./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2175418779 <...> Warning: Permanently added '10.128.1.138' (ECDSA) to the list of known hosts. execve("./syz-executor2175418779", ["./syz-executor2175418779"], 0x7fffaa32ad70 /* 10 vars */) = 0 brk(NULL) = 0x55555735b000 brk(0x55555735bc40) = 0x55555735bc40 arch_prctl(ARCH_SET_FS, 0x55555735b300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 set_tid_address(0x55555735b5d0) = 292 set_robust_list(0x55555735b5e0, 24) = 0 rt_sigaction(SIGRTMIN, {sa_handler=0x7f341aed64b0, sa_mask=[], sa_flags=SA_RESTORER|SA_SIGINFO, sa_restorer=0x7f341aed6b80}, NULL, 8) = 0 rt_sigaction(SIGRT_1, {sa_handler=0x7f341aed6550, sa_mask=[], sa_flags=SA_RESTORER|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f341aed6b80}, NULL, 8) = 0 rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2175418779", 4096) = 28 brk(0x55555737cc40) = 0x55555737cc40 brk(0x55555737d000) = 0x55555737d000 mprotect(0x7f341af98000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555735b5d0) = 293 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555735b5d0) = 294 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555735b5d0) = 295 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555735b5d0) = 296 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555735b5d0) = 297 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555735b5d0) = 298 ./strace-static-x86_64: Process 297 attached [pid 297] set_robust_list(0x55555735b5e0, 24) = 0 [pid 297] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 297] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 297] close(3) = 0 [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555735b5d0) = 300 ./strace-static-x86_64: Process 296 attached [pid 296] set_robust_list(0x55555735b5e0, 24) = 0 [pid 296] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 296] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 296] close(3./strace-static-x86_64: Process 298 attached ) = 0 [pid 296] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 298] set_robust_list(0x55555735b5e0, 24 [pid 296] <... clone resumed>, child_tidptr=0x55555735b5d0) = 301 ./strace-static-x86_64: Process 300 attached [pid 300] set_robust_list(0x55555735b5e0, 24) = 0 [pid 300] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 300] setpgid(0, 0) = 0 [pid 300] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 300] write(3, "1000", 4) = 4 [pid 300] close(3) = 0 [pid 300] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 300] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f341aea5000 [pid 300] mprotect(0x7f341aea6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 300] clone(child_stack=0x7f341aec53f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[303], tls=0x7f341aec5700, child_tidptr=0x7f341aec59d0) = 303 [pid 300] futex(0x7f341af9e7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 300] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 303 attached [pid 298] <... set_robust_list resumed>) = 0 [pid 298] openat(AT_FDCWD, "/dev/loop5", O_RDWR./strace-static-x86_64: Process 301 attached [pid 303] set_robust_list(0x7f341aec59e0, 24 [pid 298] <... openat resumed>) = 3 [pid 298] ioctl(3, LOOP_CLR_FD [pid 303] <... set_robust_list resumed>) = 0 [pid 298] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 298] close(3) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 301] set_robust_list(0x55555735b5e0, 24) = 0 [pid 298] <... clone resumed>, child_tidptr=0x55555735b5d0) = 304 [pid 301] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 303] memfd_create("syzkaller", 0) = 3 [pid 301] <... prctl resumed>) = 0 [pid 301] setpgid(0, 0./strace-static-x86_64: Process 294 attached ./strace-static-x86_64: Process 295 attached ./strace-static-x86_64: Process 293 attached [pid 303] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 294] set_robust_list(0x55555735b5e0, 24 [pid 303] <... mmap resumed>) = 0x7f3412aa5000 [pid 293] set_robust_list(0x55555735b5e0, 24 [pid 301] <... setpgid resumed>) = 0 [pid 295] set_robust_list(0x55555735b5e0, 24 [pid 301] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 294] <... set_robust_list resumed>) = 0 [pid 293] <... set_robust_list resumed>) = 0 [pid 295] <... set_robust_list resumed>) = 0 [pid 294] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 293] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 295] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 301] <... openat resumed>) = 3 [pid 301] write(3, "1000", 4 [pid 293] <... openat resumed>) = 3 [pid 301] <... write resumed>) = 4 [pid 294] <... openat resumed>) = 3 [pid 301] close(3 [pid 295] <... openat resumed>) = 3 [pid 301] <... close resumed>) = 0 [pid 294] ioctl(3, LOOP_CLR_FD [pid 293] ioctl(3, LOOP_CLR_FD [pid 301] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 293] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 301] <... futex resumed>) = 0 [pid 293] close(3 [pid 295] ioctl(3, LOOP_CLR_FD [pid 294] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 301] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 293] <... close resumed>) = 0 [ 22.676788][ T28] audit: type=1400 audit(1684297639.602:66): avc: denied { execmem } for pid=292 comm="syz-executor217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 22.683404][ T28] audit: type=1400 audit(1684297639.602:67): avc: denied { read write } for pid=297 comm="syz-executor217" name="loop4" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 22.692120][ T28] audit: type=1400 audit(1684297639.602:68): avc: denied { open } for pid=297 comm="syz-executor217" path="/dev/loop4" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [pid 303] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 301] <... mmap resumed>) = 0x7f341aea5000 [pid 295] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 294] close(3 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 304 attached [pid 304] set_robust_list(0x55555735b5e0, 24) = 0 [pid 304] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 304] setpgid(0, 0) = 0 [pid 304] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 304] write(3, "1000", 4) = 4 [pid 304] close(3) = 0 [pid 304] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 304] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f341aea5000 [pid 304] mprotect(0x7f341aea6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 304] clone(child_stack=0x7f341aec53f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[306], tls=0x7f341aec5700, child_tidptr=0x7f341aec59d0) = 306 [pid 304] futex(0x7f341af9e7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 304] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 306 attached [pid 306] set_robust_list(0x7f341aec59e0, 24) = 0 [pid 306] memfd_create("syzkaller", 0) = 3 [pid 306] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3412aa5000 [pid 306] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 306] munmap(0x7f3412aa5000, 524288) = 0 [pid 306] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 306] ioctl(4, LOOP_SET_FD, 3 [pid 303] <... write resumed>) = 524288 [pid 301] mprotect(0x7f341aea6000, 131072, PROT_READ|PROT_WRITE [pid 295] close(3 [pid 294] <... close resumed>) = 0 [pid 303] munmap(0x7f3412aa5000, 524288 [pid 301] <... mprotect resumed>) = 0 [pid 295] <... close resumed>) = 0 [pid 294] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 293] <... clone resumed>, child_tidptr=0x55555735b5d0) = 307 [pid 303] <... munmap resumed>) = 0 [pid 301] clone(child_stack=0x7f341aec53f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 295] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 303] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 294] <... clone resumed>, child_tidptr=0x55555735b5d0) = 308 [pid 303] <... openat resumed>) = 4 [pid 301] <... clone resumed>, parent_tid=[310], tls=0x7f341aec5700, child_tidptr=0x7f341aec59d0) = 310 [pid 295] <... clone resumed>, child_tidptr=0x55555735b5d0) = 309 [pid 303] ioctl(4, LOOP_SET_FD, 3 [pid 301] futex(0x7f341af9e7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 301] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 303] <... ioctl resumed>) = 0 [pid 303] close(3) = 0 [pid 303] mkdir("./file0", 0777./strace-static-x86_64: Process 308 attached ./strace-static-x86_64: Process 309 attached ./strace-static-x86_64: Process 310 attached ./strace-static-x86_64: Process 307 attached [pid 310] set_robust_list(0x7f341aec59e0, 24 [pid 309] set_robust_list(0x55555735b5e0, 24 [pid 308] set_robust_list(0x55555735b5e0, 24 [pid 307] set_robust_list(0x55555735b5e0, 24 [pid 310] <... set_robust_list resumed>) = 0 [pid 309] <... set_robust_list resumed>) = 0 [pid 308] <... set_robust_list resumed>) = 0 [pid 307] <... set_robust_list resumed>) = 0 [pid 306] <... ioctl resumed>) = 0 [pid 310] memfd_create("syzkaller", 0 [pid 309] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 310] <... memfd_create resumed>) = 3 [pid 309] <... prctl resumed>) = 0 [pid 308] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 307] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 306] close(3 [pid 310] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 309] setpgid(0, 0 [pid 308] <... prctl resumed>) = 0 [pid 307] <... prctl resumed>) = 0 [pid 310] <... mmap resumed>) = 0x7f3412aa5000 [pid 309] <... setpgid resumed>) = 0 [pid 308] setpgid(0, 0 [pid 307] setpgid(0, 0 [pid 306] <... close resumed>) = 0 [pid 303] <... mkdir resumed>) = 0 [ 22.719069][ T28] audit: type=1400 audit(1684297639.602:69): avc: denied { ioctl } for pid=297 comm="syz-executor217" path="/dev/loop4" dev="devtmpfs" ino=117 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 22.741169][ T306] loop5: detected capacity change from 0 to 1024 [ 22.752309][ T303] loop4: detected capacity change from 0 to 1024 [pid 303] mount("/dev/loop4", "./file0", "ext4", MS_NOSUID|MS_SILENT|MS_STRICTATIME, "grpquota,debug_want_extra_isize=0x0000000000000082,nodiscard,nojournal_checksum,data=ordered,init_it"... [pid 310] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 309] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 308] <... setpgid resumed>) = 0 [pid 307] <... setpgid resumed>) = 0 [pid 306] mkdir("./file0", 0777 [pid 309] <... openat resumed>) = 3 [pid 308] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 309] write(3, "1000", 4 [pid 308] <... openat resumed>) = 3 [pid 307] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 309] <... write resumed>) = 4 [pid 308] write(3, "1000", 4 [pid 309] close(3 [pid 308] <... write resumed>) = 4 [pid 307] <... openat resumed>) = 3 [pid 309] <... close resumed>) = 0 [pid 308] close(3 [pid 309] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... close resumed>) = 0 [pid 307] write(3, "1000", 4 [pid 309] <... futex resumed>) = 0 [pid 308] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 308] <... futex resumed>) = 0 [pid 307] <... write resumed>) = 4 [pid 310] <... write resumed>) = 524288 [pid 309] <... mmap resumed>) = 0x7f341aea5000 [pid 308] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 309] mprotect(0x7f341aea6000, 131072, PROT_READ|PROT_WRITE [pid 308] <... mmap resumed>) = 0x7f341aea5000 [pid 307] close(3 [pid 309] <... mprotect resumed>) = 0 [pid 308] mprotect(0x7f341aea6000, 131072, PROT_READ|PROT_WRITE [pid 309] clone(child_stack=0x7f341aec53f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 308] <... mprotect resumed>) = 0 [pid 307] <... close resumed>) = 0 [pid 308] clone(child_stack=0x7f341aec53f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 309] <... clone resumed>, parent_tid=[311], tls=0x7f341aec5700, child_tidptr=0x7f341aec59d0) = 311 [pid 307] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] futex(0x7f341af9e7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... clone resumed>, parent_tid=[312], tls=0x7f341aec5700, child_tidptr=0x7f341aec59d0) = 312 [pid 309] <... futex resumed>) = 0 [pid 308] futex(0x7f341af9e7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] <... futex resumed>) = 0 [pid 309] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 308] <... futex resumed>) = 0 [pid 308] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 307] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f341aea5000 [pid 307] mprotect(0x7f341aea6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 307] clone(child_stack=0x7f341aec53f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[313], tls=0x7f341aec5700, child_tidptr=0x7f341aec59d0) = 313 [pid 307] futex(0x7f341af9e7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 307] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 306] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 306] mount("/dev/loop5", "./file0", "ext4", MS_NOSUID|MS_SILENT|MS_STRICTATIME, "grpquota,debug_want_extra_isize=0x0000000000000082,nodiscard,nojournal_checksum,data=ordered,init_it"... [pid 310] munmap(0x7f3412aa5000, 524288) = 0 [pid 310] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 310] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 313 attached ./strace-static-x86_64: Process 312 attached ./strace-static-x86_64: Process 311 attached [pid 312] set_robust_list(0x7f341aec59e0, 24 [pid 311] set_robust_list(0x7f341aec59e0, 24 [pid 312] <... set_robust_list resumed>) = 0 [pid 311] <... set_robust_list