./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3005696611
<...>
Warning: Permanently added '10.128.10.22' (ECDSA) to the list of known hosts.
execve("./syz-executor3005696611", ["./syz-executor3005696611"], 0x7fff782b6380 /* 10 vars */) = 0
brk(NULL) = 0x555556346000
brk(0x555556346c40) = 0x555556346c40
arch_prctl(ARCH_SET_FS, 0x555556346300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
set_tid_address(0x5555563465d0) = 355
set_robust_list(0x5555563465e0, 24) = 0
rt_sigaction(SIGRTMIN, {sa_handler=0x7f82e1d2f640, sa_mask=[], sa_flags=SA_RESTORER|SA_SIGINFO, sa_restorer=0x7f82e1d2fd10}, NULL, 8) = 0
rt_sigaction(SIGRT_1, {sa_handler=0x7f82e1d2f6e0, sa_mask=[], sa_flags=SA_RESTORER|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f82e1d2fd10}, NULL, 8) = 0
rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor3005696611", 4096) = 28
brk(0x555556367c40) = 0x555556367c40
brk(0x555556368000) = 0x555556368000
mprotect(0x7f82e1df2000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
getpid() = 355
mkdir("./syzkaller.9V7ej4", 0700) = 0
chmod("./syzkaller.9V7ej4", 0777) = 0
chdir("./syzkaller.9V7ej4") = 0
mkdir("./0", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
[ 23.136468][ T23] audit: type=1400 audit(1686810105.690:66): avc: denied { execmem } for pid=355 comm="syz-executor300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563465d0) = 356
./strace-static-x86_64: Process 356 attached
[pid 356] set_robust_list(0x5555563465e0, 24) = 0
[pid 356] chdir("./0") = 0
[pid 356] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 356] setpgid(0, 0) = 0
[pid 356] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 356] write(3, "1000", 4) = 4
[pid 356] close(3) = 0
[pid 356] symlink("/dev/binderfs", "./binderfs") = 0
[pid 356] futex(0x7f82e1df87ac, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid 356] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f82e1cfe000
[pid 356] mprotect(0x7f82e1cff000, 131072, PROT_READ|PROT_WRITE) = 0
[pid 356] clone(child_stack=0x7f82e1d1e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[358], tls=0x7f82e1d1e700, child_tidptr=0x7f82e1d1e9d0) = 358
[pid 356] futex(0x7f82e1df87a8, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid 356] futex(0x7f82e1df87ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 358 attached
<unfinished ...>
[pid 358] set_robust_list(0x7f82e1d1e9e0, 24) = 0
[pid 358] memfd_create("syzkaller", 0) = 3
[pid 358] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f82d98fe000
[pid 358] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144
[pid 358] munmap(0x7f82d98fe000, 262144) = 0
[pid 358] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 358] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 358] close(3) = 0
[pid 358] mkdir("./file1", 0777) = 0
[ 23.173978][ T23] audit: type=1400 audit(1686810105.730:67): avc: denied { read write } for pid=355 comm="syz-executor300" name="loop0" dev="devtmpfs" ino=9262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 23.209966][ T23] audit: type=1400 audit(1686810105.740:68): avc: denied { open } for pid=355 comm="syz-executor300" path="/dev/loop0" dev="devtmpfs" ino=9262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 23.234903][ T23] audit: type=1400 audit(1686810105.740:69): avc: denied { ioctl } for pid=355 comm="syz-executor300" path="/dev/loop0" dev="devtmpfs" ino=9262 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 23.260784][ T23] audit: type=1400 audit(1686810105.770:70): avc: denied { mounton } for pid=356 comm="syz-executor300" path="/root/syzkaller.9V7ej4/0/file1" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[ 23.278141][ T358] EXT4-fs (loop0): 1 orphan inode deleted
[ 23.299532][ T358] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[ 23.308461][ T23] audit: type=1400 audit(1686810105.860:71): avc: denied { mount } for pid=356 comm="syz-executor300" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[pid 358] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, ",errors=continue") = 0
[pid 358] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3
[pid 358] chdir("./file1") = 0
[pid 358] ioctl(4, LOOP_CLR_FD) = 0
[pid 358] close(4) = 0
[pid 358] futex(0x7f82e1df87ac, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid 356] <... futex resumed>) = 0
[pid 356] futex(0x7f82e1df87a8, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid 356] futex(0x7f82e1df87ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid 358] <... futex resumed>) = 1
[pid 358] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[pid 358] futex(0x7f82e1df87ac, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid 358] futex(0x7f82e1df87a8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid 356] <... futex resumed>) = 0
[pid 356] futex(0x7f82e1df87a8, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid 356] futex(0x7f82e1df87bc, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid 356] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f82d991d000
[pid 356] mprotect(0x7f82d991e000, 131072, PROT_READ|PROT_WRITE) = 0
[pid 356] clone(child_stack=0x7f82d993d3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[362], tls=0x7f82d993d700, child_tidptr=0x7f82d993d9d0) = 362
[pid 356] futex(0x7f82e1df87b8, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid 356] futex(0x7f82e1df87bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid 358] <... futex resumed>) = 0
[pid 358] fallocate(4, 0, 35143, 7) = 0
[pid 358] futex(0x7f82e1df87ac, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid 358] futex(0x7f82e1df87a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 362 attached
<unfinished ...>
[pid 362] set_robust_list(0x7f82d993d9e0, 24) = 0
[pid 362] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0
[pid 362] futex(0x7f82e1df87bc, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid 356] <... futex resumed>) = 0
[pid 356] futex(0x7f82e1df87a8, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid 356] futex(0x7f82e1df87ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid 358] <... futex resumed>) = 0
[pid 358] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5
[pid 358] futex(0x7f82e1df87ac, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid 356] <... futex resumed>) = 0
[pid 356] futex(0x7f82e1df87a8, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid 356] futex(0x7f82e1df87ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid 358] <... futex resumed>) = 1
[pid 358] write(0, "\x5d\x0f\x1b\xc7\x13\x63\xce\x46\xd7\xd6\x8a\x9a\x08\x09\x94\xde\x4f\x56\xb8\x75\x79\xb6\x4c\x51\x1a\xae\x21\xa9\x1e\xb2\xdb\x3a\x04\x37\xf8\x48\xb7\x71\xb3\xc3\xb8\x06\x60\x1d\x4b\x7a\x5f\x1e\x7c\xb6\x0a\x34\xda\x12\xb2\x6f\xad\xc9\x46\xcc\xd2\x3b\x6a\xfb\x12\xc1\xce\xe6\x20\x8b\xb8\xae\x2e\x2b\x32\x28\xe7\xeb\x78\x4c\x60\x8b\x9a\x07\xad\x74\x7b\x94\x3a\x77\x03\xd8\xca\xcb\x26\xad\x1e\x02\xca\x87"..., 4096) = -1 EBADF (Bad file descriptor)
[pid 358] futex(0x7f82e1df87ac, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid 356] <... futex resumed>) = 0
[pid 356] futex(0x7f82e1df87a8, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid 356] futex(0x7f82e1df87ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid 358] <... futex resumed>) = 1
[pid 358] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x5d\x0f\x1b\xc7\x13\x63\xce\x46\xd7\xd6\x8a\x9a\x08\x09\x94\xde\x4f\x56\xb8\x75\x79\xb6\x4c\x51\x1a\xae\x21\xa9\x1e\xb2\xdb\x3a\x04\x37\xf8\x48"..., 22455190 <unfinished ...>
[pid 362] <... futex resumed>) = 1
[pid 362] futex(0x7f82e1df87b8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid 358] <... write resumed>) = 262144
[pid 358] futex(0x7f82e1df87ac, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid 356] <... futex resumed>) = 0
[pid 356] exit_group(0) = ?
