./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1132069663 <...> TEX_WAKE_PRIVATE, 1000000 [pid 5793] close(4 [pid 5800] <... futex resumed>) = 1 [pid 5793] <... close resumed>) = 0 [pid 5786] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5805 attached ./strace-static-x86_64: Process 5803 attached [pid 5800] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5793] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5786] exit_group(0 [pid 4999] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 5797] <... mount resumed>) = 0 [pid 4995] <... clone resumed>, child_tidptr=0x555556fb95d0) = 5805 [pid 5805] set_robust_list(0x555556fb95e0, 24 [pid 5803] set_robust_list(0x555556fb95e0, 24 [pid 5800] <... futex resumed>) = ? [pid 5797] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5793] <... futex resumed>) = 1 [pid 5792] <... futex resumed>) = 0 [pid 5789] <... futex resumed>) = ? [pid 5786] <... exit_group resumed>) = ? [pid 4999] umount2("./25/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5805] <... set_robust_list resumed>) = 0 [pid 5803] <... set_robust_list resumed>) = 0 [pid 5800] +++ exited with 0 +++ [pid 5797] <... openat resumed>) = 3 [pid 5793] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5792] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5789] +++ exited with 0 +++ [pid 5797] chdir("./file0" [pid 5793] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5805] chdir("./25" [pid 5797] <... chdir resumed>) = 0 [pid 5793] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5805] <... chdir resumed>) = 0 [pid 5803] chdir("./27" [pid 5797] ioctl(4, LOOP_CLR_FD [pid 5792] <... futex resumed>) = 0 [pid 5786] +++ exited with 0 +++ [pid 4999] lstat("./25/binderfs", [pid 5805] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5803] <... chdir resumed>) = 0 [pid 5797] <... ioctl resumed>) = 0 [pid 5793] <... open resumed>) = 4 [pid 5792] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4994] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5786, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5805] <... prctl resumed>) = 0 [pid 5803] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5797] close(4 [pid 5793] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5792] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5805] setpgid(0, 0 [pid 5803] <... prctl resumed>) = 0 [pid 5797] <... close resumed>) = 0 [pid 5793] <... futex resumed>) = 0 [pid 5792] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] unlink("./25/binderfs" [pid 5805] <... setpgid resumed>) = 0 [pid 5803] setpgid(0, 0 [pid 5797] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5793] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5792] <... futex resumed>) = 0 [pid 5805] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5803] <... setpgid resumed>) = 0 [pid 5797] <... futex resumed>) = 1 [pid 5795] <... futex resumed>) = 0 [pid 4999] <... unlink resumed>) = 0 [pid 5803] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5797] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5795] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5792] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5805] <... openat resumed>) = 3 [pid 5797] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5795] <... futex resumed>) = 0 [pid 5793] <... write resumed>) = 9 [pid 4999] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5803] <... openat resumed>) = 3 [pid 5805] write(3, "1000", 4 [pid 5797] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5795] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 116.955443][ T5789] EXT4-fs (loop0): Block reservation details [ 116.966763][ T5789] EXT4-fs (loop0): i_reserved_data_blocks=1 [pid 5793] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] umount2("./26", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5793] <... futex resumed>) = 1 [pid 5792] <... futex resumed>) = 0 [pid 5792] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5793] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5792] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4994] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5793] <... openat resumed>) = 5 [pid 4994] <... openat resumed>) = 3 [pid 5805] <... write resumed>) = 4 [pid 5803] write(3, "1000", 4 [pid 5797] <... open resumed>) = 4 [pid 5803] <... write resumed>) = 4 [pid 5805] close(3 [pid 5803] close(3 [pid 5797] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5793] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5805] <... close resumed>) = 0 [pid 4994] fstat(3, [pid 5805] symlink("/dev/binderfs", "./binderfs" [pid 5803] <... close resumed>) = 0 [pid 5797] <... futex resumed>) = 1 [pid 5795] <... futex resumed>) = 0 [pid 5793] <... futex resumed>) = 1 [pid 5792] <... futex resumed>) = 0 [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5805] <... symlink resumed>) = 0 [pid 5803] symlink("/dev/binderfs", "./binderfs" [pid 5795] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5792] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] getdents64(3, [pid 5797] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5793] open("./bus", O_RDWR [pid 5805] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5803] <... symlink resumed>) = 0 [pid 5795] <... futex resumed>) = 0 [pid 5792] <... futex resumed>) = 0 [pid 4994] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 5805] <... futex resumed>) = 0 [pid 5803] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5797] <... write resumed>) = 9 [pid 5795] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5793] <... open resumed>) = 6 [pid 5792] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4994] umount2("./26/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5805] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5803] <... futex resumed>) = 0 [pid 5797] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5795] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5793] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5792] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5805] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 5803] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5797] <... futex resumed>) = 0 [pid 5795] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5793] <... futex resumed>) = 0 [pid 5792] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] lstat("./26/binderfs", [pid 5803] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 5797] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5793] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5792] <... futex resumed>) = 0 [pid 5795] <... futex resumed>) = 0 [pid 4994] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5797] <... openat resumed>) = 5 [pid 5792] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5793] <... mmap resumed>) = 0x20000000 [pid 5795] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5803] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 4994] unlink("./26/binderfs" [pid 5803] <... mprotect resumed>) = 0 [pid 5797] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] <... unlink resumed>) = 0 [pid 5803] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5797] <... futex resumed>) = 1 [pid 5795] <... futex resumed>) = 0 [pid 4994] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5797] open("./bus", O_RDWR [pid 5795] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5803] <... clone resumed>, parent_tid=[5807], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 5807 [pid 5797] <... open resumed>) = 6 [pid 5795] <... futex resumed>) = 0 [pid 5805] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 5803] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5797] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5795] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5793] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5805] <... mprotect resumed>) = 0 [pid 5803] <... futex resumed>) = 0 [pid 5797] <... futex resumed>) = 0 [pid 5795] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5793] <... futex resumed>) = 1 [pid 5792] <... futex resumed>) = 0 [pid 5795] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5792] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5795] <... futex resumed>) = 0 [ 117.008780][ T5076] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 117.038477][ T5076] EXT4-fs (loop5): This should not happen!! Data will be lost [ 117.038477][ T5076] [pid 5805] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5803] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5797] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5795] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5793] sendfile(4, 5, NULL, 2147483713 [pid 5792] <... futex resumed>) = 0 [pid 4999] <... umount2 resumed>) = 0 [pid 5792] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5797] <... mmap resumed>) = 0x20000000 [pid 5805] <... clone resumed>, parent_tid=[5808], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 5808 ./strace-static-x86_64: Process 5807 attached [pid 5805] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5797] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5807] set_robust_list(0x7f5c2b8109e0, 24 [pid 5805] <... futex resumed>) = 0 [pid 5797] <... futex resumed>) = 1 [pid 5795] <... futex resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5807] <... set_robust_list resumed>) = 0 [pid 5805] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5797] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5795] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] lstat("./25/file0", [pid 5807] memfd_create("syzkaller", 0 [pid 5797] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5795] <... futex resumed>) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5795] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5797] sendfile(4, 5, NULL, 2147483713 [pid 4999] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5807] <... memfd_create resumed>) = 3 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 117.085150][ T11] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 117.103545][ T11] EXT4-fs (loop0): This should not happen!! Data will be lost [ 117.103545][ T11] [ 117.107206][ T5793] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 4999] openat(AT_FDCWD, "./25/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5807] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4999] <... openat resumed>) = 4 ./strace-static-x86_64: Process 5808 attached [pid 5808] set_robust_list(0x7f5c2b8109e0, 24) = 0 [pid 5808] memfd_create("syzkaller", 0) = 3 [pid 5808] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5792] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5808] <... mmap resumed>) = 0x7f5c233f0000 [pid 5792] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5792] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4999] fstat(4, [pid 5807] <... mmap resumed>) = 0x7f5c233f0000 [pid 5792] <... mmap resumed>) = 0x7f5c234cf000 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5792] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4999] getdents64(4, 0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, [pid 5792] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4999] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 5808] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4999] close(4) = 0 [pid 5792] <... clone resumed>, parent_tid=[5809], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 5809 [pid 4999] rmdir("./25/file0") = 0 [pid 5792] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] getdents64(3, [pid 5792] <... futex resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 5809 attached [pid 5792] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5809] set_robust_list(0x7f5c234ef9e0, 24) = 0 [pid 4999] close(3 [pid 5809] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 4999] <... close resumed>) = 0 [pid 4999] rmdir("./25") = 0 [pid 4999] mkdir("./26", 0777) = 0 [pid 5795] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4999] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5795] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... openat resumed>) = 3 [pid 5795] <... futex resumed>) = 0 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5795] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5795] <... mmap resumed>) = 0x7f5c234cf000 [pid 4999] close(3 [pid 5795] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 4999] <... close resumed>) = 0 [ 117.136883][ T5797] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 5807] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5795] <... mprotect