415d0) = 5234 [pid 5225] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5223] <... futex resumed>) = 0 [pid 5225] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5223] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5225] <... open resumed>) = 4 ./strace-static-x86_64: Process 5234 attached [pid 5225] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5234] set_robust_list(0x5555567415e0, 24 [pid 5225] <... futex resumed>) = 1 [pid 5223] <... futex resumed>) = 0 [pid 5234] <... set_robust_list resumed>) = 0 [pid 5225] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5223] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5234] chdir("./13" [pid 5225] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5223] <... futex resumed>) = 0 [pid 5234] <... chdir resumed>) = 0 [pid 5225] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5223] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5234] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5225] <... open resumed>) = 5 [pid 5234] <... prctl resumed>) = 0 [pid 5225] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5234] setpgid(0, 0 [pid 5225] <... futex resumed>) = 1 [pid 5223] <... futex resumed>) = 0 [pid 5234] <... setpgid resumed>) = 0 [pid 5225] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5223] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5234] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5225] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5223] <... futex resumed>) = 0 [pid 5234] <... openat resumed>) = 3 [pid 5225] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5223] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5234] write(3, "1000", 4 [pid 5225] <... mmap resumed>) = 0x20000000 [pid 5234] <... write resumed>) = 4 [pid 5225] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5234] close(3 [pid 5225] <... futex resumed>) = 1 [pid 5223] <... futex resumed>) = 0 [pid 5234] <... close resumed>) = 0 [pid 5225] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5223] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5234] symlink("/dev/binderfs", "./binderfs" [pid 5225] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5223] <... futex resumed>) = 0 [pid 5234] <... symlink resumed>) = 0 [pid 5225] ftruncate(4, 33587199 [pid 5223] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5234] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5225] <... ftruncate resumed>) = 0 [pid 5234] <... futex resumed>) = 0 [pid 5225] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5234] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5225] <... futex resumed>) = 1 [pid 5223] <... futex resumed>) = 0 [pid 5234] <... mmap resumed>) = 0x7ff68769d000 [pid 5225] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5223] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5234] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE [pid 5225] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5223] <... futex resumed>) = 0 [pid 5234] <... mprotect resumed>) = 0 [pid 5225] open("./bus", O_RDONLY [pid 5223] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5234] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5225] <... open resumed>) = 6 [pid 5225] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5234] <... clone resumed>, parent_tid=[5235], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5235 [pid 5225] <... futex resumed>) = 1 [pid 5223] <... futex resumed>) = 0 [pid 5234] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5225] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5223] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5234] <... futex resumed>) = 0 [pid 5225] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5223] <... futex resumed>) = 0 [pid 5234] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5225] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5223] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5235 attached [pid 5225] <... open resumed>) = 7 [pid 5235] set_robust_list(0x7ff6876bd9e0, 24 [pid 5225] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5235] <... set_robust_list resumed>) = 0 [pid 5225] <... futex resumed>) = 1 [pid 5223] <... futex resumed>) = 0 [pid 5235] memfd_create("syzkaller", 0 [pid 5225] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5223] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5235] <... memfd_create resumed>) = 3 [pid 5225] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5223] <... futex resumed>) = 0 [pid 5235] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5225] dup(7 [pid 5223] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5235] <... mmap resumed>) = 0x7ff67f29d000 [pid 5225] <... dup resumed>) = 8 [pid 5225] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5223] <... futex resumed>) = 0 [pid 5225] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5223] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5225] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5223] <... futex resumed>) = 0 [pid 5225] memfd_create("syzkaller", 0 [pid 5223] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5225] <... memfd_create resumed>) = 9 [ 90.531771][ T27] kauditd_printk_skb: 14 callbacks suppressed [ 90.531785][ T27] audit: type=1804 audit(1686284895.367:148): pid=5225 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor481" name="/root/syzkaller.20fUYQ/12/bus/bus" dev="loop1" ino=7 res=1 errno=0 [pid 5225] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff677e9d000 [ 90.635282][ T27] audit: type=1804 audit(1686284895.407:149): pid=5225 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor481" name="/root/syzkaller.20fUYQ/12/bus/bus" dev="loop1" ino=7 res=1 errno=0 [pid 5225] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5227] <... write resumed>) = 16777216 [pid 5227] munmap(0x7ff67f29d000, 16777216 [pid 5230] <... write resumed>) = 16777216 [pid 5227] <... munmap resumed>) = 0 [pid 5230] munmap(0x7ff67f29d000, 16777216 [pid 5225] <... write resumed>) = 2097152 [pid 5225] munmap(0x7ff677e9d000, 2097152 [pid 5227] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5225] <... munmap resumed>) = 0 [pid 5227] <... openat resumed>) = 4 [pid 5227] ioctl(4, LOOP_SET_FD, 3 [pid 5225] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 10 [pid 5225] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5225] ioctl(10, LOOP_CLR_FD [pid 5230] <... munmap resumed>) = 0 [pid 5225] <... ioctl resumed>) = 0 [pid 5230] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5230] ioctl(4, LOOP_SET_FD, 3 [pid 5225] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5225] close(10) = 0 [pid 5225] close(9 [pid 5227] <... ioctl resumed>) = 0 [pid 5227] close(3) = 0 [pid 5227] mkdir("./bus", 0777) = 0 [pid 5227] mount("/dev/loop4", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5230] <... ioctl resumed>) = 0 [pid 5230] close(3) = 0 [pid 5230] mkdir("./bus", 0777) = 0 [pid 5225] <... close resumed>) = 0 [pid 5230] mount("/dev/loop0", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5231] <... write resumed>) = 16777216 [pid 5225] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5223] <... futex resumed>) = 0 [pid 5225] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5223] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5227] <... mount resumed>) = 0 [pid 5225] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5223] <... futex resumed>) = 0 [pid 5227] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [ 90.764691][ T5227] loop4: detected capacity change from 0 to 32768 [ 90.779118][ T5230] loop0: detected capacity change from 0 to 32768 [pid 5225] sendfile(8, 6, NULL, 281474978811908 [pid 5223] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5231] munmap(0x7ff67f29d000, 16777216 [pid 5230] <... mount resumed>) = 0 [pid 5227] <... openat resumed>) = 3 [pid 5227] chdir("./bus" [pid 5230] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5227] <... chdir resumed>) = 0 [pid 5230] <... openat resumed>) = 3 [pid 5227] ioctl(4, LOOP_CLR_FD [pid 5230] chdir("./bus" [pid 5227] <... ioctl resumed>) = 0 [pid 5230] <... chdir resumed>) = 0 [pid 5227] close(4 [pid 5230] ioctl(4, LOOP_CLR_FD [pid 5227] <... close resumed>) = 0 [pid 5227] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5226] <... futex resumed>) = 0 [pid 5227] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5226] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5230] <... ioctl resumed>) = 0 [pid 5227] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5226] <... futex resumed>) = 0 [pid 5227] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5226] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5230] close(4 [pid 5227] <... open resumed>) = 4 [pid 5230] <... close resumed>) = 0 [pid 5227] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5230] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5227] <... futex resumed>) = 1 [pid 5226] <... futex resumed>) = 0 [pid 5230] <... futex resumed>) = 1 [pid 5228] <... futex resumed>) = 0 [pid 5227] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5226] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5231] <... munmap resumed>) = 0 [pid 5230] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5228] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5227] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5226] <... futex resumed>) = 0 [pid 5231] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5230] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5228] <... futex resumed>) = 0 [pid 5227] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5226] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5231] <... openat resumed>) = 4 [pid 5230] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5228] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5227] <... open resumed>) = 5 [pid 5231] ioctl(4, LOOP_SET_FD, 3 [pid 5230] <... open resumed>) = 4 [pid 5227] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5230] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5227] <... futex resumed>) = 1 [pid 5226] <... futex resumed>) = 0 [pid 5230] <... futex resumed>) = 1 [pid 5228] <... futex resumed>) = 0 [pid 5227] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5226] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5223] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5230] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5228] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5227] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5226] <... futex resumed>) = 0 [pid 5223] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5230] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5228] <... futex resumed>) = 0 [pid 5227] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5226] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5223] <... futex resumed>) = 0 [pid 5230] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5228] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5227] <... mmap resumed>) = 0x20000000 [pid 5223] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5230] <... open resumed>) = 5 [pid 5227] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5223] <... mmap resumed>) = 0x7ff67807c000 [pid 5230] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5227] <... futex resumed>) = 1 [pid 5226] <... futex resumed>) = 0 [pid 5223] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5231] <... ioctl resumed>) = 0 [pid 5230] <... futex resumed>) = 1 [pid 5228] <... futex resumed>) = 0 [pid 5227] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5226] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5223] <... mprotect resumed>) = 0 [pid 5231] close(3 [pid 5230] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5228] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5227] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5226] <... futex resumed>) = 0 [pid 5223] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5231] <... close resumed>) = 0 [pid 5230] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5228] <... futex resumed>) = 0 [pid 5227] ftruncate(4, 33587199 [pid 5226] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5231] mkdir("./bus", 0777 [pid 5230] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5228] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5227] <... ftruncate resumed>) = 0 [pid 5223] <... clone resumed>, parent_tid=[5236], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5236 [pid 5231] <... mkdir resumed>) = 0 [pid 5230] <... mmap resumed>) = 0x20000000 [pid 5227] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5223] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5231] mount("/dev/loop2", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5230] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5227] <... futex resumed>) = 1 [pid 5226] <... futex resumed>) = 0 [pid 5223] <... futex resumed>) = 0 [pid 5230] <... futex resumed>) = 1 [pid 5228] <... futex resumed>) = 0 [pid 5227] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5226] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5223] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5230] ftruncate(4, 33587199 [pid 5228] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5227] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5226] <... futex resumed>) = 0 [pid 5230] <... ftruncate resumed>) = 0 [pid 5228] <... futex resumed>) = 0 [pid 5227] open("./bus", O_RDONLY [pid 5226] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5230] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5228] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5227] <... open resumed>) = 6 [pid 5227] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5226] <... futex resumed>) = 0 [pid 5227] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5226] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5227] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5226] <... futex resumed>) = 0 [ 90.874342][ T5231] loop2: detected capacity change from 0 to 32768 [pid 5227] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5226] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5227] <... open resumed>) = 7 [pid 5227] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5226] <... futex resumed>) = 0 [pid 5230] <... futex resumed>) = 0 [pid 5228] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5227] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5226] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5236 attached [pid 5233] <... write resumed>) = 16777216 [pid 5231] <... mount resumed>) = 0 [pid 5230] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5228] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5227] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5226] <... futex resumed>) = 0 [pid 5227] dup(7 [pid 5226] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5227] <... dup resumed>) = 8 [pid 5227] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5226] <... futex resumed>) = 0 [pid 5227] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5226] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5227] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5226] <... futex resumed>) = 0 [pid 5227] memfd_create("syzkaller", 0 [pid 5226] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5227] <... memfd_create resumed>) = 9 [pid 5227] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff677e9d000 [pid 5236] set_robust_list(0x7ff67809c9e0, 24 [pid 5233] munmap(0x7ff67f29d000, 16777216 [pid 5231] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5230] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5228] <... futex resumed>) = 0 [pid 5223] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5236] <... set_robust_list resumed>) = 0 [pid 5231] <... openat resumed>) = 3 [pid 5236] sync( [pid 5230] open("./bus", O_RDONLY [pid 5228] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5236] <... sync resumed>) = 0 [pid 5233] <... munmap resumed>) = 0 [pid 5231] chdir("./bus" [pid 5230] <... open resumed>) = 6 [pid 5236] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5233] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5231] <... chdir resumed>) = 0 [pid 5230] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5236] <... futex resumed>) = 0 [pid 5233] <... openat resumed>) = 4 [pid 5231] ioctl(4, LOOP_CLR_FD [ 90.911315][ T27] audit: type=1804 audit(1686284895.747:150): pid=5227 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor481" name="/root/syzkaller.hTAWL1/12/bus/bus" dev="loop4" ino=7 res=1 errno=0 [ 90.936982][ T27] audit: type=1804 audit(1686284895.747:151): pid=5227 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor481" name="/root/syzkaller.hTAWL1/12/bus/bus" dev="loop4" ino=7 res=1 errno=0 [pid 5230] <... futex resumed>) = 1 [pid 5228] <... futex resumed>) = 0 [pid 5236] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5235] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5233] ioctl(4, LOOP_SET_FD, 3 [pid 5231] <... ioctl resumed>) = 0 [pid 5230] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5228] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5233] <... ioctl resumed>) = 0 [pid 5231] close(4 [pid 5230] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5228] <... futex resumed>) = 0 [pid 5233] close(3 [pid 5231] <... close resumed>) = 0 [pid 5230] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5228] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5233] <... close resumed>) = 0 [ 91.000548][ T27] audit: type=1804 audit(1686284895.807:152): pid=5230 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor481" name="/root/syzkaller.lVUVkM/12/bus/bus" dev="loop0" ino=7 res=1 errno=0 [ 91.032412][ T5233] loop5: detected capacity change from 0 to 32768 [pid 5231] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5230] <... open resumed>) = 7 [pid 5233] mkdir("./bus", 0777 [pid 5231] <... futex resumed>) = 1 [pid 5230] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5229] <... futex resumed>) = 0 [pid 5233] <... mkdir resumed>) = 0 [pid 5231] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5230] <... futex resumed>) = 1 [pid 5229] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5228] <... futex resumed>) = 0 [pid 5227] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5233] mount("/dev/loop5", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5231] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5230] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5229] <... futex resumed>) = 0 [ 91.063619][ T27] audit: type=1804 audit(1686284895.897:153): pid=5230 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor481" name="/root/syzkaller.lVUVkM/12/bus/bus" dev="loop0" ino=7 res=1 errno=0 [pid 5228] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5231] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5230] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5229] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5228] <... futex resumed>) = 0 [pid 5233] <... mount resumed>) = 0 [pid 5233] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5231] <... open resumed>) = 4 [pid 5230] dup(7 [pid 5228] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5233] <... openat resumed>) = 3 [pid 5231] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5230] <... dup resumed>) = 8 [pid 5233] chdir("./bus" [pid 5231] <... futex resumed>) = 1 [pid 5230] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5229] <... futex resumed>) = 0 [pid 5233] <... chdir resumed>) = 0 [pid 5231] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5230] <... futex resumed>) = 1 [pid 5229] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5228] <... futex resumed>) = 0 [pid 5233] ioctl(4, LOOP_CLR_FD [pid 5231] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5230] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5229] <... futex resumed>) = 0 [pid 5228] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5233] <... ioctl resumed>) = 0 [pid 5231] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5230] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5229] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5228] <... futex resumed>) = 0 [pid 5233] close(4 [pid 5231] <... open resumed>) = 5 [pid 5230] memfd_create("syzkaller", 0 [pid 5228] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5233] <... close resumed>) = 0 [pid 5231] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5230] <... memfd_create resumed>) = 9 [pid 5233] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5231] <... futex resumed>) = 1 [pid 5230] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5229] <... futex resumed>) = 0 [pid 5233] <... futex resumed>) = 1 [pid 5232] <... futex resumed>) = 0 [pid 5231] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5230] <... mmap resumed>) = 0x7ff677e9d000 [pid 5229] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5233] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5232] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5231] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5232] <... futex resumed>) = 0 [pid 5233] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5232] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5229] <... futex resumed>) = 0 [pid 5233] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5231] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5229] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5233] <... open resumed>) = 4 [pid 5233] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5231] <... mmap resumed>) = 0x20000000 [pid 5233] <... futex resumed>) = 1 [pid 5232] <... futex resumed>) = 0 [pid 5231] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5233] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5232] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5231] <... futex resumed>) = 1 [pid 5229] <... futex resumed>) = 0 [pid 5233] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5232] <... futex resumed>) = 0 [pid 5231] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5229] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5233] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5232] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5231] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5229] <... futex resumed>) = 0 [pid 5233] <... open resumed>) = 5 [pid 5231] ftruncate(4, 33587199 [pid 5229] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5233] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5231] <... ftruncate resumed>) = 0 [pid 5227] <... write resumed>) = 2097152 [pid 5233] <... futex resumed>) = 1 [pid 5232] <... futex resumed>) = 0 [pid 5231] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5233] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5232] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5231] <... futex resumed>) = 1 [pid 5229] <... futex resumed>) = 0 [pid 5233] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5232] <... futex resumed>) = 0 [pid 5229] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5232] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5231] open("./bus", O_RDONLY [pid 5229] <... futex resumed>) = 0 [pid 5233] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5231] <... open resumed>) = 6 [pid 5227] munmap(0x7ff677e9d000, 2097152) = 0 [pid 5227] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 10 [pid 5227] ioctl(10, LOOP_SET_FD, 9 [pid 5229] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5227] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5233] <... mmap resumed>) = 0x20000000 [pid 5231] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5227] ioctl(10, LOOP_CLR_FD [pid 5233] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5231] <... futex resumed>) = 1 [pid 5230] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5229] <... futex resumed>) = 0 [pid 5227] <... ioctl resumed>) = 0 [pid 5233] <... futex resumed>) = 1 [pid 5232] <... futex resumed>) = 0 [pid 5231] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5229] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5233] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5232] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5231] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5229] <... futex resumed>) = 0 [pid 5235] <... write resumed>) = 16777216 [pid 5233] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5232] <... futex resumed>) = 0 [pid 5231] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5229] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 91.214894][ T27] audit: type=1804 audit(1686284896.057:154): pid=5231 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor481" name="/root/syzkaller.txkbmS/12/bus/bus" dev="loop2" ino=7 res=1 errno=0 [pid 5227] ioctl(10, LOOP_SET_FD, 9 [pid 5233] ftruncate(4, 33587199 [pid 5232] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5231] <... open resumed>) = 7 [pid 5227] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5227] close(10 [pid 5235] munmap(0x7ff67f29d000, 16777216 [pid 5233] <... ftruncate resumed>) = 0 [pid 5231] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5227] <... close resumed>) = 0 [pid 5227] close(9 [pid 5235] <... munmap resumed>) = 0 [pid 5233] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5231] <... futex resumed>) = 1 [pid 5229] <... futex resumed>) = 0 [pid 5235] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5233] <... futex resumed>) = 1 [pid 5232] <... futex resumed>) = 0 [pid 5231] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5230] <... write resumed>) = 2097152 [pid 5229] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5235] <... openat resumed>) = 4 [pid 5233] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5232] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5231] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5230] munmap(0x7ff677e9d000, 2097152 [pid 5229] <... futex resumed>) = 0 [pid 5235] ioctl(4, LOOP_SET_FD, 3 [ 91.263266][ T27] audit: type=1804 audit(1686284896.107:155): pid=5231 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor481" name="/root/syzkaller.txkbmS/12/bus/bus" dev="loop2" ino=7 res=1 errno=0 [pid 5233] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5232] <... futex resumed>) = 0 [pid 5231] dup(7 [pid 5230] <... munmap resumed>) = 0 [pid 5229] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5227] <... close resumed>) = 0 [pid 5233] open("./bus", O_RDONLY [pid 5232] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5231] <... dup resumed>) = 8 [pid 5233] <... open resumed>) = 6 [pid 5230] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5227] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5226] <... futex resumed>) = 0 [pid 5227] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5226] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5227] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5226] <... futex