[pid 362] <... futex resumed>) = ?
[pid 362] +++ exited with 0 +++
[pid 358] <... futex resumed>) = ?
[ 23.308479][ T358] ext4 filesystem being mounted at /root/syzkaller.9V7ej4/0/file1 supports timestamps until 2038 (0x7fffffff)
[ 23.347851][ T23] audit: type=1400 audit(1686810105.900:72): avc: denied { write } for pid=356 comm="syz-executor300" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[pid 358] +++ exited with 0 +++
[pid 356] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=356, si_uid=0, si_status=0, si_utime=0, si_stime=7} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556347620 /* 4 entries */, 32768) = 112
umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./0/binderfs") = 0
[ 23.370001][ T23] audit: type=1400 audit(1686810105.900:73): avc: denied { add_name } for pid=356 comm="syz-executor300" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 23.391354][ T23] audit: type=1400 audit(1686810105.900:74): avc: denied { create } for pid=356 comm="syz-executor300" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[ 23.412007][ T23] audit: type=1400 audit(1686810105.900:75): avc: denied { read write open } for pid=356 comm="syz-executor300" path="/root/syzkaller.9V7ej4/0/file1/bus" dev="loop0" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
umount2("./0/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./0/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./0/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./0/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./0/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555634f660 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555634f660 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./0/file1") = 0
getdents64(3, 0x555556347620 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./0") = 0
mkdir("./1", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563465d0) = 363
./strace-static-x86_64: Process 363 attached
[pid 363] set_robust_list(0x5555563465e0, 24) = 0
[pid 363] chdir("./1") = 0
[pid 363] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 363] setpgid(0, 0) = 0
[pid 363] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 363] write(3, "1000", 4) = 4
[pid 363] close(3) = 0
[pid 363] symlink("/dev/binderfs", "./binderfs") = 0
[pid 363] futex(0x7f82e1df87ac, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid 363] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f82e1cfe000
[pid 363] mprotect(0x7f82e1cff000, 131072, PROT_READ|PROT_WRITE) = 0
[pid 363] clone(child_stack=0x7f82e1d1e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 364 attached
, parent_tid=[364], tls=0x7f82e1d1e700, child_tidptr=0x7f82e1d1e9d0) = 364
[pid 364] set_robust_list(0x7f82e1d1e9e0, 24) = 0
[pid 364] futex(0x7f82e1df87a8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid 363] futex(0x7f82e1df87a8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid 364] <... futex resumed>) = 0
[pid 363] <... futex resumed>) = 1
[pid 364] memfd_create("syzkaller", 0) = 3
[pid 364] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f82d98fe000
[pid 363] futex(0x7f82e1df87ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} <unfinished ...>
[pid 364] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144
[pid 364] munmap(0x7f82d98fe000, 262144) = 0
[pid 364] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 364] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 364] close(3) = 0
[pid 364] mkdir("./file1", 0777) = 0
[pid 364] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, ",errors=continue") = 0
[pid 364] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3
[pid 364] chdir("./file1") = 0
[pid 364] ioctl(4, LOOP_CLR_FD) = 0
[pid 364] close(4) = 0
[pid 364] futex(0x7f82e1df87ac, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid 363] <... futex resumed>) = 0
[pid 363] futex(0x7f82e1df87a8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid 364] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 <unfinished ...>
[pid 363] <... futex resumed>) = 0
[pid 363] futex(0x7f82e1df87ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid 364] <... open resumed>) = 4
[pid 364] futex(0x7f82e1df87ac, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid 363] <... futex resumed>) = 0
[pid 363] futex(0x7f82e1df87a8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid 364] fallocate(4, 0, 35143, 7 <unfinished ...>
[pid 363] <... futex resumed>) = 0
[pid 363] futex(0x7f82e1df87bc, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid 363] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f82d991d000
[pid 363] mprotect(0x7f82d991e000, 131072, PROT_READ|PROT_WRITE) = 0
[pid 363] clone(child_stack=0x7f82d993d3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 368 attached
, parent_tid=[368], tls=0x7f82d993d700, child_tidptr=0x7f82d993d9d0) = 368
[pid 368] set_robust_list(0x7f82d993d9e0, 24) = 0
[pid 368] futex(0x7f82e1df87b8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid 364] <... fallocate resumed>) = 0
[pid 363] futex(0x7f82e1df87b8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid 368] <... futex resumed>) = 0
[pid 363] <... futex resumed>) = 1
[pid 368] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL <unfinished ...>
[pid 363] futex(0x7f82e1df87bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid 368] <... mount resumed>) = 0
[pid 368] futex(0x7f82e1df87bc, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid 363] <... futex resumed>) = 0
[pid 368] futex(0x7f82e1df87b8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid 363] futex(0x7f82e1df87b8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid 368] <... futex resumed>) = 0
[pid 363] <... futex resumed>) = 1
[pid 368] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c <unfinished ...>
[pid 363] futex(0x7f82e1df87bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid 368] <... open resumed>) = 5
[pid 368] futex(0x7f82e1df87bc, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid 363] <... futex resumed>) = 0
[pid 363] futex(0x7f82e1df87b8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid 368] write(0, "\x5d\x0f\x1b\xc7\x13\x63\xce\x46\xd7\xd6\x8a\x9a\x08\x09\x94\xde\x4f\x56\xb8\x75\x79\xb6\x4c\x51\x1a\xae\x21\xa9\x1e\xb2\xdb\x3a\x04\x37\xf8\x48\xb7\x71\xb3\xc3\xb8\x06\x60\x1d\x4b\x7a\x5f\x1e\x7c\xb6\x0a\x34\xda\x12\xb2\x6f\xad\xc9\x46\xcc\xd2\x3b\x6a\xfb\x12\xc1\xce\xe6\x20\x8b\xb8\xae\x2e\x2b\x32\x28\xe7\xeb\x78\x4c\x60\x8b\x9a\x07\xad\x74\x7b\x94\x3a\x77\x03\xd8\xca\xcb\x26\xad\x1e\x02\xca\x87"..., 4096) = -1 EBADF (Bad file descriptor)
[pid 363] <... futex resumed>) = 0
[pid 368] futex(0x7f82e1df87bc, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid 363] futex(0x7f82e1df87bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid 368] <... futex resumed>) = 0
[pid 363] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable)
[pid 368] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x5d\x0f\x1b\xc7\x13\x63\xce\x46\xd7\xd6\x8a\x9a\x08\x09\x94\xde\x4f\x56\xb8\x75\x79\xb6\x4c\x51\x1a\xae\x21\xa9\x1e\xb2\xdb\x3a\x04\x37\xf8\x48"..., 22455190 <unfinished ...>
[pid 363] futex(0x7f82e1df87b8, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid 363] futex(0x7f82e1df87bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid 364] futex(0x7f82e1df87ac, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid 364] futex(0x7f82e1df87a8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid 368] <... write resumed>) = 262144
[pid 368] futex(0x7f82e1df87bc, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid 363] <... futex resumed>) = 0
[pid 368] futex(0x7f82e1df87b8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid 363] exit_group(0) = ?