resumed>) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4994] <... umount2 resumed>) = 0 [pid 5808] <... write resumed>) = 1048576 [pid 5807] <... write resumed>) = 1048576 [pid 5797] <... sendfile resumed>) = 63 [pid 5795] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5792] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4994] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5808] munmap(0x7f5c233f0000, 1048576 [pid 5807] munmap(0x7f5c233f0000, 1048576 [ 117.178401][ T5793] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 117.190915][ T5797] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 117.215278][ T5797] EXT4-fs (loop4): This should not happen!! Data will be lost [ 117.215278][ T5797] [ 117.215310][ T5797] EXT4-fs (loop4): Total free blocks count 0 [ 117.215343][ T5797] EXT4-fs (loop4): Free/Dirty block details [pid 5797] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... clone resumed>, child_tidptr=0x555556fb95d0) = 5810 [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5808] <... munmap resumed>) = 0 [pid 5807] <... munmap resumed>) = 0 [pid 5797] <... futex resumed>) = 0 [pid 5795] <... clone resumed>, parent_tid=[5811], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 5811 [pid 4994] lstat("./26/file0", [pid 5808] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5807] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5797] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5795] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5808] <... openat resumed>) = 4 [pid 5807] <... openat resumed>) = 4 [pid 5795] <... futex resumed>) = 0 [pid 4994] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5808] ioctl(4, LOOP_SET_FD, 3 [pid 5807] ioctl(4, LOOP_SET_FD, 3 [pid 5795] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5811 attached ./strace-static-x86_64: Process 5810 attached [pid 4994] openat(AT_FDCWD, "./26/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4994] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5811] set_robust_list(0x7f5c234ef9e0, 24 [pid 5810] set_robust_list(0x555556fb95e0, 24 [pid 4994] getdents64(4, [pid 5811] <... set_robust_list resumed>) = 0 [pid 5810] <... set_robust_list resumed>) = 0 [pid 4994] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [ 117.215363][ T5797] EXT4-fs (loop4): free_blocks=2415919104 [ 117.215386][ T5797] EXT4-fs (loop4): dirty_blocks=16 [ 117.215405][ T5797] EXT4-fs (loop4): Block reservation details [ 117.215423][ T5797] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 117.251598][ T5808] loop1: detected capacity change from 0 to 2048 [ 117.263374][ T5793] EXT4-fs (loop3): This should not happen!! Data will be lost [ 117.263374][ T5793] [ 117.268545][ T5807] loop2: detected capacity change from 0 to 2048 [ 117.277473][ T5793] EXT4-fs (loop3): Total free blocks count 0 [pid 5807] <... ioctl resumed>) = 0 [pid 4994] getdents64(4, [pid 5807] close(3 [pid 4994] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 5807] <... close resumed>) = 0 [pid 4994] close(4 [pid 5811] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5807] mkdir("./file0", 0777 [pid 4994] <... close resumed>) = 0 [pid 5811] <... ioctl resumed>) = 0 [pid 5810] chdir("./26" [pid 5807] <... mkdir resumed>) = 0 [pid 4994] rmdir("./26/file0" [pid 5807] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 4994] <... rmdir resumed>) = 0 [pid 4994] getdents64(3, [pid 5811] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5810] <... chdir resumed>) = 0 [pid 4994] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 5811] <... futex resumed>) = 1 [pid 5810] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5795] <... futex resumed>) = 0 [pid 4994] close(3) = 0 [pid 4994] rmdir("./26") = 0 [pid 4994] mkdir("./27", 0777 [pid 5811] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5810] <... prctl resumed>) = 0 [pid 5808] <... ioctl resumed>) = 0 [pid 5795] exit_group(0 [pid 4994] <... mkdir resumed>) = 0 [pid 5808] close(3 [pid 4994] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5808] <... close resumed>) = 0 [pid 4994] <... openat resumed>) = 3 [pid 5810] setpgid(0, 0 [pid 5808] mkdir("./file0", 0777 [pid 5797] <... futex resumed>) = ? [pid 5795] <... exit_group resumed>) = ? [pid 4994] ioctl(3, LOOP_CLR_FD [pid 5811] <... futex resumed>) = ? [pid 5810] <... setpgid resumed>) = 0 [pid 5808] <... mkdir resumed>) = 0 [pid 5797] +++ exited with 0 +++ [pid 4994] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5808] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 4994] close(3 [pid 5811] +++ exited with 0 +++ [pid 5810] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5809] <... ioctl resumed>) = 0 [pid 5795] +++ exited with 0 +++ [pid 5793] <... sendfile resumed>) = 63 [pid 4994] <... close resumed>) = 0 [pid 5810] <... openat resumed>) = 3 [pid 5809] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5810] write(3, "1000", 4 [pid 5809] <... futex resumed>) = 0 [pid 5793] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5810] <... write resumed>) = 4 [pid 5809] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5810] close(3 [pid 5793] <... futex resumed>) = 0 [pid 5810] <... close resumed>) = 0 [pid 5810] symlink("/dev/binderfs", "./binderfs" [pid 5793] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5810] <... symlink resumed>) = 0 [pid 5810] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5810] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c2b7f0000 [pid 5810] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5810] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5814], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 5814 [pid 5810] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5810] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4994] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5807] <... mount resumed>) = 0 [pid 5792] exit_group(0 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5795, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- ./strace-static-x86_64: Process 5814 attached [pid 5814] set_robust_list(0x7f5c2b8109e0, 24) = 0 [pid 5814] memfd_create("syzkaller", 0 [pid 5793] <... futex resumed>) = ? [pid 5792] <... exit_group resumed>) = ? [pid 5809] <... futex resumed>) = ? [pid 5793] +++ exited with 0 +++ [pid 5809] +++ exited with 0 +++ [pid 5814] <... memfd_create resumed>) = 3 [pid 5814] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5c233f0000 [pid 5792] +++ exited with 0 +++ ./strace-static-x86_64: Process 5815 attached [pid 4998] umount2("./25", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5792, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 4994] <... clone resumed>, child_tidptr=0x555556fb95d0) = 5815 [pid 5807] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5815] set_robust_list(0x555556fb95e0, 24) = 0 [pid 5815] chdir("./27" [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5815] <... chdir resumed>) = 0 [pid 5807] <... openat resumed>) = 3 [pid 5815] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5807] chdir("./file0" [pid 4998] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5807] <... chdir resumed>) = 0 [pid 4997] umount2("./26", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5807] ioctl(4, LOOP_CLR_FD [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... openat resumed>) = 3 [pid 5807] <... ioctl resumed>) = 0 [pid 4997] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] fstat(3, [pid 4997] <... openat resumed>) = 3 [pid 5807] close(4 [pid 4997] fstat(3, [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5807] <... close resumed>) = 0 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5807] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] getdents64(3, [pid 4997] getdents64(3, [pid 5807] <... futex resumed>) = 1 [pid 5803] <... futex resumed>) = 0 [pid 5803] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4997] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 5803] <... futex resumed>) = 0 [pid 4997] umount2("./26/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5807] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5803] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] umount2("./25/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./26/binderfs", [pid 5815] <... prctl resumed>) = 0 [pid 5807] <... open resumed>) = 4 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5815] setpgid(0, 0 [pid 5814] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5815] <... setpgid resumed>) = 0 [pid 5815] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4998] lstat("./25/binderfs", [pid 5807] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] unlink("./26/binderfs" [pid 5815] <... openat resumed>) = 3 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5815] write(3, "1000", 4) = 4 [pid 5815] close(3) = 0 [pid 5815] symlink("/dev/binderfs", "./binderfs" [pid 4997] <... unlink resumed>) = 0 [pid 5815] <... symlink resumed>) = 0 [pid 5807] <... futex resumed>) = 1 [pid 5803] <... futex resumed>) = 0 [pid 4998] unlink("./25/binderfs" [pid 4997] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5815] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5807] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5803] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5815] <... futex resumed>) = 0 [pid 5803] <... futex resumed>) = 0 [pid 4998] <... unlink resumed>) = 0 [pid 5815] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c2b7f0000 [pid 5807] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5803] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5815] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 5807] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5815] <... mprotect resumed>) = 0 [pid 5815] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5807] <... write resumed>) = 9 [ 117.290600][ T5793] EXT4-fs (loop3): Free/Dirty block details [ 117.298249][ T5793] EXT4-fs (loop3): free_blocks=2415919104 [ 117.305966][ T5793] EXT4-fs (loop3): dirty_blocks=16 [ 117.311795][ T5793] EXT4-fs (loop3): Block reservation details [ 117.319417][ T5793] EXT4-fs (loop3): i_reserved_data_blocks=1 [pid 5815] <... clone resumed>, parent_tid=[5818], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 5818 [pid 5807] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5815] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5814] <... write resumed>) = 1048576 [pid 5815] <... futex resumed>) = 0 [pid 5815] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5814] munmap(0x7f5c233f0000, 1048576) = 0 [pid 5814] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5814] ioctl(4, LOOP_SET_FD, 3 [pid 5807] <... futex resumed>) = 1 [pid 5803] <... futex resumed>) = 0 [pid 5807] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5814] <... ioctl resumed>) = 0 [pid 5814] close(3) = 0 [pid 5814] mkdir("./file0", 0777) = 0 [pid 5814] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5803] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5807] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5807] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5803] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5818 attached [pid 5818] set_robust_list(0x7f5c2b8109e0, 24) = 0 [pid 5807] <... openat resumed>) = 5 [pid 5803] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5807] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5818] memfd_create("syzkaller", 0) = 3 [pid 5818] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5c233f0000 [pid 5808] <... mount resumed>) = 0 [pid 5803] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5807] <... futex resumed>) = 0 [pid 5807] open("./bus", O_RDWR [pid 5808] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5803] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5803] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5807] <... open resumed>) = 6 [pid 5807] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5808] <... openat resumed>) = 3 [pid 5807] <... futex resumed>) = 1 [pid 5803] <... futex resumed>) = 0 [pid 5808] chdir("./file0" [pid 5803] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5807] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5803] <... futex resumed>) = 0 [pid 5808] <... chdir resumed>) = 0 [pid 5807] <... mmap resumed>) = 0x20000000 [pid 5803] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5808] ioctl(4, LOOP_CLR_FD [pid 5807] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5803] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5803] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5803] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5808] <... ioctl resumed>) = 