resumed>) = 0 [pid 312] memfd_create("syzkaller", 0 [pid 311] memfd_create("syzkaller", 0 [pid 312] <... memfd_create resumed>) = 3 [pid 311] <... memfd_create resumed>) = 3 [pid 313] set_robust_list(0x7f341aec59e0, 24 [pid 312] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 311] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 313] <... set_robust_list resumed>) = 0 [pid 312] <... mmap resumed>) = 0x7f3412aa5000 [pid 311] <... mmap resumed>) = 0x7f3412aa5000 [pid 313] memfd_create("syzkaller", 0 [pid 310] <... ioctl resumed>) = 0 [pid 313] <... memfd_create resumed>) = 3 [pid 313] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 310] close(3 [pid 313] <... mmap resumed>) = 0x7f3412aa5000 [pid 313] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 312] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 310] <... close resumed>) = 0 [pid 313] <... write resumed>) = 524288 [pid 311] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 313] munmap(0x7f3412aa5000, 524288 [pid 310] mkdir("./file0", 0777 [pid 313] <... munmap resumed>) = 0 [pid 313] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 310] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 313] <... openat resumed>) = 4 [pid 313] ioctl(4, LOOP_SET_FD, 3 [pid 310] mount("/dev/loop3", "./file0", "ext4", MS_NOSUID|MS_SILENT|MS_STRICTATIME, "grpquota,debug_want_extra_isize=0x0000000000000082,nodiscard,nojournal_checksum,data=ordered,init_it"... [pid 312] <... write resumed>) = 524288 [pid 311] <... write resumed>) = 524288 [pid 312] munmap(0x7f3412aa5000, 524288 [pid 311] munmap(0x7f3412aa5000, 524288 [pid 312] <... munmap resumed>) = 0 [pid 311] <... munmap resumed>) = 0 [pid 312] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 311] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 312] <... openat resumed>) = 4 [pid 311] <... openat resumed>) = 4 [ 22.765625][ T28] audit: type=1400 audit(1684297639.692:70): avc: denied { mounton } for pid=300 comm="syz-executor217" path="/root/file0" dev="sda1" ino=1927 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 22.774180][ T310] loop3: detected capacity change from 0 to 1024 [ 22.802121][ T313] loop0: detected capacity change from 0 to 1024 [ 22.809544][ T303] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 22.810693][ T312] loop1: detected capacity change from 0 to 1024 [pid 312] ioctl(4, LOOP_SET_FD, 3 [pid 311] ioctl(4, LOOP_SET_FD, 3 [pid 313] <... ioctl resumed>) = 0 [pid 312] <... ioctl resumed>) = 0 [pid 312] close(3) = 0 [pid 312] mkdir("./file0", 0777) = -1 EEXIST (File exists) [pid 312] mount("/dev/loop1", "./file0", "ext4", MS_NOSUID|MS_SILENT|MS_STRICTATIME, "grpquota,debug_want_extra_isize=0x0000000000000082,nodiscard,nojournal_checksum,data=ordered,init_it"... [pid 306] <... mount resumed>) = 0 [pid 306] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 306] chdir("./file0") = 0 [pid 306] ioctl(4, LOOP_CLR_FD) = 0 [pid 306] close(4) = 0 [pid 306] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 304] <... futex resumed>) = 0 [pid 304] futex(0x7f341af9e7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 304] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] <... futex resumed>) = 1 [ 22.819285][ T306] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 22.825144][ T28] audit: type=1400 audit(1684297639.752:71): avc: denied { mount } for pid=300 comm="syz-executor217" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 22.855290][ T311] loop2: detected capacity change from 0 to 1024 [ 22.857719][ T312] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [pid 306] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 313] close(3 [pid 311] <... ioctl resumed>) = 0 [pid 313] <... close resumed>) = 0 [pid 312] <... mount resumed>) = 0 [pid 311] close(3 [pid 306] <... open resumed>) = 4 [pid 303] <... mount resumed>) = 0 [pid 310] <... mount resumed>) = 0 [pid 310] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 310] chdir("./file0") = 0 [pid 310] ioctl(4, LOOP_CLR_FD) = 0 [pid 310] close(4) = 0 [pid 304] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 310] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 304] futex(0x7f341af9e7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... futex resumed>) = 1 [pid 304] <... futex resumed>) = 0 [pid 301] <... futex resumed>) = 0 [pid 310] futex(0x7f341af9e7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 304] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 301] futex(0x7f341af9e7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 304] <... mmap resumed>) = 0x7f3412b04000 [pid 301] <... futex resumed>) = 0 [pid 310] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 304] mprotect(0x7f3412b05000, 131072, PROT_READ|PROT_WRITE [pid 301] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] <... open resumed>) = 4 [pid 304] <... mprotect resumed>) = 0 [pid 310] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 304] clone(child_stack=0x7f3412b243f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 310] <... futex resumed>) = 1 [pid 301] <... futex resumed>) = 0 [pid 310] futex(0x7f341af9e7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 304] <... clone resumed>, parent_tid=[320], tls=0x7f3412b24700, child_tidptr=0x7f3412b249d0) = 320 [pid 301] futex(0x7f341af9e7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 304] futex(0x7f341af9e7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... futex resumed>) = 0 [pid 310] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 304] <... futex resumed>) = 0 [pid 301] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] <... open resumed>) = 5 [pid 304] futex(0x7f341af9e7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 301] <... futex resumed>) = 0 [pid 310] futex(0x7f341af9e7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 301] futex(0x7f341af9e7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 301] <... futex resumed>) = 0 [pid 310] ftruncate(5, 33587199 [pid 301] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] <... ftruncate resumed>) = 0 [pid 310] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 301] <... futex resumed>) = 0 [pid 310] futex(0x7f341af9e7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 301] futex(0x7f341af9e7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 301] <... futex resumed>) = 0 [pid 310] sendfile(4, 5, NULL, 281474978811909 [pid 301] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 313] mkdir("./file0", 0777 [pid 312] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 311] <... close resumed>) = 0 [pid 306] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 303] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY./strace-static-x86_64: Process 320 attached [pid 320] set_robust_list(0x7f3412b249e0, 24) = 0 [pid 320] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5 [pid 320] futex(0x7f341af9e7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 304] <... futex resumed>) = 0 [pid 304] futex(0x7f341af9e7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 304] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 320] <... futex resumed>) = 1 [pid 320] futex(0x7f341af9e7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 313] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 312] <... openat resumed>) = 3 [pid 311] mkdir("./file0", 0777 [pid 306] <... futex resumed>) = 1 [pid 303] <... openat resumed>) = 3 [pid 313] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID|MS_SILENT|MS_STRICTATIME, "grpquota,debug_want_extra_isize=0x0000000000000082,nodiscard,nojournal_checksum,data=ordered,init_it"... [pid 312] chdir("./file0" [pid 311] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 306] ftruncate(5, 33587199 [pid 303] chdir("./file0" [pid 312] <... chdir resumed>) = 0 [pid 311] mount("/dev/loop2", "./file0", "ext4", MS_NOSUID|MS_SILENT|MS_STRICTATIME, "grpquota,debug_want_extra_isize=0x0000000000000082,nodiscard,nojournal_checksum,data=ordered,init_it"... [pid 306] <... ftruncate resumed>) = 0 [pid 303] <... chdir resumed>) = 0 [pid 312] ioctl(4, LOOP_CLR_FD [pid 306] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 303] ioctl(4, LOOP_CLR_FD [pid 312] <... ioctl resumed>) = 0 [pid 306] <... futex resumed>) = 0 [pid 303] <... ioctl resumed>) = 0 [pid 312] close(4 [pid 306] futex(0x7f341af9e7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 303] close(4 [pid 312] <... close resumed>) = 0 [pid 303] <... close resumed>) = 0 [pid 312] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 303] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 312] <... futex resumed>) = 1 [pid 303] <... futex resumed>) = 1 [pid 312] futex(0x7f341af9e7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 303] futex(0x7f341af9e7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 304] <... futex resumed>) = 0 [ 22.862179][ T28] audit: type=1400 audit(1684297639.762:72): avc: denied { write } for pid=304 comm="syz-executor217" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 22.872718][ T310] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 22.893902][ T28] audit: type=1400 audit(1684297639.762:73): avc: denied { add_name } for pid=304 comm="syz-executor217" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [pid 304] futex(0x7f341af9e7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] <... futex resumed>) = 0 [pid 304] <... futex resumed>) = 1 [pid 306] sendfile(4, 5, NULL, 281474978811909 [pid 304] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] <... futex resumed>) = 0 [pid 308] <... futex resumed>) = 0 [pid 308] futex(0x7f341af9e7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] futex(0x7f341af9e7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 312] <... futex resumed>) = 0 [pid 308] <... futex resumed>) = 1 [pid 300] <... futex resumed>) = 1 [pid 312] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 308] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 312] <... open resumed>) = 4 [pid 312] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 303] <... futex resumed>) = 0 [pid 312] <... futex resumed>) = 1 [pid 308] <... futex resumed>) = 0 [pid 303] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 312] futex(0x7f341af9e7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 308] futex(0x7f341af9e7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 303] <... open resumed>) = 4 [pid 312] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 308] <... futex resumed>) = 0 [pid 303] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 303] futex(0x7f341af9e7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 306] <... sendfile resumed>) = 376832 [pid 306] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 304] <... futex resumed>) = 0 [pid 312] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 308] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 304] futex(0x7f341af9e7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... futex resumed>) = 0 [pid 312] <... open resumed>) = 5 [pid 300] futex(0x7f341af9e7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 312] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 304] <... futex resumed>) = 0 [pid 303] <... futex resumed>) = 0 [pid 312] <... futex resumed>) = 1 [pid 300] <... futex resumed>) = 1 [pid 308] <... futex resumed>) = 0 [pid 312] futex(0x7f341af9e7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 308] futex(0x7f341af9e7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 304] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 303] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 300] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 312] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 308] <... futex resumed>) = 0 [pid 303] <... open resumed>) = 5 [pid 312] ftruncate(5, 33587199 [pid 308] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 303] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 312] <... ftruncate resumed>) = 0 [pid 303] <... futex resumed>) = 1 [pid 300] <... futex resumed>) = 0 [pid 312] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 303] futex(0x7f341af9e7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 300] futex(0x7f341af9e7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 312] <... futex resumed>) = 1 [pid 308] <... futex resumed>) = 0 [pid 303] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 301] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 300] <... futex resumed>) = 0 [pid 312] futex(0x7f341af9e7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 308] futex(0x7f341af9e7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 303] ftruncate(5, 33587199 [pid 301] futex(0x7f341af9e7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 312] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 308] <... futex resumed>) = 0 [pid 303] <... ftruncate resumed>) = 0 [pid 301] <... futex resumed>) = 0 [pid 312] sendfile(4, 5, NULL, 281474978811909 [pid 308] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 22.922739][ T28] audit: type=1400 audit(1684297639.762:74): avc: denied { create } for pid=304 comm="syz-executor217" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 22.950233][ T311] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [pid 303] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 