[pid 368] <... futex resumed>) = ?
[pid 368] +++ exited with 0 +++
[pid 364] <... futex resumed>) = ?
[pid 364] +++ exited with 0 +++
[pid 363] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=363, si_uid=0, si_status=0, si_utime=0, si_stime=2} ---
umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556347620 /* 4 entries */, 32768) = 112
umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./1/binderfs") = 0
[ 23.527029][ T364] EXT4-fs (loop0): 1 orphan inode deleted
[ 23.532682][ T364] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[ 23.541497][ T364] ext4 filesystem being mounted at /root/syzkaller.9V7ej4/1/file1 supports timestamps until 2038 (0x7fffffff)
umount2("./1/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./1/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./1/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./1/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./1/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555634f660 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555634f660 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./1/file1") = 0
getdents64(3, 0x555556347620 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./1") = 0
mkdir("./2", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 370 attached
, child_tidptr=0x5555563465d0) = 370
[pid 370] set_robust_list(0x5555563465e0, 24) = 0
[pid 370] chdir("./2") = 0
[pid 370] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 370] setpgid(0, 0) = 0
[pid 370] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 370] write(3, "1000", 4) = 4
[pid 370] close(3) = 0
[pid 370] symlink("/dev/binderfs", "./binderfs") = 0
[pid 370] futex(0x7f82e1df87ac, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid 370] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f82e1cfe000
[pid 370] mprotect(0x7f82e1cff000, 131072, PROT_READ|PROT_WRITE) = 0
[pid 370] clone(child_stack=0x7f82e1d1e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 371 attached
, parent_tid=[371], tls=0x7f82e1d1e700, child_tidptr=0x7f82e1d1e9d0) = 371
[pid 371] set_robust_list(0x7f82e1d1e9e0, 24) = 0
[pid 371] futex(0x7f82e1df87a8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid 370] futex(0x7f82e1df87a8, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid 371] <... futex resumed>) = 0
[pid 371] memfd_create("syzkaller", 0) = 3
[pid 371] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f82d98fe000
[pid 370] futex(0x7f82e1df87ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} <unfinished ...>
[pid 371] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144
[pid 371] munmap(0x7f82d98fe000, 262144) = 0
[pid 371] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 371] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 371] close(3) = 0
[pid 371] mkdir("./file1", 0777) = 0
[pid 371] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, ",errors=continue") = 0
[pid 371] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3
[pid 371] chdir("./file1") = 0
[pid 371] ioctl(4, LOOP_CLR_FD) = 0
[pid 371] close(4) = 0
[pid 371] futex(0x7f82e1df87ac, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid 370] <... futex resumed>) = 0
[pid 371] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 <unfinished ...>
[pid 370] futex(0x7f82e1df87a8, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid 371] <... open resumed>) = 4
[pid 370] futex(0x7f82e1df87ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid 371] futex(0x7f82e1df87ac, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid 370] <... futex resumed>) = 0
[pid 371] <... futex resumed>) = 1
[pid 370] futex(0x7f82e1df87a8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid 371] fallocate(4, 0, 35143, 7 <unfinished ...>
[pid 370] <... futex resumed>) = 0
[pid 370] futex(0x7f82e1df87bc, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid 370] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 <unfinished ...>
[pid 371] <... fallocate resumed>) = 0
[pid 371] futex(0x7f82e1df87ac, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid 370] <... mmap resumed>) = 0x7f82d991d000
[pid 371] <... futex resumed>) = 0
[pid 370] mprotect(0x7f82d991e000, 131072, PROT_READ|PROT_WRITE) = 0
[pid 371] futex(0x7f82e1df87a8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid 370] clone(child_stack=0x7f82d993d3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 375 attached
, parent_tid=[375], tls=0x7f82d993d700, child_tidptr=0x7f82d993d9d0) = 375
[pid 375] set_robust_list(0x7f82d993d9e0, 24) = 0
[pid 375] futex(0x7f82e1df87b8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid 370] futex(0x7f82e1df87b8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid 375] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable)
[pid 375] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0
[pid 375] futex(0x7f82e1df87bc, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid 375] futex(0x7f82e1df87b8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid 370] <... futex resumed>) = 1
[pid 375] <... futex resumed>) = 0
[pid 370] futex(0x7f82e1df87bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid 375] futex(0x7f82e1df87b8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid 370] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable)
[pid 370] futex(0x7f82e1df87a8, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid 371] <... futex resumed>) = 0
[pid 370] futex(0x7f82e1df87ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid 371] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5
[pid 371] futex(0x7f82e1df87ac, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid 370] <... futex resumed>) = 0
[pid 370] futex(0x7f82e1df87a8, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid 370] futex(0x7f82e1df87ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid 371] write(0, "\x5d\x0f\x1b\xc7\x13\x63\xce\x46\xd7\xd6\x8a\x9a\x08\x09\x94\xde\x4f\x56\xb8\x75\x79\xb6\x4c\x51\x1a\xae\x21\xa9\x1e\xb2\xdb\x3a\x04\x37\xf8\x48\xb7\x71\xb3\xc3\xb8\x06\x60\x1d\x4b\x7a\x5f\x1e\x7c\xb6\x0a\x34\xda\x12\xb2\x6f\xad\xc9\x46\xcc\xd2\x3b\x6a\xfb\x12\xc1\xce\xe6\x20\x8b\xb8\xae\x2e\x2b\x32\x28\xe7\xeb\x78\x4c\x60\x8b\x9a\x07\xad\x74\x7b\x94\x3a\x77\x03\xd8\xca\xcb\x26\xad\x1e\x02\xca\x87"..., 4096) = -1 EBADF (Bad file descriptor)
[pid 371] futex(0x7f82e1df87ac, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid 370] <... futex resumed>) = 0
[pid 371] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x5d\x0f\x1b\xc7\x13\x63\xce\x46\xd7\xd6\x8a\x9a\x08\x09\x94\xde\x4f\x56\xb8\x75\x79\xb6\x4c\x51\x1a\xae\x21\xa9\x1e\xb2\xdb\x3a\x04\x37\xf8\x48"..., 22455190 <unfinished ...>
[pid 370] futex(0x7f82e1df87a8, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid 370] futex(0x7f82e1df87ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid 371] <... write resumed>) = 262144
[pid 371] futex(0x7f82e1df87ac, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid 370] <... futex resumed>) = 0
[pid 371] futex(0x7f82e1df87a8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid 370] exit_group(0 <unfinished ...>
[pid 375] <... futex resumed>) = ?