0 [pid 5807] <... futex resumed>) = 1 [pid 5803] <... futex resumed>) = 0 [pid 5808] close(4 [pid 5807] sendfile(4, 5, NULL, 2147483713 [pid 5803] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=48000000} [pid 5808] <... close resumed>) = 0 [pid 5808] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5805] <... futex resumed>) = 0 [pid 5805] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5805] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5808] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000) = 4 [ 117.372252][ T5457] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 117.379642][ T5814] loop5: detected capacity change from 0 to 2048 [ 117.391601][ T5076] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5818] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5808] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5818] <... write resumed>) = 1048576 [pid 5818] munmap(0x7f5c233f0000, 1048576) = 0 [pid 5818] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5818] ioctl(4, LOOP_SET_FD, 3 [pid 5808] <... futex resumed>) = 1 [pid 5805] <... futex resumed>) = 0 [pid 5805] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5808] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5805] <... futex resumed>) = 0 [pid 5805] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5818] <... ioctl resumed>) = 0 [pid 5818] close(3) = 0 [pid 5808] <... write resumed>) = 9 [pid 5818] mkdir("./file0", 0777 [pid 5808] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5805] <... futex resumed>) = 0 [pid 5808] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5805] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5808] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5805] <... futex resumed>) = 0 [pid 5808] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5805] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5808] <... openat resumed>) = 5 [pid 5808] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5805] <... futex resumed>) = 0 [pid 5808] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5805] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5808] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5805] <... futex resumed>) = 0 [pid 5808] open("./bus", O_RDWR [pid 5805] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5818] <... mkdir resumed>) = 0 [pid 5808] <... open resumed>) = 6 [pid 5808] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5805] <... futex resumed>) = 0 [pid 5808] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5805] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5808] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5805] <... futex resumed>) = 0 [pid 5808] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5805] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 117.428757][ T5807] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 117.440805][ T5818] loop0: detected capacity change from 0 to 2048 [ 117.460282][ T5457] EXT4-fs (loop3): This should not happen!! Data will be lost [ 117.460282][ T5457] [ 117.470335][ T5076] EXT4-fs (loop4): This should not happen!! Data will be lost [pid 5818] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5808] <... mmap resumed>) = 0x20000000 [pid 5803] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5808] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5803] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5808] <... futex resumed>) = 1 [pid 5805] <... futex resumed>) = 0 [pid 5803] <... futex resumed>) = 0 [pid 5808] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5805] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5803] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5808] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5805] <... futex resumed>) = 0 [pid 5803] <... mmap resumed>) = 0x7f5c234cf000 [pid 5808] sendfile(4, 5, NULL, 2147483713 [pid 5805] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5803] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5803] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5821], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 5821 [ 117.470335][ T5076] [ 117.470888][ T5807] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 117.494226][ T5807] EXT4-fs (loop2): This should not happen!! Data will be lost [ 117.494226][ T5807] [ 117.504302][ T5807] EXT4-fs (loop2): Total free blocks count 0 [ 117.509934][ T5808] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 5803] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5803] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5805] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5805] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5805] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c234cf000 [ 117.511046][ T5807] EXT4-fs (loop2): Free/Dirty block details [ 117.531341][ T5807] EXT4-fs (loop2): free_blocks=2415919104 [ 117.537759][ T5807] EXT4-fs (loop2): dirty_blocks=16 [ 117.543466][ T5807] EXT4-fs (loop2): Block reservation details [ 117.550191][ T5807] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 117.559835][ T5808] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 117.572230][ T5808] EXT4-fs (loop1): This should not happen!! Data will be lost [pid 5805] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 5821 attached [pid 5818] <... mount resumed>) = 0 [pid 5814] <... mount resumed>) = 0 [pid 5807] <... sendfile resumed>) = 63 [pid 5805] <... mprotect resumed>) = 0 [pid 5818] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5814] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5805] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5803] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5821] set_robust_list(0x7f5c234ef9e0, 24 [pid 5818] <... openat resumed>) = 3 [pid 5814] <... openat resumed>) = 3 [pid 5807] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5821] <... set_robust_list resumed>) = 0 [pid 5818] chdir("./file0" [pid 5814] chdir("./file0" [pid 5805] <... clone resumed>, parent_tid=[5825], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 5825 [pid 4997] <... umount2 resumed>) = 0 [pid 5818] <... chdir resumed>) = 0 [pid 5814] <... chdir resumed>) = 0 [pid 5805] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5825 attached [pid 5821] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5818] ioctl(4, LOOP_CLR_FD [pid 5814] ioctl(4, LOOP_CLR_FD [pid 5807] <... futex resumed>) = 0 [pid 5805] <... futex resumed>) = 0 [pid 5818] <... ioctl resumed>) = 0 [pid 5814] <... ioctl resumed>) = 0 [pid 5805] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5818] close(4 [pid 5814] close(4 [pid 5825] set_robust_list(0x7f5c234ef9e0, 24 [pid 5821] <... ioctl resumed>) = 0 [pid 5818] <... close resumed>) = 0 [pid 5814] <... close resumed>) = 0 [pid 5807] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4997] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5818] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5814] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5818] <... futex resumed>) = 1 [pid 5815] <... futex resumed>) = 0 [pid 5814] <... futex resumed>) = 1 [pid 5810] <... futex resumed>) = 0 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... set_robust_list resumed>) = 0 [pid 5821] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5818] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5815] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5814] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5810] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5808] <... sendfile resumed>) = 63 [pid 4997] lstat("./26/file0", [pid 5825] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5821] <... futex resumed>) = 0 [pid 5818] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5815] <... futex resumed>) = 0 [pid 5814] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5810] <... futex resumed>) = 0 [pid 5808] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [ 117.572230][ T5808] [ 117.581982][ T5808] EXT4-fs (loop1): Total free blocks count 0 [ 117.588364][ T5808] EXT4-fs (loop1): Free/Dirty block details [ 117.594777][ T5808] EXT4-fs (loop1): free_blocks=2415919104 [ 117.601042][ T5808] EXT4-fs (loop1): dirty_blocks=16 [ 117.607828][ T5808] EXT4-fs (loop1): Block reservation details [ 117.614316][ T5808] EXT4-fs (loop1): i_reserved_data_blocks=1 [pid 5803] exit_group(0 [pid 4998] <... umount2 resumed>) = 0 [pid 4997] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5825] <... ioctl resumed>) = 0 [pid 5818] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5815] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5814] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5810] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5808] <... futex resumed>) = 0 [pid 5807] <... futex resumed>) = ? [pid 5805] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5803] <... exit_group resumed>) = ? [pid 4997] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5825] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5821] +++ exited with 0 +++ [pid 5818] <... open resumed>) = 4 [pid 5814] <... open resumed>) = 4 [pid 5808] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5807] +++ exited with 0 +++ [pid 5805] exit_group(0 [pid 5803] +++ exited with 0 +++ [pid 4998] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5818] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5814] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5805] <... exit_group resumed>) = ? [pid 4997] openat(AT_FDCWD, "./26/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4996] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5803, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5825] <... futex resumed>) = ? [pid 5818] <... futex resumed>) = 1 [pid 5815] <... futex resumed>) = 0 [pid 5814] <... futex resumed>) = 1 [pid 5810] <... futex resumed>) = 0 [pid 5808] <... futex resumed>) = ? [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] <... openat resumed>) = 4 [pid 5825] +++ exited with 0 +++ [pid 5818] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5815] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5814] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5810] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] fstat(4, [pid 5818] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5815] <... futex resumed>) = 0 [pid 5814] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5810] <... futex resumed>) = 0 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] umount2("./27", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5818] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5815] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5814] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5810] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5808] +++ exited with 0 +++ [pid 5805] +++ exited with 0 +++ [pid 4998] lstat("./25/file0", [pid 4997] getdents64(4, [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5818] <... write resumed>) = 9 [pid 5814] <... write resumed>) = 9 [pid 4997] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4996] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4995] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5805, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5818] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5814] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(4, [pid 4996] <... openat resumed>) = 3 [pid 5818] <... futex resumed>) = 1 [pid 5815] <... futex resumed>) = 0 [pid 5814] <... futex resumed>) = 1 [pid 5810] <... futex resumed>) = 0 [pid 4998] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4996] fstat(3, [pid 5818] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5815] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5814] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5810] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] close(4 [pid 4996] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] umount2("./25", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5818] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5815] <... futex resumed>) = 0 [pid 5814] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5810] <... futex resumed>) = 0 [pid 4998] openat(AT_FDCWD, "./25/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] <... close resumed>) = 0 [pid 4996] getdents64(3, [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5818] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5815] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5814] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5810] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] <... openat