312] <... sendfile resumed>) = 376832 [pid 310] <... sendfile resumed>) = 376832 [pid 303] <... futex resumed>) = 1 [pid 301] <... mmap resumed>) = 0x7f3412b04000 [pid 300] <... futex resumed>) = 0 [pid 303] futex(0x7f341af9e7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 306] <... futex resumed>) = 1 [pid 306] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL) = 0 [pid 306] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 304] <... futex resumed>) = 0 [pid 304] futex(0x7f341af9e7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 304] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] <... futex resumed>) = 1 [pid 306] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 306] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 304] <... futex resumed>) = 0 [pid 304] futex(0x7f341af9e7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 304] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] <... futex resumed>) = 1 [pid 311] <... mount resumed>) = 0 [pid 306] writev(6, [{iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base="\xd3\x25\xd5\x12\x13\x6e\xfa\xc1\x9c\x33\x47\x09\xcf\x13\xf9\xa9\xac\x3d\x2d\x36\x20\x64\x0a\x56\xdf\x58\xa5\x62\xea\x3d\x18\x2f\xfa\x18\xdc\x34\x7b\xdd\x8f\xcb\x18\xbb\x6f\x22\x3b\x6f\xe0\xc6\x40\xbf\x1b\xd8\xa3\x55\xb0\x41\xab\xa3\x3b\x90\x0c\x45\x25\xff\x33\xe2\x0e\x34\x9f\xd2\xba\x0b\x3e\x61\x10\xfe\x0e\x4e\x57\x8b\x0b\x20\x65\xd2\x91\x95\x3e\x5c\x09\x2a\x9f\x20\x6e\x04\xe8\xe8\x2b\x1a\xc7\x1b"..., iov_len=1429}], 5 [pid 311] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 306] <... writev resumed>) = 1429 [pid 311] <... openat resumed>) = 3 [pid 306] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 311] chdir("./file0" [pid 306] <... futex resumed>) = 1 [pid 304] <... futex resumed>) = 0 [pid 311] <... chdir resumed>) = 0 [pid 306] futex(0x7f341af9e7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 304] exit_group(0 [pid 320] <... futex resumed>) = ? [pid 311] ioctl(4, LOOP_CLR_FD [pid 306] <... futex resumed>) = ? [pid 304] <... exit_group resumed>) = ? [pid 320] +++ exited with 0 +++ [pid 311] <... ioctl resumed>) = 0 [pid 306] +++ exited with 0 +++ [pid 304] +++ exited with 0 +++ [pid 311] close(4 [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=304, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 311] <... close resumed>) = 0 [pid 298] restart_syscall(<... resuming interrupted clone ...> [pid 311] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... restart_syscall resumed>) = 0 [pid 312] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 311] <... futex resumed>) = 1 [pid 310] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] mprotect(0x7f3412b05000, 131072, PROT_READ|PROT_WRITE [pid 300] futex(0x7f341af9e7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 313] <... mount resumed>) = 0 [pid 312] <... futex resumed>) = 1 [pid 311] futex(0x7f341af9e7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 310] <... futex resumed>) = 0 [pid 309] <... futex resumed>) = 0 [pid 308] <... futex resumed>) = 0 [pid 303] <... futex resumed>) = 0 [pid 301] <... mprotect resumed>) = 0 [pid 300] <... futex resumed>) = 1 [pid 313] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 312] futex(0x7f341af9e7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 310] futex(0x7f341af9e7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 309] futex(0x7f341af9e7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] futex(0x7f341af9e7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 303] sendfile(4, 5, NULL, 281474978811909 [pid 301] clone(child_stack=0x7f3412b243f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 300] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 313] <... openat resumed>) = 3 [pid 312] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 309] <... futex resumed>) = 0 [pid 308] <... futex resumed>) = 0 [pid 313] chdir("./file0" [pid 312] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 309] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 308] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 301] <... clone resumed>, parent_tid=[323], tls=0x7f3412b24700, child_tidptr=0x7f3412b249d0) = 323 [pid 298] <... openat resumed>) = 3 [pid 313] <... chdir resumed>) = 0 [pid 312] <... mount resumed>) = 0 [pid 301] futex(0x7f341af9e7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 313] ioctl(4, LOOP_CLR_FD [pid 312] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... futex resumed>) = 0 [pid 298] ioctl(3, LOOP_CLR_FD [pid 313] <... ioctl resumed>) = 0 [pid 312] <... futex resumed>) = 1 [pid 308] <... futex resumed>) = 0 [pid 301] futex(0x7f341af9e7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 313] close(4 [pid 312] futex(0x7f341af9e7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 308] futex(0x7f341af9e7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 312] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 308] <... futex resumed>) = 0 [pid 298] <... ioctl resumed>) = 0 [pid 312] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 308] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 312] <... open resumed>) = 6 [pid 312] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 308] <... futex resumed>) = 0 [pid 312] futex(0x7f341af9e7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 308] futex(0x7f341af9e7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] close(3 [pid 312] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 308] <... futex resumed>) = 0 [pid 312] writev(6, [{iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base="\xd3\x25\xd5\x12\x13\x6e\xfa\xc1\x9c\x33\x47\x09\xcf\x13\xf9\xa9\xac\x3d\x2d\x36\x20\x64\x0a\x56\xdf\x58\xa5\x62\xea\x3d\x18\x2f\xfa\x18\xdc\x34\x7b\xdd\x8f\xcb\x18\xbb\x6f\x22\x3b\x6f\xe0\xc6\x40\xbf\x1b\xd8\xa3\x55\xb0\x41\xab\xa3\x3b\x90\x0c\x45\x25\xff\x33\xe2\x0e\x34\x9f\xd2\xba\x0b\x3e\x61\x10\xfe\x0e\x4e\x57\x8b\x0b\x20\x65\xd2\x91\x95\x3e\x5c\x09\x2a\x9f\x20\x6e\x04\xe8\xe8\x2b\x1a\xc7\x1b"..., iov_len=1429}], 5 [pid 308] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] <... close resumed>) = 0 [pid 312] <... writev resumed>) = 1429 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 312] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 311] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) ./strace-static-x86_64: Process 324 attached ./strace-static-x86_64: Process 323 attached [pid 313] <... close resumed>) = 0 [pid 312] <... futex resumed>) = 1 [pid 308] <... futex resumed>) = 0 [pid 303] <... sendfile resumed>) = 376832 [pid 311] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 303] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... clone resumed>, child_tidptr=0x55555735b5d0) = 324 [pid 312] futex(0x7f341af9e7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 308] exit_group(0 [pid 303] <... futex resumed>) = 1 [pid 300] <... futex resumed>) = 0 [pid 312] <... futex resumed>) = ? [pid 308] <... exit_group resumed>) = ? [pid 303] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 300] futex(0x7f341af9e7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 324] set_robust_list(0x55555735b5e0, 24 [pid 312] +++ exited with 0 +++ [pid 311] <... open resumed>) = 4 [pid 308] +++ exited with 0 +++ [pid 303] <... mount resumed>) = 0 [pid 300] <... futex resumed>) = 0 [pid 303] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 294] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=308, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 311] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 324] <... set_robust_list resumed>) = 0 [pid 311] <... futex resumed>) = 1 [pid 303] <... futex resumed>) = 0 [pid 303] futex(0x7f341af9e7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 311] futex(0x7f341af9e7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 294] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 324] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 309] <... futex resumed>) = 0 [pid 300] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 294] <... openat resumed>) = 3 [pid 324] setpgid(0, 0 [pid 309] futex(0x7f341af9e7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 294] ioctl(3, LOOP_CLR_FD [pid 324] <... setpgid resumed>) = 0 [pid 311] <... futex resumed>) = 0 [pid 309] <... futex resumed>) = 1 [pid 300] futex(0x7f341af9e7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 294] <... ioctl resumed>) = 0 [pid 324] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 311] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 309] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 303] <... futex resumed>) = 0 [pid 300] <... futex resumed>) = 1 [pid 324] <... openat resumed>) = 3 [pid 313] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 311] <... open resumed>) = 5 [pid 303] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 300] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 294] close(3 [pid 324] write(3, "1000", 4 [pid 313] <... futex resumed>) = 1 [pid 311] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] <... futex resumed>) = 0 [pid 303] <... open resumed>) = 6 [pid 294] <... close resumed>) = 0 [pid 324] <... write resumed>) = 4 [pid 313] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 311] <... futex resumed>) = 1 [pid 309] <... futex resumed>) = 0 [pid 307] futex(0x7f341af9e7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 303] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 324] close(3 [pid 311] futex(0x7f341af9e7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 309] futex(0x7f341af9e7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] <... futex resumed>) = 0 [pid 303] <... futex resumed>) = 1 [pid 300] <... futex resumed>) = 0 [pid 294] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 324] <... close resumed>) = 0 [pid 323] set_robust_list(0x7f3412b249e0, 24 [pid 311] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 309] <... futex resumed>) = 0 [pid 307] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 303] writev(6, [{iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base="\xd3\x25\xd5\x12\x13\x6e\xfa\xc1\x9c\x33\x47\x09\xcf\x13\xf9\xa9\xac\x3d\x2d\x36\x20\x64\x0a\x56\xdf\x58\xa5\x62\xea\x3d\x18\x2f\xfa\x18\xdc\x34\x7b\xdd\x8f\xcb\x18\xbb\x6f\x22\x3b\x6f\xe0\xc6\x40\xbf\x1b\xd8\xa3\x55\xb0\x41\xab\xa3\x3b\x90\x0c\x45\x25\xff\x33\xe2\x0e\x34\x9f\xd2\xba\x0b\x3e\x61\x10\xfe\x0e\x4e\x57\x8b\x0b\x20\x65\xd2\x91\x95\x3e\x5c\x09\x2a\x9f\x20\x6e\x04\xe8\xe8\x2b\x1a\xc7\x1b"..., iov_len=1429}], 5 [pid 300] futex(0x7f341af9e7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 323] <... set_robust_list resumed>) = 0 [pid 309] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] <... futex resumed>) = 0 [pid 323] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 300] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 323] <... mount resumed>) = 0 [pid 324] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 323] futex(0x7f341af9e7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 311] ftruncate(5, 33587199 [pid 303] <... writev resumed>) = 1429 [pid 294] <... clone resumed>, child_tidptr=0x55555735b5d0) = 325 [pid 324] <... futex resumed>) = 0 [pid 323] <... futex resumed>) = 1 [pid 311] <... ftruncate resumed>) = 0 [pid 303] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... futex resumed>) = 0 [pid 324] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 323] futex(0x7f341af9e7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 311] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 303] <... futex resumed>) = 1 [pid 301] futex(0x7f341af9e7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... futex resumed>) = 0 [pid 324] <... mmap resumed>) = 0x7f341aea5000 [pid 313] <... open resumed>) = 4 [pid 311] <... futex resumed>) = 1 [pid 310] <... futex resumed>) = 0 [pid 309] <... futex resumed>) = 0 [pid 303] futex(0x7f341af9e7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 301] <... futex resumed>) = 1 [pid 300] exit_group(0 [pid 324] mprotect(0x7f341aea6000, 131072, PROT_READ|PROT_WRITE [pid 313] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 311] futex(0x7f341af9e7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 310] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 309] futex(0x7f341af9e7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 303] <... futex resumed>) = ? [pid 301] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 325 attached [pid 324] <... mprotect resumed>) = 0 [pid 313] <... futex resumed>) = 1 [pid 311] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 310] <... open resumed>) = 6 [pid 309] <... futex resumed>) = 0 [pid 307] <... futex resumed>) = 0 [pid 303] +++ exited with 0 +++ [pid 300] +++ exited with 0 +++ [pid 324] clone(child_stack=0x7f341aec53f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 313] futex(0x7f341af9e7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 311] sendfile(4, 5, NULL, 281474978811909 [pid 310] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] <... futex resumed>) = 1 [pid 307] futex(0x7f341af9e7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... futex resumed>) = 0 [pid 297] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=300, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 