[pid 370] <... exit_group resumed>) = ?
[pid 375] +++ exited with 0 +++
[pid 371] <... futex resumed>) = ?
[pid 371] +++ exited with 0 +++
[pid 370] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=370, si_uid=0, si_status=0, si_utime=0, si_stime=1} ---
umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556347620 /* 4 entries */, 32768) = 112
umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./2/binderfs") = 0
[ 23.707197][ T371] EXT4-fs (loop0): 1 orphan inode deleted
[ 23.712841][ T371] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[ 23.721568][ T371] ext4 filesystem being mounted at /root/syzkaller.9V7ej4/2/file1 supports timestamps until 2038 (0x7fffffff)
umount2("./2/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./2/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./2/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./2/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./2/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555634f660 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555634f660 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./2/file1") = 0
getdents64(3, 0x555556347620 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./2") = 0
mkdir("./3", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563465d0) = 376
./strace-static-x86_64: Process 376 attached
[pid 376] set_robust_list(0x5555563465e0, 24) = 0
[pid 376] chdir("./3") = 0
[pid 376] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 376] setpgid(0, 0) = 0
[pid 376] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 376] write(3, "1000", 4) = 4
[pid 376] close(3) = 0
[pid 376] symlink("/dev/binderfs", "./binderfs") = 0
[pid 376] futex(0x7f82e1df87ac, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid 376] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f82e1cfe000
[pid 376] mprotect(0x7f82e1cff000, 131072, PROT_READ|PROT_WRITE) = 0
[pid 376] clone(child_stack=0x7f82e1d1e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 377 attached
, parent_tid=[377], tls=0x7f82e1d1e700, child_tidptr=0x7f82e1d1e9d0) = 377
[pid 376] futex(0x7f82e1df87a8, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid 376] futex(0x7f82e1df87ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} <unfinished ...>
[pid 377] set_robust_list(0x7f82e1d1e9e0, 24) = 0
[pid 377] memfd_create("syzkaller", 0) = 3
[pid 377] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f82d98fe000
[pid 377] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144
[pid 377] munmap(0x7f82d98fe000, 262144) = 0
[pid 377] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 377] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 377] close(3) = 0
[pid 377] mkdir("./file1", 0777) = 0
[pid 377] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, ",errors=continue") = 0
[pid 377] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3
[pid 377] chdir("./file1") = 0
[pid 377] ioctl(4, LOOP_CLR_FD) = 0
[pid 377] close(4) = 0
[pid 377] futex(0x7f82e1df87ac, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid 376] <... futex resumed>) = 0
[pid 377] <... futex resumed>) = 1
[pid 376] futex(0x7f82e1df87a8, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid 376] futex(0x7f82e1df87ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid 377] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[pid 377] futex(0x7f82e1df87ac, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid 376] <... futex resumed>) = 0
[pid 376] futex(0x7f82e1df87a8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid 377] fallocate(4, 0, 35143, 7 <unfinished ...>
[pid 376] <... futex resumed>) = 0
[pid 376] futex(0x7f82e1df87bc, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid 376] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f82d991d000
[pid 376] mprotect(0x7f82d991e000, 131072, PROT_READ|PROT_WRITE <unfinished ...>
[pid 377] <... fallocate resumed>) = 0
[pid 376] <... mprotect resumed>) = 0
[pid 376] clone(child_stack=0x7f82d993d3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 381 attached
<unfinished ...>
[pid 381] set_robust_list(0x7f82d993d9e0, 24) = 0
[pid 381] futex(0x7f82e1df87b8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid 377] futex(0x7f82e1df87ac, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid 376] <... clone resumed>, parent_tid=[381], tls=0x7f82d993d700, child_tidptr=0x7f82d993d9d0) = 381
[pid 376] futex(0x7f82e1df87b8, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid 381] <... futex resumed>) = 0
[pid 381] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL <unfinished ...>
[pid 376] futex(0x7f82e1df87bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid 381] <... mount resumed>) = 0
[pid 381] futex(0x7f82e1df87bc, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid 376] <... futex resumed>) = 0
[pid 376] futex(0x7f82e1df87a8, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid 376] futex(0x7f82e1df87ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid 381] futex(0x7f82e1df87b8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid 377] <... futex resumed>) = 1
[pid 376] <... futex resumed>) = 0
[pid 376] futex(0x7f82e1df87ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid 377] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5
[pid 377] futex(0x7f82e1df87ac, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid 376] <... futex resumed>) = 0
[pid 376] futex(0x7f82e1df87a8, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid 376] futex(0x7f82e1df87ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid 377] write(0, "\x5d\x0f\x1b\xc7\x13\x63\xce\x46\xd7\xd6\x8a\x9a\x08\x09\x94\xde\x4f\x56\xb8\x75\x79\xb6\x4c\x51\x1a\xae\x21\xa9\x1e\xb2\xdb\x3a\x04\x37\xf8\x48\xb7\x71\xb3\xc3\xb8\x06\x60\x1d\x4b\x7a\x5f\x1e\x7c\xb6\x0a\x34\xda\x12\xb2\x6f\xad\xc9\x46\xcc\xd2\x3b\x6a\xfb\x12\xc1\xce\xe6\x20\x8b\xb8\xae\x2e\x2b\x32\x28\xe7\xeb\x78\x4c\x60\x8b\x9a\x07\xad\x74\x7b\x94\x3a\x77\x03\xd8\xca\xcb\x26\xad\x1e\x02\xca\x87"..., 4096) = -1 EBADF (Bad file descriptor)
[pid 377] futex(0x7f82e1df87ac, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid 376] <... futex resumed>) = 0
[pid 376] futex(0x7f82e1df87a8, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid 376] futex(0x7f82e1df87ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid 377] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x5d\x0f\x1b\xc7\x13\x63\xce\x46\xd7\xd6\x8a\x9a\x08\x09\x94\xde\x4f\x56\xb8\x75\x79\xb6\x4c\x51\x1a\xae\x21\xa9\x1e\xb2\xdb\x3a\x04\x37\xf8\x48"..., 22455190) = 262144
[pid 377] futex(0x7f82e1df87ac, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid 376] <... futex resumed>) = 0
[pid 377] futex(0x7f82e1df87a8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid 376] exit_group(0) = ?