resumed>) = 4 [pid 4997] rmdir("./26/file0" [pid 4996] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4995] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5818] <... openat resumed>) = 5 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, [pid 5818] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5814] <... openat resumed>) = 5 [pid 4998] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4997] <... rmdir resumed>) = 0 [pid 4996] umount2("./27/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] <... openat resumed>) = 3 [pid 5818] <... futex resumed>) = 1 [pid 5815] <... futex resumed>) = 0 [pid 5814] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] close(4 [pid 4997] getdents64(3, [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] fstat(3, [pid 5818] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5815] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5814] <... futex resumed>) = 1 [pid 5810] <... futex resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 4997] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4996] lstat("./27/binderfs", [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5818] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5815] <... futex resumed>) = 0 [pid 5814] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5810] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] rmdir("./25/file0" [pid 4997] close(3 [pid 4996] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4995] getdents64(3, [pid 5818] open("./bus", O_RDWR [pid 5815] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5814] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5810] <... futex resumed>) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 4997] <... close resumed>) = 0 [pid 4996] unlink("./27/binderfs" [pid 4995] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 5818] <... open resumed>) = 6 [pid 5814] open("./bus", O_RDWR [pid 5810] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] getdents64(3, [pid 4997] rmdir("./26" [pid 4996] <... unlink resumed>) = 0 [pid 4995] umount2("./25/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5818] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5814] <... open resumed>) = 6 [pid 4998] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4997] <... rmdir resumed>) = 0 [pid 4996] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5818] <... futex resumed>) = 1 [pid 5815] <... futex resumed>) = 0 [pid 5814] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] close(3 [pid 4997] mkdir("./27", 0777 [pid 4995] lstat("./25/binderfs", [pid 5818] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5815] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5814] <... futex resumed>) = 1 [pid 5810] <... futex resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 4997] <... mkdir resumed>) = 0 [pid 4995] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5818] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5815] <... futex resumed>) = 0 [pid 5814] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5810] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] rmdir("./25" [pid 4997] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4995] unlink("./25/binderfs" [ 117.722762][ T26] kauditd_printk_skb: 96 callbacks suppressed [ 117.722777][ T26] audit: type=1804 audit(1687834587.782:744): pid=5818 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor113" name="/root/syzkaller.slA38Q/27/file0/bus" dev="loop0" ino=18 res=1 errno=0 [ 117.754167][ T5076] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5818] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5815] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5814] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5810] <... futex resumed>) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 4997] <... openat resumed>) = 3 [pid 4995] <... unlink resumed>) = 0 [pid 5818] <... mmap resumed>) = 0x20000000 [pid 5814] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5810] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] mkdir("./26", 0777 [pid 4997] ioctl(3, LOOP_CLR_FD [pid 4995] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [ 117.767299][ T26] audit: type=1804 audit(1687834587.792:745): pid=5814 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor113" name="/root/syzkaller.drywye/26/file0/bus" dev="loop5" ino=18 res=1 errno=0 [ 117.768532][ T5076] EXT4-fs (loop2): This should not happen!! Data will be lost [ 117.768532][ T5076] [pid 5818] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5815] <... futex resumed>) = 0 [pid 5814] <... mmap resumed>) = 0x20000000 [pid 4998] <... mkdir resumed>) = 0 [pid 4997] <... ioctl resumed>) = -1 ENXIO (No such device or address) [ 117.797210][ T26] audit: type=1804 audit(1687834587.802:746): pid=5818 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor113" name="/root/syzkaller.slA38Q/27/file0/bus" dev="loop0" ino=18 res=1 errno=0 [ 117.828878][ T5608] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 117.829004][ T26] audit: type=1804 audit(1687834587.812:747): pid=5814 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor113" name="/root/syzkaller.drywye/26/file0/bus" dev="loop5" ino=18 res=1 errno=0 [ 117.841501][ T5608] EXT4-fs (loop1): This should not happen!! Data will be lost [pid 5818] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5815] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5814] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4997] close(3 [pid 5815] <... futex resumed>) = 0 [pid 5814] <... futex resumed>) = 1 [pid 5810] <... futex resumed>) = 0 [pid 4997] <... close resumed>) = 0 [pid 5810] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... openat resumed>) = 3 [pid 5814] sendfile(4, 5, NULL, 2147483713 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5818] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5815] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5810] <... futex resumed>) = 0 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5818] sendfile(4, 5, NULL, 2147483713 [pid 5810] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] close(3 [pid 4997] <... clone resumed>, child_tidptr=0x555556fb95d0) = 5826 [pid 4998] <... close resumed>) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556fb95d0) = 5827 ./strace-static-x86_64: Process 5827 attached ./strace-static-x86_64: Process 5826 attached [pid 5826] set_robust_list(0x555556fb95e0, 24) = 0 [pid 5826] chdir("./27") = 0 [ 117.841501][ T5608] [ 117.876010][ T4996] EXT4-fs unmount: 256 callbacks suppressed [ 117.883331][ T5814] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 117.890385][ T5818] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 5826] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5826] setpgid(0, 0) = 0 [pid 5826] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5815] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5815] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5815] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c234cf000 [pid 5815] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5810] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5815] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5810] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5815] <... clone resumed>, parent_tid=[5828], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 5828 [pid 5810] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5815] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5810] <... mmap resumed>) = 0x7f5c234cf000 [pid 5815] <... futex resumed>) = 0 [pid 5810] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 5815] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5810] <... mprotect resumed>) = 0 [pid 5810] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5829], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 5829 [pid 5810] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5810] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5827] set_robust_list(0x555556fb95e0, 24 [pid 5826] write(3, "1000", 4) = 4 [pid 5826] close(3) = 0 [pid 5826] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5826] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5826] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5827] <... set_robust_list resumed>) = 0 [pid 5827] chdir("./26" [pid 4995] <... umount2 resumed>) = 0 [pid 5826] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 5826] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 4995] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5826] <... mprotect resumed>) = 0 [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4996] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 5828 attached ./strace-static-x86_64: Process 5829 attached [pid 4995] lstat("./25/file0", [pid 4996] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5829] set_robust_list(0x7f5c234ef9e0, 24 [pid 5828] set_robust_list(0x7f5c234ef9e0, 24 [pid 4995] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5827] <... chdir resumed>) = 0 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5828] <... set_robust_list resumed>) = 0 [pid 5829] <... set_robust_list resumed>) = 0 [pid 5828] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5829] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5827] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4996] lstat("./27/file0", [pid 5826] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4996] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... clone resumed>, parent_tid=[5830], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 5830 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] openat(AT_FDCWD, "./25/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] openat(AT_FDCWD, "./27/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4995] <... openat resumed>) = 4 [ 117.919010][ T26] audit: type=1804 audit(1687834587.822:748): pid=5818 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor113" name="/root/syzkaller.slA38Q/27/file0/bus" dev="loop0" ino=18 res=1 errno=0 [ 117.955346][ T5814] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5826] <... futex resumed>) = 0 [pid 4996] <... openat resumed>) = 4 [pid 4995] fstat(4, [pid 5826] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4996] fstat(4, [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] getdents64(4, [pid 4996] getdents64(4, [pid 4995] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4996] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4995] getdents64(4, [pid 4996] getdents64(4, [pid 4995] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4996] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4995] close(4 [pid 5827] <... prctl resumed>) = 0 [pid 4996] close(4 [pid 4995] <... close resumed>) = 0 ./strace-static-x86_64: Process 5830 attached [pid 5827] setpgid(0, 0 [pid 4996] <... close resumed>) = 0 [pid 4995] rmdir("./25/file0" [pid 4996] rmdir("./27/file0" [pid 4995] <... rmdir resumed>) = 0 [pid 5815] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4996] <... rmdir resumed>) = 0 [pid 4995] getdents64(3, [pid 5810] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4996] getdents64(3, [pid 4995] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4996] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4995] close(3 [pid 4996] close(3 [pid 4995] <... close resumed>) = 0 [pid 4996] <... close resumed>) = 0 [pid 4995] rmdir("./25" [pid 4996] rmdir("./27" [pid 4995] <... rmdir resumed>) = 0 [pid 4996] <... rmdir resumed>) = 0 [pid 4995] mkdir("./26", 0777 [pid 4996] mkdir("./28", 0777 [pid 4995] <... mkdir resumed>) = 0 [pid 5830] set_robust_list(0x7f5c2b8109e0, 24 [pid 5827] <... setpgid resumed>) = 0 [pid 4996] <... mkdir resumed>) = 0 [pid 4995] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 4996] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4995] <... openat resumed>) = 3 [pid 5830] <... set_robust_list resumed>) = 0 [pid 5827] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4996] <... openat resumed>) = 3 [pid 4995] ioctl(3, LOOP_CLR_FD [pid 5830] memfd_create("syzkaller", 0 [pid 5827] <... openat resumed>) = 3 [pid 4996] ioctl(3, LOOP_CLR_FD [pid 4995] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4996] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4995] close(3 [pid 4996] close(3 [pid 4995] <... close resumed>) = 0 [ 117.969089][ T5814] EXT4-fs (loop5): This should not happen!! Data will be lost [ 117.969089][ T5814] [ 117.980785][ T26] audit: type=1804 audit(1687834587.822:749): pid=5818 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor113" name="/root/syzkaller.slA38Q/27/file0/bus" dev="loop0" ino=18 