310] futex(0x7f341af9e7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 301] futex(0x7f341af9e7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 301] <... futex resumed>) = 0 [pid 310] writev(6, [{iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base="\xd3\x25\xd5\x12\x13\x6e\xfa\xc1\x9c\x33\x47\x09\xcf\x13\xf9\xa9\xac\x3d\x2d\x36\x20\x64\x0a\x56\xdf\x58\xa5\x62\xea\x3d\x18\x2f\xfa\x18\xdc\x34\x7b\xdd\x8f\xcb\x18\xbb\x6f\x22\x3b\x6f\xe0\xc6\x40\xbf\x1b\xd8\xa3\x55\xb0\x41\xab\xa3\x3b\x90\x0c\x45\x25\xff\x33\xe2\x0e\x34\x9f\xd2\xba\x0b\x3e\x61\x10\xfe\x0e\x4e\x57\x8b\x0b\x20\x65\xd2\x91\x95\x3e\x5c\x09\x2a\x9f\x20\x6e\x04\xe8\xe8\x2b\x1a\xc7\x1b"..., iov_len=1429}], 5 [pid 301] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 326 attached [pid 325] set_robust_list(0x55555735b5e0, 24 [pid 313] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 310] <... writev resumed>) = 1429 [pid 307] <... futex resumed>) = 0 [pid 325] <... set_robust_list resumed>) = 0 [pid 324] <... clone resumed>, parent_tid=[326], tls=0x7f341aec5700, child_tidptr=0x7f341aec59d0) = 326 [pid 313] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 310] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 325] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 324] futex(0x7f341af9e7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 313] <... open resumed>) = 5 [pid 307] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] <... futex resumed>) = 1 [pid 301] <... futex resumed>) = 0 [pid 325] <... prctl resumed>) = 0 [pid 324] <... futex resumed>) = 0 [pid 313] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] futex(0x7f341af9e7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 307] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 301] exit_group(0 [pid 325] setpgid(0, 0 [pid 324] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 313] <... futex resumed>) = 0 [pid 307] futex(0x7f341af9e7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 326] set_robust_list(0x7f341aec59e0, 24 [pid 325] <... setpgid resumed>) = 0 [pid 323] <... futex resumed>) = ? [pid 313] ftruncate(5, 33587199 [pid 310] <... futex resumed>) = ? [pid 307] <... futex resumed>) = 0 [pid 301] <... exit_group resumed>) = ? [pid 297] <... openat resumed>) = 3 [pid 326] <... set_robust_list resumed>) = 0 [pid 325] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 323] +++ exited with 0 +++ [pid 326] memfd_create("syzkaller", 0 [pid 325] <... openat resumed>) = 3 [pid 310] +++ exited with 0 +++ [pid 307] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 326] <... memfd_create resumed>) = 3 [pid 325] write(3, "1000", 4 [pid 301] +++ exited with 0 +++ [pid 326] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 325] <... write resumed>) = 4 [pid 313] <... ftruncate resumed>) = 0 [pid 297] ioctl(3, LOOP_CLR_FD [pid 326] <... mmap resumed>) = 0x7f3412aa5000 [pid 325] close(3 [pid 313] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 326] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 325] <... close resumed>) = 0 [ 22.975408][ T313] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 22.984568][ T28] audit: type=1400 audit(1684297639.822:75): avc: denied { read write open } for pid=304 comm="syz-executor217" path="/root/file0/bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [pid 313] <... futex resumed>) = 1 [pid 297] <... ioctl resumed>) = 0 [pid 307] <... futex resumed>) = 0 [pid 296] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=301, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 325] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 313] futex(0x7f341af9e7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 307] futex(0x7f341af9e7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] close(3 [pid 296] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 325] <... futex resumed>) = 0 [pid 313] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 307] <... futex resumed>) = 0 [pid 297] <... close resumed>) = 0 [pid 325] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 313] sendfile(4, 5, NULL, 281474978811909 [pid 307] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 296] <... openat resumed>) = 3 [pid 325] <... mmap resumed>) = 0x7f341aea5000 [pid 325] mprotect(0x7f341aea6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 325] clone(child_stack=0x7f341aec53f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 296] ioctl(3, LOOP_CLR_FD [pid 325] <... clone resumed>, parent_tid=[327], tls=0x7f341aec5700, child_tidptr=0x7f341aec59d0) = 327 [pid 325] futex(0x7f341af9e7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 326] <... write resumed>) = 524288 [pid 325] <... futex resumed>) = 0 [pid 297] <... clone resumed>, child_tidptr=0x55555735b5d0) = 328 [pid 296] <... ioctl resumed>) = 0 [pid 325] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 296] close(3) = 0 [pid 296] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 326] munmap(0x7f3412aa5000, 524288) = 0 [pid 296] <... clone resumed>, child_tidptr=0x55555735b5d0) = 329 [pid 326] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 326] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 326] ioctl(4, LOOP_CLR_FD) = 0 ./strace-static-x86_64: Process 329 attached [pid 329] set_robust_list(0x55555735b5e0, 24) = 0 [pid 329] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 326] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 326] close(4) = 0 [pid 326] close(3) = 0 [pid 326] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 329] setpgid(0, 0 [pid 326] <... futex resumed>) = 1 [pid 324] <... futex resumed>) = 0 [pid 324] futex(0x7f341af9e7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 324] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 326] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000./strace-static-x86_64: Process 328 attached [pid 329] <... setpgid resumed>) = 0 [pid 326] <... open resumed>) = 3 [pid 326] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 329] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 326] <... futex resumed>) = 1 [pid 324] <... futex resumed>) = 0 [pid 328] set_robust_list(0x55555735b5e0, 24 [pid 326] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 324] futex(0x7f341af9e7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 329] <... openat resumed>) = 3 [pid 328] <... set_robust_list resumed>) = 0 [pid 326] <... open resumed>) = 4 [pid 324] <... futex resumed>) = 0 [pid 329] write(3, "1000", 4 [pid 326] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 324] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 329] <... write resumed>) = 4 [pid 328] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 324] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 329] close(3 [pid 328] <... prctl resumed>) = 0 [pid 326] <... futex resumed>) = 0 [pid 324] futex(0x7f341af9e7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 329] <... close resumed>) = 0 [pid 328] setpgid(0, 0 [pid 326] ftruncate(4, 33587199 [pid 324] <... futex resumed>) = 0 [pid 324] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 327 attached [pid 329] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 328] <... setpgid resumed>) = 0 [pid 326] <... ftruncate resumed>) = 0 [pid 326] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 329] <... futex resumed>) = 0 [pid 329] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 328] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 327] set_robust_list(0x7f341aec59e0, 24 [pid 326] <... futex resumed>) = 1 [pid 324] <... futex resumed>) = 0 [pid 326] futex(0x7f341af9e7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 324] futex(0x7f341af9e7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 329] <... mmap resumed>) = 0x7f341aea5000 [pid 326] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 324] <... futex resumed>) = 0 [pid 326] sendfile(3, 4, NULL, 281474978811909 [pid 324] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 309] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 309] futex(0x7f341af9e7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 329] mprotect(0x7f341aea6000, 131072, PROT_READ|PROT_WRITE [pid 309] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3412b04000 [pid 329] <... mprotect resumed>) = 0 [pid 328] <... openat resumed>) = 3 [pid 327] <... set_robust_list resumed>) = 0 [pid 309] mprotect(0x7f3412b05000, 131072, PROT_READ|PROT_WRITE [pid 329] clone(child_stack=0x7f341aec53f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 328] write(3, "1000", 4 [pid 327] memfd_create("syzkaller", 0 [pid 309] <... mprotect resumed>) = 0 [pid 309] clone(child_stack=0x7f3412b243f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[330], tls=0x7f3412b24700, child_tidptr=0x7f3412b249d0) = 330 [pid 309] futex(0x7f341af9e7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 309] futex(0x7f341af9e7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 329] <... clone resumed>, parent_tid=[331], tls=0x7f341aec5700, child_tidptr=0x7f341aec59d0) = 331 [pid 328] <... write resumed>) = 4 [pid 327] <... memfd_create resumed>) = 3 [pid 329] futex(0x7f341af9e7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 328] close(3 [pid 329] <... futex resumed>) = 0 [pid 329] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 328] <... close resumed>) = 0 [pid 327] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 328] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 327] <... mmap resumed>) = 0x7f3412aa5000 [pid 328] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f341aea5000 [pid 328] mprotect(0x7f341aea6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 328] clone(child_stack=0x7f341aec53f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 330 attached [pid 330] set_robust_list(0x7f3412b249e0, 24) = 0 [pid 330] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 328] <... clone resumed>, parent_tid=[333], tls=0x7f341aec5700, child_tidptr=0x7f341aec59d0) = 333 [pid 328] futex(0x7f341af9e7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 328] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 330] <... mount resumed>) = 0 [pid 330] futex(0x7f341af9e7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... futex resumed>) = 0 [pid 309] futex(0x7f341af9e7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 309] futex(0x7f341af9e7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 330] <... futex resumed>) = 1 [pid 330] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 311] <... sendfile resumed>) = 376832 [pid 330] futex(0x7f341af9e7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... futex resumed>) = 0 [pid 309] futex(0x7f341af9e7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 311] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 309] <... futex resumed>) = 0 [pid 309] futex(0x7f341af9e7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 331 attached [pid 311] futex(0x7f341af9e7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 331] set_robust_list(0x7f341aec59e0, 24 [pid 330] <... futex resumed>) = 1 [pid 330] writev(6, [{iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base="\xd3\x25\xd5\x12\x13\x6e\xfa\xc1\x9c\x33\x47\x09\xcf\x13\xf9\xa9\xac\x3d\x2d\x36\x20\x64\x0a\x56\xdf\x58\xa5\x62\xea\x3d\x18\x2f\xfa\x18\xdc\x34\x7b\xdd\x8f\xcb\x18\xbb\x6f\x22\x3b\x6f\xe0\xc6\x40\xbf\x1b\xd8\xa3\x55\xb0\x41\xab\xa3\x3b\x90\x0c\x45\x25\xff\x33\xe2\x0e\x34\x9f\xd2\xba\x0b\x3e\x61\x10\xfe\x0e\x4e\x57\x8b\x0b\x20\x65\xd2\x91\x95\x3e\x5c\x09\x2a\x9f\x20\x6e\x04\xe8\xe8\x2b\x1a\xc7\x1b"..., iov_len=1429}], 5 [pid 331] <... set_robust_list resumed>) = 0 [pid 331] memfd_create("syzkaller", 0 [pid 327] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 331] <... memfd_create resumed>) = 3 [pid 331] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 330] <... writev resumed>) = 1429 [pid 331] <... mmap resumed>) = 0x7f3412aa5000 [pid 330] futex(0x7f341af9e7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... futex resumed>) = 0 [pid 309] exit_group(0 [pid 311] <... futex resumed>) = ? [pid 309] <... exit_group resumed>) = ? [pid 311] +++ exited with 0 +++ [pid 330] <... futex resumed>) = ? [pid 307] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 307] futex(0x7f341af9e7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 307] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 333 attached ) = 0x7f3412b04000 [pid 307] mprotect(0x7f3412b05000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 307] clone(child_stack=0x7f3412b243f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[334], tls=0x7f3412b24700, child_tidptr=0x7f3412b249d0) = 334 [pid 307] futex(0x7f341af9e7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 333] set_robust_list(0x7f341aec59e0, 24 [pid 327] <... write resumed>) = 524288 [pid 307] <... futex resumed>) = 0 ./strace-static-x86_64: Process 334 attached [pid 333] <... set_robust_list resumed>) = 0 [pid 331] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 334] set_robust_list(0x7f3412b249e0, 24 [pid 333] memfd_create("syzkaller", 0 [pid 327] munmap(0x7f3412aa5000, 524288 [pid 307] futex(0x7f341af9e7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 333] <... memfd_create resumed>) = 3 [pid 330] +++ exited with 0 +++ [pid 309] +++ exited with 0 +++ [pid 333] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 334] <... set_robust_list resumed>) = 0 [pid 333] <... mmap resumed>) = 0x7f3412aa5000 [pid 327] <... munmap resumed>) = 0 [pid 295] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=309, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 295] restart_syscall(<... resuming interrupted clone ...