resumed>) = 0 [pid 5235] <... ioctl resumed>) = 0 [pid 5227] sendfile(8, 6, NULL, 281474978811908 [pid 5226] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5235] close(3) = 0 [pid 5231] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5235] mkdir("./bus", 0777 [pid 5233] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5231] <... futex resumed>) = 1 [pid 5230] <... openat resumed>) = 10 [pid 5229] <... futex resumed>) = 0 [pid 5235] <... mkdir resumed>) = 0 [pid 5233] <... futex resumed>) = 1 [pid 5232] <... futex resumed>) = 0 [pid 5231] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5230] ioctl(10, LOOP_SET_FD, 9 [pid 5229] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5235] mount("/dev/loop3", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5233] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5232] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5231] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5230] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5229] <... futex resumed>) = 0 [pid 5233] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5232] <... futex resumed>) = 0 [pid 5232] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5233] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5231] memfd_create("syzkaller", 0 [ 91.318669][ T5235] loop3: detected capacity change from 0 to 32768 [ 91.327691][ T27] audit: type=1804 audit(1686284896.167:156): pid=5233 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor481" name="/root/syzkaller.PL7eda/12/bus/bus" dev="loop5" ino=7 res=1 errno=0 [pid 5230] ioctl(10, LOOP_CLR_FD [pid 5229] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5233] <... open resumed>) = 7 [pid 5235] <... mount resumed>) = 0 [pid 5235] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5235] chdir("./bus") = 0 [pid 5226] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5235] ioctl(4, LOOP_CLR_FD [pid 5226] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5235] <... ioctl resumed>) = 0 [pid 5226] <... futex resumed>) = 0 [pid 5235] close(4 [pid 5226] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5233] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5231] <... memfd_create resumed>) = 9 [pid 5230] <... ioctl resumed>) = 0 [pid 5235] <... close resumed>) = 0 [pid 5233] <... futex resumed>) = 1 [pid 5232] <... futex resumed>) = 0 [pid 5231] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5226] <... mmap resumed>) = 0x7ff67807c000 [pid 5235] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5233] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5232] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5231] <... mmap resumed>) = 0x7ff677e9d000 [pid 5226] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5235] <... futex resumed>) = 1 [pid 5234] <... futex resumed>) = 0 [pid 5233] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5232] <... futex resumed>) = 0 [pid 5235] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5234] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5233] dup(7 [pid 5232] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5230] ioctl(10, LOOP_SET_FD, 9 [pid 5226] <... mprotect resumed>) = 0 [pid 5233] <... dup resumed>) = 8 [pid 5230] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5235] <... open resumed>) = 4 [pid 5234] <... futex resumed>) = 0 [pid 5233] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5232] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5230] close(10 [pid 5226] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5235] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5234] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5233] <... futex resumed>) = 0 [pid 5232] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5230] <... close resumed>) = 0 [pid 5235] <... futex resumed>) = 0 [pid 5234] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 91.368639][ T27] audit: type=1804 audit(1686284896.207:157): pid=5233 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor481" name="/root/syzkaller.PL7eda/12/bus/bus" dev="loop5" ino=7 res=1 errno=0 [pid 5233] memfd_create("syzkaller", 0 [pid 5232] <... futex resumed>) = 0 [pid 5230] close(9 [pid 5226] <... clone resumed>, parent_tid=[5238], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5238 ./strace-static-x86_64: Process 5238 attached [pid 5235] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5234] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5233] <... memfd_create resumed>) = 9 [pid 5232] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5230] <... close resumed>) = 0 [pid 5226] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5238] set_robust_list(0x7ff67809c9e0, 24 [pid 5235] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5234] <... futex resumed>) = 0 [pid 5233] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5226] <... futex resumed>) = 0 [pid 5238] <... set_robust_list resumed>) = 0 [pid 5235] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5234] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5233] <... mmap resumed>) = 0x7ff677e9d000 [pid 5226] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5238] sync( [pid 5235] <... open resumed>) = 5 [pid 5230] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5235] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5230] <... futex resumed>) = 1 [pid 5228] <... futex resumed>) = 0 [pid 5230] sendfile(8, 6, NULL, 281474978811908 [pid 5228] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5228] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5235] <... futex resumed>) = 1 [pid 5234] <... futex resumed>) = 0 [pid 5235] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5234] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5235] <... mmap resumed>) = 0x20000000 [pid 5234] <... futex resumed>) = 0 [pid 5234] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5235] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5234] <... futex resumed>) = 0 [pid 5235] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5234] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5235] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5234] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5235] ftruncate(4, 33587199) = 0 [pid 5235] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5238] <... sync resumed>) = 0 [pid 5235] <... futex resumed>) = 1 [pid 5234] <... futex resumed>) = 0 [pid 5238] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5235] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5234] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5238] <... futex resumed>) = 1 [pid 5235] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5234] <... futex resumed>) = 0 [pid 5226] <... futex resumed>) = 0 [pid 5238] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5235] open("./bus", O_RDONLY [pid 5234] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5235] <... open resumed>) = 6 [pid 5228] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5235] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5228] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5235] <... futex resumed>) = 1 [pid 5234] <... futex resumed>) = 0 [pid 5228] <... futex resumed>) = 0 [pid 5235] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5234] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5228] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5235] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5234] <... futex resumed>) = 0 [pid 5231] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5228] <... mmap resumed>) = 0x7ff67807c000 [pid 5235] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5234] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5228] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5235] <... open resumed>) = 7 [pid 5228] <... mprotect resumed>) = 0 [pid 5235] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5228] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5235] <... futex resumed>) = 1 [pid 5234] <... futex resumed>) = 0 [pid 5235] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5234] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5228] <... clone resumed>, parent_tid=[5239], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5239 [pid 5235] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5234] <... futex resumed>) = 0 [pid 5228] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5239 attached [pid 5235] dup(7 [pid 5234] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5228] <... futex resumed>) = 0 [pid 5239] set_robust_list(0x7ff67809c9e0, 24 [pid 5235] <... dup resumed>) = 8 [pid 5228] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5239] <... set_robust_list resumed>) = 0 [pid 5235] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5239] sync( [pid 5235] <... futex resumed>) = 1 [pid 5235] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5234] <... futex resumed>) = 0 [pid 5234] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5239] <... sync resumed>) = 0 [pid 5235] <... futex resumed>) = 0 [pid 5234] <... futex resumed>) = 1 [pid 5239] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5235] memfd_create("syzkaller", 0 [pid 5234] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5233] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5239] <... futex resumed>) = 1 [pid 5235] <... memfd_create resumed>) = 9 [pid 5228] <... futex resumed>) = 0 [pid 5239] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5235] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff677e9d000 [pid 5231] <... write resumed>) = 2097152 [pid 5231] munmap(0x7ff677e9d000, 2097152) = 0 [pid 5231] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 10 [pid 5231] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5231] ioctl(10, LOOP_CLR_FD) = 0 [pid 5235] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5231] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5233] <... write resumed>) = 2097152 [pid 5231] close(10) = 0 [pid 5233] munmap(0x7ff677e9d000, 2097152) = 0 [pid 5231] close(9 [pid 5233] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 10 [pid 5233] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5233] ioctl(10, LOOP_CLR_FD) = 0 [pid 5233] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5233] close(10) = 0 [pid 5231] <... close resumed>) = 0 [pid 5233] close(9 [pid 5231] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5229] <... futex resumed>) = 0 [pid 5231] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5229] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5231] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5229] <... futex resumed>) = 0 [pid 5229] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5231] sendfile(8, 6, NULL, 281474978811908 [pid 5233] <... close resumed>) = 0 [pid 5233] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5232] <... futex resumed>) = 0 [pid 5233] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5232] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5233] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5232] <... futex resumed>) = 0 [pid 5233] sendfile(8, 6, NULL, 281474978811908 [pid 5232] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5229] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5229] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5229] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff67807c000 [pid 5229] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5229] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5242], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5242 [pid 5229] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5242 attached ) = 0 [pid 5232] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5242] set_robust_list(0x7ff67809c9e0, 24 [pid 5235] <... write resumed>) = 2097152 [pid 5229] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5232] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5242] <... set_robust_list resumed>) = 0 [pid 5235] munmap(0x7ff677e9d000, 2097152 [pid 5242] sync( [pid 5232] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff67807c000 [pid 5232] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5232] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5243], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5243 [pid 5232] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5242] <... sync resumed>) = 0 [pid 5232] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5243 attached [pid 5242] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5235] <... munmap resumed>) = 0 [pid 5243] set_robust_list(0x7ff67809c9e0, 24 [pid 5242] <... futex resumed>) = 1 [pid 5235] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5229] <... futex resumed>) = 0 [pid 5243] <... set_robust_list resumed>) = 0 [pid 5242] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5235] <... openat resumed>) = 10 [pid 5243] sync( [pid 5235] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5235] ioctl(10, LOOP_CLR_FD [pid 5243] <... sync resumed>) = 0 [pid 5235] <... ioctl resumed>) = 0 [pid 5243] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5232] <... futex resumed>) = 0 [pid 5243] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5235] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5235] close(10) = 0 [pid 5235] close(9) = 0 [pid 5235] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5234] <... futex resumed>) = 0 [pid 5235] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5234] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5235] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5234] <... futex resumed>) = 0 [pid 5235] sendfile(8, 6, NULL, 281474978811908 [pid 5234] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5223] exit_group(0 [pid 5236] <... futex resumed>) = ? [pid 5223] <... exit_group resumed>) = ? [pid 5236] +++ exited with 0 +++ [pid 5225] <... sendfile resumed>) = ? [pid 5234] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5225] +++ exited with 0 +++ [pid 5223] +++ exited with 0 +++ [pid 5234] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4994] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5223, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=50 /* 0.50 s */} --- [pid 5234] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4994] restart_syscall(<... resuming interrupted clone ...> [pid 5234] <... mmap resumed>) = 0x7ff67807c000 [pid 4994] <... restart_syscall resumed>) = 0 [pid 5234] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5234] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4994] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5234] <... clone resumed>, parent_tid=[5244], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5244 [pid 5234] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5234] <... futex resumed>) = 0 [pid 4994] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 5244 attached [pid 5234] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4994] <... openat resumed>) = 3 [pid 5244] set_robust_list(0x7ff67809c9e0, 24 [pid 4994] fstat(3, [pid 5244] <... set_robust_list resumed>) = 0 [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5244] sync( [pid 4994] getdents64(3, 0x555556742620 /* 4 entries */, 32768) = 104 [pid 4994] umount2("./12/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5244] <... sync resumed>) = 0 [pid 5244] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5234] <... futex resumed>) = 0 [pid 5244] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5228] exit_group(0 [pid 5239] <... futex resumed>) = ? [pid 5228] <... exit_group resumed>) = ? [pid 5239] +++ exited with 0 +++ [pid 5230] <... sendfile resumed>) = ? [pid 5230] +++ exited with 0 +++ [pid 5228] +++ exited with 0 +++ [pid 4993] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5228, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=33 /* 0.33 s */} --- [pid 4993] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4993] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4993] fstat(3, [pid 5226] exit_group(0 [pid 4993] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5238] <... futex resumed>) = ? [pid 5226] <... exit_group resumed>) = ? [pid 5238] +++ exited with 0 +++ [pid 4993] getdents64(3, 0x555556742620 /* 4 entries */, 32768) = 104 [pid 4993] umount2("./12/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5227] <... sendfile resumed>) = ? [pid 5227] +++ exited with 0 +++ [pid 5226] +++ exited with 0 +++ [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5226, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=32 /* 0.32 s */} --- [pid 4997] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4997] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4997] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(3, 0x555556742620 /* 4 entries */, 32768) = 104 [pid 4997] umount2("./12/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5232] exit_group(0 [pid 5243] <... futex resumed>) = ? [pid 5232] <... exit_group resumed>) = ? [pid 5243] +++ exited with 0 +++ [pid 5233] <... sendfile resumed>) = ? [pid 4994] <... umount2 resumed>) = 0 [pid 5233] +++ exited with 0 +++ [pid 5232] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5232, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=36 /* 0.36 s */} --- [pid 4994] umount2("./12/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] lstat("./12/bus", [pid 4998] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4994] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] umount2("./12/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] getdents64(3, 0x555556742620 /* 4 entries */, 32768) = 104 [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] umount2("./12/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] openat(AT_FDCWD, "./12/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4994] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4994] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4994] close(4) = 0 [pid 4994] rmdir("./12/bus") = 0 [pid 4994] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5229] exit_group(0 [pid 5242] <... futex resumed>) = ? [pid 5229] <... exit_group resumed>) = ? [pid 4994] lstat("./12/binderfs", [pid 5242] +++ exited with 0 +++ [pid 4994] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4994] unlink("./12/binderfs") = 0 [pid 4994] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4994] close(3) = 0 [pid 4994] rmdir("./12") = 0 [pid 4994] mkdir("./13", 0777 [pid 5231] <... sendfile resumed>) = ? [pid 4994] <... mkdir resumed>) = 0 [pid 4994] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5231] +++ exited with 0 +++ [pid 5229] +++ exited with 0 +++ [pid 4994] <... openat resumed>) = 3 [pid 4995] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5229, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=28 /* 0.28 s */} --- [pid 4995] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] ioctl(3, LOOP_CLR_FD [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4994] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4995] <... openat resumed>) = 3 [pid 4995] fstat(3, [pid 4994] close(3 [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] getdents64(3, [pid 4994] <... close resumed>) = 0 [pid 4995] <... getdents64 resumed>0x555556742620 /* 4 entries */, 32768) = 104 [pid 4995] umount2("./12/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567415d0) = 5245 ./strace-static-x86_64: Process 5245 attached [pid 5245] set_robust_list(0x5555567415e0, 24) = 0 [pid 5245] chdir("./13") = 0 [pid 5245] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5245] setpgid(0, 0) = 0 [pid 5245] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4993] <... umount2 resumed>) = 0 [pid 5245] write(3, "1000", 4 [pid 4993] umount2("./12/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5245] <... write resumed>) = 4 [pid 5245] close(3) = 0 [pid 5245] symlink("/dev/binderfs", "./binderfs" [pid 4993] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5245] <... symlink resumed>) = 0 [pid 5245] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 4993] lstat("./12/bus", [pid 5245] <... futex resumed>) = 0 [pid 5245] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 4993] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5245] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE [pid 4993] umount2("./12/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5245] <... mprotect resumed>) = 0 [pid 4993] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5245] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5246], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5246 [pid 4993] openat(AT_FDCWD, "./12/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5245] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4993] <... openat resumed>) = 4 [pid 5245] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4993] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4993] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4993] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4993] close(4) = 0 [pid 4993] rmdir("./12/bus"./strace-static-x86_64: Process 5246 attached [pid 5246] set_robust_list(0x7ff6876bd9e0, 24 [pid 4993] <... rmdir resumed>) = 0 [pid 4993] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4993] lstat("./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5246] <... set_robust_list resumed>) = 0 [pid 4993] unlink("./12/binderfs" [pid 5246] memfd_create("syzkaller", 0 [pid 4993] <... unlink resumed>) = 0 [pid 4993] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4993] close(3 [pid 5246] <... memfd_create resumed>) = 3 [pid 4993] <... close resumed>) = 0 [pid 5234] exit_group(0 [pid 4993] rmdir("./12" [pid 5244] <... futex resumed>) = ? [pid 5234] <... exit_group resumed>) = ? [pid 5244] +++ exited with 0 +++ [pid 4993] <... rmdir resumed>) = 0 [pid 4993] mkdir("./13", 0777 [pid 5246] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 5235] <... sendfile resumed>) = ? [pid 4993] <... mkdir resumed>) = 0 [pid 4993] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5235] +++ exited with 0 +++ [pid 5234] +++ exited with 0 +++ [pid 4993] <... openat resumed>) = 3 [pid 4996] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5234, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=37 /* 0.37 s */} --- [pid 4993] ioctl(3, LOOP_CLR_FD [pid 4996] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4993] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4993] close(3 [pid 4996] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4993] <... close resumed>) = 0 [pid 4993] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4996] <... openat resumed>) = 3 [pid 4996] fstat(3, [pid 4993] <... clone resumed>, child_tidptr=0x5555567415d0) = 5247 [pid 4996] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] getdents64(3, 0x555556742620 /* 4 entries */, 32768) = 104 [pid 4996] umount2("./13/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5247 attached [pid 5247] set_robust_list(0x5555567415e0, 24) = 0 [pid 5247] chdir("./13") = 0 [pid 5247] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5247] setpgid(0, 0) = 0 [pid 5247] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5247] write(3, "1000", 4) = 4 [pid 5247] close(3) = 0 [pid 5247] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5247] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5247] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5247] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5247] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5248], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5248 [pid 5247] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5247] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5248 attached [pid 5248] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5248] memfd_create("syzkaller", 0) = 3 [pid 5248] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 4998] <... umount2 resumed>) = 0 [pid 4998] umount2("./12/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./12/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./12/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./12/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./12/bus") = 0 [pid 4998] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./12/binderfs") = 0 [pid 4998] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./12") = 0 [pid 4998] mkdir("./13", 0777 [pid 4997] <... umount2 resumed>) = 0 [pid 4997] umount2("./12/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] <... mkdir resumed>) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4997] lstat("./12/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./12/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./12/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4997] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(4, [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4997] <... getdents64 resumed>0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4997] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4997] close(4 [pid 4998] <... clone resumed>, child_tidptr=0x5555567415d0) = 5249 [pid 4997] <... close resumed>) = 0 [pid 4997] rmdir("./12/bus") = 0 [pid 4997] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] unlink("./12/binderfs") = 0 [pid 4997] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4997] close(3) = 0 ./strace-static-x86_64: Process 5249 attached [pid 4997] rmdir("./12" [pid 5249] set_robust_list(0x5555567415e0, 24) = 0 [pid 5249] chdir("./13" [pid 4997] <... rmdir resumed>) = 0 [pid 5249] <... chdir resumed>) = 0 [pid 5249] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5249] setpgid(0, 0 [pid 4997] mkdir("./13", 0777) = 0 [pid 4997] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 4997] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4997] close(3 [pid 5249] <... setpgid resumed>) = 0 [pid 5249] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4997] <... close resumed>) = 0 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5249] <... openat resumed>) = 3 [pid 5249] write(3, "1000", 4) = 4 [pid 4997] <... clone resumed>, child_tidptr=0x5555567415d0) = 5251 [pid 5249] close(3) = 0 [pid 5249] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 5251 attached [pid 5251] set_robust_list(0x5555567415e0, 24 [pid 5249] <... symlink resumed>) = 0 [pid 5251] <... set_robust_list resumed>) = 0 [pid 5249] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5249] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5251] chdir("./13") = 0 [pid 5251] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5249] <... mmap resumed>) = 0x7ff68769d000 [pid 5251] <... prctl resumed>) = 0 [pid 5249] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE [pid 5251] setpgid(0, 0 [pid 5249] <... mprotect resumed>) = 0 [pid 5251] <... setpgid resumed>) = 0 [pid 