res=1 errno=0 [ 118.006537][ T5814] EXT4-fs (loop5): Total free blocks count 0 [ 118.012577][ T5814] EXT4-fs (loop5): Free/Dirty block details [pid 4996] <... close resumed>) = 0 [pid 4995] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4996] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5830] <... memfd_create resumed>) = 3 [pid 5827] write(3, "1000", 4 [pid 4995] <... clone resumed>, child_tidptr=0x555556fb95d0) = 5831 [pid 4996] <... clone resumed>, child_tidptr=0x555556fb95d0) = 5832 ./strace-static-x86_64: Process 5831 attached [pid 5831] set_robust_list(0x555556fb95e0, 24./strace-static-x86_64: Process 5832 attached ) = 0 [pid 5832] set_robust_list(0x555556fb95e0, 24 [pid 5831] chdir("./26" [pid 5830] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5827] <... write resumed>) = 4 [pid 5832] <... set_robust_list resumed>) = 0 [pid 5831] <... chdir resumed>) = 0 [pid 5832] chdir("./28" [pid 5831] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5830] <... mmap resumed>) = 0x7f5c233f0000 [pid 5827] close(3 [pid 5832] <... chdir resumed>) = 0 [pid 5831] <... prctl resumed>) = 0 [pid 5832] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5831] setpgid(0, 0 [pid 5832] <... prctl resumed>) = 0 [pid 5831] <... setpgid resumed>) = 0 [pid 5832] setpgid(0, 0 [pid 5831] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5832] <... setpgid resumed>) = 0 [pid 5831] <... openat resumed>) = 3 [pid 5832] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5831] write(3, "1000", 4 [pid 5832] <... openat resumed>) = 3 [pid 5831] <... write resumed>) = 4 [pid 5832] write(3, "1000", 4 [pid 5831] close(3 [pid 5832] <... write resumed>) = 4 [pid 5831] <... close resumed>) = 0 [pid 5832] close(3 [pid 5831] symlink("/dev/binderfs", "./binderfs" [pid 5832] <... close resumed>) = 0 [pid 5831] <... symlink resumed>) = 0 [pid 5832] symlink("/dev/binderfs", "./binderfs" [pid 5831] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5832] <... symlink resumed>) = 0 [pid 5831] <... futex resumed>) = 0 [pid 5832] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5831] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5832] <... futex resumed>) = 0 [pid 5831] <... mmap resumed>) = 0x7f5c2b7f0000 [ 118.020807][ T5814] EXT4-fs (loop5): free_blocks=2415919104 [ 118.027624][ T5814] EXT4-fs (loop5): dirty_blocks=16 [ 118.033280][ T5814] EXT4-fs (loop5): Block reservation details [ 118.040263][ T26] audit: type=1804 audit(1687834587.852:750): pid=5814 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor113" name="/root/syzkaller.drywye/26/file0/bus" dev="loop5" ino=18 res=1 errno=0 [pid 5832] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5831] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 5832] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 5831] <... mprotect resumed>) = 0 [pid 5830] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5827] <... close resumed>) = 0 [pid 5832] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 5831] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5832] <... mprotect resumed>) = 0 [pid 5832] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5831] <... clone resumed>, parent_tid=[5833], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 5833 [pid 5831] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5832] <... clone resumed>, parent_tid=[5834], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 5834 [pid 5831] <... futex resumed>) = 0 [pid 5827] symlink("/dev/binderfs", "./binderfs" [pid 5832] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5831] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5830] <... write resumed>) = 1048576 [pid 5829] <... ioctl resumed>) = 0 [pid 5814] <... sendfile resumed>) = 63 [pid 5832] <... futex resumed>) = 0 [pid 5829] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5832] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5829] <... futex resumed>) = 0 [pid 5829] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 5834 attached ./strace-static-x86_64: Process 5833 attached [pid 5834] set_robust_list(0x7f5c2b8109e0, 24 [pid 5833] set_robust_list(0x7f5c2b8109e0, 24 [ 118.071843][ T5818] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 118.074811][ T5814] EXT4-fs (loop5): i_reserved_data_blocks=1 [pid 5834] <... set_robust_list resumed>) = 0 [pid 5833] <... set_robust_list resumed>) = 0 [pid 5834] memfd_create("syzkaller", 0 [pid 5833] memfd_create("syzkaller", 0 [pid 5830] munmap(0x7f5c233f0000, 1048576 [pid 5827] <... symlink resumed>) = 0 [pid 5814] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5810] exit_group(0 [pid 5834] <... memfd_create resumed>) = 3 [pid 5833] <... memfd_create resumed>) = 3 [pid 5829] <... futex resumed>) = ? [pid 5810] <... exit_group resumed>) = ? [pid 5834] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5833] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5829] +++ exited with 0 +++ [pid 5834] <... mmap resumed>) = 0x7f5c233f0000 [pid 5833] <... mmap resumed>) = 0x7f5c233f0000 [pid 5834] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5833] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5830] <... munmap resumed>) = 0 [pid 5827] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5814] <... futex resumed>) = ? [pid 5830] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5827] <... futex resumed>) = 0 [pid 5814] +++ exited with 0 +++ [pid 5810] +++ exited with 0 +++ [pid 5830] <... openat resumed>) = 4 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5810, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5827] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5830] ioctl(4, LOOP_SET_FD, 3 [pid 5827] <... mmap resumed>) = 0x7f5c2b7f0000 [ 118.102174][ T26] audit: type=1804 audit(1687834587.852:751): pid=5814 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor113" name="/root/syzkaller.drywye/26/file0/bus" dev="loop5" ino=18 res=1 errno=0 [ 118.127553][ T5818] EXT4-fs (loop0): This should not happen!! Data will be lost [ 118.127553][ T5818] [ 118.140424][ T5818] EXT4-fs (loop0): Total free blocks count 0 [ 118.146693][ T5818] EXT4-fs (loop0): Free/Dirty block details [ 118.152624][ T5818] EXT4-fs (loop0): free_blocks=2415919104 [ 118.161806][ T5818] EXT4-fs (loop0): dirty_blocks=16 [ 118.168057][ T5818] EXT4-fs (loop0): Block reservation details [pid 5827] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 5830] <... ioctl resumed>) = 0 [pid 5830] close(3 [pid 5828] <... ioctl resumed>) = 0 [pid 5827] <... mprotect resumed>) = 0 [pid 5818] <... sendfile resumed>) = 63 [pid 5830] <... close resumed>) = 0 [pid 5828] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5827] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5818] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5834] <... write resumed>) = 1048576 [pid 5833] <... write resumed>) = 1048576 [pid 5830] mkdir("./file0", 0777 [pid 5828] <... futex resumed>) = 0 [pid 5818] <... futex resumed>) = 0 [pid 5834] munmap(0x7f5c233f0000, 1048576 [pid 5833] munmap(0x7f5c233f0000, 1048576 [pid 5830] <... mkdir resumed>) = 0 [pid 5828] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5827] <... clone resumed>, parent_tid=[5835], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 5835 [pid 5818] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5815] exit_group(0 [pid 4999] umount2("./26", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5835 attached [pid 5834] <... munmap resumed>) = 0 [pid 5833] <... munmap resumed>) = 0 [pid 5830] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5828] <... futex resumed>) = ? [pid 5827] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5818] <... futex resumed>) = ? [pid 5815] <... exit_group resumed>) = ? [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5834] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5833] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5828] +++ exited with 0 +++ [pid 5827] <... futex resumed>) = 0 [pid 5818] +++ exited with 0 +++ [pid 4999] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5834] <... openat resumed>) = 4 [pid 5833] <... openat resumed>) = 4 [pid 5827] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4999] <... openat resumed>) = 3 [pid 5834] ioctl(4, LOOP_SET_FD, 3 [pid 5833] ioctl(4, LOOP_SET_FD, 3 [pid 5815] +++ exited with 0 +++ [pid 4999] fstat(3, [pid 5835] set_robust_list(0x7f5c2b8109e0, 24 [pid 5834] <... ioctl resumed>) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5835] <... set_robust_list resumed>) = 0 [pid 5834] close(3 [pid 4994] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5815, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [ 118.174842][ T5830] loop3: detected capacity change from 0 to 2048 [ 118.182126][ T5818] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 118.213875][ T5834] loop2: detected capacity change from 0 to 2048 [pid 5835] memfd_create("syzkaller", 0 [pid 5834] <... close resumed>) = 0 [pid 5835] <... memfd_create resumed>) = 3 [pid 5834] mkdir("./file0", 0777 [pid 5835] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5834] <... mkdir resumed>) = 0 [pid 4999] getdents64(3, [pid 5835] <... mmap resumed>) = 0x7f5c233f0000 [pid 5834] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 4999] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 5835] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5833] <... ioctl resumed>) = 0 [pid 4999] umount2("./26/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5833] close(3) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] mkdir("./file0", 0777 [ 118.222040][ T5833] loop1: detected capacity change from 0 to 2048 [pid 4999] lstat("./26/binderfs", [pid 5833] <... mkdir resumed>) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5833] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 4999] unlink("./26/binderfs" [pid 4994] umount2("./27", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... unlink resumed>) = 0 [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4994] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] getdents64(3, 0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4994] umount2("./27/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] lstat("./27/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4994] unlink("./27/binderfs") = 0 [pid 4994] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5835] <... write resumed>) = 1048576 [pid 5835] munmap(0x7f5c233f0000, 1048576) = 0 [pid 5835] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5835] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5835] close(3) = 0 [pid 5835] mkdir("./file0", 0777) = 0 [ 118.251695][ T5830] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.265185][ T11] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 118.277281][ T5835] loop4: detected capacity change from 0 to 2048 [ 118.277719][ T5608] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5835] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5830] <... mount resumed>) = 0 [pid 5834] <... mount resumed>) = 0 [pid 5830] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5830] chdir("./file0") = 0 [pid 5830] ioctl(4, LOOP_CLR_FD) = 0 [pid 5830] close(4 [pid 5834] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5833] <... mount resumed>) = 0 [pid 5830] <... close resumed>) = 0 [pid 5830] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5826] <... futex resumed>) = 0 [pid 5830] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5826] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5833] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5826] <... futex resumed>) = 0 [pid 5834] <... openat resumed>) = 3 [pid 5826] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5833] <... openat resumed>) = 3 [pid 5834] chdir("./file0") = 0 [pid 5833] chdir("./file0") = 0 [pid 5830] <... open resumed>) = 4 [pid 5830] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5834] ioctl(4, LOOP_CLR_FD [pid 5833] ioctl(4, LOOP_CLR_FD [pid 5830] <... futex resumed>) = 1 [pid 5826] <... futex resumed>) = 0 [pid 5830] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5826] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5834] <... ioctl resumed>) = 0 [pid 5833] <... ioctl resumed>) = 0 [pid 5826] <... futex resumed>) = 0 [pid 5826] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5830] <... write resumed>) = 9 [pid 5830] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5834] close(4 [pid 5833] close(4 [pid 5834] <... close resumed>) = 0 [pid 5833] <... close resumed>) = 0 [pid 5830] <... futex resumed>) = 1 [pid 5826] <... futex resumed>) = 0 [pid 