> [pid 331] <... write resumed>) = 524288 [pid 331] munmap(0x7f3412aa5000, 524288) = 0 [pid 295] <... restart_syscall resumed>) = 0 [pid 295] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 295] ioctl(3, LOOP_CLR_FD) = 0 [pid 295] close(3 [pid 333] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 327] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 295] <... close resumed>) = 0 [pid 334] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 295] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 327] <... openat resumed>) = 4 [pid 331] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 331] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 331] ioctl(4, LOOP_CLR_FD) = 0 [pid 295] <... clone resumed>, child_tidptr=0x55555735b5d0) = 335 [pid 327] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 334] <... mount resumed>) = 0 [pid 327] ioctl(4, LOOP_CLR_FD [pid 334] futex(0x7f341af9e7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 327] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 335 attached [pid 334] <... futex resumed>) = 1 [pid 307] <... futex resumed>) = 0 [pid 334] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 307] futex(0x7f341af9e7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 334] <... open resumed>) = 6 [pid 307] futex(0x7f341af9e7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 334] futex(0x7f341af9e7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 331] ioctl(4, LOOP_SET_FD, 3 [pid 307] <... futex resumed>) = 0 [pid 307] futex(0x7f341af9e7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 334] writev(6, [{iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base="\xd3\x25\xd5\x12\x13\x6e\xfa\xc1\x9c\x33\x47\x09\xcf\x13\xf9\xa9\xac\x3d\x2d\x36\x20\x64\x0a\x56\xdf\x58\xa5\x62\xea\x3d\x18\x2f\xfa\x18\xdc\x34\x7b\xdd\x8f\xcb\x18\xbb\x6f\x22\x3b\x6f\xe0\xc6\x40\xbf\x1b\xd8\xa3\x55\xb0\x41\xab\xa3\x3b\x90\x0c\x45\x25\xff\x33\xe2\x0e\x34\x9f\xd2\xba\x0b\x3e\x61\x10\xfe\x0e\x4e\x57\x8b\x0b\x20\x65\xd2\x91\x95\x3e\x5c\x09\x2a\x9f\x20\x6e\x04\xe8\xe8\x2b\x1a\xc7\x1b"..., iov_len=1429}], 5 [pid 331] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 307] <... futex resumed>) = 0 [pid 307] futex(0x7f341af9e7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 335] set_robust_list(0x55555735b5e0, 24 [pid 334] <... writev resumed>) = 1429 [pid 331] close(4 [pid 327] ioctl(4, LOOP_SET_FD, 3 [pid 324] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 324] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 327] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 334] futex(0x7f341af9e7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 324] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 327] close(4 [pid 334] <... futex resumed>) = 1 [pid 324] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 307] <... futex resumed>) = 0 [pid 335] <... set_robust_list resumed>) = 0 [pid 334] futex(0x7f341af9e7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 331] <... close resumed>) = 0 [pid 327] <... close resumed>) = 0 [pid 324] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 335] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 331] close(3 [pid 335] <... prctl resumed>) = 0 [pid 331] <... close resumed>) = 0 [pid 335] setpgid(0, 0 [pid 331] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 335] <... setpgid resumed>) = 0 [pid 331] <... futex resumed>) = 1 [pid 335] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 331] futex(0x7f341af9e7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 335] <... openat resumed>) = 3 [pid 335] write(3, "1000", 4) = 4 [pid 335] close(3) = 0 [pid 335] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 335] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f341aea5000 [pid 335] mprotect(0x7f341aea6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 335] clone(child_stack=0x7f341aec53f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[336], tls=0x7f341aec5700, child_tidptr=0x7f341aec59d0) = 336 [pid 335] futex(0x7f341af9e7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 335] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 329] <... futex resumed>) = 0 [pid 327] close(3 [pid 324] futex(0x7f341af9e7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 329] futex(0x7f341af9e7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 324] <... futex resumed>) = 0 [pid 331] <... futex resumed>) = 0 [pid 329] <... futex resumed>) = 1 [pid 324] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 331] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 329] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 324] <... mmap resumed>) = 0x7f3412b04000 [pid 331] <... open resumed>) = 3 [pid 331] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 324] mprotect(0x7f3412b05000, 131072, PROT_READ|PROT_WRITE [pid 331] <... futex resumed>) = 1 [pid 329] <... futex resumed>) = 0 [pid 324] <... mprotect resumed>) = 0 [pid 331] futex(0x7f341af9e7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 329] futex(0x7f341af9e7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 327] <... close resumed>) = 0 [pid 324] clone(child_stack=0x7f3412b243f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 331] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 329] <... futex resumed>) = 0 [pid 327] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 331] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 329] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 327] <... futex resumed>) = 1 [pid 325] <... futex resumed>) = 0 [pid 324] <... clone resumed>, parent_tid=[337], tls=0x7f3412b24700, child_tidptr=0x7f3412b249d0) = 337 [pid 331] <... open resumed>) = 4 [pid 327] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 325] futex(0x7f341af9e7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 324] futex(0x7f341af9e7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 331] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 325] <... futex resumed>) = 0 [pid 324] <... futex resumed>) = 0 ./strace-static-x86_64: Process 337 attached ./strace-static-x86_64: Process 336 attached [pid 333] <... write resumed>) = 524288 [pid 331] <... futex resumed>) = 1 [pid 329] <... futex resumed>) = 0 [pid 327] <... open resumed>) = 3 [pid 325] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 324] futex(0x7f341af9e7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 331] futex(0x7f341af9e7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 337] set_robust_list(0x7f3412b249e0, 24) = 0 [pid 337] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL) = 0 [pid 337] futex(0x7f341af9e7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 337] futex(0x7f341af9e7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 336] set_robust_list(0x7f341aec59e0, 24) = 0 [pid 336] memfd_create("syzkaller", 0) = 3 [pid 336] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3412aa5000 [pid 336] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 333] munmap(0x7f3412aa5000, 524288 [pid 329] futex(0x7f341af9e7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 327] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 333] <... munmap resumed>) = 0 [pid 331] <... futex resumed>) = 0 [pid 329] <... futex resumed>) = 1 [pid 333] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 327] <... futex resumed>) = 1 [pid 325] <... futex resumed>) = 0 [pid 324] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 336] <... write resumed>) = 524288 [pid 333] <... openat resumed>) = 4 [pid 331] ftruncate(4, 33587199 [pid 329] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 327] futex(0x7f341af9e7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 325] futex(0x7f341af9e7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 324] futex(0x7f341af9e7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 336] munmap(0x7f3412aa5000, 524288 [pid 333] ioctl(4, LOOP_SET_FD, 3 [pid 327] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 325] <... futex resumed>) = 0 [pid 324] <... futex resumed>) = 1 [pid 336] <... munmap resumed>) = 0 [pid 333] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 327] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 325] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 324] futex(0x7f341af9e7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 336] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 333] ioctl(4, LOOP_CLR_FD [pid 327] <... open resumed>) = 4 [pid 336] <... openat resumed>) = 4 [pid 333] <... ioctl resumed>) = 0 [pid 327] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 336] ioctl(4, LOOP_SET_FD, 3 [pid 327] <... futex resumed>) = 1 [pid 325] <... futex resumed>) = 0 [pid 336] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 327] futex(0x7f341af9e7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 325] futex(0x7f341af9e7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 336] ioctl(4, LOOP_CLR_FD [pid 327] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 325] <... futex resumed>) = 0 [pid 336] <... ioctl resumed>) = 0 [pid 327] ftruncate(4, 33587199 [pid 325] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 327] <... ftruncate resumed>) = -1 EINVAL (Invalid argument) [pid 327] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 325] <... futex resumed>) = 0 [pid 327] futex(0x7f341af9e7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 325] futex(0x7f341af9e7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 327] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 325] <... futex resumed>) = 0 [pid 327] sendfile(3, 4, NULL, 281474978811909 [pid 325] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 336] ioctl(4, LOOP_SET_FD, 3 [pid 333] ioctl(4, LOOP_SET_FD, 3 [pid 336] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 333] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 336] close(4 [pid 333] close(4 [pid 336] <... close resumed>) = 0 [pid 333] <... close resumed>) = 0 [pid 336] close(3 [pid 333] close(3 [pid 336] <... close resumed>) = 0 [pid 333] <... close resumed>) = 0 [pid 336] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 333] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 336] <... futex resumed>) = 1 [pid 333] <... futex resumed>) = 1 [pid 328] <... futex resumed>) = 0 [pid 336] futex(0x7f341af9e7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 333] futex(0x7f341af9e7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 328] futex(0x7f341af9e7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 333] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 328] <... futex resumed>) = 0 [pid 333] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 328] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 333] <... open resumed>) = 3 [pid 333] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 328] <... futex resumed>) = 0 [pid 333] futex(0x7f341af9e7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 328] futex(0x7f341af9e7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 333] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 328] <... futex resumed>) = 0 [pid 333] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 328] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 333] <... open resumed>) = 4 [pid 333] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 328] <... futex resumed>) = 0 [pid 333] futex(0x7f341af9e7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 328] futex(0x7f341af9e7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 333] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 328] <... futex resumed>) = 0 [pid 333] ftruncate(4, 33587199 [pid 328] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 333] <... ftruncate resumed>) = -1 EINVAL (Invalid argument) [pid 333] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 328] <... futex resumed>) = 0 [pid 333] futex(0x7f341af9e7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 328] futex(0x7f341af9e7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 333] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 328] <... futex resumed>) = 0 [ 23.137074][ T313] EXT4-fs error (device loop0): __ext4_get_inode_loc:4492: comm syz-executor217: Invalid inode table block 5 in block_group 0 [ 23.158710][ T313] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5841: Corrupt filesystem [ 23.170889][ T313] EXT4-fs error (device loop0): ext4_dirty_inode:6045: inode #18: comm syz-executor217: mark_inode_dirty error [pid 333] sendfile(3, 4, NULL, 281474978811909 [pid 328] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 337] <... futex resumed>) = 0 [pid 335] <... futex resumed>) = 0 [pid 331] <... ftruncate resumed>) = 0 [pid 337] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 335] futex(0x7f341af9e7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 331] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 337] <... open resumed>) = 5 [pid 336] <... futex