5249] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5251] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5249] <... clone resumed>, parent_tid=[5252], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5252 [pid 5251] write(3, "1000", 4 [pid 5249] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5251] <... write resumed>) = 4 [pid 5249] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5252 attached [pid 5251] close(3 [pid 5249] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5252] set_robust_list(0x7ff6876bd9e0, 24 [pid 5251] <... close resumed>) = 0 [pid 5251] symlink("/dev/binderfs", "./binderfs" [pid 5252] <... set_robust_list resumed>) = 0 [pid 5251] <... symlink resumed>) = 0 [pid 5251] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5252] memfd_create("syzkaller", 0 [pid 5251] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5252] <... memfd_create resumed>) = 3 [pid 5251] <... mmap resumed>) = 0x7ff68769d000 [pid 5252] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5251] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE [pid 5252] <... mmap resumed>) = 0x7ff67f29d000 [pid 5251] <... mprotect resumed>) = 0 [pid 5251] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5253], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5253 [pid 5251] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5251] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5253 attached [pid 5253] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5253] memfd_create("syzkaller", 0) = 3 [pid 5253] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 4995] <... umount2 resumed>) = 0 [pid 4995] umount2("./12/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4995] lstat("./12/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] umount2("./12/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4995] openat(AT_FDCWD, "./12/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4995] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4995] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4995] close(4) = 0 [pid 4995] rmdir("./12/bus") = 0 [pid 4995] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4995] lstat("./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4995] unlink("./12/binderfs") = 0 [pid 4995] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4995] close(3) = 0 [pid 4995] rmdir("./12") = 0 [pid 4995] mkdir("./13", 0777) = 0 [pid 4995] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 4995] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4995] close(3) = 0 [pid 4995] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567415d0) = 5254 ./strace-static-x86_64: Process 5254 attached [pid 5254] set_robust_list(0x5555567415e0, 24) = 0 [pid 5254] chdir("./13") = 0 [pid 5254] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5254] setpgid(0, 0) = 0 [pid 5254] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5254] write(3, "1000", 4) = 4 [pid 5254] close(3) = 0 [pid 5254] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5254] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5254] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5254] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5254] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5255], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5255 [pid 5254] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5254] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5255 attached [pid 5255] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5255] memfd_create("syzkaller", 0) = 3 [pid 5255] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 5248] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 4996] <... umount2 resumed>) = 0 [pid 4996] umount2("./13/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] lstat("./13/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] umount2("./13/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] openat(AT_FDCWD, "./13/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4996] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4996] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4996] close(4) = 0 [pid 4996] rmdir("./13/bus") = 0 [pid 4996] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] lstat("./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4996] unlink("./13/binderfs") = 0 [pid 4996] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4996] close(3) = 0 [pid 4996] rmdir("./13") = 0 [pid 4996] mkdir("./14", 0777) = 0 [pid 4996] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 4996] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4996] close(3) = 0 [pid 4996] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567415d0) = 5257 ./strace-static-x86_64: Process 5257 attached [pid 5257] set_robust_list(0x5555567415e0, 24) = 0 [pid 5257] chdir("./14") = 0 [pid 5257] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5257] setpgid(0, 0) = 0 [pid 5257] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5257] write(3, "1000", 4) = 4 [pid 5257] close(3) = 0 [pid 5257] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5257] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5257] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5257] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5257] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5258], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5258 [pid 5257] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5257] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5258 attached [pid 5258] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5258] memfd_create("syzkaller", 0) = 3 [pid 5258] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 5246] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5252] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5253] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5255] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5248] <... write resumed>) = 16777216 [pid 5248] munmap(0x7ff67f29d000, 16777216 [pid 5258] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5248] <... munmap resumed>) = 0 [pid 5248] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5248] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5248] close(3) = 0 [pid 5248] mkdir("./bus", 0777) = 0 [pid 5248] mount("/dev/loop0", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "") = 0 [pid 5248] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5248] chdir("./bus") = 0 [pid 5248] ioctl(4, LOOP_CLR_FD) = 0 [pid 5248] close(4) = 0 [pid 5248] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5247] <... futex resumed>) = 0 [pid 5248] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5247] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5248] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5247] <... futex resumed>) = 0 [ 93.466431][ T5248] loop0: detected capacity change from 0 to 32768 [pid 5248] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5247] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5248] <... open resumed>) = 4 [pid 5248] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5247] <... futex resumed>) = 0 [pid 5248] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5247] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5248] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5247] <... futex resumed>) = 0 [pid 5248] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5247] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5248] <... open resumed>) = 5 [pid 5248] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5247] <... futex resumed>) = 0 [pid 5248] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5247] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5248] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5247] <... futex resumed>) = 0 [pid 5248] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5247] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5248] <... mmap resumed>) = 0x20000000 [pid 5248] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5247] <... futex resumed>) = 0 [pid 5248] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5247] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5248] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5247] <... futex resumed>) = 0 [pid 5248] ftruncate(4, 33587199 [pid 5247] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5248] <... ftruncate resumed>) = 0 [pid 5248] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5247] <... futex resumed>) = 0 [pid 5248] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5247] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5246] <... write resumed>) = 16777216 [pid 5248] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5247] <... futex resumed>) = 0 [pid 5246] munmap(0x7ff67f29d000, 16777216 [pid 5248] open("./bus", O_RDONLY [pid 5247] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5248] <... open resumed>) = 6 [pid 5248] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5247] <... futex resumed>) = 0 [pid 5248] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5247] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5248] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5247] <... futex resumed>) = 0 [pid 5248] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5247] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5248] <... open resumed>) = 7 [pid 5248] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5247] <... futex resumed>) = 0 [pid 5248] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5247] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5248] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5247] <... futex resumed>) = 0 [pid 5246] <... munmap resumed>) = 0 [pid 5248] dup(7 [pid 5247] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5248] <... dup resumed>) = 8 [pid 5248] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5247] <... futex resumed>) = 0 [pid 5248] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5247] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5248] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5247] <... futex resumed>) = 0 [pid 5248] memfd_create("syzkaller", 0 [pid 5247] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5248] <... memfd_create resumed>) = 9 [pid 5248] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff677e9d000 [pid 5246] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5246] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5246] close(3) = 0 [pid 5246] mkdir("./bus", 0777) = 0 [pid 5246] mount("/dev/loop1", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "") = 0 [pid 5246] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5246] chdir("./bus") = 0 [pid 5246] ioctl(4, LOOP_CLR_FD) = 0 [pid 5246] close(4) = 0 [pid 5246] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5246] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5245] <... futex resumed>) = 0 [pid 5245] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5246] <... futex resumed>) = 0 [pid 5245] <... futex resumed>) = 1 [ 93.615482][ T5246] loop1: detected capacity change from 0 to 32768 [pid 5246] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5245] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5248] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5246] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5245] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5246] <... futex resumed>) = 0 [pid 5246] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5245] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5246] <... futex resumed>) = 0 [pid 5245] <... futex resumed>) = 1 [pid 5246] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 5245] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5246] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5245] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5246] <... futex resumed>) = 0 [pid 5245] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5246] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5245] <... futex resumed>) = 0 [pid 5246] <... mmap resumed>) = 0x20000000 [pid 5245] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5246] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5245] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5246] <... futex resumed>) = 0 [pid 5245] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5246] ftruncate(4, 33587199 [pid 5245] <... futex resumed>) = 0 [pid 5252] <... write resumed>) = 16777216 [pid 5246] <... ftruncate resumed>) = 0 [pid 5245] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5246] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5245] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5246] <... futex resumed>) = 0 [pid 5245] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5246] open("./bus", O_RDONLY [pid 5245] <... futex resumed>) = 0 [pid 5246] <... open resumed>) = 6 [pid 5245] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5252] munmap(0x7ff67f29d000, 16777216 [pid 5246] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5245] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5246] <... futex resumed>) = 0 [pid 5245] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5246] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5245] <... futex resumed>) = 0 [pid 5246] <... open resumed>) = 7 [pid 5245] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5246] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5245] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5246] <... futex resumed>) = 0 [pid 5245] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5246] dup(7 [pid 5245] <... futex resumed>) = 0 [pid 5246] <... dup resumed>) = 8 [pid 5245] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5253] <... write resumed>) = 16777216 [pid 5246] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5245] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5246] <... futex resumed>) = 0 [pid 5245] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5253] munmap(0x7ff67f29d000, 16777216 [pid 5246] memfd_create("syzkaller", 0 [pid 5245] <... futex resumed>) = 0 [pid 5246] <... memfd_create resumed>) = 9 [pid 5245] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5246] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff677e9d000 [pid 5252] <... munmap resumed>) = 0 [pid 5252] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5252] ioctl(4, LOOP_SET_FD, 3 [pid 5253] <... munmap resumed>) = 0 [pid 5248] <... write resumed>) = 2097152 [pid 5248] munmap(0x7ff677e9d000, 2097152 [pid 5253] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5253] ioctl(4, LOOP_SET_FD, 3 [pid 5252] <... ioctl resumed>) = 0 [pid 5248] <... munmap resumed>) = 0 [pid 5246] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5248] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 10 [pid 5248] ioctl(10, LOOP_SET_FD, 9 [pid 5252] close(3 [pid 5248] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5252] <... close resumed>) = 0 [pid 5253] <... ioctl resumed>) = 0 [pid 5252] mkdir("./bus", 0777 [pid 5248] ioctl(10, LOOP_CLR_FD [pid 5253] close(3 [pid 5248] <... ioctl resumed>) = 0 [pid 5253] <... close resumed>) = 0 [pid 5252] <... mkdir resumed>) = 0 [pid 5253] mkdir("./bus", 0777 [pid 5252] mount("/dev/loop5", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5253] <... mkdir resumed>) = 0 [pid 5248] ioctl(10, LOOP_SET_FD, 9 [pid 5253] mount("/dev/loop4", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5248] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5248] close(10) = 0 [pid 5248] close(9 [pid 5253] <... mount resumed>) = 0 [pid 5252] <... mount resumed>) = 0 [pid 5248] <... close resumed>) = 0 [pid 5253] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5252] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5253] <... openat resumed>) = 3 [pid 5252] <... openat resumed>) = 3 [pid 5253] chdir("./bus" [pid 5252] chdir("./bus" [pid 5253] <... chdir resumed>) = 0 [pid 5252] <... chdir resumed>) = 0 [pid 5253] ioctl(4, LOOP_CLR_FD [pid 5252] ioctl(4, LOOP_CLR_FD [pid 5253] <... ioctl resumed>) = 0 [pid 5252] <... ioctl resumed>) = 0 [pid 5253] close(4 [pid 5252] close(4 [pid 5253] <... close resumed>) = 0 [pid 5252] <... close resumed>) = 0 [pid 5253] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5252] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5253] <... futex resumed>) = 1 [pid 5251] <... futex resumed>) = 0 [pid 5252] <... futex resumed>) = 1 [pid 5253] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5251] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5249] <... futex resumed>) = 0 [pid 5252] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5253] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5252] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5251] <... futex resumed>) = 0 [ 93.757753][ T5252] loop5: detected capacity change from 0 to 32768 [ 93.782048][ T5253] loop4: detected capacity change from 0 to 32768 [pid 5249] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5253] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5252] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5251] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5249] <... futex resumed>) = 0 [pid 5253] <... open resumed>) = 4 [pid 5253] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5252] <... open resumed>) = 4 [pid 5249] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5253] <... futex resumed>) = 1 [pid 5252] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5251] <... futex resumed>) = 0 [pid 5249] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5253] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5252] <... futex resumed>) = 0 [pid 5251] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5249] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5253] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5252] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5251] <... futex resumed>) = 0 [pid 5249] <... futex resumed>) = 0 [pid 5248] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5253] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5252] <... open resumed>) = 5 [pid 5251] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5249] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5248] <... futex resumed>) = 1 [pid 5247] <... futex resumed>) = 0 [pid 5253] <... open resumed>) = 5 [pid 5252] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5249] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5248] sendfile(8, 6, NULL, 281474978811908 [pid 5247] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5253] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5252] <... futex resumed>) = 0 [pid 5249] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5247] <... futex resumed>) = 0 [pid 5253] <... futex resumed>) = 1 [pid 5252] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5251] <... futex resumed>) = 0 [pid 5249] <... futex resumed>) = 0 [pid 5247] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5253] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5251] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5253] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5252] <... mmap resumed>) = 0x20000000 [pid 5251] <... futex resumed>) = 0 [pid 5249] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5253] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5252] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5251] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5249] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5253] <... mmap resumed>) = 0x20000000 [pid 5252] <... futex resumed>) = 0 [pid 5249] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5253] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5252] ftruncate(4, 33587199 [pid 5249] <... futex resumed>) = 0 [pid 5253] <... futex resumed>) = 1 [pid 5252] <... ftruncate resumed>) = 0 [pid 5251] <... futex resumed>) = 0 [pid 5249] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5253] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5252] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5251] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5249] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5253] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5252] <... futex resumed>) = 0 [pid 5251] <... futex resumed>) = 0 [pid 5249] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5253] ftruncate(4, 33587199 [pid 5251] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5253] <... ftruncate resumed>) = 0 [pid 5252] open("./bus", O_RDONLY [pid 5249] <... futex resumed>) = 0 [pid 5253] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5252] <... open resumed>) = 6 [pid 5249] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5253] <... futex resumed>) = 1 [pid 5252] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5251] <... futex resumed>) = 0 [pid 5249] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5253] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5252] <... futex resumed>) = 0 [pid 5251] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5249] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5258] <... write resumed>) = 16777216 [pid 5253] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5252] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5251] <... futex resumed>) = 0 [pid 5249] <... futex resumed>) = 0 [pid 5251] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5253] open("./bus", O_RDONLY [pid 5252] <... open resumed>) = 7 [pid 5249] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5252] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5253] <... open resumed>) = 6 [pid 5253] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5252] <... futex resumed>) = 1 [pid 5249] <... futex resumed>) = 0 [pid 5253] <... futex resumed>) = 1 [pid 5252] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5251] <... futex resumed>) = 0 [pid 5258] munmap(0x7ff67f29d000, 16777216 [pid 5249] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5253] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5252] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5251] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5249] <... futex resumed>) = 0 [pid 5246] <... write resumed>) = 2097152 [pid 5253] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5252] dup(7 [pid 5251] <... futex resumed>) = 0 [pid 5249] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5253] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5252] <... dup resumed>) = 8 [pid 5251] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5253] <... open resumed>) = 7 [pid 5252] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5253] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5252] <... futex resumed>) = 1 [pid 5249] <... futex resumed>) = 0 [pid 5253] <... futex resumed>) = 1 [pid 5252] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5251] <... futex resumed>) = 0 [pid 5249] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5246] munmap(0x7ff677e9d000, 2097152 [pid 5255] <... write resumed>) = 16777216 [pid 5253] dup(7 [pid 5252] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5251] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5249] <... futex resumed>) = 0 [pid 5247] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5246] <... munmap resumed>) = 0 [pid 5253] <... dup resumed>) = 8 [pid 5251] <... futex resumed>) = 0 [pid 5251] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5246] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 10 [pid 5253] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5252] memfd_create("syzkaller", 0 [pid 5249] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5247] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5253] <... futex resumed>) = 1 [pid 5252] <... memfd_create resumed>) = 9 [pid 5251] <... futex resumed>) = 0 [pid 5247] <... futex resumed>) = 0 [pid 5246] ioctl(10, LOOP_SET_FD, 9 [pid 5253] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5252] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5251] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5247] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5246] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5253] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5252] <... mmap resumed>) = 0x7ff677e9d000 [pid 5251] <... futex resumed>) = 0 [pid 5247] <... mmap resumed>) = 0x7ff67807c000 [pid 5246] ioctl(10, LOOP_CLR_FD [pid 5251] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5246] <... ioctl resumed>) = 0 [pid 5255] munmap(0x7ff67f29d000, 16777216 [pid 5246] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5253] memfd_create("syzkaller", 0 [pid 5247] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5246] close(10 [pid 5253] <... memfd_create resumed>) = 9 [pid 5247] <... mprotect resumed>) = 0 [pid 5246] <... close resumed>) = 0 [pid 5253] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5247] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5246] close(9 [pid 5253] <... mmap resumed>) = 0x7ff677e9d000 [pid 5258] <... munmap resumed>) = 0 [pid 5255] <... munmap resumed>) = 0 [pid 5247] <... clone resumed>, parent_tid=[5260], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5260 [pid 5247] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5247] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5260 attached [pid 5258] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5260] set_robust_list(0x7ff67809c9e0, 24 [pid 5258] <... openat resumed>) = 4 [pid 5260] <... set_robust_list resumed>) = 0 [pid 5258] ioctl(4, LOOP_SET_FD, 3 [pid 5260] sync( [pid 5246] <... close resumed>) = 0 [pid 5246] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5246] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5255] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5245] <... futex resumed>) = 0 [pid 5245] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5246] <... futex resumed>) = 0 [pid 5245] <... futex resumed>) = 1 [pid 5246] sendfile(8, 6, NULL, 281474978811908 [pid 5245] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5255] ioctl(4, LOOP_SET_FD, 3 [pid 5258] <... ioctl resumed>) = 0 [pid 5260] <... sync resumed>) = 0 [pid 5260] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5258] close(3 [pid 5247] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5260] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5258] <... close resumed>) = 0 [pid 5258] mkdir("./bus", 0777) = 0 [pid 5258] mount("/dev/loop3", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "") = 0 [pid 5258] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5245] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5258] <... openat resumed>) = 3 [pid 5245] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5258] chdir("./bus" [pid 5245] <... futex resumed>) = 0 [pid 5258] <... chdir resumed>) = 0 [ 93.964385][ T5258] loop3: detected capacity change from 0 to 32768 [ 93.989507][ T5255] loop2: detected