5834] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5833] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5826] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5830] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5834] <... futex resumed>) = 1 [pid 5833] <... futex resumed>) = 1 [ 118.296923][ T11] EXT4-fs (loop5): This should not happen!! Data will be lost [ 118.296923][ T11] [ 118.301919][ T5834] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.307102][ T5608] EXT4-fs (loop0): This should not happen!! Data will be lost [ 118.307102][ T5608] [ 118.334322][ T5833] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [pid 5832] <... futex resumed>) = 0 [pid 5831] <... futex resumed>) = 0 [pid 5826] <... futex resumed>) = 0 [pid 5834] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5833] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5832] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5831] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5830] <... openat resumed>) = 5 [pid 5826] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] <... umount2 resumed>) = 0 [pid 5834] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5833] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5832] <... futex resumed>) = 0 [pid 5831] <... futex resumed>) = 0 [pid 5830] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5826] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5834] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5833] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5832] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5831] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5830] <... futex resumed>) = 0 [pid 5826] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5830] open("./bus", O_RDWR [pid 5826] <... futex resumed>) = 0 [pid 5830] <... open resumed>) = 6 [ 118.356577][ T26] audit: type=1804 audit(1687834588.422:752): pid=5830 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor113" name="/root/syzkaller.nAdl82/27/file0/bus" dev="loop3" ino=18 res=1 errno=0 [pid 5826] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5834] <... open resumed>) = 4 [pid 5833] <... open resumed>) = 4 [pid 5830] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] <... umount2 resumed>) = 0 [pid 5834] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5833] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5830] <... futex resumed>) = 1 [pid 5833] <... futex resumed>) = 1 [pid 5831] <... futex resumed>) = 0 [pid 5826] <... futex resumed>) = 0 [pid 5830] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5834] <... futex resumed>) = 1 [pid 5833] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5832] <... futex resumed>) = 0 [pid 5832] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5831] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5826] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5830] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5834] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5833] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5832] <... futex resumed>) = 0 [pid 5832] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5826] <... futex resumed>) = 0 [pid 5831] <... futex resumed>) = 0 [pid 5830] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5826] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5831] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5830] <... mmap resumed>) = 0x20000000 [pid 5833] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9) = 9 [pid 5834] <... write resumed>) = 9 [pid 5830] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5833] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5834] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5833] <... futex resumed>) = 1 [pid 5831] <... futex resumed>) = 0 [pid 5830] <... futex resumed>) = 1 [pid 5826] <... futex resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5834] <... futex resumed>) = 1 [pid 5832] <... futex resumed>) = 0 [pid 5834] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5833] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5832] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5831] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5830] sendfile(4, 5, NULL, 2147483713 [pid 5826] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] lstat("./26/file0", [pid 5834] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5833] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5832] <... futex resumed>) = 0 [pid 5831] <... futex resumed>) = 0 [pid 5826] <... futex resumed>) = 0 [pid 5832] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5831] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5826] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5834] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5833] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5834] <... openat resumed>) = 5 [pid 5833] <... openat resumed>) = 5 [pid 5834] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5833] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5831] <... futex resumed>) = 0 [pid 5834] <... futex resumed>) = 1 [pid 5833] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5832] <... futex resumed>) = 0 [pid 5831] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5832] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5834] open("./bus", O_RDWR [pid 5833] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5832] <... futex resumed>) = 0 [pid 5831] <... futex resumed>) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5831] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5832] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5834] <... open resumed>) = 6 [pid 5833] open("./bus", O_RDWR [pid 4999] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5834] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5833] <... open resumed>) = 6 [pid 5834] <... futex resumed>) = 1 [pid 5832] <... futex resumed>) = 0 [pid 5833] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5834] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5833] <... futex resumed>) = 1 [pid 5832] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5834] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5833] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5832] <... futex resumed>) = 0 [pid 4999] openat(AT_FDCWD, "./26/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5834] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5832] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5831] <... futex resumed>) = 0 [pid 5831] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5831] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5834] <... mmap resumed>) = 0x20000000 [pid 5833] <... futex resumed>) = 0 [pid 4999] <... openat resumed>) = 4 [pid 5834] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5833] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 4999] fstat(4, [pid 4994] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] <... mmap resumed>) = 0x20000000 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5834] <... futex resumed>) = 1 [pid 5833] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5832] <... futex resumed>) = 0 [pid 4999] getdents64(4, [pid 5832] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5834] sendfile(4, 5, NULL, 2147483713 [pid 5833] <... futex resumed>) = 1 [pid 5832] <... futex resumed>) = 0 [pid 5831] <... futex resumed>) = 0 [pid 5826] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4999] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [ 118.386724][ T26] audit: type=1804 audit(1687834588.452:753): pid=5830 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor113" name="/root/syzkaller.nAdl82/27/file0/bus" dev="loop3" ino=18 res=1 errno=0 [ 118.407719][ T5835] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.441591][ T5830] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 4994] lstat("./27/file0", [pid 5833] sendfile(4, 5, NULL, 2147483713 [pid 5832] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5831] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5826] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] getdents64(4, [pid 4994] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5831] <... futex resumed>) = 0 [pid 5826] <... futex resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4994] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5831] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5826] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] openat(AT_FDCWD, "./27/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4994] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] getdents64(4, 0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4994] getdents64(4, 0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4994] close(4) = 0 [pid 4994] rmdir("./27/file0") = 0 [pid 4994] getdents64(3, 0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4994] close(3) = 0 [pid 4994] rmdir("./27") = 0 [pid 4994] mkdir("./28", 0777) = 0 [pid 4994] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5826] <... mmap resumed>) = 0x7f5c234cf000 [pid 4999] close(4 [pid 4994] <... openat resumed>) = 3 [pid 5826] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 4999] <... close resumed>) = 0 [pid 4994] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4994] close(3) = 0 [pid 4994] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556fb95d0) = 5844 [pid 5826] <... mprotect resumed>) = 0 [pid 4999] rmdir("./26/file0"./strace-static-x86_64: Process 5844 attached [pid 5844] set_robust_list(0x555556fb95e0, 24) = 0 [pid 5844] chdir("./28" [pid 5826] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4999] <... rmdir resumed>) = 0 [pid 5832] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5832] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [ 118.493359][ T5833] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 118.511124][ T5834] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 118.527997][ T5833] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 4999] getdents64(3, [pid 5832] <... futex resumed>) = 0 [pid 5844] <... chdir resumed>) = 0 [pid 5831] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5826] <... clone resumed>, parent_tid=[5845], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 5845 [pid 4999] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 5831] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5831] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c234cf000 [pid 5831] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5831] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5845 attached [pid 5832] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5826] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] close(3 [pid 5844] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5831] <... clone resumed>, parent_tid=[5846], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 5846 [pid 5844] <... prctl resumed>) = 0 [pid 5831] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5844] setpgid(0, 0 [pid 5831] <... futex resumed>) = 0 [pid 5844] <... setpgid resumed>) = 0 [pid 5831] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5846 attached [pid 5844] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5835] <... mount resumed>) = 0 [pid 5846] set_robust_list(0x7f5c234ef9e0, 24 [pid 5844] <... openat resumed>) = 3 [pid 5835] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5846] <... set_robust_list resumed>) = 0 [pid 5845] set_robust_list(0x7f5c234ef9e0, 24 [pid 5844] write(3, "1000", 4 [pid 5835] <... openat resumed>) = 3 [pid 5832] <... mmap resumed>) = 0x7f5c234cf000 [pid 5826] <... futex resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 5846] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5844] <... write resumed>) = 4 [pid 5835] chdir("./file0" [pid 5844] close(3 [pid 5835] <... chdir resumed>) = 0 [pid 5844] <... close resumed>) = 0 [ 118.542104][ T5834] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 118.555036][ T5834] EXT4-fs (loop2): This should not happen!! Data will be lost [ 118.555036][ T5834] [ 118.564709][ T5830] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 118.564911][ T5830] EXT4-fs (loop3): This should not happen!! Data will be lost [ 118.564911][ T5830] [ 118.564935][ T5830] EXT4-fs (loop3): Total free blocks count 0 [pid 5835] ioctl(4, LOOP_CLR_FD [pid 5844] symlink("/dev/binderfs", "./binderfs" [pid 5835] <... ioctl resumed>) = 0 [pid 5844] <... symlink resumed>) = 0 [pid 5835] close(4 [pid 5844] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5835] <... close resumed>) = 0 [pid 5844] <... futex resumed>) = 0 [pid 