resumed>) = 0 [pid 335] <... futex resumed>) = 1 [pid 331] <... futex resumed>) = 1 [pid 329] <... futex resumed>) = 0 [pid 336] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 329] futex(0x7f341af9e7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 337] futex(0x7f341af9e7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 336] <... open resumed>) = 3 [pid 335] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 331] sendfile(3, 4, NULL, 281474978811909 [pid 329] <... futex resumed>) = 0 [pid 336] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 329] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 336] <... futex resumed>) = 0 [pid 336] futex(0x7f341af9e7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 327] <... sendfile resumed>) = 524288 [pid 327] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 325] <... futex resumed>) = 0 [pid 327] futex(0x7f341af9e7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 325] futex(0x7f341af9e7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 327] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 325] <... futex resumed>) = 0 [pid 327] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 325] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 327] <... mount resumed>) = 0 [pid 327] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 325] <... futex resumed>) = 0 [pid 327] futex(0x7f341af9e7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 325] futex(0x7f341af9e7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 327] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 325] <... futex resumed>) = 0 [pid 327] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 325] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 327] <... open resumed>) = 5 [pid 327] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 325] <... futex resumed>) = 0 [pid 327] futex(0x7f341af9e7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 325] futex(0x7f341af9e7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 327] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 325] <... futex resumed>) = 0 [pid 327] writev(5, [{iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base="\xd3\x25\xd5\x12\x13\x6e\xfa\xc1\x9c\x33\x47\x09\xcf\x13\xf9\xa9\xac\x3d\x2d\x36\x20\x64\x0a\x56\xdf\x58\xa5\x62\xea\x3d\x18\x2f\xfa\x18\xdc\x34\x7b\xdd\x8f\xcb\x18\xbb\x6f\x22\x3b\x6f\xe0\xc6\x40\xbf\x1b\xd8\xa3\x55\xb0\x41\xab\xa3\x3b\x90\x0c\x45\x25\xff\x33\xe2\x0e\x34\x9f\xd2\xba\x0b\x3e\x61\x10\xfe\x0e\x4e\x57\x8b\x0b\x20\x65\xd2\x91\x95\x3e\x5c\x09\x2a\x9f\x20\x6e\x04\xe8\xe8\x2b\x1a\xc7\x1b"..., iov_len=1429}], 5 [pid 325] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 327] <... writev resumed>) = 1429 [pid 327] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 325] <... futex resumed>) = 0 [pid 327] futex(0x7f341af9e7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 325] exit_group(0 [pid 327] <... futex resumed>) = ? [pid 325] <... exit_group resumed>) = ? [pid 337] <... futex resumed>) = 1 [pid 335] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 327] +++ exited with 0 +++ [pid 337] futex(0x7f341af9e7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 335] futex(0x7f341af9e7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 23.191381][ T313] EXT4-fs error (device loop0): ext4_map_blocks:607: inode #3: block 85: comm syz-executor217: lblock 5 mapped to illegal pblock 85 (length 1) [ 23.207197][ T313] EXT4-fs error (device loop0): ext4_map_blocks:607: inode #4: block 101: comm syz-executor217: lblock 5 mapped to illegal pblock 101 (length 1) [ 23.216204][ T327] syz-executor217 (327) used greatest stack depth: 21552 bytes left [pid 335] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 336] <... futex resumed>) = 0 [pid 333] <... sendfile resumed>) = 524288 [pid 328] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 325] +++ exited with 0 +++ [pid 324] <... futex resumed>) = 0 [pid 336] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 333] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 328] futex(0x7f341af9e7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 324] futex(0x7f341af9e7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 337] <... futex resumed>) = 0 [pid 336] <... open resumed>) = 4 [pid 333] <... futex resumed>) = 0 [pid 328] <... futex resumed>) = 0 [pid 324] <... futex resumed>) = 1 [pid 294] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=325, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 337] writev(5, [{iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base="\xd3\x25\xd5\x12\x13\x6e\xfa\xc1\x9c\x33\x47\x09\xcf\x13\xf9\xa9\xac\x3d\x2d\x36\x20\x64\x0a\x56\xdf\x58\xa5\x62\xea\x3d\x18\x2f\xfa\x18\xdc\x34\x7b\xdd\x8f\xcb\x18\xbb\x6f\x22\x3b\x6f\xe0\xc6\x40\xbf\x1b\xd8\xa3\x55\xb0\x41\xab\xa3\x3b\x90\x0c\x45\x25\xff\x33\xe2\x0e\x34\x9f\xd2\xba\x0b\x3e\x61\x10\xfe\x0e\x4e\x57\x8b\x0b\x20\x65\xd2\x91\x95\x3e\x5c\x09\x2a\x9f\x20\x6e\x04\xe8\xe8\x2b\x1a\xc7\x1b"..., iov_len=1429}], 5 [pid 336] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 333] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 328] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 324] futex(0x7f341af9e7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 337] <... writev resumed>) = 1429 [pid 336] <... futex resumed>) = 1 [pid 335] <... futex resumed>) = 0 [pid 333] <... mount resumed>) = 0 [pid 336] futex(0x7f341af9e7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 333] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 328] <... futex resumed>) = 0 [pid 333] futex(0x7f341af9e7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 328] futex(0x7f341af9e7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 333] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 328] <... futex resumed>) = 0 [pid 333] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 328] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 333] <... open resumed>) = 5 [pid 333] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 328] <... futex resumed>) = 0 [pid 333] futex(0x7f341af9e7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 329] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 328] futex(0x7f341af9e7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 333] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 329] futex(0x7f341af9e7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 328] <... futex resumed>) = 0 [pid 333] writev(5, [{iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base="\xd3\x25\xd5\x12\x13\x6e\xfa\xc1\x9c\x33\x47\x09\xcf\x13\xf9\xa9\xac\x3d\x2d\x36\x20\x64\x0a\x56\xdf\x58\xa5\x62\xea\x3d\x18\x2f\xfa\x18\xdc\x34\x7b\xdd\x8f\xcb\x18\xbb\x6f\x22\x3b\x6f\xe0\xc6\x40\xbf\x1b\xd8\xa3\x55\xb0\x41\xab\xa3\x3b\x90\x0c\x45\x25\xff\x33\xe2\x0e\x34\x9f\xd2\xba\x0b\x3e\x61\x10\xfe\x0e\x4e\x57\x8b\x0b\x20\x65\xd2\x91\x95\x3e\x5c\x09\x2a\x9f\x20\x6e\x04\xe8\xe8\x2b\x1a\xc7\x1b"..., iov_len=1429}], 5 [pid 329] <... futex resumed>) = 0 [pid 328] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 329] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 337] futex(0x7f341af9e7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 335] futex(0x7f341af9e7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 333] <... writev resumed>) = 1429 [pid 329] <... mmap resumed>) = 0x7f3412b04000 [pid 294] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 333] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 329] mprotect(0x7f3412b05000, 131072, PROT_READ|PROT_WRITE [pid 333] <... futex resumed>) = 1 [pid 329] <... mprotect resumed>) = 0 [pid 328] <... futex resumed>) = 0 [pid 333] futex(0x7f341af9e7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 329] clone(child_stack=0x7f3412b243f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 328] exit_group(0 [pid 333] <... futex resumed>) = ? [pid 328] <... exit_group resumed>) = ? [pid 337] <... futex resumed>) = 1 [pid 336] <... futex resumed>) = 0 [pid 335] <... futex resumed>) = 1 [pid 333] +++ exited with 0 +++ [pid 329] <... clone resumed>, parent_tid=[338], tls=0x7f3412b24700, child_tidptr=0x7f3412b249d0) = 338 [pid 328] +++ exited with 0 +++ [pid 324] <... futex resumed>) = 0 [pid 294] <... openat resumed>) = 3 [pid 336] ftruncate(4, 33587199 [pid 329] futex(0x7f341af9e7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 336] <... ftruncate resumed>) = -1 EINVAL (Invalid argument) [pid 329] <... futex resumed>) = 0 [pid 297] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=328, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 336] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 329] futex(0x7f341af9e7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 336] <... futex resumed>) = 0 [pid 297] <... openat resumed>) = 3 [pid 336] futex(0x7f341af9e7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 297] ioctl(3, LOOP_CLR_FD) = 0 [pid 297] close(3) = 0 [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555735b5d0) = 339 ./strace-static-x86_64: Process 338 attached [pid 338] set_robust_list(0x7f3412b249e0, 24) = 0 [pid 338] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 337] futex(0x7f341af9e7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 335] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 294] ioctl(3, LOOP_CLR_FD [pid 335] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 23.224568][ T313] EXT4-fs error (device loop0): __ext4_get_inode_loc:4492: comm syz-executor217: Invalid inode table block 5 in block_group 0 [ 23.251878][ T313] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5841: Corrupt filesystem [ 23.261787][ T313] EXT4-fs error (device loop0): ext4_dirty_inode:6045: inode #18: comm syz-executor217: mark_inode_dirty error [ 23.274008][ T313] EXT4-fs error (device loop0): ext4_get_group_desc:277: comm syz-executor217: block_group >= groups_count - block_group = 4294960798, groups_count = 1 [pid 294] <... ioctl resumed>) = 0 [pid 338] <... mount resumed>) = 0 [pid 338] futex(0x7f341af9e7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 329] <... futex resumed>) = 0 [pid 329] futex(0x7f341af9e7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 338] <... futex resumed>) = 1 [pid 329] <... futex resumed>) = 0 [pid 338] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 329] futex(0x7f341af9e7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 338] <... open resumed>) = 5 [pid 338] futex(0x7f341af9e7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 329] <... futex resumed>) = 0 [pid 338] writev(5, [{iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base="\xd3\x25\xd5\x12\x13\x6e\xfa\xc1\x9c\x33\x47\x09\xcf\x13\xf9\xa9\xac\x3d\x2d\x36\x20\x64\x0a\x56\xdf\x58\xa5\x62\xea\x3d\x18\x2f\xfa\x18\xdc\x34\x7b\xdd\x8f\xcb\x18\xbb\x6f\x22\x3b\x6f\xe0\xc6\x40\xbf\x1b\xd8\xa3\x55\xb0\x41\xab\xa3\x3b\x90\x0c\x45\x25\xff\x33\xe2\x0e\x34\x9f\xd2\xba\x0b\x3e\x61\x10\xfe\x0e\x4e\x57\x8b\x0b\x20\x65\xd2\x91\x95\x3e\x5c\x09\x2a\x9f\x20\x6e\x04\xe8\xe8\x2b\x1a\xc7\x1b"..., iov_len=1429}], 5 [pid 329] futex(0x7f341af9e7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 329] futex(0x7f341af9e7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 339 attached [pid 339] set_robust_list(0x55555735b5e0, 24) = 0 [pid 339] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 339] setpgid(0, 0) = 0 [pid 339] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 339] write(3, "1000", 4) = 4 [pid 339] close(3) = 0 [pid 339] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 339] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f341aea5000 [pid 339] mprotect(0x7f341aea6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 339] clone(child_stack=0x7f341aec53f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[340], tls=0x7f341aec5700, child_tidptr=0x7f341aec59d0) = 340 [pid 339] futex(0x7f341af9e7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 339] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 340 attached [pid 340] set_robust_list(0x7f341aec59e0, 24) = 0 [pid 340] memfd_create("syzkaller", 0) = 3 [pid 340] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3412aa5000 [pid 335] futex(0x7f341af9e7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 294] close(3 [pid 340] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 338] <... writev resumed>) = 1429 [pid 336] <... futex resumed>) = 0 [pid 335] <... futex resumed>) = 1 [pid 313] <... sendfile resumed>) = 327680 [pid 294] <... close resumed>) = 0 [pid 338] futex(0x7f341af9e7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 336] sendfile(3, 4, NULL, 281474978811909 [pid 335] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 294] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 338] <... futex resumed>) = 1 [pid 329] <... futex resumed>) = 0 [pid 338] futex(0x7f341af9e7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 294] <... clone resumed>, child_tidptr=0x55555735b5d0) = 341 [pid 313] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 313] futex(0x7f341af9e7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 307] exit_group(0) = ? [pid 334] <... futex resumed>) = ? [pid 313] <... futex resumed>) = ? [pid 313] +++ exited with 0 +++ [pid 340] <... write resumed>) = 524288 [pid 340] munmap(0x7f3412aa5000, 524288) = 0 [pid 340] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 340] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 340] ioctl(4, LOOP_CLR_FD) = 0 ./strace-static-x86_64: Process 341 attached [pid 340] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 340] close(4) = 0 [pid 340] close(3) = 0 [pid 340] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 340] futex(0x7f341af9e7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 341] set_robust_list(0x55555735b5e0, 24) = 0 [pid 341] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 341] setpgid(0, 0) = 0 [pid 341] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 339] <... futex resumed>) = 0 [pid 339] futex(0x7f341af9e7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 340] <... futex resumed>) = 0 [pid 340] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 339] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 340] <... open resumed>) = 3 [pid 340] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 341] <... openat resumed>) = 3 [pid 340] <... futex resumed>) = 1 [pid 339] <... futex resumed>) = 0 [pid 340] futex(0x7f341af9e7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 339] futex(0x7f341af9e7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 340] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 339] <... futex resumed>) = 0 [pid 340] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 4 [pid 341] write(3, "1000", 4 [pid 340] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 339] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 340] <... futex resumed>) = 0 [pid 339] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 340] futex(0x7f341af9e7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 339] futex(0x7f341af9e7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 340] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 340] ftruncate(4, 33587199 [pid 339] <... futex resumed>) = 0 [pid 340] <... ftruncate resumed>) = -1 EINVAL (Invalid argument) [pid 339] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 340] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 339] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 340] <... futex resumed>) = 0 [pid 339] futex(0x7f341af9e7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 341] <... write resumed>) = 4 [pid 340] sendfile(3, 4, NULL, 281474978811909 [pid 339] <... futex resumed>) = 0 [pid 341] close(3) = 0 [pid 341] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 341] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f341aea5000 [pid 341] mprotect(0x7f341aea6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 341] clone(child_stack=0x7f341aec53f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[342], tls=0x7f341aec5700, child_tidptr=0x7f341aec59d0) = 342 [pid 341] futex(0x7f341af9e7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 341] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 339] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 342 attached [pid 342] set_robust_list(0x7f341aec59e0, 24) = 0 [pid 342] memfd_create("syzkaller", 0) = 3 [pid 342] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3412aa5000 [pid 342] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 342] munmap(0x7f3412aa5000, 524288) = 0 [pid 342] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 342] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 342] ioctl(4, LOOP_CLR_FD) = 0 [pid 335] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 335] futex(0x7f341af9e7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 335] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3412b04000 [pid 335] mprotect(0x7f3412b05000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 335] clone(child_stack=0x7f3412b243f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[343], tls=0x7f3412b24700, child_tidptr=0x7f3412b249d0) = 343 [pid 335] futex(0x7f341af9e7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 335] futex(0x7f341af9e7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 342] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 342] close(4) = 0 [ 23.289881][ T313] EXT4-fs error (device loop0): ext4_map_blocks:607: inode #3: block 85: comm syz-executor217: lblock 5 mapped to illegal pblock 85 (length 1) [ 23.310712][ T313] syz-executor217 (313) used greatest stack depth: 20232 bytes left [pid 342] close(3) = 0 [pid 342] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 341] <... futex resumed>) = 0 [pid 341] futex(0x7f341af9e7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 341] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 342] <... futex resumed>) = 1 [pid 342] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 3 [pid 342] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 341] <... futex resumed>) = 0 [pid 342] futex(0x7f341af9e7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 341] futex(0x7f341af9e7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 342] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 341] <... futex resumed>) = 0 [pid 342] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 341] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 342] <... open resumed>) = 4 [pid 342] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 341] <... futex resumed>) = 0 [pid 342] futex(0x7f341af9e7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 341] futex(0x7f341af9e7a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 343 attached [pid 342] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 341] <... futex resumed>) = 0 [pid 343] set_robust_list(0x7f3412b249e0, 24 [pid 342] ftruncate(4, 33587199 [pid 341] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 343] <... set_robust_list resumed>) = 0 [pid 342] <... ftruncate resumed>) = -1 EINVAL (Invalid argument) [pid 343] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 342] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 343] <... mount resumed>) = 0 [pid 342] <... futex resumed>) = 1 [pid 341] <... futex resumed>) = 0 [pid 339] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 343] futex(0x7f341af9e7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 342] futex(0x7f341af9e7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 341] futex(0x7f341af9e7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 339] futex(0x7f341af9e7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 343] <... futex resumed>) = 1 [pid 342] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 341] <... futex resumed>) = 0 [pid 339] <... futex resumed>) = 0 [pid 335] <... futex resumed>) = 0 [pid 343] futex(0x7f341af9e7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 342] sendfile(3, 4, NULL, 281474978811909 [pid 341] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 339] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 335] futex(0x7f341af9e7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 343] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 339] <... mmap resumed>) = 0x7f3412b04000 [pid 335] <... futex resumed>) = 0 [pid 343] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 339] mprotect(0x7f3412b05000, 131072, PROT_READ|PROT_WRITE [pid 335] futex(0x7f341af9e7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 343] <... open resumed>) = 5 [pid 339] <... mprotect resumed>) = 0 [pid 343] futex(0x7f341af9e7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 339] clone(child_stack=0x7f3412b243f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 343] <... futex resumed>) = 1 [pid 335] <... futex resumed>) = 0 [pid 343] futex(0x7f341af9e7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 339] <... clone resumed>, parent_tid=[344], tls=0x7f3412b24700, child_tidptr=0x7f3412b249d0) = 344 [pid 335] futex(0x7f341af9e7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 343] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 339] futex(0x7f341af9e7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 335] <... futex resumed>) = 0 [pid 343] writev(5, [{iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base="\xd3\x25\xd5\x12\x13\x6e\xfa\xc1\x9c\x33\x47\x09\xcf\x13\xf9\xa9\xac\x3d\x2d\x36\x20\x64\x0a\x56\xdf\x58\xa5\x62\xea\x3d\x18\x2f\xfa\x18\xdc\x34\x7b\xdd\x8f\xcb\x18\xbb\x6f\x22\x3b\x6f\xe0\xc6\x40\xbf\x1b\xd8\xa3\x55\xb0\x41\xab\xa3\x3b\x90\x0c\x45\x25\xff\x33\xe2\x0e\x34\x9f\xd2\xba\x0b\x3e\x61\x10\xfe\x0e\x4e\x57\x8b\x0b\x20\x65\xd2\x91\x95\x3e\x5c\x09\x2a\x9f\x20\x6e\x04\xe8\xe8\x2b\x1a\xc7\x1b"..., iov_len=1429}], 5 [pid 339] <... futex resumed>) = 0 [pid 335] futex(0x7f341af9e7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 343] <... writev resumed>) = 1429 [pid 339] futex(0x7f341af9e7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 336] <... sendfile resumed>) = 524288 [ 23.366463][ T334] ------------[ cut here ]------------ [ 23.371798][ T334] kernel BUG at fs/ext4/ext4.h:3331! [pid 343] futex(0x7f341af9e7bc, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 344 attached ) = 1 [pid 336] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 335] <... futex resumed>) = 0 [pid 344] set_robust_list(0x7f3412b249e0, 24 [pid 336] <... futex resumed>) = 0 [pid 344] <... set_robust_list resumed>) = 0 [pid 336] futex(0x7f341af9e7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 344] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL) = 0 [pid 344] futex(0x7f341af9e7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 339] <... futex resumed>) = 0 [pid 344] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 339] futex(0x7f341af9e7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 344] <... open resumed>) = 5 [pid 339] <... futex resumed>) = 0 [pid 344] futex(0x7f341af9e7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 339] futex(0x7f341af9e7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 344] <... futex resumed>) = 0 [pid 339] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 344] writev(5, [{iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base="\xd3\x25\xd5\x12\x13\x6e\xfa\xc1\x9c\x33\x47\x09\xcf\x13\xf9\xa9\xac\x3d\x2d\x36\x20\x64\x0a\x56\xdf\x58\xa5\x62\xea\x3d\x18\x2f\xfa\x18\xdc\x34\x7b\xdd\x8f\xcb\x18\xbb\x6f\x22\x3b\x6f\xe0\xc6\x40\xbf\x1b\xd8\xa3\x55\xb0\x41\xab\xa3\x3b\x90\x0c\x45\x25\xff\x33\xe2\x0e\x34\x9f\xd2\xba\x0b\x3e\x61\x10\xfe\x0e\x4e\x57\x8b\x0b\x20\x65\xd2\x91\x95\x3e\x5c\x09\x2a\x9f\x20\x6e\x04\xe8\xe8\x2b\x1a\xc7\x1b"..., iov_len=1429}], 5 [pid 339] futex(0x7f341af9e7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 339] futex(0x7f341af9e7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 340] <... sendfile resumed>) = 524288 [pid 340] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 340] futex(0x7f341af9e7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 343] futex(0x7f341af9e7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 335] exit_group(0 [pid 343] <... futex resumed>) = ? [pid 336] <... futex resumed>) = ? [ 23.412902][ T334] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 23.418819][ T334] CPU: 0 PID: 334 Comm: syz-executor217 Not tainted 6.1.25-syzkaller-00172-g10e4c804f2f9 #0 [ 23.428713][ T334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 23.438607][ T334] RIP: 0010:ext4_mb_load_buddy_gfp+0xef8/0xf10 [pid 335] <... exit_group resumed>) = ? [pid 343] +++ exited with 0 +++ [pid 336] +++ exited with 0 +++ [pid 335] +++ exited with 0 +++ [pid 339] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 295] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=335, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 295] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 295] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 295] ioctl(3, LOOP_CLR_FD) = 0 [pid 295] close(3) = 0 [pid 295] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555735b5d0) = 345 [pid 344] <... writev resumed>) = 1429 [pid 342] <... sendfile resumed>) = 524288 [pid 344] futex(0x7f341af9e7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 342] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 344] <... futex resumed>) = 0 [pid 342] <... futex resumed>) = 1 [pid 339] exit_group(0 [pid 342] futex(0x7f341af9e7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 340] <... futex resumed>) = ? [pid 339] <... exit_group resumed>) = ? [pid 344] +++ exited with 0 +++ [pid 340] +++ exited with 0 +++ [pid 339] +++ exited with 0 +++ [pid 297] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=339, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 297] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 297] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 297] ioctl(3, LOOP_CLR_FD) = 0 [ 23.444592][ T334] Code: ae 6f c6 ff e9 de f3 ff ff e8 f4 0c 81 ff 48 c7 c7 20 84 8b 86 4c 89 ee 48 89 da e8 52 32 a7 00 e9 50 f2 ff ff e8 d8 0c 81 ff <0f> 0b e8 d1 0c 81 ff 0f 0b e8 ca 0c 81 ff 0f 0b 0f 1f 84 00 00 00 [ 23.464040][ T334] RSP: 0018:ffffc90000fc75c8 EFLAGS: 00010293 [ 23.469934][ T334] RAX: ffffffff81f28bf8 RBX: 0000000000000001 RCX: ffff88810d19df00 [ 23.477749][ T334] RDX: 0000000000000000 RSI: 00000000ffffe69e RDI: 0000000000000001 [ 23.485565][ T334] RBP: ffffc90000fc7650 R08: ffffffff81f27dec R09: ffffed1022521bcb [ 23.493488][ T334] R10: 0000000000000000 R11: dffffc0000000001 R12: 00000000ffffe69e [ 23.501298][ T334] R13: ffff88810d2ae000 R14: ffff8881099353a8 