capacity change from 0 to 32768 [pid 5245] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5258] ioctl(4, LOOP_CLR_FD) = 0 [pid 5255] <... ioctl resumed>) = 0 [pid 5245] <... mmap resumed>) = 0x7ff67807c000 [pid 5258] close(4 [pid 5255] close(3 [pid 5245] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5258] <... close resumed>) = 0 [pid 5255] <... close resumed>) = 0 [pid 5258] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5255] mkdir("./bus", 0777 [pid 5245] <... mprotect resumed>) = 0 [pid 5258] <... futex resumed>) = 1 [pid 5257] <... futex resumed>) = 0 [pid 5255] <... mkdir resumed>) = 0 [pid 5245] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5258] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5257] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5255] mount("/dev/loop2", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5253] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5258] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5257] <... futex resumed>) = 0 [pid 5245] <... clone resumed>, parent_tid=[5261], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5261 ./strace-static-x86_64: Process 5261 attached [pid 5258] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5257] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5252] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5245] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5261] set_robust_list(0x7ff67809c9e0, 24 [pid 5258] <... open resumed>) = 4 [pid 5255] <... mount resumed>) = 0 [pid 5245] <... futex resumed>) = 0 [pid 5261] <... set_robust_list resumed>) = 0 [pid 5258] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5255] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5245] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5261] sync( [pid 5258] <... futex resumed>) = 1 [pid 5257] <... futex resumed>) = 0 [pid 5255] <... openat resumed>) = 3 [pid 5258] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5257] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5255] chdir("./bus" [pid 5258] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5257] <... futex resumed>) = 0 [pid 5255] <... chdir resumed>) = 0 [pid 5261] <... sync resumed>) = 0 [pid 5258] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5257] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5255] ioctl(4, LOOP_CLR_FD [pid 5261] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5258] <... open resumed>) = 5 [pid 5255] <... ioctl resumed>) = 0 [pid 5261] <... futex resumed>) = 1 [pid 5258] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5255] close(4 [pid 5245] <... futex resumed>) = 0 [pid 5261] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5258] <... futex resumed>) = 1 [pid 5257] <... futex resumed>) = 0 [pid 5255] <... close resumed>) = 0 [pid 5258] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5257] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5255] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5258] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5257] <... futex resumed>) = 0 [pid 5255] <... futex resumed>) = 1 [pid 5254] <... futex resumed>) = 0 [pid 5258] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5257] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5255] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5254] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5258] <... mmap resumed>) = 0x20000000 [pid 5255] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5254] <... futex resumed>) = 0 [pid 5258] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5255] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5254] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5258] <... futex resumed>) = 1 [pid 5257] <... futex resumed>) = 0 [pid 5255] <... open resumed>) = 4 [pid 5258] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5257] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5255] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5258] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5257] <... futex resumed>) = 0 [pid 5255] <... futex resumed>) = 1 [pid 5254] <... futex resumed>) = 0 [pid 5258] ftruncate(4, 33587199 [pid 5257] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5255] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5254] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5258] <... ftruncate resumed>) = 0 [pid 5255] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5254] <... futex resumed>) = 0 [pid 5258] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5255] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5254] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5258] <... futex resumed>) = 1 [pid 5257] <... futex resumed>) = 0 [pid 5255] <... open resumed>) = 5 [pid 5253] <... write resumed>) = 2097152 [pid 5258] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5257] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5255] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5258] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5257] <... futex resumed>) = 0 [pid 5255] <... futex resumed>) = 1 [pid 5254] <... futex resumed>) = 0 [pid 5257] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5255] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5254] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5258] open("./bus", O_RDONLY [pid 5255] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5254] <... futex resumed>) = 0 [pid 5258] <... open resumed>) = 6 [pid 5255] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5254] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5258] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5255] <... mmap resumed>) = 0x20000000 [pid 5258] <... futex resumed>) = 1 [pid 5257] <... futex resumed>) = 0 [pid 5255] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5253] munmap(0x7ff677e9d000, 2097152 [pid 5258] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5257] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5255] <... futex resumed>) = 1 [pid 5254] <... futex resumed>) = 0 [pid 5253] <... munmap resumed>) = 0 [pid 5258] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5257] <... futex resumed>) = 0 [pid 5255] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5254] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5258] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5257] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5255] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5254] <... futex resumed>) = 0 [pid 5252] <... write resumed>) = 2097152 [pid 5258] <... open resumed>) = 7 [pid 5255] ftruncate(4, 33587199 [pid 5254] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5252] munmap(0x7ff677e9d000, 2097152 [pid 5253] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5258] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5255] <... ftruncate resumed>) = 0 [pid 5253] <... openat resumed>) = 10 [pid 5252] <... munmap resumed>) = 0 [pid 5258] <... futex resumed>) = 1 [pid 5257] <... futex resumed>) = 0 [pid 5255] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5253] ioctl(10, LOOP_SET_FD, 9 [pid 5252] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5258] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5257] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5255] <... futex resumed>) = 1 [pid 5254] <... futex resumed>) = 0 [pid 5253] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5252] <... openat resumed>) = 10 [pid 5258] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5257] <... futex resumed>) = 0 [pid 5255] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5254] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5253] ioctl(10, LOOP_CLR_FD [pid 5252] ioctl(10, LOOP_SET_FD, 9 [pid 5258] dup(7 [pid 5257] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5255] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5254] <... futex resumed>) = 0 [pid 5253] <... ioctl resumed>) = 0 [pid 5252] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5258] <... dup resumed>) = 8 [pid 5255] open("./bus", O_RDONLY [pid 5254] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5252] ioctl(10, LOOP_CLR_FD [pid 5258] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5255] <... open resumed>) = 6 [pid 5252] <... ioctl resumed>) = 0 [pid 5258] <... futex resumed>) = 1 [pid 5257] <... futex resumed>) = 0 [pid 5255] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5258] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5257] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5255] <... futex resumed>) = 1 [pid 5254] <... futex resumed>) = 0 [pid 5253] ioctl(10, LOOP_SET_FD, 9 [pid 5258] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5257] <... futex resumed>) = 0 [pid 5255] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5254] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5253] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5258] memfd_create("syzkaller", 0 [pid 5257] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5255] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5254] <... futex resumed>) = 0 [pid 5253] close(10 [pid 5258] <... memfd_create resumed>) = 9 [pid 5255] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5254] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5253] <... close resumed>) = 0 [pid 5252] ioctl(10, LOOP_SET_FD, 9 [pid 5258] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5252] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5258] <... mmap resumed>) = 0x7ff677e9d000 [pid 5255] <... open resumed>) = 7 [pid 5253] close(9 [pid 5252] close(10 [pid 5255] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5252] <... close resumed>) = 0 [pid 5252] close(9 [pid 5255] <... futex resumed>) = 1 [pid 5254] <... futex resumed>) = 0 [pid 5253] <... close resumed>) = 0 [pid 5252] <... close resumed>) = 0 [pid 5255] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5254] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5255] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5254] <... futex resumed>) = 0 [pid 5253] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5255] dup(7 [pid 5254] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5251] <... futex resumed>) = 0 [pid 5252] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5249] <... futex resumed>) = 0 [pid 5249] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5255] <... dup resumed>) = 8 [pid 5253] <... futex resumed>) = 1 [pid 5251] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5255] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5253] sendfile(8, 6, NULL, 281474978811908 [pid 5252] <... futex resumed>) = 1 [pid 5251] <... futex resumed>) = 0 [pid 5249] <... futex resumed>) = 0 [pid 5255] <... futex resumed>) = 1 [pid 5254] <... futex resumed>) = 0 [pid 5252] sendfile(8, 6, NULL, 281474978811908 [pid 5251] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5249] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5254] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5255] memfd_create("syzkaller", 0 [pid 5254] <... futex resumed>) = 0 [pid 5255] <... memfd_create resumed>) = 9 [pid 5254] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5255] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff677e9d000 [pid 5258] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5251] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5249] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5251] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5249] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5251] <... futex resumed>) = 0 [pid 5249] <... futex resumed>) = 0 [pid 5251] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5249] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5251] <... mmap resumed>) = 0x7ff67807c000 [pid 5249] <... mmap resumed>) = 0x7ff67807c000 [pid 5251] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5249] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5251] <... mprotect resumed>) = 0 [pid 5249] <... mprotect resumed>) = 0 [pid 5251] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5249] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5251] <... clone resumed>, parent_tid=[5262], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5262 [pid 5249] <... clone resumed>, parent_tid=[5263], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5263 [pid 5251] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5249] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5251] <... futex resumed>) = 0 [pid 5249] <... futex resumed>) = 0 [pid 5251] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5249] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5263 attached [pid 5263] set_robust_list(0x7ff67809c9e0, 24) = 0 [pid 5263] sync(./strace-static-x86_64: Process 5262 attached ) = 0 [pid 5262] set_robust_list(0x7ff67809c9e0, 24 [pid 5263] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5262] <... set_robust_list resumed>) = 0 [pid 5263] <... futex resumed>) = 1 [pid 5262] sync( [pid 5249] <... futex resumed>) = 0 [pid 5263] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5262] <... sync resumed>) = 0 [pid 5262] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5251] <... futex resumed>) = 0 [pid 5262] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5258] <... write resumed>) = 2097152 [pid 5255] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5258] munmap(0x7ff677e9d000, 2097152) = 0 [pid 5258] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 10 [pid 5258] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5258] ioctl(10, LOOP_CLR_FD) = 0 [pid 5258] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5258] close(10 [pid 5255] <... write resumed>) = 2097152 [pid 5255] munmap(0x7ff677e9d000, 2097152 [pid 5258] <... close resumed>) = 0 [pid 5258] close(9 [pid 5255] <... munmap resumed>) = 0 [pid 5255] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 10 [pid 5255] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5255] ioctl(10, LOOP_CLR_FD) = 0 [pid 5255] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5255] close(10 [pid 5258] <... close resumed>) = 0 [pid 5255] <... close resumed>) = 0 [pid 5255] close(9 [pid 5258] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5257] <... futex resumed>) = 0 [pid 5258] sendfile(8, 6, NULL, 281474978811908 [pid 5257] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5257] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5255] <... close resumed>) = 0 [pid 5255] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5254] <... futex resumed>) = 0 [pid 5255] sendfile(8, 6, NULL, 281474978811908 [pid 5254] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5254] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5257] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5257] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5257] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff67807c000 [pid 5257] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5257] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5264], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5264 [pid 5257] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5254] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5257] <... futex resumed>) = 0 [pid 5254] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5257] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5254] <... futex resumed>) = 0 [pid 5254] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 5264 attached ) = 0x7ff67807c000 [pid 5254] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5254] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5264] set_robust_list(0x7ff67809c9e0, 24) = 0 [pid 5254] <... clone resumed>, parent_tid=[5265], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5265 [pid 5264] sync( [pid 5254] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 5265 attached [pid 5254] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5265] set_robust_list(0x7ff67809c9e0, 24) = 0 [pid 5265] sync() = 0 [pid 5264] <... sync resumed>) = 0 [pid 5265] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5264] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5265] <... futex resumed>) = 1 [pid 5264] <... futex resumed>) = 1 [pid 5257] <... futex resumed>) = 0 [pid 5254] <... futex resumed>) = 0 [pid 5265] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5264] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5247] exit_group(0 [pid 5260] <... futex resumed>) = ? [pid 5247] <... exit_group resumed>) = ? [pid 5260] +++ exited with 0 +++ [pid 5248] <... sendfile resumed>) = ? [pid 5248] +++ exited with 0 +++ [pid 5247] +++ exited with 0 +++ [pid 4993] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5247, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=35 /* 0.35 s */} --- [pid 4993] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4993] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4993] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4993] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4993] getdents64(3, 0x555556742620 /* 4 entries */, 32768) = 104 [pid 4993] umount2("./13/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5245] exit_group(0 [pid 5261] <... futex resumed>) = ? [pid 5245] <... exit_group resumed>) = ? [pid 5261] +++ exited with 0 +++ [pid 5246] <... sendfile resumed>) = ? [pid 5246] +++ exited with 0 +++ [pid 5245] +++ exited with 0 +++ [pid 4994] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5245, si_uid=0, si_status=0, si_utime=11 /* 0.11 s */, si_stime=45 /* 0.45 s */} --- [pid 4994] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4994] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] getdents64(3, 0x555556742620 /* 4 entries */, 32768) = 104 [pid 4994] umount2("./13/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5251] exit_group(0 [pid 5262] <... futex resumed>) = ? [pid 5251] <... exit_group resumed>) = ? [pid 5262] +++ exited with 0 +++ [pid 5253] <... sendfile resumed>) = ? [pid 5253] +++ exited with 0 +++ [pid 5251] +++ exited with 0 +++ [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5251, si_uid=0, si_status=0, si_utime=11 /* 0.11 s */, si_stime=35 /* 0.35 s */} --- [pid 4997] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4997] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(3, 0x555556742620 /* 4 entries */, 32768) = 104 [pid 4997] umount2("./13/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5249] exit_group(0) = ? [pid 5263] <... futex resumed>) = ? [pid 5263] +++ exited with 0 +++ [pid 5252] <... sendfile resumed>) = ? [pid 5252] +++ exited with 0 +++ [pid 5249] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5249, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=39 /* 0.39 s */} --- [pid 4998] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x555556742620 /* 4 entries */, 32768) = 104 [pid 4998] umount2("./13/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5254] exit_group(0 [pid 5265] <... futex resumed>) = ? [pid 5254] <... exit_group resumed>) = ? [pid 5265] +++ exited with 0 +++ [pid 5255] <... sendfile resumed>) = ? [pid 5257] exit_group(0 [pid 5264] <... futex resumed>) = ? [pid 5257] <... exit_group resumed>) = ? [pid 5264] +++ exited with 0 +++ [pid 5255] +++ exited with 0 +++ [pid 5254] +++ exited with 0 +++ [pid 4995] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5254, si_uid=0, si_status=0, si_utime=12 /* 0.12 s */, si_stime=42 /* 0.42 s */} --- [pid 4995] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4995] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4995] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4995] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] getdents64(3, 0x555556742620 /* 4 entries */, 32768) = 104 [pid 4995] umount2("./13/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5258] <... sendfile resumed>) = ? [pid 5258] +++ exited with 0 +++ [pid 5257] +++ exited with 0 +++ [pid 4996] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5257, si_uid=0, si_status=0, si_utime=11 /* 0.11 s */, si_stime=35 /* 0.35 s */} --- [pid 4996] umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4996] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] getdents64(3, 0x555556742620 /* 4 entries */, 32768) = 104 [pid 4996] umount2("./14/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... umount2 resumed>) = 0 [pid 4998] umount2("./13/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./13/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./13/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./13/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./13/bus") = 0 [pid 4998] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./13/binderfs") = 0 [pid 4998] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./13") = 0 [pid 4998] mkdir("./14", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567415d0) = 5266 ./strace-static-x86_64: Process 5266 attached [pid 5266] set_robust_list(0x5555567415e0, 24) = 0 [pid 5266] chdir("./14") = 0 [pid 5266] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5266] setpgid(0, 0) = 0 [pid 5266] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5266] write(3, "1000", 4) = 4 [pid 5266] close(3) = 0 [pid 5266] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5266] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5266] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5266] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5266] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5267], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5267 [pid 5266] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5266] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5267 attached [pid 5267] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5267] memfd_create("syzkaller", 0) = 3 [pid 5267] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 4996] <... umount2 resumed>) = 0 [pid 4996] umount2("./14/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] lstat("./14/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] umount2("./14/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] openat(AT_FDCWD, "./14/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4993] <... umount2 resumed>) = 0 [pid 4996] <... openat resumed>) = 4 [pid 4996] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4996] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4996] close(4) = 0 [pid 4996] rmdir("./14/bus") = 0 [pid 4993] umount2("./13/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4993] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4996] lstat("./14/binderfs", [pid 4993] lstat("./13/bus", [pid 4996] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4993] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] unlink("./14/binderfs" [pid 4993] umount2("./13/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] <... unlink resumed>) = 0 [pid 4993] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4993] openat(AT_FDCWD, "./13/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4996] getdents64(3, [pid 4993] <... openat resumed>) = 4 [pid 4996] <... getdents64 resumed>0x555556742620 /* 0 entries */, 32768) = 0 [pid 4993] fstat(4, [pid 4996] close(3 [pid 4993] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] <... close resumed>) = 0 [pid 4993] getdents64(4, [pid 4996] rmdir("./14") = 0 [pid 4993] <... getdents64 resumed>0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4993] getdents64(4, [pid 4996] mkdir("./15", 0777 [pid 4993] <... getdents64 resumed>0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4996] <... mkdir resumed>) = 0 [pid 4993] close(4 [pid 4996] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4993] <... close resumed>) = 0 [pid 4996] <... openat resumed>) = 3 [pid 4993] rmdir("./13/bus" [pid 4996] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4993] <... rmdir resumed>) = 0 [pid 4996] close(3 [pid 4993] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] <... close resumed>) = 0 [pid 4993] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4996] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4993] lstat("./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4993] unlink("./13/binderfs" [pid 4996] <... clone resumed>, child_tidptr=0x5555567415d0) = 5268 [pid 4993] <... unlink resumed>) = 0 [pid 4993] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4993] close(3) = 0 [pid 4993] rmdir("./13") = 0 [pid 4993] mkdir("./14", 0777./strace-static-x86_64: Process 5268 attached [pid 4994] <... umount2 resumed>) = 0 [pid 4993] <... mkdir resumed>) = 0 [pid 5268] set_robust_list(0x5555567415e0, 24 [pid 4993] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 4994] umount2("./13/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4993] <... openat resumed>) = 3 [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4993] ioctl(3, LOOP_CLR_FD [pid 4994] lstat("./13/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] umount2("./13/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4993] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5268] <... set_robust_list resumed>) = 0 [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4993] close(3 [pid 4994] openat(AT_FDCWD, "./13/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4993] <... close resumed>) = 0 [pid 5268] chdir("./15" [pid 4993] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5268] <... chdir resumed>) = 0 [pid 4994] <... openat resumed>) = 4 [pid 4994] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4994] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4993] <... clone resumed>, child_tidptr=0x5555567415d0) = 5269 [pid 5268] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4994] close(4) = 0 [pid 4994] rmdir("./13/bus") = 0 [pid 5268] <... prctl resumed>) = 0 ./strace-static-x86_64: Process 5269 attached [pid 4994] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] lstat("./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5268] setpgid(0, 0 [pid 4994] unlink("./13/binderfs" [pid 5269] set_robust_list(0x5555567415e0, 24 [pid 5268] <... setpgid resumed>) = 0 [pid 4994] <... unlink resumed>) = 0 [pid 4994] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4994] close(3) = 0 [pid 4994] rmdir("./13") = 0 [pid 4994] mkdir("./14", 0777 [pid 5268] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4994] <... mkdir resumed>) = 0 [pid 4994] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5268] <... openat resumed>) = 3 [pid 4994] <... openat resumed>) = 3 [pid 4994] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4994] close(3) = 0 [pid 4994] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5269] <... set_robust_list resumed>) = 0 [pid 5268] write(3, "1000", 4 [pid 4994] <... clone resumed>, child_tidptr=0x5555567415d0) = 5270 [pid 5268] <... write resumed>) = 4 ./strace-static-x86_64: Process 5270 attached [pid 5269] chdir("./14" [pid 5268] close(3) = 