[pid 381] <... futex resumed>) = ?
[pid 381] +++ exited with 0 +++
[pid 377] <... futex resumed>) = ?
[pid 377] +++ exited with 0 +++
[pid 376] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=376, si_uid=0, si_status=0, si_utime=0, si_stime=1} ---
umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556347620 /* 4 entries */, 32768) = 112
umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./3/binderfs") = 0
[ 23.846463][ T377] EXT4-fs (loop0): 1 orphan inode deleted
[ 23.852000][ T377] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[ 23.860861][ T377] ext4 filesystem being mounted at /root/syzkaller.9V7ej4/3/file1 supports timestamps until 2038 (0x7fffffff)
umount2("./3/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./3/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./3/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./3/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./3/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555634f660 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555634f660 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./3/file1") = 0
getdents64(3, 0x555556347620 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./3") = 0
mkdir("./4", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563465d0) = 382
./strace-static-x86_64: Process 382 attached
[pid 382] set_robust_list(0x5555563465e0, 24) = 0
[pid 382] chdir("./4") = 0
[pid 382] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 382] setpgid(0, 0) = 0
[pid 382] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 382] write(3, "1000", 4) = 4
[pid 382] close(3) = 0
[pid 382] symlink("/dev/binderfs", "./binderfs") = 0
[pid 382] futex(0x7f82e1df87ac, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid 382] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f82e1cfe000
[pid 382] mprotect(0x7f82e1cff000, 131072, PROT_READ|PROT_WRITE) = 0
[pid 382] clone(child_stack=0x7f82e1d1e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[383], tls=0x7f82e1d1e700, child_tidptr=0x7f82e1d1e9d0) = 383
[pid 382] futex(0x7f82e1df87a8, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid 382] futex(0x7f82e1df87ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 383 attached
<unfinished ...>
[pid 383] set_robust_list(0x7f82e1d1e9e0, 24) = 0
[pid 383] memfd_create("syzkaller", 0) = 3
[pid 383] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f82d98fe000
[pid 383] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144
[pid 383] munmap(0x7f82d98fe000, 262144) = 0
[pid 383] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 383] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 383] close(3) = 0
[pid 383] mkdir("./file1", 0777) = 0
[pid 383] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, ",errors=continue") = 0
[pid 383] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3
[pid 383] chdir("./file1") = 0
[pid 383] ioctl(4, LOOP_CLR_FD) = 0
[pid 383] close(4) = 0
[pid 383] futex(0x7f82e1df87ac, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid 382] <... futex resumed>) = 0
[pid 382] futex(0x7f82e1df87a8, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid 382] futex(0x7f82e1df87ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid 383] <... futex resumed>) = 1
[pid 383] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[pid 383] futex(0x7f82e1df87ac, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid 382] <... futex resumed>) = 0
[pid 382] futex(0x7f82e1df87a8, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid 382] futex(0x7f82e1df87bc, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid 382] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f82d991d000
[pid 382] mprotect(0x7f82d991e000, 131072, PROT_READ|PROT_WRITE) = 0
[pid 382] clone(child_stack=0x7f82d993d3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[388], tls=0x7f82d993d700, child_tidptr=0x7f82d993d9d0) = 388
[pid 382] futex(0x7f82e1df87b8, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid 382] futex(0x7f82e1df87bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid 383] <... futex resumed>) = 1
[pid 383] fallocate(4, 0, 35143, 7) = 0
[pid 383] futex(0x7f82e1df87ac, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid 383] futex(0x7f82e1df87a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 388 attached
<unfinished ...>
[pid 388] set_robust_list(0x7f82d993d9e0, 24) = 0
[pid 388] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0
[pid 388] futex(0x7f82e1df87bc, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid 382] <... futex resumed>) = 0
[pid 382] futex(0x7f82e1df87a8, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid 382] futex(0x7f82e1df87ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid 383] <... futex resumed>) = 0
[pid 383] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5
[pid 383] futex(0x7f82e1df87ac, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid 382] <... futex resumed>) = 0
[pid 382] futex(0x7f82e1df87a8, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid 382] futex(0x7f82e1df87ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid 383] <... futex resumed>) = 1
[pid 383] write(0, "\x5d\x0f\x1b\xc7\x13\x63\xce\x46\xd7\xd6\x8a\x9a\x08\x09\x94\xde\x4f\x56\xb8\x75\x79\xb6\x4c\x51\x1a\xae\x21\xa9\x1e\xb2\xdb\x3a\x04\x37\xf8\x48\xb7\x71\xb3\xc3\xb8\x06\x60\x1d\x4b\x7a\x5f\x1e\x7c\xb6\x0a\x34\xda\x12\xb2\x6f\xad\xc9\x46\xcc\xd2\x3b\x6a\xfb\x12\xc1\xce\xe6\x20\x8b\xb8\xae\x2e\x2b\x32\x28\xe7\xeb\x78\x4c\x60\x8b\x9a\x07\xad\x74\x7b\x94\x3a\x77\x03\xd8\xca\xcb\x26\xad\x1e\x02\xca\x87"..., 4096) = -1 EBADF (Bad file descriptor)
[pid 383] futex(0x7f82e1df87ac, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid 382] <... futex resumed>) = 0
[pid 382] futex(0x7f82e1df87a8, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid 382] futex(0x7f82e1df87ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid 383] <... futex resumed>) = 1
[pid 383] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x5d\x0f\x1b\xc7\x13\x63\xce\x46\xd7\xd6\x8a\x9a\x08\x09\x94\xde\x4f\x56\xb8\x75\x79\xb6\x4c\x51\x1a\xae\x21\xa9\x1e\xb2\xdb\x3a\x04\x37\xf8\x48"..., 22455190 <unfinished ...>
[pid 388] futex(0x7f82e1df87b8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid 383] <... write resumed>) = 262144
[pid 383] futex(0x7f82e1df87ac, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid 382] <... futex resumed>) = 0
[pid 383] futex(0x7f82e1df87a8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid 382] exit_group(0) = ?