R15: ffff888109935018 [pid 297] close(3) = 0 [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555735b5d0) = 346 [ 23.509107][ T334] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 23.517874][ T334] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 23.524301][ T334] CR2: 0000000020002004 CR3: 0000000120d08000 CR4: 00000000003506b0 [ 23.532110][ T334] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 23.540026][ T334] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 23.547836][ T334] Call Trace: [ 23.550964][ T334] [ 23.553742][ T334] ? _raw_spin_trylock_bh+0x190/0x190 [ 23.558955][ T334] ext4_discard_preallocations+0x79c/0xef0 [ 23.564593][ T334] ? mb_clear_bits+0x130/0x130 [ 23.569189][ T334] ? rwsem_write_trylock+0x15b/0x290 [ 23.574312][ T334] ? __kasan_slab_free+0x11/0x20 [ 23.579086][ T334] ext4_release_file+0x16e/0x310 [ 23.583857][ T334] ? ext4_file_open+0x750/0x750 [ 23.588545][ T334] __fput+0x3ab/0x870 [ 23.592365][ T334] ____fput+0x15/0x20 [ 23.596180][ T334] task_work_run+0x24d/0x2e0 [ 23.600611][ T334] ? task_work_cancel+0x2b0/0x2b0 [ 23.605467][ T334] ? __kasan_check_write+0x14/0x20 [ 23.610413][ T334] ? exit_task_namespaces+0xc2/0xd0 [ 23.615449][ T334] do_exit+0xbb0/0x2910 [ 23.619455][ T334] ? put_task_struct+0x80/0x80 [ 23.624058][ T334] ? __kasan_check_write+0x14/0x20 [ 23.629006][ T334] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 23.633951][ T334] do_group_exit+0x21a/0x2d0 [ 23.638371][ T334] ? __kasan_check_write+0x14/0x20 [ 23.643315][ T334] get_signal+0x169d/0x1820 [ 23.647653][ T334] ? ptrace_notify+0x350/0x350 [ 23.652341][ T334] arch_do_signal_or_restart+0xb0/0x16f0 [ 23.657809][ T334] ? __kasan_check_write+0x14/0x20 [ 23.662750][ T334] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 23.667704][ T334] ? do_futex+0x55a/0x9a0 [ 23.671873][ T334] ? from_kuid_munged+0x1e9/0x7b0 [ 23.676729][ T334] ? __kasan_check_write+0x14/0x20 [ 23.681674][ T334] ? ptrace_stop+0x218/0x930 [ 23.686116][ T334] ? get_sigframe_size+0x10/0x10 [ 23.690879][ T334] exit_to_user_mode_loop+0x6b/0xa0 [ 23.695908][ T334] exit_to_user_mode_prepare+0x5a/0xa0 [ 23.701200][ T334] syscall_exit_to_user_mode+0x26/0x130 [ 23.706587][ T334] do_syscall_64+0x49/0xb0 [ 23.710833][ T334] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 23.716570][ T334] RIP: 0033:0x7f341af194d9 [ 23.720814][ T334] Code: Unable to access opcode bytes at 0x7f341af194af. [ 23.727673][ T334] RSP: 002b:00007f3412b242f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 23.735916][ T334] RAX: fffffffffffffe00 RBX: 00007f341af9e7b0 RCX: 00007f341af194d9 [ 23.743735][ T334] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f341af9e7b8 [ 23.751541][ T334] RBP: 00007f341af6bc38 R08: 0000000000000000 R09: 0000000000000000 ./strace-static-x86_64: Process 345 attached [pid 341] <... futex resumed>) = 0 [pid 341] futex(0x7f341af9e7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 341] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 345] set_robust_list(0x55555735b5e0, 24 [pid 342] <... futex resumed>) = 0 [pid 342] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL) = 0 [pid 345] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 346 attached [pid 346] set_robust_list(0x55555735b5e0, 24) = 0 [pid 342] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 345] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 342] <... futex resumed>) = 1 [pid 341] <... futex resumed>) = 0 [pid 341] futex(0x7f341af9e7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 341] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 346] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 346] setpgid(0, 0 [pid 345] <... prctl resumed>) = 0 [pid 342] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 346] <... setpgid resumed>) = 0 [pid 346] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 346] write(3, "1000", 4) = 4 [pid 346] close(3) = 0 [pid 346] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 346] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f341aea5000 [pid 346] mprotect(0x7f341aea6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 346] clone(child_stack=0x7f341aec53f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[349], tls=0x7f341aec5700, child_tidptr=0x7f341aec59d0) = 349 [pid 346] futex(0x7f341af9e7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 346] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 349 attached [pid 349] set_robust_list(0x7f341aec59e0, 24) = 0 [pid 349] memfd_create("syzkaller", 0) = 3 [pid 349] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3412aa5000 [pid 349] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 345] setpgid(0, 0 [pid 342] <... open resumed>) = 5 [pid 345] <... setpgid resumed>) = 0 [ 23.759366][ T334] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f341af6b6a0 [ 23.767163][ T334] R13: 0030656c69662f2e R14: 6f6f6c2f7665642f R15: 00007f341af9e7b8 [ 23.774981][ T334] [ 23.777838][ T334] Modules linked in: [ 23.781856][ T334] ---[ end trace 0000000000000000 ]--- [ 23.794994][ T334] RIP: 0010:ext4_mb_load_buddy_gfp+0xef8/0xf10 [pid 342] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 345] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 342] <... futex resumed>) = 1 [pid 341] <... futex resumed>) = 0 [pid 341] futex(0x7f341af9e7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 341] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 349] <... write resumed>) = 524288 [pid 349] munmap(0x7f3412aa5000, 524288) = 0 [pid 349] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 349] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 349] ioctl(4, LOOP_CLR_FD) = 0 [pid 349] ioctl(4, LOOP_SET_FD, 3 [pid 345] <... openat resumed>) = 3 [pid 342] writev(5, [{iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base="\xd3\x25\xd5\x12\x13\x6e\xfa\xc1\x9c\x33\x47\x09\xcf\x13\xf9\xa9\xac\x3d\x2d\x36\x20\x64\x0a\x56\xdf\x58\xa5\x62\xea\x3d\x18\x2f\xfa\x18\xdc\x34\x7b\xdd\x8f\xcb\x18\xbb\x6f\x22\x3b\x6f\xe0\xc6\x40\xbf\x1b\xd8\xa3\x55\xb0\x41\xab\xa3\x3b\x90\x0c\x45\x25\xff\x33\xe2\x0e\x34\x9f\xd2\xba\x0b\x3e\x61\x10\xfe\x0e\x4e\x57\x8b\x0b\x20\x65\xd2\x91\x95\x3e\x5c\x09\x2a\x9f\x20\x6e\x04\xe8\xe8\x2b\x1a\xc7\x1b"..., iov_len=1429}], 5 [pid 349] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 349] close(4) = 0 [pid 345] write(3, "1000", 4 [pid 349] close(3 [pid 345] <... write resumed>) = 4 [pid 349] <... close resumed>) = 0 [pid 345] close(3 [pid 349] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 346] <... futex resumed>) = 0 [pid 346] futex(0x7f341af9e7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 346] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 349] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 3 [pid 349] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 346] <... futex resumed>) = 0 [pid 346] futex(0x7f341af9e7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 346] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 349] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 4 [pid 349] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 346] <... futex resumed>) = 0 [pid 349] ftruncate(4, 33587199 [pid 346] futex(0x7f341af9e7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 349] <... ftruncate resumed>) = -1 EINVAL (Invalid argument) [pid 346] <... futex resumed>) = 0 [pid 349] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 346] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 349] <... futex resumed>) = 0 [pid 346] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 349] sendfile(3, 4, NULL, 281474978811909 [pid 346] futex(0x7f341af9e7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 346] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 345] <... close resumed>) = 0 [pid 342] <... writev resumed>) = 1429 [pid 345] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 342] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 345] <... futex resumed>) = 0 [pid 342] <... futex resumed>) = 1 [pid 341] <... futex resumed>) = 0 [pid 345] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 342] futex(0x7f341af9e7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 341] exit_group(0) = ? [pid 345] <... mmap resumed>) = 0x7f341aea5000 [pid 342] <... futex resumed>) = ? [ 23.809108][ T334] Code: ae 6f c6 ff e9 de f3 ff ff e8 f4 0c 81 ff 48 c7 c7 20 84 8b 86 4c 89 ee 48 89 da e8 52 32 a7 00 e9 50 f2 ff ff e8 d8 0c 81 ff <0f> 0b e8 d1 0c 81 ff 0f 0b e8 ca 0c 81 ff 0f 0b 0f 1f 84 00 00 00 [ 23.829258][ T334] RSP: 0018:ffffc90000fc75c8 EFLAGS: 00010293 [ 23.836030][ T334] RAX: ffffffff81f28bf8 RBX: 0000000000000001 RCX: ffff88810d19df00 [ 23.844483][ T334] RDX: 0000000000000000 RSI: 00000000ffffe69e RDI: 0000000000000001 [ 23.852661][ T334] RBP: ffffc90000fc7650 R08: ffffffff81f27dec R09: ffffed1022521bcb [pid 345] mprotect(0x7f341aea6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 342] +++ exited with 0 +++ [pid 341] +++ exited with 0 +++ [pid 345] clone(child_stack=0x7f341aec53f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 294] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=341, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 345] <... clone resumed>, parent_tid=[350], tls=0x7f341aec5700, child_tidptr=0x7f341aec59d0) = 350 [pid 294] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 350 attached [pid 345] futex(0x7f341af9e7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 294] <... restart_syscall resumed>) = 0 [pid 329] exit_group(0 [pid 338] <... futex resumed>) = ? [pid 329] <... exit_group resumed>) = ? [pid 338] +++ exited with 0 +++ [pid 350] set_robust_list(0x7f341aec59e0, 24 [pid 345] <... futex resumed>) = 0 [pid 345] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 350] <... set_robust_list resumed>) = 0 [pid 294] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 346] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 350] memfd_create("syzkaller", 0 [pid 346] futex(0x7f341af9e7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 294] <... openat resumed>) = 3 [pid 350] <... memfd_create resumed>) = 3 [pid 346] <... futex resumed>) = 0 [pid 294] ioctl(3, LOOP_CLR_FD [pid 346] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3412b04000 [pid 346] mprotect(0x7f3412b05000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 346] clone(child_stack=0x7f3412b243f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[351], tls=0x7f3412b24700, child_tidptr=0x7f3412b249d0) = 351 [pid 346] futex(0x7f341af9e7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 346] futex(0x7f341af9e7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 349] <... sendfile resumed>) = 524288 [pid 349] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 350] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 294] <... ioctl resumed>) = 0 [pid 350] <... mmap resumed>) = 0x7f3412aa5000 [pid 294] close(3 [pid 349] <... futex resumed>) = 0 [pid 349] futex(0x7f341af9e7a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 351 attached [pid 351] set_robust_list(0x7f3412b249e0, 24) = 0 [pid 351] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL) = 0 [pid 351] futex(0x7f341af9e7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 346] <... futex resumed>) = 0 [pid 346] futex(0x7f341af9e7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 346] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 349] <... futex resumed>) = 0 [ 23.862069][ T334] R10: 0000000000000000 R11: dffffc0000000001 R12: 00000000ffffe69e [ 23.870385][ T334] R13: ffff88810d2ae000 R14: ffff8881099353a8 R15: ffff888109935018 [ 23.878502][ T334] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 23.888143][ T334] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 23.895063][ T334] CR2: 000055555735c5e8 CR3: 00000001229af000 CR4: 00000000003506a0 [ 23.903498][ T334] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [pid 350] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 331] <... sendfile resumed>) = ? [pid 294] <... close resumed>) = 0 [pid 331] +++ exited with 0 +++ [pid 329] +++ exited with 0 +++ [pid 296] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=329, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 296] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 296] ioctl(3, LOOP_CLR_FD) = 0 [pid 296] close(3) = 0 [pid 296] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555735b5d0) = 352 [pid 350] munmap(0x7f3412aa5000, 524288 [pid 294] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 350] <... munmap resumed>) = 0 [pid 350] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 294] <... clone resumed>, child_tidptr=0x55555735b5d0) = 353 ./strace-static-x86_64: Process 353 attached [pid 349] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 349] futex(0x7f341af9e7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 346] <... futex resumed>) = 0 [pid 346] futex(0x7f341af9e7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 346] futex(0x7f341af9e7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 349] <... futex resumed>) = 1 [ 23.916879][ T334] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 23.926104][ T334] Kernel panic - not syncing: Fatal exception [ 23.932289][ T334] Kernel Offset: disabled [ 23.936429][ T334] Rebooting in 86400 seconds..