0 [pid 5269] <... chdir resumed>) = 0 [pid 5268] symlink("/dev/binderfs", "./binderfs" [pid 5269] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5268] <... symlink resumed>) = 0 [pid 5268] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5269] <... prctl resumed>) = 0 [pid 5268] <... futex resumed>) = 0 [pid 5269] setpgid(0, 0 [pid 5268] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5269] <... setpgid resumed>) = 0 [pid 5270] set_robust_list(0x5555567415e0, 24) = 0 [pid 5268] <... mmap resumed>) = 0x7ff68769d000 [pid 5269] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5268] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE [pid 5270] chdir("./14" [pid 5269] <... openat resumed>) = 3 [pid 5268] <... mprotect resumed>) = 0 [pid 5270] <... chdir resumed>) = 0 [pid 5270] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5270] setpgid(0, 0) = 0 [pid 5270] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5269] write(3, "1000", 4 [pid 5270] <... openat resumed>) = 3 [pid 5268] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5270] write(3, "1000", 4 [pid 5269] <... write resumed>) = 4 [pid 5270] <... write resumed>) = 4 [pid 5269] close(3 [pid 5270] close(3) = 0 [pid 5270] symlink("/dev/binderfs", "./binderfs" [pid 5269] <... close resumed>) = 0 [pid 5268] <... clone resumed>, parent_tid=[5271], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5271 [pid 5270] <... symlink resumed>) = 0 [pid 5270] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5269] symlink("/dev/binderfs", "./binderfs" [pid 5268] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5271 attached [pid 5270] <... futex resumed>) = 0 [pid 5269] <... symlink resumed>) = 0 [pid 5268] <... futex resumed>) = 0 [pid 4997] <... umount2 resumed>) = 0 [pid 5270] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5270] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5271] set_robust_list(0x7ff6876bd9e0, 24 [pid 5270] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5269] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5271] <... set_robust_list resumed>) = 0 [pid 5268] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4997] umount2("./13/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5269] <... futex resumed>) = 0 [pid 5270] <... clone resumed>, parent_tid=[5272], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5272 [pid 5270] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5270] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5271] memfd_create("syzkaller", 0 [pid 5269] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4997] lstat("./13/bus", [pid 5269] <... mmap resumed>) = 0x7ff68769d000 [pid 5271] <... memfd_create resumed>) = 3 [pid 5269] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE [pid 4997] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5271] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5269] <... mprotect resumed>) = 0 [pid 4997] umount2("./13/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5271] <... mmap resumed>) = 0x7ff67f29d000 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5269] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4997] openat(AT_FDCWD, "./13/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 5272 attached [pid 5272] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5272] memfd_create("syzkaller", 0) = 3 [pid 5272] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 4997] <... openat resumed>) = 4 [pid 4997] fstat(4, [pid 5269] <... clone resumed>, parent_tid=[5273], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5273 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5269] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] getdents64(4, [pid 5269] <... futex resumed>) = 0 [pid 5269] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4997] <... getdents64 resumed>0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4997] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 5273 attached [pid 5273] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 4997] close(4 [pid 5273] memfd_create("syzkaller", 0) = 3 [pid 4997] <... close resumed>) = 0 [pid 5273] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 4997] rmdir("./13/bus") = 0 [pid 4997] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./13/binderfs", [pid 5267] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 4997] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] unlink("./13/binderfs") = 0 [pid 4997] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4997] close(3) = 0 [pid 4997] rmdir("./13") = 0 [pid 4997] mkdir("./14", 0777) = 0 [pid 4997] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 4997] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4997] close(3) = 0 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567415d0) = 5274 ./strace-static-x86_64: Process 5274 attached [pid 5274] set_robust_list(0x5555567415e0, 24) = 0 [pid 5274] chdir("./14") = 0 [pid 5274] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5274] setpgid(0, 0) = 0 [pid 5274] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5274] write(3, "1000", 4) = 4 [pid 5274] close(3) = 0 [pid 5274] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5274] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5274] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5274] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5274] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5275], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5275 [pid 5274] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5274] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5275 attached [pid 5275] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5275] memfd_create("syzkaller", 0) = 3 [pid 5275] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 4995] <... umount2 resumed>) = 0 [pid 4995] umount2("./13/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4995] lstat("./13/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] umount2("./13/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4995] openat(AT_FDCWD, "./13/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4995] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4995] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4995] close(4) = 0 [pid 4995] rmdir("./13/bus") = 0 [pid 4995] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4995] lstat("./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4995] unlink("./13/binderfs") = 0 [pid 4995] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4995] close(3) = 0 [pid 4995] rmdir("./13") = 0 [pid 4995] mkdir("./14", 0777) = 0 [pid 4995] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 4995] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4995] close(3) = 0 [pid 4995] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567415d0) = 5276 ./strace-static-x86_64: Process 5276 attached [pid 5276] set_robust_list(0x5555567415e0, 24) = 0 [pid 5276] chdir("./14") = 0 [pid 5276] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5276] setpgid(0, 0) = 0 [pid 5276] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5276] write(3, "1000", 4) = 4 [pid 5276] close(3) = 0 [pid 5276] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5276] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5276] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5276] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5276] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5277], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5277 [pid 5276] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5276] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5277 attached [pid 5277] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5277] memfd_create("syzkaller", 0) = 3 [pid 5277] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 5271] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5272] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5273] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5267] <... write resumed>) = 16777216 [pid 5267] munmap(0x7ff67f29d000, 16777216 [pid 5275] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5267] <... munmap resumed>) = 0 [pid 5267] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5267] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5267] close(3) = 0 [pid 5267] mkdir("./bus", 0777) = 0 [pid 5267] mount("/dev/loop5", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "") = 0 [pid 5267] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5267] chdir("./bus") = 0 [pid 5267] ioctl(4, LOOP_CLR_FD) = 0 [ 96.008774][ T5267] loop5: detected capacity change from 0 to 32768 [pid 5267] close(4) = 0 [pid 5267] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5266] <... futex resumed>) = 0 [pid 5266] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5267] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5266] <... futex resumed>) = 0 [pid 5267] <... open resumed>) = 4 [pid 5266] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5267] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5266] <... futex resumed>) = 0 [pid 5267] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5266] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5267] <... open resumed>) = 5 [pid 5266] <... futex resumed>) = 0 [pid 5267] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5266] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5267] <... futex resumed>) = 0 [pid 5266] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5267] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5266] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5266] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5267] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5267] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 0 [pid 5266] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5267] ftruncate(4, 33587199 [pid 5266] <... futex resumed>) = 0 [pid 5266] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5267] <... ftruncate resumed>) = 0 [pid 5267] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5266] <... futex resumed>) = 0 [pid 5266] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5267] open("./bus", O_RDONLY [pid 5266] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5267] <... open resumed>) = 6 [pid 5267] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5266] <... futex resumed>) = 0 [pid 5266] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5267] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5266] <... futex resumed>) = 0 [pid 5277] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5267] <... open resumed>) = 7 [pid 5266] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5267] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5266] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5267] <... futex resumed>) = 0 [pid 5266] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5267] dup(7 [pid 5266] <... futex resumed>) = 0 [pid 5266] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5267] <... dup resumed>) = 8 [pid 5267] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5266] <... futex resumed>) = 0 [pid 5267] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5266] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5267] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5266] <... futex resumed>) = 0 [pid 5266] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5267] memfd_create("syzkaller", 0) = 9 [pid 5267] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff677e9d000 [ 96.123592][ T27] kauditd_printk_skb: 14 callbacks suppressed [ 96.123606][ T27] audit: type=1804 audit(1686284900.967:172): pid=5267 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor481" name="/root/syzkaller.PL7eda/14/bus/bus" dev="loop5" ino=7 res=1 errno=0 [pid 5271] <... write resumed>) = 16777216 [pid 5267] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5271] munmap(0x7ff67f29d000, 16777216 [pid 5267] <... write resumed>) = 2097152 [pid 5271] <... munmap resumed>) = 0 [ 96.264008][ T27] audit: type=1804 audit(1686284900.997:173): pid=5267 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor481" name="/root/syzkaller.PL7eda/14/bus/bus" dev="loop5" ino=7 res=1 errno=0 [pid 5271] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5271] ioctl(4, LOOP_SET_FD, 3 [pid 5267] munmap(0x7ff677e9d000, 2097152) = 0 [pid 5267] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 10 [pid 5267] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5267] ioctl(10, LOOP_CLR_FD) = 0 [pid 5267] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5267] close(10 [pid 5271] <... ioctl resumed>) = 0 [pid 5267] <... close resumed>) = 0 [pid 5271] close(3 [pid 5267] close(9 [pid 5271] <... close resumed>) = 0 [pid 5271] mkdir("./bus", 0777) = 0 [ 96.327456][ T5271] loop3: detected capacity change from 0 to 32768 [pid 5271] mount("/dev/loop3", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "") = 0 [pid 5271] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5271] chdir("./bus") = 0 [pid 5267] <... close resumed>) = 0 [pid 5271] ioctl(4, LOOP_CLR_FD) = 0 [pid 5267] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5266] <... futex resumed>) = 0 [pid 5266] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5267] <... futex resumed>) = 1 [pid 5266] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5267] sendfile(8, 6, NULL, 281474978811908 [pid 5271] close(4) = 0 [pid 5271] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5268] <... futex resumed>) = 0 [pid 5268] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5271] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5268] <... futex resumed>) = 0 [pid 5271] <... open resumed>) = 4 [pid 5268] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5271] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5268] <... futex resumed>) = 0 [pid 5271] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5268] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5271] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5268] <... futex resumed>) = 0 [pid 5271] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5268] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5271] <... open resumed>) = 5 [pid 5271] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5268] <... futex resumed>) = 0 [pid 5271] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5268] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5271] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5268] <... futex resumed>) = 0 [pid 5271] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5268] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5271] <... mmap resumed>) = 0x20000000 [pid 5271] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5268] <... futex resumed>) = 0 [pid 5271] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5268] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5272] <... write resumed>) = 16777216 [pid 5271] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5268] <... futex resumed>) = 0 [pid 5266] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5271] ftruncate(4, 33587199 [pid 5268] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5266] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5266] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff67807c000 [pid 5271] <... ftruncate resumed>) = 0 [pid 5266] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5271] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5266] <... mprotect resumed>) = 0 [pid 5271] <... futex resumed>) = 1 [pid 5268] <... futex resumed>) = 0 [pid 5266] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5271] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5268] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5271] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5268] <... futex resumed>) = 0 [pid 5266] <... clone resumed>, parent_tid=[5278], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5278 [pid 5266] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5271] open("./bus", O_RDONLY [pid 5268] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5266] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5271] <... open resumed>) = 6 [pid 5272] munmap(0x7ff67f29d000, 16777216 [pid 5271] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5268] <... futex resumed>) = 0 [pid 5271] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5268] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5278 attached [pid 5275] <... write resumed>) = 16777216 [pid 5271] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5268] <... futex resumed>) = 0 [pid 5278] set_robust_list(0x7ff67809c9e0, 24 [pid 5275] munmap(0x7ff67f29d000, 16777216 [pid 5271] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5268] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5278] <... set_robust_list resumed>) = 0 [pid 5271] <... open resumed>) = 7 [pid 5278] sync( [pid 5271] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5268] <... futex resumed>) = 0 [pid 5271] dup(7 [pid 5268] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5271] <... dup resumed>) = 8 [pid 5268] <... futex resumed>) = 0 [pid 5266] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5271] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5268] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5271] <... futex resumed>) = 0 [pid 5271] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5268] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5272] <... munmap resumed>) = 0 [pid 5268] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5272] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5271] <... futex resumed>) = 0 [pid 5268] <... futex resumed>) = 1 [pid 5272] <... openat resumed>) = 4 [pid 5272] ioctl(4, LOOP_SET_FD, 3 [pid 5271] memfd_create("syzkaller", 0 [ 96.486214][ T27] audit: type=1804 audit(1686284901.327:174): pid=5271 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor481" name="/root/syzkaller.crriMX/15/bus/bus" dev="loop3" ino=7 res=1 errno=0 [pid 5268] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5278] <... sync resumed>) = 0 [pid 5275] <... munmap resumed>) = 0 [pid 5271] <... memfd_create resumed>) = 9 [pid 5278] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5271] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5278] <... futex resumed>) = 0 [pid 5278] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5271] <... mmap resumed>) = 0x7ff677e9d000 [pid 5273] <... write resumed>) = 16777216 [pid 5273] munmap(0x7ff67f29d000, 16777216 [pid 5275] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5275] ioctl(4, LOOP_SET_FD, 3 [pid 5272] <... ioctl resumed>) = 0 [pid 5272] close(3) = 0 [pid 5272] mkdir("./bus", 0777) = 0 [pid 5275] <... ioctl resumed>) = 0 [pid 5272] mount("/dev/loop1", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5275] close(3) = 0 [pid 5275] mkdir("./bus", 0777) = 0 [pid 5275] mount("/dev/loop4", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5273] <... munmap resumed>) = 0 [ 96.546342][ T5272] loop1: detected capacity change from 0 to 32768 [ 96.567330][ T5275] loop4: detected capacity change from 0 to 32768 [pid 5275] <... mount resumed>) = 0 [pid 5273] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5273] ioctl(4, LOOP_SET_FD, 3 [pid 5275] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5271] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5273] <... ioctl resumed>) = 0 [pid 5273] close(3) = 0 [pid 5273] mkdir("./bus", 0777 [pid 5275] <... openat resumed>) = 3 [pid 5275] chdir("./bus") = 0 [pid 5275] ioctl(4, LOOP_CLR_FD) = 0 [pid 5275] close(4 [pid 5272] <... mount resumed>) = 0 [pid 5275] <... close resumed>) = 0 [pid 5272] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5272] chdir("./bus") = 0 [pid 5272] ioctl(4, LOOP_CLR_FD) = 0 [pid 5272] close(4) = 0 [pid 5272] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5270] <... futex resumed>) = 0 [pid 5272] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5270] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5272] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5270] <... futex resumed>) = 0 [pid 5272] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5270] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5272] <... open resumed>) = 4 [pid 5272] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5270] <... futex resumed>) = 0 [pid 5272] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5270] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5272] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5270] <... futex resumed>) = 0 [pid 5272] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5270] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5275] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5272] <... open resumed>) = 5 [pid 5275] <... futex resumed>) = 1 [pid 5274] <... futex resumed>) = 0 [pid 5273] <... mkdir resumed>) = 0 [pid 5272] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5275] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5273] mount("/dev/loop0", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5272] <... futex resumed>) = 1 [pid 5270] <... futex resumed>) = 0 [pid 5275] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5274] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5272] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5270] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5275] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5274] <... futex resumed>) = 0 [pid 5272] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5270] <... futex resumed>) = 0 [pid 5272] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5270] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5275] <... open resumed>) = 4 [pid 5274] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5272] <... mmap resumed>) = 0x20000000 [pid 5275] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5274] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5272] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5275] <... futex resumed>) = 0 [pid 5274] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5272] <... futex resumed>) = 1 [pid 5270] <... futex resumed>) = 0 [pid 5275] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5274] <... futex resumed>) = 0 [pid 5273] <... mount resumed>) = 0 [pid 5272] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5270] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5275] <... open resumed>) = 5 [pid 5274] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5273] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5272] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5270] <... futex resumed>) = 0 [pid 5275] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5274] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5273] <... openat resumed>) = 3 [pid 5272] ftruncate(4, 33587199 [pid 5270] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5275] <... futex resumed>) = 0 [pid 5274] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5273] chdir("./bus" [pid 5272] <... ftruncate resumed>) = 0 [pid 5275] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5274] <... futex resumed>) = 0 [pid 5273] <... chdir resumed>) = 0 [pid 5272] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5273] ioctl(4, LOOP_CLR_FD [pid 5272] <... futex resumed>) = 1 [pid 5270] <... futex resumed>) = 0 [pid 5275] <... mmap resumed>) = 0x20000000 [pid 5274] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5273] <... ioctl resumed>) = 0 [pid 5272] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5270] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5275] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5274] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5273] close(4 [pid 5272] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5270] <... futex resumed>) = 0 [pid 5275] <... futex resumed>) = 0 [pid 5274] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5273] <... close resumed>) = 0 [pid 5272] open("./bus", O_RDONLY [pid 5270] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5275] ftruncate(4, 33587199 [pid 5274] <... futex resumed>) = 0 [pid 5273] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5272] <... open resumed>) = 6 [pid 5275] <... ftruncate resumed>) = 0 [pid 5274] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5273] <... futex resumed>) = 1 [pid 5272] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [ 96.587916][ T27] audit: type=1804 audit(1686284901.367:175): pid=5271 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor481" name="/root/syzkaller.crriMX/15/bus/bus" dev="loop3" ino=7 res=1 errno=0 [ 96.612266][ T5273] loop0: detected capacity change from 0 to 32768 [pid 5269] <... futex resumed>) = 0 [pid 5275] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5274] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5273] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5272] <... futex resumed>) = 1 [pid 5270] <... futex resumed>) = 0 [pid 5269] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5275] <... futex resumed>) = 0 [pid 5274] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5273] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5272] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5270] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5269] <... futex resumed>) = 0 [pid 5274] <... futex resumed>) = 0 [pid 5273] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5272] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5270] <... futex resumed>) = 0 [pid 5269] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5275] open("./bus", O_RDONLY [pid 5274] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5273] <... open resumed>) = 4 [pid 5272] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5270] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5275] <... open resumed>) = 6 [pid 5273] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5272] <... open resumed>) = 7 [pid 5275] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5273] <... futex resumed>) = 1 [pid 5272] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5269] <... futex resumed>) = 0 [pid 5275] <... futex resumed>) = 1 [pid 5274] <... futex resumed>) = 0 [pid 5273] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5272] <... futex resumed>) = 1 [pid 5270] <... futex resumed>) = 0 [pid 5269] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5275] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5274] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5273] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5272] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5270] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5269] <... futex resumed>) = 0 [pid 5275] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5274] <... futex resumed>) = 0 [pid 5273] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5272] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5270] <... futex