[pid 388] <... futex resumed>) = ?
[pid 388] +++ exited with 0 +++
[pid 383] <... futex resumed>) = ?
[pid 383] +++ exited with 0 +++
[pid 382] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=382, si_uid=0, si_status=0, si_utime=0, si_stime=3} ---
umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556347620 /* 4 entries */, 32768) = 112
umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./4/binderfs") = 0
[ 24.006795][ T383] EXT4-fs (loop0): 1 orphan inode deleted
[ 24.012424][ T383] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[ 24.021639][ T383] ext4 filesystem being mounted at /root/syzkaller.9V7ej4/4/file1 supports timestamps until 2038 (0x7fffffff)
umount2("./4/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./4/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./4/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./4/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./4/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555634f660 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555634f660 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./4/file1") = 0
getdents64(3, 0x555556347620 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./4") = 0
mkdir("./5", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563465d0) = 389
./strace-static-x86_64: Process 389 attached
[pid 389] set_robust_list(0x5555563465e0, 24) = 0
[pid 389] chdir("./5") = 0
[pid 389] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 389] setpgid(0, 0) = 0
[pid 389] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 389] write(3, "1000", 4) = 4
[pid 389] close(3) = 0
[pid 389] symlink("/dev/binderfs", "./binderfs") = 0
[pid 389] futex(0x7f82e1df87ac, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid 389] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f82e1cfe000
[pid 389] mprotect(0x7f82e1cff000, 131072, PROT_READ|PROT_WRITE) = 0
[pid 389] clone(child_stack=0x7f82e1d1e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 390 attached
<unfinished ...>
[pid 390] set_robust_list(0x7f82e1d1e9e0, 24) = 0
[pid 390] futex(0x7f82e1df87a8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid 389] <... clone resumed>, parent_tid=[390], tls=0x7f82e1d1e700, child_tidptr=0x7f82e1d1e9d0) = 390
[pid 389] futex(0x7f82e1df87a8, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid 390] <... futex resumed>) = 0
[pid 390] memfd_create("syzkaller", 0) = 3
[pid 390] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f82d98fe000
[pid 389] futex(0x7f82e1df87ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} <unfinished ...>
[pid 390] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144
[pid 390] munmap(0x7f82d98fe000, 262144) = 0
[pid 390] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 390] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 390] close(3) = 0
[pid 390] mkdir("./file1", 0777) = 0
[pid 390] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, ",errors=continue") = 0
[pid 390] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3
[pid 390] chdir("./file1") = 0
[pid 390] ioctl(4, LOOP_CLR_FD) = 0
[pid 390] close(4) = 0
[pid 390] futex(0x7f82e1df87ac, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid 389] <... futex resumed>) = 0
[pid 389] futex(0x7f82e1df87a8, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid 389] futex(0x7f82e1df87ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid 390] <... futex resumed>) = 1
[pid 390] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[pid 390] futex(0x7f82e1df87ac, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid 389] <... futex resumed>) = 0
[pid 389] futex(0x7f82e1df87a8, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid 389] futex(0x7f82e1df87bc, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid 389] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f82d991d000
[pid 389] mprotect(0x7f82d991e000, 131072, PROT_READ|PROT_WRITE) = 0
[pid 389] clone(child_stack=0x7f82d993d3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[394], tls=0x7f82d993d700, child_tidptr=0x7f82d993d9d0) = 394
[pid 389] futex(0x7f82e1df87b8, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid 389] futex(0x7f82e1df87bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid 390] <... futex resumed>) = 1
[pid 390] fallocate(4, 0, 35143, 7) = 0
[pid 390] futex(0x7f82e1df87ac, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid 390] futex(0x7f82e1df87a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 394 attached
<unfinished ...>
[pid 394] set_robust_list(0x7f82d993d9e0, 24) = 0
[pid 394] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0
[pid 394] futex(0x7f82e1df87bc, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid 389] <... futex resumed>) = 0
[pid 389] futex(0x7f82e1df87a8, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid 389] futex(0x7f82e1df87ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid 390] <... futex resumed>) = 0
[pid 390] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5
[pid 394] futex(0x7f82e1df87b8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid 390] futex(0x7f82e1df87ac, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid 389] <... futex resumed>) = 0
[pid 389] futex(0x7f82e1df87a8, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid 389] futex(0x7f82e1df87ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid 390] <... futex resumed>) = 1
[pid 390] write(0, "\x5d\x0f\x1b\xc7\x13\x63\xce\x46\xd7\xd6\x8a\x9a\x08\x09\x94\xde\x4f\x56\xb8\x75\x79\xb6\x4c\x51\x1a\xae\x21\xa9\x1e\xb2\xdb\x3a\x04\x37\xf8\x48\xb7\x71\xb3\xc3\xb8\x06\x60\x1d\x4b\x7a\x5f\x1e\x7c\xb6\x0a\x34\xda\x12\xb2\x6f\xad\xc9\x46\xcc\xd2\x3b\x6a\xfb\x12\xc1\xce\xe6\x20\x8b\xb8\xae\x2e\x2b\x32\x28\xe7\xeb\x78\x4c\x60\x8b\x9a\x07\xad\x74\x7b\x94\x3a\x77\x03\xd8\xca\xcb\x26\xad\x1e\x02\xca\x87"..., 4096) = -1 EBADF (Bad file descriptor)
[pid 390] futex(0x7f82e1df87ac, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid 389] <... futex resumed>) = 0
[pid 389] futex(0x7f82e1df87a8, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid 389] futex(0x7f82e1df87ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid 390] <... futex resumed>) = 1
[pid 390] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x5d\x0f\x1b\xc7\x13\x63\xce\x46\xd7\xd6\x8a\x9a\x08\x09\x94\xde\x4f\x56\xb8\x75\x79\xb6\x4c\x51\x1a\xae\x21\xa9\x1e\xb2\xdb\x3a\x04\x37\xf8\x48"..., 22455190) = 262144
[pid 390] futex(0x7f82e1df87ac, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid 389] <... futex resumed>) = 0
[pid 389] exit_group(0) = ?
[pid 394] <... futex resumed>) = ?
[pid 390] <... futex resumed>) = ?