5835] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5844] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5835] <... futex resumed>) = 1 [pid 5827] <... futex resumed>) = 0 [pid 5844] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 5835] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5827] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5844] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 5835] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5827] <... futex resumed>) = 0 [pid 5844] <... mprotect resumed>) = 0 [pid 5835] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5827] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5844] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5831] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5844] <... clone resumed>, parent_tid=[5847], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 5847 [pid 5844] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5844] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5845] <... set_robust_list resumed>) = 0 [pid 5832] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 5826] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] rmdir("./26"./strace-static-x86_64: Process 5847 attached [pid 5847] set_robust_list(0x7f5c2b8109e0, 24) = 0 [pid 5847] memfd_create("syzkaller", 0 [pid 5845] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5832] <... mprotect resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 5847] <... memfd_create resumed>) = 3 [pid 5835] <... open resumed>) = 4 [pid 5832] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5847] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5c233f0000 ./strace-static-x86_64: Process 5848 attached [pid 5835] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] mkdir("./27", 0777 [pid 5848] set_robust_list(0x7f5c234ef9e0, 24 [pid 5835] <... futex resumed>) = 1 [pid 5832] <... clone resumed>, parent_tid=[5848], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 5848 [pid 5827] <... futex resumed>) = 0 [pid 4999] <... mkdir resumed>) = 0 [ 118.564957][ T5830] EXT4-fs (loop3): Free/Dirty block details [ 118.564976][ T5830] EXT4-fs (loop3): free_blocks=2415919104 [ 118.564998][ T5830] EXT4-fs (loop3): dirty_blocks=16 [ 118.579524][ T5833] EXT4-fs (loop1): This should not happen!! Data will be lost [ 118.579524][ T5833] [ 118.625115][ T5833] EXT4-fs (loop1): Total free blocks count 0 [ 118.631659][ T5833] EXT4-fs (loop1): Free/Dirty block details [pid 5848] <... set_robust_list resumed>) = 0 [pid 5835] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5832] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5827] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5827] <... futex resumed>) = 0 [pid 5827] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5848] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5832] <... futex resumed>) = 0 [pid 4999] <... openat resumed>) = 3 [pid 5835] <... write resumed>) = 9 [pid 5832] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5835] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5846] <... ioctl resumed>) = 0 [pid 5833] <... sendfile resumed>) = 63 [pid 5846] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5846] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5847] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5835] <... futex resumed>) = 1 [pid 5833] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5827] <... futex resumed>) = 0 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5827] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5831] exit_group(0 [pid 5827] <... futex resumed>) = 0 [pid 5846] <... futex resumed>) = ? [pid 5835] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5833] <... futex resumed>) = ? [pid 5831] <... exit_group resumed>) = ? [pid 5827] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5826] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4999] close(3 [pid 5846] +++ exited with 0 +++ [pid 5845] <... ioctl resumed>) = 0 [pid 5830] <... sendfile resumed>) = 63 [pid 5835] <... openat resumed>) = 5 [ 118.639341][ T5833] EXT4-fs (loop1): free_blocks=2415919104 [ 118.645675][ T5833] EXT4-fs (loop1): dirty_blocks=16 [ 118.652287][ T5833] EXT4-fs (loop1): Block reservation details [ 118.658974][ T5833] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 118.665353][ T5830] EXT4-fs (loop3): Block reservation details [ 118.671801][ T5830] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 118.678569][ T5834] EXT4-fs (loop2): Total free blocks count 0 [ 118.684616][ T5834] EXT4-fs (loop2): Free/Dirty block details [pid 5833] +++ exited with 0 +++ [pid 5831] +++ exited with 0 +++ [pid 5845] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5835] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5830] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... close resumed>) = 0 [pid 4995] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5831, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5845] <... futex resumed>) = 0 [pid 5835] <... futex resumed>) = 1 [pid 5830] <... futex resumed>) = 0 [pid 5827] <... futex resumed>) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5845] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5835] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5830] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5827] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4999] <... clone resumed>, child_tidptr=0x555556fb95d0) = 5849 [pid 5827] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5835] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) ./strace-static-x86_64: Process 5849 attached [pid 5835] open("./bus", O_RDWR [pid 5826] exit_group(0 [pid 5845] <... futex resumed>) = ? [pid 5849] set_robust_list(0x555556fb95e0, 24 [pid 5835] <... open resumed>) = 6 [pid 5830] <... futex resumed>) = ? [pid 5826] <... exit_group resumed>) = ? [pid 5849] <... set_robust_list resumed>) = 0 [pid 5848] <... ioctl resumed>) = 0 [pid 5845] +++ exited with 0 +++ [pid 5835] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5830] +++ exited with 0 +++ [pid 5849] chdir("./27" [pid 5848] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5835] <... futex resumed>) = 1 [pid 5834] <... sendfile resumed>) = 63 [pid 5832] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5827] <... futex resumed>) = 0 [pid 5826] +++ exited with 0 +++ [pid 5849] <... chdir resumed>) = 0 [pid 5848] <... futex resumed>) = 0 [pid 5835] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5834] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5832] exit_group(0 [pid 5827] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] umount2("./26", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5849] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5835] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5834] <... futex resumed>) = ? [pid 5832] <... exit_group resumed>) = ? [pid 5827] <... futex resumed>) = 0 [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5826, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] <... prctl resumed>) = 0 [pid 5848] +++ exited with 0 +++ [pid 5835] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5834] +++ exited with 0 +++ [pid 5832] +++ exited with 0 +++ [pid 5827] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4997] restart_syscall(<... resuming interrupted clone ...> [pid 4995] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5849] setpgid(0, 0 [pid 5835] <... mmap resumed>) = 0x20000000 [pid 4997] <... restart_syscall resumed>) = 0 [pid 4995] <... openat resumed>) = 3 [pid 5849] <... setpgid resumed>) = 0 [pid 5835] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5832, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 4995] fstat(3, [pid 5849] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5835] <... futex resumed>) = 1 [pid 5827] <... futex resumed>) = 0 [pid 4996] umount2("./28", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5849] <... openat resumed>) = 3 [pid 5835] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5827] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] umount2("./27", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] getdents64(3, [pid 5849] write(3, "1000", 4 [pid 5835] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5827] <... futex resumed>) = 0 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4996] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4995] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 5849] <... write resumed>) = 4 [pid 5847] <... write resumed>) = 1048576 [pid 5835] sendfile(4, 5, NULL, 2147483713 [pid 5827] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4997] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4996] <... openat resumed>) = 3 [pid 4995] umount2("./26/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5849] close(3 [pid 4997] <... openat resumed>) = 3 [pid 4996] fstat(3, [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] <... close resumed>) = 0 [pid 4997] fstat(3, [pid 4996] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] lstat("./26/binderfs", [pid 5849] symlink("/dev/binderfs", "./binderfs" [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 118.693577][ T5834] EXT4-fs (loop2): free_blocks=2415919104 [ 118.699457][ T5834] EXT4-fs (loop2): dirty_blocks=16 [ 118.704966][ T5834] EXT4-fs (loop2): Block reservation details [ 118.711559][ T5834] EXT4-fs (loop2): i_reserved_data_blocks=1 [pid 4996] getdents64(3, [pid 4995] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5849] <... symlink resumed>) = 0 [pid 4997] getdents64(3, [pid 4996] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4995] unlink("./26/binderfs" [pid 5849] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4996] umount2("./28/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] <... unlink resumed>) = 0 [pid 5849] <... futex resumed>) = 0 [pid 4997] umount2("./27/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5849] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4996] lstat("./28/binderfs", [pid 5849] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 4997] lstat("./27/binderfs", [pid 4996] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5849] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 4997] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4996] unlink("./28/binderfs" [pid 5849] <... mprotect resumed>) = 0 [pid 4997] unlink("./27/binderfs" [pid 4996] <... unlink resumed>) = 0 [pid 5849] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4997] <... unlink resumed>) = 0 [pid 4996] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5849] <... clone resumed>, parent_tid=[5850], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 5850 [pid 5849] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5849] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5850 attached [pid 5850] set_robust_list(0x7f5c2b8109e0, 24) = 0 [pid 5847] munmap(0x7f5c233f0000, 1048576 [pid 5850] memfd_create("syzkaller", 0) = 3 [pid 5827] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5827] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 118.744293][ T5835] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 118.762118][ T5076] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 118.764517][ T5835] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 118.787003][ T5835] EXT4-fs (loop4): This should not happen!! Data will be lost [pid 5827] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c234cf000 [pid 5850] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5827] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 5850] <... mmap resumed>) = 0x7f5c233f0000 [pid 5827] <... mprotect resumed>) = 0 [pid 5850] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5847] <... munmap resumed>) = 0 [pid 5827] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5851], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 5851 [pid 5827] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5827] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5851 attached [pid 5851] set_robust_list(0x7f5c234ef9e0, 24) = 0 [pid 5851] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5847] ioctl(4, LOOP_SET_FD, 3) = 0 [ 118.787003][ T5835] [ 118.798565][ T5608] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 118.812119][ T11] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 118.813621][ T5835] EXT4-fs (loop4): Total free blocks count 0 [ 118.832207][ T5847] loop0: detected capacity change from 0 to 2048 [pid 5847] close(3) = 0 [pid 5847] mkdir("./file0", 0777) = 0 [pid 5827] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5847] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5850] <... write