resumed>) = 0 [pid 5269] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5277] <... write resumed>) = 16777216 [pid 5275] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5274] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5273] <... open resumed>) = 5 [pid 5271] <... write resumed>) = 2097152 [pid 5277] munmap(0x7ff67f29d000, 16777216 [pid 5275] <... open resumed>) = 7 [pid 5271] munmap(0x7ff677e9d000, 2097152 [pid 5277] <... munmap resumed>) = 0 [pid 5275] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5273] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5272] dup(7 [pid 5270] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5275] <... futex resumed>) = 1 [pid 5274] <... futex resumed>) = 0 [pid 5273] <... futex resumed>) = 1 [pid 5272] <... dup resumed>) = 8 [pid 5271] <... munmap resumed>) = 0 [pid 5269] <... futex resumed>) = 0 [pid 5277] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5275] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5274] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5273] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5272] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5271] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5269] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5277] <... openat resumed>) = 4 [pid 5275] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5274] <... futex resumed>) = 0 [pid 5273] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5272] <... futex resumed>) = 1 [pid 5271] <... openat resumed>) = 10 [pid 5270] <... futex resumed>) = 0 [pid 5269] <... futex resumed>) = 0 [pid 5277] ioctl(4, LOOP_SET_FD, 3 [ 96.662523][ T27] audit: type=1804 audit(1686284901.487:176): pid=5272 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor481" name="/root/syzkaller.20fUYQ/14/bus/bus" dev="loop1" ino=7 res=1 errno=0 [pid 5275] dup(7 [pid 5274] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5273] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5272] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5271] ioctl(10, LOOP_SET_FD, 9 [pid 5270] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5269] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5275] <... dup resumed>) = 8 [pid 5271] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5275] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5271] ioctl(10, LOOP_CLR_FD [pid 5275] <... futex resumed>) = 1 [pid 5274] <... futex resumed>) = 0 [pid 5271] <... ioctl resumed>) = 0 [pid 5275] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5274] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5275] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5274] <... futex resumed>) = 0 [pid 5275] memfd_create("syzkaller", 0 [pid 5274] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5273] <... mmap resumed>) = 0x20000000 [pid 5272] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5270] <... futex resumed>) = 0 [pid 5275] <... memfd_create resumed>) = 9 [pid 5273] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5271] ioctl(10, LOOP_SET_FD, 9 [pid 5275] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5271] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5269] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 96.723468][ T27] audit: type=1804 audit(1686284901.497:177): pid=5275 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor481" name="/root/syzkaller.hTAWL1/14/bus/bus" dev="loop4" ino=7 res=1 errno=0 [ 96.747519][ T5277] loop2: detected capacity change from 0 to 32768 [pid 5275] <... mmap resumed>) = 0x7ff677e9d000 [pid 5273] <... futex resumed>) = 0 [pid 5272] memfd_create("syzkaller", 0 [pid 5271] close(10 [pid 5270] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5269] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5271] <... close resumed>) = 0 [pid 5269] <... futex resumed>) = 0 [pid 5273] ftruncate(4, 33587199 [pid 5272] <... memfd_create resumed>) = 9 [pid 5271] close(9 [pid 5269] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5273] <... ftruncate resumed>) = 0 [pid 5272] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5273] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5272] <... mmap resumed>) = 0x7ff677e9d000 [pid 5273] <... futex resumed>) = 1 [pid 5269] <... futex resumed>) = 0 [pid 5269] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5269] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5277] <... ioctl resumed>) = 0 [pid 5277] close(3 [pid 5273] open("./bus", O_RDONLY [pid 5271] <... close resumed>) = 0 [pid 5273] <... open resumed>) = 6 [pid 5273] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5269] <... futex resumed>) = 0 [pid 5273] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5269] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5273] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5269] <... futex resumed>) = 0 [pid 5277] <... close resumed>) = 0 [pid 5271] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5273] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5269] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 96.780972][ T27] audit: type=1804 audit(1686284901.497:178): pid=5272 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor481" name="/root/syzkaller.20fUYQ/14/bus/bus" dev="loop1" ino=7 res=1 errno=0 [pid 5277] mkdir("./bus", 0777 [pid 5271] <... futex resumed>) = 1 [pid 5268] <... futex resumed>) = 0 [pid 5277] <... mkdir resumed>) = 0 [pid 5273] <... open resumed>) = 7 [pid 5271] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5268] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5277] mount("/dev/loop2", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5275] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5271] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5268] <... futex resumed>) = 0 [pid 5277] <... mount resumed>) = 0 [pid 5271] sendfile(8, 6, NULL, 281474978811908 [pid 5268] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5277] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5273] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5269] <... futex resumed>) = 0 [pid 5273] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5269] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5273] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5269] <... futex resumed>) = 0 [pid 5277] chdir("./bus" [pid 5273] dup(7 [pid 5269] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5277] <... chdir resumed>) = 0 [pid 5273] <... dup resumed>) = 8 [pid 5277] ioctl(4, LOOP_CLR_FD [pid 5273] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5277] <... ioctl resumed>) = 0 [pid 5273] <... futex resumed>) = 1 [pid 5269] <... futex resumed>) = 0 [pid 5277] close(4 [pid 5273] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5269] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5277] <... close resumed>) = 0 [pid 5269] <... futex resumed>) = 0 [pid 5277] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5269] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5277] <... futex resumed>) = 1 [pid 5276] <... futex resumed>) = 0 [pid 5273] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5277] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5276] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5277] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5277] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5277] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5276] <... futex resumed>) = 0 [pid 5273] memfd_create("syzkaller", 0 [pid 5277] <... futex resumed>) = 0 [pid 5276] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5273] <... memfd_create resumed>) = 9 [pid 5277] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5276] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5273] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5276] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5273] <... mmap resumed>) = 0x7ff677e9d000 [pid 5277] <... futex resumed>) = 0 [pid 5276] <... futex resumed>) = 1 [pid 5277] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [ 96.838701][ T27] audit: type=1804 audit(1686284901.517:179): pid=5275 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor481" name="/root/syzkaller.hTAWL1/14/bus/bus" dev="loop4" ino=7 res=1 errno=0 [pid 5276] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5277] <... open resumed>) = 5 [pid 5277] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5272] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5277] <... futex resumed>) = 1 [pid 5276] <... futex resumed>) = 0 [pid 5277] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5276] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5277] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5276] <... futex resumed>) = 0 [pid 5268] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5277] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5276] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5268] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5277] <... mmap resumed>) = 0x20000000 [pid 5268] <... futex resumed>) = 0 [pid 5277] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5268] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5277] <... futex resumed>) = 1 [pid 5276] <... futex resumed>) = 0 [pid 5268] <... mmap resumed>) = 0x7ff67807c000 [pid 5277] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5276] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5268] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5277] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5276] <... futex resumed>) = 0 [pid 5268] <... mprotect resumed>) = 0 [pid 5277] ftruncate(4, 33587199 [pid 5276] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5268] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5277] <... ftruncate resumed>) = 0 [pid 5277] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5268] <... clone resumed>, parent_tid=[5279], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5279 [pid 5277] <... futex resumed>) = 1 [pid 5276] <... futex resumed>) = 0 [pid 5268] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5277] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5276] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5268] <... futex resumed>) = 0 [pid 5277] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5276] <... futex resumed>) = 0 [pid 5268] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5279 attached [pid 5277] open("./bus", O_RDONLY [pid 5276] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5279] set_robust_list(0x7ff67809c9e0, 24 [pid 5277] <... open resumed>) = 6 [pid 5279] <... set_robust_list resumed>) = 0 [pid 5277] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5279] sync( [pid 5277] <... futex resumed>) = 1 [pid 5276] <... futex resumed>) = 0 [pid 5277] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5276] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5277] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5276] <... futex resumed>) = 0 [pid 5277] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5276] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5277] <... open resumed>) = 7 [pid 5277] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5276] <... futex resumed>) = 0 [pid 5277] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5276] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5277] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5276] <... futex resumed>) = 0 [pid 5277] dup(7 [pid 5276] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5277] <... dup resumed>) = 8 [pid 5277] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5276] <... futex resumed>) = 0 [pid 5277] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5276] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5277] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5276] <... futex resumed>) = 0 [pid 5277] memfd_create("syzkaller", 0 [pid 5276] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5277] <... memfd_create resumed>) = 9 [pid 5277] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff677e9d000 [pid 5268] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5273] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5272] <... write resumed>) = 2097152 [pid 5275] <... write resumed>) = 2097152 [pid 5275] munmap(0x7ff677e9d000, 2097152) = 0 [ 96.968957][ T27] audit: type=1804 audit(1686284901.667:180): pid=5273 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor481" name="/root/syzkaller.lVUVkM/14/bus/bus" dev="loop0" ino=7 res=1 errno=0 [pid 5275] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 10 [pid 5275] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5275] ioctl(10, LOOP_CLR_FD) = 0 [pid 5275] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5275] close(10 [pid 5279] <... sync resumed>) = 0 [pid 5275] <... close resumed>) = 0 [pid 5272] munmap(0x7ff677e9d000, 2097152 [pid 5279] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5275] close(9 [pid 5273] <... write resumed>) = 2097152 [pid 5279] <... futex resumed>) = 0 [pid 5277] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5273] munmap(0x7ff677e9d000, 2097152 [pid 5272] <... munmap resumed>) = 0 [pid 5279] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5272] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5273] <... munmap resumed>) = 0 [pid 5272] <... openat resumed>) = 10 [ 97.004150][ T27] audit: type=1804 audit(1686284901.677:181): pid=5273 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor481" name="/root/syzkaller.lVUVkM/14/bus/bus" dev="loop0" ino=7 res=1 errno=0 [pid 5275] <... close resumed>) = 0 [pid 5273] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5272] ioctl(10, LOOP_SET_FD, 9 [pid 5273] <... openat resumed>) = 10 [pid 5272] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5273] ioctl(10, LOOP_SET_FD, 9 [pid 5272] ioctl(10, LOOP_CLR_FD [pid 5273] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5272] <... ioctl resumed>) = 0 [pid 5273] ioctl(10, LOOP_CLR_FD) = 0 [pid 5272] ioctl(10, LOOP_SET_FD, 9 [pid 5277] <... write resumed>) = 2097152 [pid 5275] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5272] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5277] munmap(0x7ff677e9d000, 2097152 [pid 5275] <... futex resumed>) = 1 [pid 5273] ioctl(10, LOOP_SET_FD, 9 [pid 5272] close(10 [pid 5277] <... munmap resumed>) = 0 [pid 5275] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5274] <... futex resumed>) = 0 [pid 5273] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5272] <... close resumed>) = 0 [pid 5277] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5273] close(10 [pid 5272] close(9 [pid 5277] <... openat resumed>) = 10 [pid 5274] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5273] <... close resumed>) = 0 [pid 5272] <... close resumed>) = 0 [pid 5277] ioctl(10, LOOP_SET_FD, 9 [pid 5273] close(9 [pid 5277] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5275] <... futex resumed>) = 0 [pid 5274] <... futex resumed>) = 1 [pid 5273] <... close resumed>) = 0 [pid 5277] ioctl(10, LOOP_CLR_FD [pid 5275] sendfile(8, 6, NULL, 281474978811908 [pid 5277] <... ioctl resumed>) = 0 [pid 5274] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5272] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5277] ioctl(10, LOOP_SET_FD, 9 [pid 5272] <... futex resumed>) = 1 [pid 5270] <... futex resumed>) = 0 [pid 5277] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5273] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5272] sendfile(8, 6, NULL, 281474978811908 [pid 5270] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5277] close(10 [pid 5273] <... futex resumed>) = 1 [pid 5270] <... futex resumed>) = 0 [pid 5269] <... futex resumed>) = 0 [pid 5277] <... close resumed>) = 0 [pid 5273] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5270] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5269] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5277] close(9 [pid 5273] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5269] <... futex resumed>) = 0 [pid 5273] sendfile(8, 6, NULL, 281474978811908 [pid 5269] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5277] <... close resumed>) = 0 [pid 5277] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5276] <... futex resumed>) = 0 [pid 5277] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5276] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5274] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5277] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5276] <... futex resumed>) = 0 [pid 5274] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5277] sendfile(8, 6, NULL, 281474978811908 [pid 5276] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5274] <... futex resumed>) = 0 [pid 5274] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff67807c000 [pid 5270] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5274] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5270] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5274] <... mprotect resumed>) = 0 [pid 5270] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5274] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5270] <... mmap resumed>) = 0x7ff67807c000 [pid 5270] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5269] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5274] <... clone resumed>, parent_tid=[5280], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5280 [pid 5270] <... mprotect resumed>) = 0 [pid 5269] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5274] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5270] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5269] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5280 attached [pid 5274] <... futex resumed>) = 0 [pid 5269] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5270] <... clone resumed>, parent_tid=[5281], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5281 [pid 5270] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5274] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5270] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5269] <... mmap resumed>) = 0x7ff67807c000 ./strace-static-x86_64: Process 5281 attached [pid 5269] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5281] set_robust_list(0x7ff67809c9e0, 24 [pid 5269] <... mprotect resumed>) = 0 [pid 5281] <... set_robust_list resumed>) = 0 [pid 5269] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5281] sync( [pid 5280] set_robust_list(0x7ff67809c9e0, 24 [pid 5276] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5269] <... clone resumed>, parent_tid=[5282], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5282 ./strace-static-x86_64: Process 5282 attached [pid 5280] <... set_robust_list resumed>) = 0 [pid 5276] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5269] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5282] set_robust_list(0x7ff67809c9e0, 24 [pid 5281] <... sync resumed>) = 0 [pid 5280] sync( [pid 5276] <... futex resumed>) = 0 [pid 5269] <... futex resumed>) = 0 [pid 5282] <... set_robust_list resumed>) = 0 [pid 5281] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5276] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5269] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5281] <... futex resumed>) = 1 [pid 5276] <... mmap resumed>) = 0x7ff67807c000 [pid 5270] <... futex resumed>) = 0 [pid 5280] <... sync resumed>) = 0 [pid 5282] sync( [pid 5281] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5276] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5280] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5276] <... mprotect resumed>) = 0 [pid 5280] <... futex resumed>) = 1 [pid 5276] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5274] <... futex resumed>) = 0 [pid 5280] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5276] <... clone resumed>, parent_tid=[5283], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5283 [pid 5282] <... sync resumed>) = 0 [pid 5276] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5282] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5276] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5283 attached [pid 5282] <... futex resumed>) = 1 [pid 5276] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5269] <... futex resumed>) = 0 [pid 5283] set_robust_list(0x7ff67809c9e0, 24 [pid 5282] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5283] <... set_robust_list resumed>) = 0 [pid 5283] sync() = 0 [pid 5283] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5276] <... futex resumed>) = 0 [pid 5283] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5266] exit_group(0 [pid 5278] <... futex resumed>) = ? [pid 5267] <... sendfile resumed>) = ? [pid 5266] <... exit_group resumed>) = ? [pid 5278] +++ exited with 0 +++ [pid 5267] +++ exited with 0 +++ [pid 5266] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5266, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=38 /* 0.38 s */} --- [pid 4998] umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x555556742620 /* 4 entries */, 32768) = 104 [pid 4998] umount2("./14/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5268] exit_group(0 [pid 5279] <... futex resumed>) = ? [pid 5268] <... exit_group resumed>) = ? [pid 5279] +++ exited with 0 +++ [pid 5271] <... sendfile resumed>) = ? [pid 5271] +++ exited with 0 +++ [pid 5268] +++ exited with 0 +++ [pid 4996] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5268, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=43 /* 0.43 s */} --- [pid 4996] umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4996] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] getdents64(3, 0x555556742620 /* 4 entries */, 32768) = 104 [pid 4996] umount2("./15/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5270] exit_group(0 [pid 5281] <... futex resumed>) = ? [pid 5270] <... exit_group resumed>) = ? [pid 5281] +++ exited with 0 +++ [pid 5272] <... sendfile resumed>) = ? [pid 5272] +++ exited with 0 +++ [pid 5270] +++ exited with 0 +++ [pid 4994] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5270, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=44 /* 0.44 s */} --- [pid 4994] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4994] umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4994] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] getdents64(3, 0x555556742620 /* 4 entries */, 32768) = 104 [pid 4994] umount2("./14/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5274] exit_group(0 [pid 5280] <... futex resumed>) = ? [pid 5274] <... exit_group resumed>) = ? [pid 5280] +++ exited with 0 +++ [pid 5275] <... sendfile resumed>) = ? [pid 4998] <... umount2 resumed>) = 0 [pid 4998] umount2("./14/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./14/bus", [pid 5276] exit_group(0 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5283] <... futex resumed>) = ? [pid 5277] <... sendfile resumed>) = ? [pid 5276] <... exit_group resumed>) = ? [pid 5275] +++ exited with 0 +++ [pid 5274] +++ exited with 0 +++ [pid 4998] umount2("./14/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5283] +++ exited with 0 +++ [pid 5277] +++ exited with 0 +++ [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5274, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=34 /* 0.34 s */} --- [pid 4997] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4997] umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4997] fstat(3, [pid 5276] +++ exited with 0 +++ [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(3, [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] <... getdents64 resumed>0x555556742620 /* 4 entries */, 32768) = 104 [pid 4997] umount2("./14/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] openat(AT_FDCWD, "./14/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4995] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5276, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=36 /* 0.36 s */} --- [pid 4998] <... openat resumed>) = 4 [pid 4995] restart_syscall(<... resuming interrupted clone ...