[pid 390] +++ exited with 0 +++
[pid 394] +++ exited with 0 +++
[pid 389] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=389, si_uid=0, si_status=0, si_utime=0, si_stime=2} ---
umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556347620 /* 4 entries */, 32768) = 112
umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./5/binderfs") = 0
[ 24.176866][ T390] EXT4-fs (loop0): 1 orphan inode deleted
[ 24.182460][ T390] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[ 24.191639][ T390] ext4 filesystem being mounted at /root/syzkaller.9V7ej4/5/file1 supports timestamps until 2038 (0x7fffffff)
umount2("./5/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./5/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./5/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./5/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./5/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555634f660 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555634f660 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./5/file1") = 0
getdents64(3, 0x555556347620 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./5") = 0
mkdir("./6", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563465d0) = 395
./strace-static-x86_64: Process 395 attached
[pid 395] set_robust_list(0x5555563465e0, 24) = 0
[pid 395] chdir("./6") = 0
[pid 395] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 395] setpgid(0, 0) = 0
[pid 395] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 395] write(3, "1000", 4) = 4
[pid 395] close(3) = 0
[pid 395] symlink("/dev/binderfs", "./binderfs") = 0
[pid 395] futex(0x7f82e1df87ac, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid 395] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f82e1cfe000
[pid 395] mprotect(0x7f82e1cff000, 131072, PROT_READ|PROT_WRITE) = 0
[pid 395] clone(child_stack=0x7f82e1d1e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[396], tls=0x7f82e1d1e700, child_tidptr=0x7f82e1d1e9d0) = 396
[pid 395] futex(0x7f82e1df87a8, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid 395] futex(0x7f82e1df87ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 396 attached
<unfinished ...>
[pid 396] set_robust_list(0x7f82e1d1e9e0, 24) = 0
[pid 396] memfd_create("syzkaller", 0) = 3
[pid 396] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f82d98fe000
[pid 396] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144
[pid 396] munmap(0x7f82d98fe000, 262144) = 0
[pid 396] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 396] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 396] close(3) = 0
[pid 396] mkdir("./file1", 0777) = 0
[pid 396] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, ",errors=continue") = 0
[pid 396] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3
[pid 396] chdir("./file1") = 0
[pid 396] ioctl(4, LOOP_CLR_FD) = 0
[pid 396] close(4) = 0
[pid 396] futex(0x7f82e1df87ac, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid 395] <... futex resumed>) = 0
[pid 396] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 <unfinished ...>
[pid 395] futex(0x7f82e1df87a8, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid 395] futex(0x7f82e1df87ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid 396] <... open resumed>) = 4
[pid 396] futex(0x7f82e1df87ac, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid 395] <... futex resumed>) = 0
[pid 395] futex(0x7f82e1df87a8, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid 395] futex(0x7f82e1df87bc, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid 395] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f82d991d000
[pid 395] mprotect(0x7f82d991e000, 131072, PROT_READ|PROT_WRITE) = 0
[pid 395] clone(child_stack=0x7f82d993d3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 400 attached
, parent_tid=[400], tls=0x7f82d993d700, child_tidptr=0x7f82d993d9d0) = 400
[pid 395] futex(0x7f82e1df87b8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid 400] set_robust_list(0x7f82d993d9e0, 24 <unfinished ...>
[pid 395] <... futex resumed>) = 0
[pid 400] <... set_robust_list resumed>) = 0
[pid 395] futex(0x7f82e1df87bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid 400] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0
[pid 400] futex(0x7f82e1df87bc, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid 400] futex(0x7f82e1df87b8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid 395] <... futex resumed>) = 0
[pid 395] futex(0x7f82e1df87b8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid 400] <... futex resumed>) = 0
[pid 395] <... futex resumed>) = 1
[pid 400] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c <unfinished ...>
[pid 395] futex(0x7f82e1df87bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid 400] <... open resumed>) = 5
[pid 400] futex(0x7f82e1df87bc, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid 395] <... futex resumed>) = 0
[pid 400] futex(0x7f82e1df87b8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid 395] futex(0x7f82e1df87b8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid 400] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable)
[pid 395] <... futex resumed>) = 0
[pid 395] futex(0x7f82e1df87bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid 400] write(0, "\x5d\x0f\x1b\xc7\x13\x63\xce\x46\xd7\xd6\x8a\x9a\x08\x09\x94\xde\x4f\x56\xb8\x75\x79\xb6\x4c\x51\x1a\xae\x21\xa9\x1e\xb2\xdb\x3a\x04\x37\xf8\x48\xb7\x71\xb3\xc3\xb8\x06\x60\x1d\x4b\x7a\x5f\x1e\x7c\xb6\x0a\x34\xda\x12\xb2\x6f\xad\xc9\x46\xcc\xd2\x3b\x6a\xfb\x12\xc1\xce\xe6\x20\x8b\xb8\xae\x2e\x2b\x32\x28\xe7\xeb\x78\x4c\x60\x8b\x9a\x07\xad\x74\x7b\x94\x3a\x77\x03\xd8\xca\xcb\x26\xad\x1e\x02\xca\x87"..., 4096) = -1 EBADF (Bad file descriptor)
[pid 400] futex(0x7f82e1df87bc, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid 395] <... futex resumed>) = 0
[pid 400] futex(0x7f82e1df87b8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid 395] futex(0x7f82e1df87b8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid 400] <... futex resumed>) = 0
[pid 395] <... futex resumed>) = 1
[pid 400] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x5d\x0f\x1b\xc7\x13\x63\xce\x46\xd7\xd6\x8a\x9a\x08\x09\x94\xde\x4f\x56\xb8\x75\x79\xb6\x4c\x51\x1a\xae\x21\xa9\x1e\xb2\xdb\x3a\x04\x37\xf8\x48"..., 22455190 <unfinished ...>
[pid 395] futex(0x7f82e1df87bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid 396] fallocate(4, 0, 35143, 7 <unfinished ...>
[pid 400] <... write resumed>) = 262144
[pid 400] futex(0x7f82e1df87bc, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid 400] futex(0x7f82e1df87b8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid 395] <... futex resumed>) = 0
[ 24.306887][ T396] EXT4-fs (loop0): 1 orphan inode deleted
[ 24.312544][ T396] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[ 24.321366][ T396] ext4 filesystem being mounted at /root/syzkaller.9V7ej4/6/file1 supports timestamps until 2038 (0x7fffffff)
[ 24.346614][ T396] EXT4-fs error (device loop0): ext4_map_blocks:617: inode #3: block 9: comm syz-executor300: lblock 0 mapped to illegal pblock 9 (length 1)
[ 24.361551][ T396] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6085: Out of memory
[ 24.370912][ T396] ------------[ cut here ]------------
[ 24.376277][ T396] kernel BUG at fs/ext4/ext4.h:2981!