> [pid 4998] fstat(4, [pid 4995] <... restart_syscall resumed>) = 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4995] umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] getdents64(4, [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... getdents64 resumed>0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4995] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] close(4 [pid 4995] <... openat resumed>) = 3 [pid 4998] <... close resumed>) = 0 [pid 4995] fstat(3, [pid 4998] rmdir("./14/bus" [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 4995] getdents64(3, [pid 5269] exit_group(0 [pid 4998] umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] <... getdents64 resumed>0x555556742620 /* 4 entries */, 32768) = 104 [pid 5282] <... futex resumed>) = ? [pid 5269] <... exit_group resumed>) = ? [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] umount2("./14/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5282] +++ exited with 0 +++ [pid 4998] lstat("./14/binderfs", [pid 5273] <... sendfile resumed>) = ? [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./14/binderfs") = 0 [pid 4998] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./14") = 0 [pid 4998] mkdir("./15", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567415d0) = 5284 [pid 5273] +++ exited with 0 +++ [pid 5269] +++ exited with 0 +++ [pid 4993] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5269, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=48 /* 0.48 s */} --- [pid 4993] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4993] umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4993] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4993] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4993] getdents64(3, 0x555556742620 /* 4 entries */, 32768) = 104 [pid 4993] umount2("./14/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5284 attached [pid 5284] set_robust_list(0x5555567415e0, 24) = 0 [pid 5284] chdir("./15") = 0 [pid 5284] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5284] setpgid(0, 0) = 0 [pid 5284] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5284] write(3, "1000", 4) = 4 [pid 5284] close(3) = 0 [pid 5284] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5284] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5284] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5284] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5284] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5285], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5285 [pid 5284] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5284] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5285 attached [pid 5285] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5285] memfd_create("syzkaller", 0) = 3 [pid 5285] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 4997] <... umount2 resumed>) = 0 [pid 4997] umount2("./14/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./14/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./14/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./14/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4997] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4997] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4997] close(4) = 0 [pid 4997] rmdir("./14/bus") = 0 [pid 4995] <... umount2 resumed>) = 0 [pid 4997] umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./14/binderfs", [pid 4995] umount2("./14/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] unlink("./14/binderfs") = 0 [pid 4997] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4997] close(3 [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] <... close resumed>) = 0 [pid 4997] rmdir("./14" [pid 4995] lstat("./14/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] <... rmdir resumed>) = 0 [pid 4997] mkdir("./15", 0777) = 0 [pid 4995] umount2("./14/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 4997] ioctl(3, LOOP_CLR_FD [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] openat(AT_FDCWD, "./14/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4995] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4995] getdents64(4, [pid 4997] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4995] <... getdents64 resumed>0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4995] close(4 [pid 4997] close(3 [pid 4995] <... close resumed>) = 0 [pid 4997] <... close resumed>) = 0 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567415d0) = 5286 ./strace-static-x86_64: Process 5286 attached [pid 5286] set_robust_list(0x5555567415e0, 24) = 0 [pid 5286] chdir("./15") = 0 [pid 5286] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5286] setpgid(0, 0) = 0 [pid 4995] rmdir("./14/bus" [pid 5286] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4995] <... rmdir resumed>) = 0 [pid 4995] umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5286] <... openat resumed>) = 3 [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] lstat("./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4995] unlink("./14/binderfs") = 0 [pid 4995] getdents64(3, [pid 5286] write(3, "1000", 4) = 4 [pid 4995] <... getdents64 resumed>0x555556742620 /* 0 entries */, 32768) = 0 [pid 5286] close(3 [pid 4995] close(3 [pid 5286] <... close resumed>) = 0 [pid 5286] symlink("/dev/binderfs", "./binderfs" [pid 4995] <... close resumed>) = 0 [pid 5286] <... symlink resumed>) = 0 [pid 4995] rmdir("./14" [pid 5286] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5286] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 4995] <... rmdir resumed>) = 0 [pid 5286] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE [pid 4995] mkdir("./15", 0777 [pid 5286] <... mprotect resumed>) = 0 [pid 5286] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4995] <... mkdir resumed>) = 0 [pid 5286] <... clone resumed>, parent_tid=[5287], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5287 [pid 4995] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5286] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4995] <... openat resumed>) = 3 [pid 5286] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4995] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4995] close(3) = 0 [pid 4995] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567415d0) = 5288 ./strace-static-x86_64: Process 5287 attached [pid 5287] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5287] memfd_create("syzkaller", 0) = 3 [pid 5287] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 ./strace-static-x86_64: Process 5288 attached [pid 5288] set_robust_list(0x5555567415e0, 24) = 0 [pid 5288] chdir("./15") = 0 [pid 5288] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5288] setpgid(0, 0) = 0 [pid 5288] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5288] write(3, "1000", 4) = 4 [pid 5288] close(3) = 0 [pid 5288] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4993] <... umount2 resumed>) = 0 [pid 5288] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5288] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 4993] umount2("./14/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5288] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE [pid 4993] lstat("./14/bus", [pid 5288] <... mprotect resumed>) = 0 [pid 4993] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5288] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4993] umount2("./14/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4993] openat(AT_FDCWD, "./14/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5288] <... clone resumed>, parent_tid=[5289], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5289 [pid 4993] fstat(4, [pid 5288] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4993] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5288] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4993] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4993] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4993] close(4) = 0 [pid 4993] rmdir("./14/bus") = 0 [pid 4993] umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4993] lstat("./14/binderfs", ./strace-static-x86_64: Process 5289 attached {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5289] set_robust_list(0x7ff6876bd9e0, 24 [pid 4993] unlink("./14/binderfs" [pid 5289] <... set_robust_list resumed>) = 0 [pid 4993] <... unlink resumed>) = 0 [pid 5289] memfd_create("syzkaller", 0 [pid 4993] getdents64(3, [pid 5289] <... memfd_create resumed>) = 3 [pid 4993] <... getdents64 resumed>0x555556742620 /* 0 entries */, 32768) = 0 [pid 5289] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4993] close(3 [pid 5289] <... mmap resumed>) = 0x7ff67f29d000 [pid 4993] <... close resumed>) = 0 [pid 4993] rmdir("./14") = 0 [pid 4993] mkdir("./15", 0777) = 0 [pid 4993] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4993] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4993] close(3) = 0 [pid 4993] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567415d0) = 5290 ./strace-static-x86_64: Process 5290 attached [pid 5290] set_robust_list(0x5555567415e0, 24) = 0 [pid 5290] chdir("./15") = 0 [pid 5290] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5290] setpgid(0, 0) = 0 [pid 5290] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5290] write(3, "1000", 4) = 4 [pid 5290] close(3) = 0 [pid 5290] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5290] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5290] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5290] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5290] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5291], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5291 [pid 5290] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5290] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5291 attached [pid 5291] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5291] memfd_create("syzkaller", 0) = 3 [pid 5291] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 5285] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 4996] <... umount2 resumed>) = 0 [pid 4996] umount2("./15/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] lstat("./15/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] umount2("./15/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] openat(AT_FDCWD, "./15/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4996] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4996] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4996] close(4) = 0 [pid 4996] rmdir("./15/bus") = 0 [pid 4996] umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] lstat("./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4996] unlink("./15/binderfs") = 0 [pid 4996] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4996] close(3) = 0 [pid 4996] rmdir("./15") = 0 [pid 4996] mkdir("./16", 0777) = 0 [pid 4996] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 4996] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4996] close(3) = 0 [pid 4996] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567415d0) = 5292 ./strace-static-x86_64: Process 5292 attached [pid 5292] set_robust_list(0x5555567415e0, 24) = 0 [pid 5292] chdir("./16") = 0 [pid 5292] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5292] setpgid(0, 0) = 0 [pid 5292] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5292] write(3, "1000", 4) = 4 [pid 5292] close(3) = 0 [pid 5292] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5292] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5292] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5292] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5292] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5293], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5293 [pid 5292] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5292] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5293 attached [pid 4994] <... umount2 resumed>) = 0 [pid 5293] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5293] memfd_create("syzkaller", 0) = 3 [pid 4994] umount2("./14/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5293] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5293] <... mmap resumed>) = 0x7ff67f29d000 [pid 4994] lstat("./14/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] umount2("./14/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] openat(AT_FDCWD, "./14/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4994] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] getdents64(4, 0x55555674a660 /* 2 entries */, 32768) = 48 [pid 4994] getdents64(4, 0x55555674a660 /* 0 entries */, 32768) = 0 [pid 4994] close(4) = 0 [pid 4994] rmdir("./14/bus") = 0 [pid 4994] umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] lstat("./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4994] unlink("./14/binderfs") = 0 [pid 4994] getdents64(3, 0x555556742620 /* 0 entries */, 32768) = 0 [pid 4994] close(3) = 0 [pid 4994] rmdir("./14") = 0 [pid 4994] mkdir("./15", 0777) = 0 [pid 4994] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4994] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4994] close(3) = 0 [pid 4994] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567415d0) = 5294 ./strace-static-x86_64: Process 5294 attached [pid 5294] set_robust_list(0x5555567415e0, 24) = 0 [pid 5294] chdir("./15") = 0 [pid 5294] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5294] setpgid(0, 0) = 0 [pid 5294] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5294] write(3, "1000", 4) = 4 [pid 5294] close(3) = 0 [pid 5294] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5294] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5294] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff68769d000 [pid 5294] mprotect(0x7ff68769e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5294] clone(child_stack=0x7ff6876bd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5295], tls=0x7ff6876bd700, child_tidptr=0x7ff6876bd9d0) = 5295 [pid 5294] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5294] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5295 attached [pid 5295] set_robust_list(0x7ff6876bd9e0, 24) = 0 [pid 5295] memfd_create("syzkaller", 0) = 3 [pid 5295] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff67f29d000 [pid 5287] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5289] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5291] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5285] <... write resumed>) = 16777216 [pid 5285] munmap(0x7ff67f29d000, 16777216) = 0 [pid 5285] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5285] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5285] close(3) = 0 [pid 5285] mkdir("./bus", 0777 [pid 5293] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5285] <... mkdir resumed>) = 0 [pid 5285] mount("/dev/loop5", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "") = 0 [pid 5285] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5285] chdir("./bus") = 0 [pid 5285] ioctl(4, LOOP_CLR_FD) = 0 [pid 5285] close(4) = 0 [pid 5285] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5284] <... futex resumed>) = 0 [pid 5284] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5285] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [ 98.805514][ T5285] loop5: detected capacity change from 0 to 32768 [pid 5284] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5285] <... open resumed>) = 4 [pid 5285] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5284] <... futex resumed>) = 0 [pid 5284] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5285] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5284] <... futex resumed>) = 0 [pid 5285] <... open resumed>) = 5 [pid 5284] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5285] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5284] <... futex resumed>) = 0 [pid 5285] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5284] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5284] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5285] <... mmap resumed>) = 0x20000000 [pid 5285] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5284] <... futex resumed>) = 0 [pid 5285] ftruncate(4, 33587199 [pid 5284] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5285] <... ftruncate resumed>) = 0 [pid 5284] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5285] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5284] <... futex resumed>) = 0 [pid 5284] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5284] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5285] open("./bus", O_RDONLY) = 6 [pid 5285] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5284] <... futex resumed>) = 0 [pid 5284] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5285] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5284] <... futex resumed>) = 0 [pid 5284] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5285] <... open resumed>) = 7 [pid 5285] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5284] <... futex resumed>) = 0 [pid 5285] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5284] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5285] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5284] <... futex resumed>) = 0 [pid 5285] dup(7 [pid 5284] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5285] <... dup resumed>) = 8 [pid 5285] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5284] <... futex resumed>) = 0 [pid 5285] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5284] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5285] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5284] <... futex resumed>) = 0 [pid 5285] memfd_create("syzkaller", 0 [pid 5284] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5285] <... memfd_create resumed>) = 9 [pid 5285] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff677e9d000 [pid 5285] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5295] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5285] <... write resumed>) = 2097152 [pid 5285] munmap(0x7ff677e9d000, 2097152) = 0 [pid 5285] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 10 [pid 5285] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5285] ioctl(10, LOOP_CLR_FD) = 0 [pid 5285] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5289] <... write resumed>) = 16777216 [pid 5287] <... write resumed>) = 16777216 [pid 5285] close(10 [pid 5289] munmap(0x7ff67f29d000, 16777216 [pid 5287] munmap(0x7ff67f29d000, 16777216 [pid 5285] <... close resumed>) = 0 [pid 5287] <... munmap resumed>) = 0 [pid 5289] <... munmap resumed>) = 0 [pid 5285] close(9 [pid 5289] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5287] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5285] <... close resumed>) = 0 [pid 5289] <... openat resumed>) = 4 [pid 5287] <... openat resumed>) = 4 [pid 5285] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5289] ioctl(4, LOOP_SET_FD, 3 [pid 5287] ioctl(4, LOOP_SET_FD, 3 [pid 5285] <... futex resumed>) = 1 [pid 5284] <... futex resumed>) = 0 [pid 5289] <... ioctl resumed>) = 0 [pid 5284] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5284] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5285] sendfile(8, 6, NULL, 281474978811908 [pid 5287] <... ioctl resumed>) = 0 [pid 5289] close(3) = 0 [pid 5287] close(3 [pid 5289] mkdir("./bus", 0777 [pid 5287] <... close resumed>) = 0 [pid 5289] <... mkdir resumed>) = 0 [pid 5287] mkdir("./bus", 0777 [pid 5289] mount("/dev/loop2", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5287] <... mkdir resumed>) = 0 [pid 5287] mount("/dev/loop4", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5291] <... write resumed>) = 16777216 [pid 5289] <... mount resumed>) = 0 [pid 5287] <... mount resumed>) = 0 [pid 5287] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5289] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5287] <... openat resumed>) = 3 [pid 5291] munmap(0x7ff67f29d000, 16777216 [pid 5289] <... openat resumed>) = 3 [ 99.162741][ T5289] loop2: detected capacity change from 0 to 32768 [ 99.169423][ T5287] loop4: detected capacity change from 0 to 32768 [pid 5287] chdir("./bus" [pid 5291] <... munmap resumed>) = 0 [pid 5289] chdir("./bus" [pid 5287] <... chdir resumed>) = 0 [pid 5284] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5289] <... chdir resumed>) = 0 [pid 5287] ioctl(4, LOOP_CLR_FD [pid 5284] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5289] ioctl(4, LOOP_CLR_FD [pid 5287] <... ioctl resumed>) = 0 [pid 5284] <... futex resumed>) = 0 [pid 5289] <... ioctl resumed>) = 0 [pid 5287] close(4 [pid 5284] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5289] close(4 [pid 5287] <... close resumed>) = 0 [pid 5284] <... mmap resumed>) = 0x7ff67807c000 [pid 5289] <... close resumed>) = 0 [pid 5287] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5284] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5289] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5287] <... futex resumed>) = 1 [pid 5286] <... futex resumed>) = 0 [pid 5284] <... mprotect resumed>) = 0 [pid 5289] <... futex resumed>) = 1 [pid 5288] <... futex resumed>) = 0 [pid 5287] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5286] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5284] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5289] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5288] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5287] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5286] <... futex resumed>) = 0 [pid 5289] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5288] <... futex resumed>) = 0 [pid 5287] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5286] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5284] <... clone resumed>, parent_tid=[5296], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5296 [pid 5289] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5288] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5287] <... open resumed>) = 4 [pid 5284] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5289] <... open resumed>) = 4 [pid 5287] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5284] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5296 attached [pid 5289] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5287] <... futex resumed>) = 1 [pid 5286] <... futex resumed>) = 0 [pid 5284] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5296] set_robust_list(0x7ff67809c9e0, 24 [pid 5289] <... futex resumed>) = 1 [pid 5288] <... futex resumed>) = 0 [pid 5287] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5286] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5289] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5288] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5287] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5286] <... futex resumed>) = 0 [pid 5296] <... set_robust_list resumed>) = 0 [pid 5291] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5289] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5288] <... futex resumed>) = 0 [pid 5287] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5286] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5296] sync( [pid 5291] <... openat resumed>) = 4 [pid 5289] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5288] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5287] <... open resumed>) = 5 [pid 5291] ioctl(4, LOOP_SET_FD, 3 [pid 5289] <... open resumed>) = 5 [pid 5289] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5287] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5289] <... futex resumed>) = 1 [pid 5288] <... futex resumed>) = 0 [pid 5289] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5288] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5287] <... futex resumed>) = 1 [pid 5286] <... futex resumed>) = 0 [pid 5289] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5288] <... futex resumed>) = 0 [pid 5287] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5286] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5289] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5288] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5287] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5286] <... futex resumed>) = 0 [pid 5291] <... ioctl resumed>) = 0 [pid 5289] <... mmap resumed>) = 0x20000000 [pid 5289] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5287] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5286] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5291] close(3 [pid 5289] <... futex resumed>) = 1 [pid 5288] <... futex resumed>) = 0 [pid 5287] <... mmap resumed>) = 0x20000000 [pid 5289] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5288] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5287] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5289] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5288] <... futex resumed>) = 0 [pid 5287] <... futex resumed>) = 1 [pid 5289] ftruncate(4, 33587199 [pid 5288] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5287] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5286] <... futex resumed>) = 0 [pid 5289] <... ftruncate resumed>) = 0 [pid 5287] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5286] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5289] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5287] ftruncate(4, 33587199 [pid 5286] <... futex resumed>) = 0 [pid 5289] <... futex resumed>) = 1 [pid 5288] <... futex resumed>) = 0 [pid 5288] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5287] <... ftruncate resumed>) = 0 [pid 5286] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5289] open("./bus", O_RDONLY [pid 5288] <... futex resumed>) = 0 [pid 5287] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5286] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5291] <... close resumed>) = 0 [pid 5289] <... open resumed>) = 6 [pid 5288] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5287] <... futex resumed>) = 0 [pid 5286] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5291] mkdir("./bus", 0777 [pid 5289] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5288] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5291] <... mkdir resumed>) = 0 [pid 5289] <... futex resumed>) = 0 [pid 5288] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5287] open("./bus", O_RDONLY [pid 5286] <... futex resumed>) = 0 [pid 5291] mount("/dev/loop0", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5289] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5288] <... futex resumed>) = 0 [pid 5287] <... open resumed>) = 6 [pid 5286] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5296] <... sync resumed>) = 0 [pid 5289] <... open resumed>) = 7 [pid 5288] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5287] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5284] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5296] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5289] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5287] <... futex resumed>) = 1 [pid 5286] <... futex resumed>) = 0 [pid 5296] <... futex resumed>) = 0 [pid 5291] <... mount resumed>) = 0 [pid 5289] <... futex resumed>) = 1 [pid 5288] <... futex resumed>) = 0 [pid 5287] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5286] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5296] futex(0x7ff6877bb7f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5291] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5289] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5288] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5287] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5286] <... futex resumed>) = 0 [pid 5291] <... openat resumed>) = 3 [pid 5289] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5288] <... futex resumed>) = 0 [pid 5287] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5286] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5291] chdir("./bus" [pid 5289] dup(7 [pid 5288] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5287] <... open resumed>) = 7 [pid 5291] <... chdir resumed>) = 0 [pid 5289] <... dup resumed>) = 8 [pid 5287] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5291] ioctl(4, LOOP_CLR_FD [pid 5289] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5287] <... futex resumed>) = 1 [pid 5286] <... futex resumed>) = 0 [pid 5291] <... ioctl resumed>) = 0 [pid 5289] <... futex resumed>) = 1 [pid 5288] <... futex resumed>) = 0 [pid 5287] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5286] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [ 99.278353][ T5291] loop0: detected capacity change from 0 to 32768 [pid 5291] close(4 [pid 5289] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5288] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5287] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5286] <... futex resumed>) = 0 [pid 5291] <... close resumed>) = 0 [pid 5291] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5290] <... futex resumed>) = 0 [pid 5291] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5290] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5289] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5288] <... futex resumed>) = 0 [pid 5287] dup(7 [pid 5286] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5291] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5290] <... futex resumed>) = 0 [pid 5291] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5290] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5291] <... open resumed>) = 4 [pid 5289] memfd_create("syzkaller", 0 [pid 5288] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5287] <... dup resumed>) = 8 [pid 5291] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5289] <... memfd_create resumed>) = 9 [pid 5287] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5291] <... futex resumed>) = 1 [pid 5290] <... futex resumed>) = 0 [pid 5289] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5287] <... futex resumed>) = 1 [pid 5286] <... futex resumed>) = 0 [pid 5291] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5290] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5289] <... mmap resumed>) = 0x7ff677e9d000 [pid 5287] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5286] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5291] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5290] <... futex resumed>) = 0 [pid 5287] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5286] <... futex resumed>) = 0 [pid 5291] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5290] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5291] <... open resumed>) = 5 [pid 5291] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5290] <... futex resumed>) = 0 [pid 5287] memfd_create("syzkaller", 0 [pid 5286] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5291] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5290] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5287] <... memfd_create resumed>) = 9 [pid 5291] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5290] <... futex resumed>) = 0 [pid 5291] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5290] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5287] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5291] <... mmap resumed>) = 0x20000000 [pid 5287] <... mmap resumed>) = 0x7ff677e9d000 [pid 5291] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5290] <... futex resumed>) = 0 [pid 5291] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5290] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5291] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5290] <... futex resumed>) = 0 [pid 5293] <... write resumed>) = 16777216 [pid 5291] ftruncate(4, 33587199 [pid 5290] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5293] munmap(0x7ff67f29d000, 16777216 [pid 5291] <... ftruncate resumed>) = 0 [pid 5291] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5290] <... futex resumed>) = 0 [pid 5291] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5290] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5291] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5290] <... futex resumed>) = 0 [pid 5291] open("./bus", O_RDONLY [pid 5290] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5291] <... open resumed>) = 6 [pid 5293] <... munmap resumed>) = 0 [pid 5291] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5290] <... futex resumed>) = 0 [pid 5291] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5290] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5293] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5291] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5290] <... futex resumed>) = 0 [pid 5287] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5293] <... openat resumed>) = 4 [pid 5291] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5290] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5293] ioctl(4, LOOP_SET_FD, 3 [pid 5291] <... open resumed>) = 7 [pid 5291] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5290] <... futex resumed>) = 0 [pid 5291] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5290] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5291] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5290] <... futex resumed>) = 0 [pid 5293] <... ioctl resumed>) = 0 [pid 5291] dup(7 [pid 5290] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5291] <... dup resumed>) = 8 [pid 5293] close(3 [pid 5289] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5291] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5290] <... futex resumed>) = 0 [pid 5293] <... close resumed>) = 0 [pid 5291] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5290] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5293] mkdir("./bus", 0777 [pid 5291] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5290] <... futex resumed>) = 0 [pid 5293] <... mkdir resumed>) = 0 [pid 5291] memfd_create("syzkaller", 0 [pid 5290] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5293] mount("/dev/loop3", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5291] <... memfd_create resumed>) = 9 [pid 5291] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff677e9d000 [pid 5293] <... mount resumed>) = 0 [pid 5287] <... write resumed>) = 2097152 [pid 5293] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5287] munmap(0x7ff677e9d000, 2097152 [pid 5293] <... openat resumed>) = 3 [ 99.438285][ T5293] loop3: detected capacity change from 0 to 32768 [pid 5293] chdir("./bus") = 0 [pid 5293] ioctl(4, LOOP_CLR_FD) = 0 [pid 5293] close(4) = 0 [pid 5287] <... munmap resumed>) = 0 [pid 5293] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5292] <... futex resumed>) = 0 [pid 5287] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5293] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5292] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5287] <... openat resumed>) = 10 [pid 5293] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5292] <... futex resumed>) = 0 [pid 5293] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5292] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5287] ioctl(10, LOOP_SET_FD, 9 [pid 5293] <... open resumed>) = 4 [pid 5287] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5293] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5287] ioctl(10, LOOP_CLR_FD [pid 5293] <... futex resumed>) = 1 [pid 5292] <... futex resumed>) = 0 [pid 5287] <... ioctl resumed>) = 0 [pid 5293] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5292] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5293] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5292] <... futex resumed>) = 0 [pid 5293] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5292] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5287] ioctl(10, LOOP_SET_FD, 9 [pid 5293] <... open resumed>) = 5 [pid 5289] <... write resumed>) = 2097152 [pid 5293] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5289] munmap(0x7ff677e9d000, 2097152 [pid 5287] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5293] <... futex resumed>) = 1 [pid 5292] <... futex resumed>) = 0 [pid 5292] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5293] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5289] <... munmap resumed>) = 0 [pid 5287] close(10 [pid 5292] <... futex resumed>) = 0 [pid 5293] <... mmap resumed>) = 0x20000000 [pid 5287] <... close resumed>) = 0 [pid 5293] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5292] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5289] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5287] close(9 [pid 5293] <... futex resumed>) = 0 [pid 5292] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5289] <... openat resumed>) = 10 [pid 5293] ftruncate(4, 33587199 [pid 5292] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5289] ioctl(10, LOOP_SET_FD, 9 [pid 5287] <... close resumed>) = 0 [pid 5293] <... ftruncate resumed>) = 0 [pid 5292] <... futex resumed>) = 0 [pid 5289] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5293] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5292] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5289] ioctl(10, LOOP_CLR_FD [pid 5287] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5293] <... futex resumed>) = 0 [pid 5292] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5291] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5289] <... ioctl resumed>) = 0 [pid 5287] <... futex resumed>) = 1 [pid 5286] <... futex resumed>) = 0 [pid 5293] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5292] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5293] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5292] <... futex resumed>) = 0 [pid 5287] sendfile(8, 6, NULL, 281474978811908 [pid 5286] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5293] open("./bus", O_RDONLY [pid 5292] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5286] <... futex resumed>) = 0 [pid 5289] ioctl(10, LOOP_SET_FD, 9 [pid 5286] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5293] <... open resumed>) = 6 [pid 5289] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5293] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5289] close(10 [pid 5293] <... futex resumed>) = 1 [pid 5292] <... futex resumed>) = 0 [pid 5295] <... write resumed>) = 16777216 [pid 5289] <... close resumed>) = 0 [pid 5295] munmap(0x7ff67f29d000, 16777216 [pid 5293] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5292] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5289] close(9 [pid 5293] <... open resumed>) = 7 [pid 5292] <... futex resumed>) = 0 [pid 5293] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5292] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5289] <... close resumed>) = 0 [pid 5293] <... futex resumed>) = 0 [pid 5292] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5293] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5292] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5293] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5292] <... futex resumed>) = 0 [pid 5293] dup(7 [pid 5292] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5291] <... write resumed>) = 2097152 [pid 5293] <... dup resumed>) = 8 [pid 5289] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5293] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5292] <... futex resumed>) = 0 [pid 5295] <... munmap resumed>) = 0 [pid 5293] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5292] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5289] <... futex resumed>) = 1 [pid 5288] <... futex resumed>) = 0 [pid 5286] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5295] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5293] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5292] <... futex resumed>) = 0 [pid 5288] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5286] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5295] <... openat resumed>) = 4 [pid 5289] sendfile(8, 6, NULL, 281474978811908 [pid 5295] ioctl(4, LOOP_SET_FD, 3 [pid 5293] memfd_create("syzkaller", 0 [pid 5292] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5291] munmap(0x7ff677e9d000, 2097152 [pid 5288] <... futex resumed>) = 0 [pid 5286] <... futex resumed>) = 0 [pid 5293] <... memfd_create resumed>) = 9 [pid 5288] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5286] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5293] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5286] <... mmap resumed>) = 0x7ff67807c000 [pid 5293] <... mmap resumed>) = 0x7ff677e9d000 [pid 5286] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5286] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5297], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5297 [pid 5286] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5286] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5297 attached [pid 5297] set_robust_list(0x7ff67809c9e0, 24) = 0 [pid 5297] sync( [pid 5295] <... ioctl resumed>) = 0 [pid 5295] close(3 [pid 5291] <... munmap resumed>) = 0 [pid 5295] <... close resumed>) = 0 [pid 5291] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5295] mkdir("./bus", 0777 [pid 5291] <... openat resumed>) = 10 [pid 5295] <... mkdir resumed>) = 0 [pid 5291] ioctl(10, LOOP_SET_FD, 9 [pid 5295] mount("/dev/loop1", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "" [pid 5291] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5291] ioctl(10, LOOP_CLR_FD) = 0 [pid 5295] <... mount resumed>) = 0 [pid 5295] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5291] ioctl(10, LOOP_SET_FD, 9 [pid 5295] <... openat resumed>) = 3 [pid 5291] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5295] chdir("./bus" [pid 5291] close(10 [pid 5288] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5295] <... chdir resumed>) = 0 [pid 5291] <... close resumed>) = 0 [pid 5288] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5286] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5295] ioctl(4, LOOP_CLR_FD [pid 5291] close(9 [pid 5288] <... futex resumed>) = 0 [ 99.667594][ T5295] loop1: detected capacity change from 0 to 32768 [ 99.694279][ T75] ================================================================================ [pid 5295] <... ioctl resumed>) = 0 [pid 5293] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5295] close(4) = 0 [pid 5288] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5295] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5288] <... mmap resumed>) = 0x7ff67807c000 [pid 5295] <... futex resumed>) = 1 [pid 5294] <... futex resumed>) = 0 [pid 5288] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5295] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5294] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5291] <... close resumed>) = 0 [pid 5295] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5294] <... futex resumed>) = 0 [pid 5288] <... mprotect resumed>) = 0 [pid 5295] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5294] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5288] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5295] <... open resumed>) = 4 [pid 5295] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5291] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5288] <... clone resumed>, parent_tid=[5298], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5298 [pid 5295] <... futex resumed>) = 1 [pid 5294] <... futex resumed>) = 0 [pid 5291] <... futex resumed>) = 1 [pid 5290] <... futex resumed>) = 0 [pid 5288] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5298 attached [pid 5295] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5294] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5291] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5290] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5288] <... futex resumed>) = 0 [pid 5298] set_robust_list(0x7ff67809c9e0, 24 [pid 5295] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5294] <... futex resumed>) = 0 [pid 5291] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5290] <... futex resumed>) = 0 [pid 5288] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5298] <... set_robust_list resumed>) = 0 [pid 5295] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5294] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5291] sendfile(8, 6, NULL, 281474978811908 [pid 5290] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5298] sync( [pid 5295] <... open resumed>) = 5 [pid 5295] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5294] <... futex resumed>) = 0 [pid 5295] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5294] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5295] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5294] <... futex resumed>) = 0 [pid 5295] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5294] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5295] <... mmap resumed>) = 0x20000000 [pid 5295] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5294] <... futex resumed>) = 0 [pid 5295] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5294] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5295] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5294] <... futex resumed>) = 0 [pid 5295] ftruncate(4, 33587199 [pid 5294] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5295] <... ftruncate resumed>) = 0 [pid 5293] <... write resumed>) = 2097152 [pid 5295] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5294] <... futex resumed>) = 0 [ 99.757351][ T75] UBSAN: array-index-out-of-bounds in fs/jfs/jfs_xtree.c:622:9 [ 99.796655][ T75] index 19 is out of range for type 'xad_t[18]' (aka 'struct xad[18]') [pid 5293] munmap(0x7ff677e9d000, 2097152 [pid 5295] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5294] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5295] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5294] <... futex resumed>) = 0 [pid 5295] open("./bus", O_RDONLY [pid 5294] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5295] <... open resumed>) = 6 [pid 5295] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5290] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5295] <... futex resumed>) = 1 [pid 5294] <... futex resumed>) = 0 [pid 5290] futex(0x7ff6877bb7fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5295] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5294] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5290] <... futex resumed>) = 0 [pid 5295] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5294] <... futex resumed>) = 0 [pid 5290] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5295] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5294] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5290] <... mmap resumed>) = 0x7ff67807c000 [pid 5295] <... open resumed>) = 7 [pid 5290] mprotect(0x7ff67807d000, 131072, PROT_READ|PROT_WRITE [pid 5295] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5290] <... mprotect resumed>) = 0 [pid 5295] <... futex resumed>) = 1 [pid 5294] <... futex resumed>) = 0 [pid 5290] clone(child_stack=0x7ff67809c3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5295] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5294] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5295] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5294] <... futex resumed>) = 0 [pid 5290] <... clone resumed>, parent_tid=[5299], tls=0x7ff67809c700, child_tidptr=0x7ff67809c9d0) = 5299 [pid 5295] dup(7 [pid 5294] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5290] futex(0x7ff6877bb7f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5295] <... dup resumed>) = 8 [pid 5290] <... futex resumed>) = 0 [pid 5295] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5290] futex(0x7ff6877bb7fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5295] <... futex resumed>) = 1 [pid 5294] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5299 attached [pid 5295] futex(0x7ff6877bb7e8, FUTEX_WAIT_PRIVATE, 0, NULL [ 99.838662][ T75] CPU: 1 PID: 75 Comm: kworker/u4:4 Not tainted 6.4.0-rc5-syzkaller-00133-g25041a4c02c7 #0 [ 99.848693][ T75] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 99.858772][ T75] Workqueue: writeback wb_workfn (flush-7:2) [ 99.864825][ T75] Call Trace: [ 99.868125][ T75] [ 99.871073][ T75] dump_stack_lvl+0x1e7/0x2d0 [ 99.875809][ T75] ? __get_metapage+0xb2d/0x10e0 [ 99.880750][ T75] ? nf_tcp_handle_invalid+0x650/0x650 [ 99.886201][ T75] ? panic+0x770/0x770 [ 99.890277][ T75] __ubsan_handle_out_of_bounds+0x11c/0x150 [ 99.896171][ T75] xtInsert+0xf45/0xfa0 [ 99.900329][ T75] ? xtSearch+0x1ca0/0x1ca0 [ 99.904842][ T75] ? mark_lock+0x9a/0x340 [ 99.909166][ T75] ? dquot_drop+0x2a0/0x2a0 [ 99.913669][ T75] ? rcu_is_watching+0x15/0xb0 [ 99.918424][ T75] ? __mark_inode_dirty+0x3e7/0xd90 [ 99.923621][ T75] extAlloc+0xa64/0x1010 [ 99.927868][ T75] ? jfs_ioc_trim+0x660/0x660 [ 99.932554][ T75] jfs_get_block+0x41b/0xe60 [ 99.937142][ T75] ? jfs_dirty_inode+0x240/0x240 [ 99.942082][ T75] __mpage_writepage+0x90c/0x2010 [ 99.947112][ T75] ? mpage_writepages+0x1d0/0x1d0 [ 99.952150][ T75] ? folio_wait_writeback+0x1f0/0x1f0 [ 99.957537][ T75] write_cache_pages+0x89e/0x12b0 [ 99.962565][ T75] ? mpage_writepages+0x1d0/0x1d0 [ 99.967587][ T75] ? tag_pages_for_writeback+0x6a0/0x6a0 [ 99.973227][ T75] ? mark_lock+0x9a/0x340 [ 99.977551][ T75] ? blk_start_plug+0x51/0x110 [ 99.982308][ T75] mpage_writepages+0x107/0x1d0 [ 99.987152][ T75] ? clean_buffers+0x5c0/0x5c0 [ 99.991908][ T75] ? jfs_dirty_inode+0x240/0x240 [ 99.996847][ T75] ? jfs_read_folio+0x20/0x20 [ 100.001512][ T75] do_writepages+0x3a6/0x670 [ 100.006102][ T75] ? folio_nr_pages+0x1c0/0x1c0 [ 100.010956][ T75] ? read_lock_is_recursive+0x20/0x20 [ 100.016322][ T75] ? writeback_sb_inodes+0x52b/0x11d0 [ 100.021687][ T75] ? __lock_acquire+0x2070/0x2070 [ 100.026702][ T75] ? do_raw_spin_lock+0x14d/0x3a0 [ 100.031734][ T75] __writeback_single_inode+0x155/0xfa0 [ 100.037281][ T75] writeback_sb_inodes+0x8e3/0x11d0 [ 100.042490][ T75] ? read_lock_is_recursive+0x20/0x20 [ 100.047868][ T75] ? queue_io+0x570/0x570 [ 100.052194][ T75] ? _raw_spin_unlock+0x28/0x40 [ 100.057035][ T75] ? move_expired_inodes+0x7c8/0x810 [ 100.062326][ T75] ? do_raw_spin_lock+0x14d/0x3a0 [ 100.067351][ T75] __writeback_inodes_wb+0x11b/0x260 [ 100.072641][ T75] wb_writeback+0x46c/0xc70 [ 100.077149][ T75] ? rcu_lock_release+0x30/0x30 [ 100.081996][ T75] ? lockdep_hardirqs_on_prepare+0x43c/0x7a0 [ 100.087979][ T75] ? get_nr_dirty_inodes+0x1c7/0x210 [ 100.093260][ T75] wb_workfn+0x98f/0xff0 [ 100.097513][ T75] ? inode_wait_for_writeback+0x290/0x290 [ 100.103236][ T75] ? read_lock_is_recursive+0x20/0x20 [ 100.108603][ T75] ? lockdep_hardirqs_on_prepare+0x43c/0x7a0 [ 100.114594][ T75] process_one_work+0x8a0/0x10e0 [ 100.119538][ T75] ? worker_detach_from_pool+0x290/0x290 [ 100.125169][ T75] ? _raw_spin_lock_irqsave+0x120/0x120 [ 100.130706][ T75] ? kthread_data+0x52/0xc0 [ 100.135207][ T75] ? wq_worker_running+0x9b/0x1a0 [pid 5294] futex(0x7ff6877bb7e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5299] set_robust_list(0x7ff67809c9e0, 24 [pid 5295] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5294] <... futex resumed>) = 0 [pid 5299] <... set_robust_list resumed>) = 0 [pid 5295] memfd_create("syzkaller", 0 [pid 5294] futex(0x7ff6877bb7ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5290] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5288] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5299] sync( [pid 5295] <... memfd_create resumed>) = 9 [pid 5295] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5293] <... munmap resumed>) = 0 [ 100.140223][ T75] worker_thread+0xa63/0x1210 [ 100.144899][ T75] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 100.150789][ T75] ? _raw_spin_unlock+0x40/0x40 [ 100.155641][ T75] kthread+0x2b8/0x350 [ 100.159698][ T75] ? pr_cont_work+0x5e0/0x5e0 [ 100.164367][ T75] ? kthread_blkcg+0xd0/0xd0 [ 100.168955][ T75] ret_from_fork+0x1f/0x30 [ 100.173380][ T75] [pid 5295] <... mmap resumed>) = 0x7ff677e9d000 [pid 5293] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 10 [pid 5293] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5293] ioctl(10, LOOP_CLR_FD) = 0 [pid 5293] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5293] close(10) = 0 [ 100.198348][ T75] ================================================================================ [pid 5293] close(9) = 0 [pid 5295] write(9, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5293] futex(0x7ff6877bb7ec, FUTEX_WAKE_PRIVATE, 1000000 [ 100.266469][ T75] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 100.273714][ T75] CPU: 1 PID: 75 Comm: kworker/u4:4 Not tainted 6.4.0-rc5-syzkaller-00133-g25041a4c02c7 #0 [ 100.283706][ T75] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 100.293784][ T75] Workqueue: writeback wb_workfn (flush-7:2) [ 100.299810][ T75] Call Trace: [ 100.303100][ T75] [ 100.306044][ T75] dump_stack_lvl+0x1e7/0x2d0 [ 100.310747][ T75] ? nf_tcp_handle_invalid+0x650/0x650 [pid 5295] <... write resumed>) = 2097152 [pid 5295] munmap(0x7ff677e9d000, 2097152) = 0 [pid 5295] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 10 [pid 5295] ioctl(10, LOOP_SET_FD, 9) = -1 EBUSY (Device or resource busy) [pid 5295] ioctl(10, LOOP_CLR_FD) = 0 [ 100.316225][ T75] ? panic+0x770/0x770 [ 100.320325][ T75] ? vscnprintf+0x5d/0x80 [ 100.324680][ T75] panic+0x30f/0x770 [ 100.328595][ T75] ? check_panic_on_warn+0x21/0xa0 [ 100.333736][ T75] ? __memcpy_flushcache+0x2b0/0x2b0 [ 100.339037][ T75] ? dump_stack_lvl+0x253/0x2d0 [ 100.343898][ T75] check_panic_on_warn+0x82/0xa0 [ 100.348834][ T75] __ubsan_handle_out_of_bounds+0x13c/0x150 [ 100.354732][ T75] xtInsert+0xf45/0xfa0 [ 100.358891][ T75] ? xtSearch+0x1ca0/0x1ca0 [ 100.363405][ T75] ? mark_lock+0x9a/0x340 [ 100.367750][ T75] ? dquot_drop+0x2a0/0x2a0 [ 100.372258][ T75] ? rcu_is_watching+0x15/0xb0 [ 100.377013][ T75] ? __mark_inode_dirty+0x3e7/0xd90 [ 100.382213][ T75] extAlloc+0xa64/0x1010 [ 100.386461][ T75] ? jfs_ioc_trim+0x660/0x660 [ 100.391140][ T75] jfs_get_block+0x41b/0xe60 [ 100.395728][ T75] ? jfs_dirty_inode+0x240/0x240 [ 100.400665][ T75] __mpage_writepage+0x90c/0x2010 [ 100.405693][ T75] ? mpage_writepages+0x1d0/0x1d0 [ 100.410729][ T75] ? folio_wait_writeback+0x1f0/0x1f0 [ 100.416105][ T75] write_cache_pages+0x89e/0x12b0 [ 100.421135][ T75] ? mpage_writepages+0x1d0/0x1d0 [ 100.426150][ T75] ? tag_pages_for_writeback+0x6a0/0x6a0 [ 100.431785][ T75] ? mark_lock+0x9a/0x340 [ 100.436111][ T75] ? blk_start_plug+0x51/0x110 [ 100.440872][ T75] mpage_writepages+0x107/0x1d0 [ 100.445716][ T75] ? clean_buffers+0x5c0/0x5c0 [ 100.450470][ T75] ? jfs_dirty_inode+0x240/0x240 [ 100.455408][ T75] ? jfs_read_folio+0x20/0x20 [ 100.460076][ T75] do_writepages+0x3a6/0x670 [ 100.464666][ T75] ? folio_nr_pages+0x1c0/0x1c0 [ 100.469516][ T75] ? read_lock_is_recursive+0x20/0x20 [ 100.474880][ T75] ? writeback_sb_inodes+0x52b/0x11d0 [ 100.480246][ T75] ? __lock_acquire+0x2070/0x2070 [ 100.485263][ T75] ? do_raw_spin_lock+0x14d/0x3a0 [ 100.490287][ T75] __writeback_single_inode+0x155/0xfa0 [ 100.495832][ T75] writeback_sb_inodes+0x8e3/0x11d0 [ 100.501039][ T75] ? read_lock_is_recursive+0x20/0x20 [ 100.506410][ T75] ? queue_io+0x570/0x570 [ 100.510738][ T75] ? _raw_spin_unlock+0x28/0x40 [ 100.515580][ T75] ? move_expired_inodes+0x7c8/0x810 [ 100.520875][ T75] ? do_raw_spin_lock+0x14d/0x3a0 [ 100.525932][ T75] __writeback_inodes_wb+0x11b/0x260 [ 100.531222][ T75] wb_writeback+0x46c/0xc70 [ 100.535734][ T75] ? rcu_lock_release+0x30/0x30 [ 100.540580][ T75] ? lockdep_hardirqs_on_prepare+0x43c/0x7a0 [ 100.546561][ T75] ? get_nr_dirty_inodes+0x1c7/0x210 [ 100.551859][ T75] wb_workfn+0x98f/0xff0 [ 100.556113][ T75] ? inode_wait_for_writeback+0x290/0x290 [ 100.561830][ T75] ? read_lock_is_recursive+0x20/0x20 [ 100.567203][ T75] ? lockdep_hardirqs_on_prepare+0x43c/0x7a0 [ 100.573188][ T75] process_one_work+0x8a0/0x10e0 [ 100.578130][ T75] ? worker_detach_from_pool+0x290/0x290 [ 100.583759][ T75] ? _raw_spin_lock_irqsave+0x120/0x120 [ 100.589296][ T75] ? kthread_data+0x52/0xc0 [ 100.593796][ T75] ? wq_worker_running+0x9b/0x1a0 [ 100.598815][ T75] worker_thread+0xa63/0x1210 [ 100.603492][ T75] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 100.609382][ T75] ? _raw_spin_unlock+0x40/0x40 [ 100.614234][ T75] kthread+0x2b8/0x350 [ 100.618296][ T75] ? pr_cont_work+0x5e0/0x5e0 [ 100.622966][ T75] ? kthread_blkcg+0xd0/0xd0 [ 100.627549][ T75] ret_from_fork+0x1f/0x30 [ 100.631967][ T75] [ 100.635182][ T75] Kernel Offset: disabled [ 100.639573][ T75] Rebooting in 86400 seconds..