[ 24.381455][ T396] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[ 24.387283][ T396] CPU: 1 PID: 396 Comm: syz-executor300 Not tainted 5.4.242-syzkaller-00010-g39a9b92e9828 #0
[ 24.397344][ T396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[ 24.407438][ T396] RIP: 0010:ext4_mb_find_by_goal+0xc10/0xc50
[ 24.413256][ T396] Code: fc ff ff 89 d1 80 e1 07 80 c1 03 38 c1 0f 8c 0d fc ff ff 48 89 d7 e8 6f 90 c8 ff 48 8b 54 24 30 e9 fb fb ff ff e8 40 d6 98 ff <0f> 0b e8 29 97 6f ff e8 34 d6 98 ff 0f 0b e8 2d d6 98 ff 0f 0b e8
[ 24.433210][ T396] RSP: 0018:ffff8881f4ff7400 EFLAGS: 00010293
[ 24.439200][ T396] RAX: ffffffff81cb53a0 RBX: 0000000000000001 RCX: ffff8881f31cbf00
[ 24.447100][ T396] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001
[pid 395] exit_group(0) = ?
[pid 400] <... futex resumed>) = ?
[pid 400] +++ exited with 0 +++
[ 24.454910][ T396] RBP: ffff8881f4ff7510 R08: ffffffff81cb48c9 R09: ffffed103b80b9fa
[ 24.462724][ T396] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001
[ 24.470532][ T396] R13: ffff8881f3bd73f0 R14: 1ffff1103e9fee90 R15: 1ffff1103e77ae7e
[ 24.478360][ T396] FS: 00007f82e1d1e700(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 24.487225][ T396] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 24.493631][ T396] CR2: 00007f82e1db3dc0 CR3: 00000001db5fd000 CR4: 00000000003406a0
[ 24.501587][ T396] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 24.509468][ T396] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 24.517277][ T396] Call Trace:
[ 24.520418][ T396] ? ext4_mb_new_blocks+0x29f/0x2d10
[ 24.525527][ T396] ? ext4_map_blocks+0xa83/0x1c40
[ 24.530389][ T396] ? vfs_fallocate+0x551/0x6b0
[ 24.534989][ T396] ? ext4_mb_use_inode_pa+0x4a0/0x4a0
[ 24.540205][ T396] ext4_mb_regular_allocator+0x229/0x10d0
[ 24.545752][ T396] ? ext4_mb_initialize_context+0x7e3/0xbb0
[ 24.551491][ T396] ? ext4_mb_normalize_request+0x1090/0x1090
[ 24.557307][ T396] ext4_mb_new_blocks+0x59a/0x2d10
[ 24.562252][ T396] ? memset+0x1f/0x40
[ 24.566059][ T396] ? ext4_ext_check_overlap+0x180/0x5b0
[ 24.571457][ T396] ? ext4_inode_to_goal_block+0x265/0x360
[ 24.577005][ T396] ext4_ext_map_blocks+0x1e70/0x7450
[ 24.582130][ T396] ? debug_smp_processor_id+0x20/0x20
[ 24.587332][ T396] ? check_preemption_disabled+0x9f/0x320
[ 24.592887][ T396] ? ext4_ext_release+0x10/0x10
[ 24.597567][ T396] ? check_preemption_disabled+0x9f/0x320
[ 24.603125][ T396] ? debug_smp_processor_id+0x20/0x20
[ 24.608339][ T396] ? newidle_balance+0x50a/0x930
[ 24.613104][ T396] ? check_preemption_disabled+0x9f/0x320
[ 24.619192][ T396] ? _raw_read_unlock+0x21/0x40
[ 24.623863][ T396] ? ext4_es_lookup_extent+0x54f/0x9c0
[ 24.629173][ T396] ? _raw_spin_unlock_irq+0x4a/0x60
[ 24.634194][ T396] ext4_map_blocks+0xa83/0x1c40
[ 24.638883][ T396] ? ext4_issue_zeroout+0x150/0x150
[ 24.643914][ T396] ? _raw_spin_lock_irq+0xa5/0x1b0
[ 24.648863][ T396] ? __ext4_journal_start_sb+0x295/0x460
[ 24.654352][ T396] ext4_alloc_file_blocks+0x3b1/0xc20
[ 24.659557][ T396] ? trace_ext4_fallocate_enter+0x1d0/0x1d0
[ 24.665266][ T396] ? down_read_killable+0x220/0x220
[ 24.670590][ T396] ? check_preemption_disabled+0x9f/0x320
[ 24.676144][ T396] ? avc_policy_seqno+0x17/0x70
[ 24.680825][ T396] ? debug_smp_processor_id+0x20/0x20
[ 24.686039][ T396] ? selinux_file_permission+0x2be/0x530
[ 24.691519][ T396] ? trace_ext4_fallocate_enter+0x26/0x1d0
[ 24.697158][ T396] ? inode_newsize_ok+0x17c/0x1b0
[ 24.702007][ T396] ext4_fallocate+0x3b5/0x570
[ 24.706521][ T396] vfs_fallocate+0x551/0x6b0
[ 24.710946][ T396] __x64_sys_fallocate+0xb9/0x100
[ 24.715824][ T396] do_syscall_64+0xca/0x1c0
[ 24.720152][ T396] entry_SYSCALL_64_after_hwframe+0x5c/0xc1
[ 24.725869][ T396] Modules linked in:
[ 24.729657][ T396] ---[ end trace bf263aa9d18d23fc ]---
[ 24.734946][ T396] RIP: 0010:ext4_mb_find_by_goal+0xc10/0xc50
[ 24.740800][ T396] Code: fc ff ff 89 d1 80 e1 07 80 c1 03 38 c1 0f 8c 0d fc ff ff 48 89 d7 e8 6f 90 c8 ff 48 8b 54 24 30 e9 fb fb ff ff e8 40 d6 98 ff <0f> 0b e8 29 97 6f ff e8 34 d6 98 ff 0f 0b e8 2d d6 98 ff 0f 0b e8
[ 24.760274][ T396] RSP: 0018:ffff8881f4ff7400 EFLAGS: 00010293
[ 24.766252][ T396] RAX: ffffffff81cb53a0 RBX: 0000000000000001 RCX: ffff8881f31cbf00
[ 24.774055][ T396] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001
[ 24.781868][ T396] RBP: ffff8881f4ff7510 R08: ffffffff81cb48c9 R09: ffffed103b80b9fa
[ 24.789690][ T396] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001
[ 24.797490][ T396] R13: ffff8881f3bd73f0 R14: 1ffff1103e9fee90 R15: 1ffff1103e77ae7e
[ 24.805316][ T396] FS: 00007f82e1d1e700(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 24.814058][ T396] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 24.820560][ T396] CR2: 00007f82e1db3dc0 CR3: 00000001db5fd000 CR4: 00000000003406a0
[ 24.828322][ T396] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 24.836122][ T396] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 24.843993][ T396] Kernel panic - not syncing: Fatal exception
[ 24.850230][ T396] Kernel Offset: disabled
[ 24.854359][ T396] Rebooting in 86400 seconds..