resumed>) = 1048576 [pid 4995] <... umount2 resumed>) = 0 [ 118.839330][ T5835] EXT4-fs (loop4): Free/Dirty block details [ 118.846608][ T5835] EXT4-fs (loop4): free_blocks=2415919104 [ 118.854108][ T5835] EXT4-fs (loop4): dirty_blocks=16 [pid 5850] munmap(0x7f5c233f0000, 1048576) = 0 [pid 4996] <... umount2 resumed>) = 0 [pid 4995] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4995] lstat("./26/file0", [pid 5850] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 4995] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5850] ioctl(4, LOOP_SET_FD, 3 [pid 4995] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... umount2 resumed>) = 0 [pid 4996] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] openat(AT_FDCWD, "./26/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] lstat("./27/file0", [pid 4996] lstat("./28/file0", [pid 4995] <... openat resumed>) = 4 [pid 4997] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] fstat(4, [pid 5847] <... mount resumed>) = 0 [pid 4997] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5847] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] getdents64(4, [pid 5851] <... ioctl resumed>) = 0 [pid 5847] <... openat resumed>) = 3 [pid 5835] <... sendfile resumed>) = 63 [pid 4997] openat(AT_FDCWD, "./27/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4996] openat(AT_FDCWD, "./28/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4995] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 5851] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5850] <... ioctl resumed>) = 0 [pid 5847] chdir("./file0" [pid 5835] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] <... openat resumed>) = 4 [pid 4996] <... openat resumed>) = 4 [pid 4995] getdents64(4, [pid 5851] <... futex resumed>) = 0 [pid 5850] close(3 [pid 5847] <... chdir resumed>) = 0 [pid 5835] <... futex resumed>) = 0 [pid 4997] fstat(4, [pid 4996] fstat(4, [pid 4995] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 5851] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5850] <... close resumed>) = 0 [pid 5847] ioctl(4, LOOP_CLR_FD [pid 5835] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5827] exit_group(0 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 118.887380][ T5835] EXT4-fs (loop4): Block reservation details [ 118.893439][ T5835] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 118.908668][ T5847] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.911738][ T5850] loop5: detected capacity change from 0 to 2048 [pid 4996] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] close(4 [pid 5851] <... futex resumed>) = ? [pid 5850] mkdir("./file0", 0777 [pid 5847] <... ioctl resumed>) = 0 [pid 5835] <... futex resumed>) = ? [pid 5827] <... exit_group resumed>) = ? [pid 4997] getdents64(4, [pid 4996] getdents64(4, [pid 4995] <... close resumed>) = 0 [pid 5851] +++ exited with 0 +++ [pid 5850] <... mkdir resumed>) = 0 [pid 5847] close(4 [pid 5835] +++ exited with 0 +++ [pid 5827] +++ exited with 0 +++ [pid 4997] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 5850] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5847] <... close resumed>) = 0 [pid 4997] getdents64(4, [pid 4996] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4995] rmdir("./26/file0" [pid 5847] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4996] getdents64(4, [pid 5847] <... futex resumed>) = 1 [pid 5844] <... futex resumed>) = 0 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5827, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 4997] close(4 [pid 4996] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4995] <... rmdir resumed>) = 0 [pid 5847] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5844] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] restart_syscall(<... resuming interrupted clone ...> [pid 4997] <... close resumed>) = 0 [pid 4996] close(4 [pid 4995] getdents64(3, [pid 5847] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5844] <... futex resumed>) = 0 [pid 4998] <... restart_syscall resumed>) = 0 [pid 4997] rmdir("./27/file0" [pid 4996] <... close resumed>) = 0 [pid 4995] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 5847] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5844] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4997] <... rmdir resumed>) = 0 [pid 4996] rmdir("./28/file0" [pid 4995] close(3 [pid 5847] <... open resumed>) = 4 [pid 4997] getdents64(3, [pid 5847] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] umount2("./26", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4996] <... rmdir resumed>) = 0 [pid 4995] <... close resumed>) = 0 [pid 5847] <... futex resumed>) = 1 [pid 5844] <... futex resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] close(3 [pid 4996] getdents64(3, [pid 4995] rmdir("./26" [pid 5847] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5844] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] <... close resumed>) = 0 [pid 4996] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4995] <... rmdir resumed>) = 0 [pid 5847] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5844] <... futex resumed>) = 0 [pid 4998] <... openat resumed>) = 3 [pid 4997] rmdir("./27" [pid 4996] close(3 [pid 4995] mkdir("./27", 0777 [pid 5847] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5844] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] fstat(3, [pid 4997] <... rmdir resumed>) = 0 [pid 4996] <... close resumed>) = 0 [pid 5847] <... write resumed>) = 9 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] mkdir("./28", 0777 [pid 4996] rmdir("./28" [pid 4995] <... mkdir resumed>) = 0 [pid 5847] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] getdents64(3, [pid 4997] <... mkdir resumed>) = 0 [pid 5847] <... futex resumed>) = 1 [pid 5844] <... futex resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4997] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4996] <... rmdir resumed>) = 0 [pid 4995] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5847] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5844] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] umount2("./26/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... openat resumed>) = 3 [pid 4996] mkdir("./29", 0777 [pid 5847] <... openat resumed>) = 5 [pid 5844] <... futex resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] ioctl(3, LOOP_CLR_FD [pid 4995] <... openat resumed>) = 3 [pid 5847] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5844] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] lstat("./26/binderfs", [pid 4997] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4996] <... mkdir resumed>) = 0 [pid 4995] ioctl(3, LOOP_CLR_FD [pid 5847] <... futex resumed>) = 0 [pid 5844] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] close(3 [pid 4996] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4995] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5847] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5844] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] unlink("./26/binderfs" [pid 4997] <... close resumed>) = 0 [pid 4996] <... openat resumed>) = 3 [pid 4995] close(3 [pid 5847] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5844] <... futex resumed>) = 0 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5844] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4997] <... clone resumed>, child_tidptr=0x555556fb95d0) = 5856 [pid 5847] open("./bus", O_RDWR [pid 4998] <... unlink resumed>) = 0 [pid 4996] ioctl(3, LOOP_CLR_FD [pid 4995] <... close resumed>) = 0 [pid 5847] <... open resumed>) = 6 [pid 4998] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4995] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5856 attached [pid 5847] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5850] <... mount resumed>) = 0 [pid 5850] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5850] chdir("./file0") = 0 [pid 5850] ioctl(4, LOOP_CLR_FD) = 0 [pid 5847] <... futex resumed>) = 1 [pid 5844] <... futex resumed>) = 0 [pid 4996] close(3 [pid 5847] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5844] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... close resumed>) = 0 [pid 5856] set_robust_list(0x555556fb95e0, 24 [pid 5847] <... mmap resumed>) = 0x20000000 [pid 5844] <... futex resumed>) = 0 [pid 4996] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5856] <... set_robust_list resumed>) = 0 [pid 4995] <... clone resumed>, child_tidptr=0x555556fb95d0) = 5857 [pid 5847] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5844] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5856] chdir("./28" [pid 5847] <... futex resumed>) = 0 [pid 5844] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5856] <... chdir resumed>) = 0 [pid 5847] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5844] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... clone resumed>, child_tidptr=0x555556fb95d0) = 5858 [pid 5856] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5850] close(4 [pid 5847] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5844] <... futex resumed>) = 0 [pid 5856] <... prctl resumed>) = 0 [pid 5850] <... close resumed>) = 0 [pid 5847] sendfile(4, 5, NULL, 2147483713 [pid 5844] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5856] setpgid(0, 0 [pid 5850] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5858 attached ./strace-static-x86_64: Process 5857 attached [pid 5856] <... setpgid resumed>) = 0 [ 119.012718][ T5850] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.030602][ T5076] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5850] <... futex resumed>) = 1 [pid 5849] <... futex resumed>) = 0 [pid 5858] set_robust_list(0x555556fb95e0, 24 [pid 5857] set_robust_list(0x555556fb95e0, 24 [pid 5856] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5850] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5849] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5858] <... set_robust_list resumed>) = 0 [pid 5857] <... set_robust_list resumed>) = 0 [pid 5856] <... openat resumed>) = 3 [pid 5850] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5849] <... futex resumed>) = 0 [pid 5858] chdir("./29" [pid 5857] chdir("./27" [pid 5856] write(3, "1000", 4 [pid 5850] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5849] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5858] <... chdir resumed>) = 0 [pid 5857] <... chdir resumed>) = 0 [pid 5856] <... write resumed>) = 4 [pid 5850] <... open resumed>) = 4 [pid 5858] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5857] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5856] close(3 [pid 5850] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5858] <... prctl resumed>) = 0 [pid 5857] <... prctl resumed>) = 0 [pid 5856] <... close resumed>) = 0 [pid 5850] <... futex resumed>) = 1 [pid 5849] <... futex resumed>) = 0 [pid 5858] setpgid(0, 0 [pid 5857] setpgid(0, 0 [pid 5856] symlink("/dev/binderfs", "./binderfs" [pid 5850] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5849] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5858] <... setpgid resumed>) = 0 [pid 5857] <... setpgid resumed>) = 0 [pid 5856] <... symlink resumed>) = 0 [pid 5850] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5849] <... futex resumed>) = 0 [pid 5858] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5857] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5856] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5850] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5849] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5858] <... openat resumed>) = 3 [pid 5857] <... openat resumed>) = 3 [pid 5856] <... futex resumed>) = 0 [pid 5850] <... write resumed>) = 9 [pid 5844] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5858] write(3, "1000", 4 [ 119.057361][ T5847] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 119.072986][ T5847] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 119.085469][ T5847] EXT4-fs (loop0): This should not happen!! Data will be lost [ 119.085469][ T5847] [ 119.095404][ T5847] EXT4-fs (loop0): Total free blocks count 0 [ 119.102043][ T5847] EXT4-fs (loop0): Free/Dirty block details [pid 5857] write(3, "1000", 4 [pid 5856] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5850] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5844] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... umount2 resumed>) = 0 [pid 5858] <... write resumed>) = 4 [pid 5857] <... write resumed>) = 4 [pid 5856] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 5850] <... futex resumed>) = 1 [pid 5849] <... futex resumed>) = 0 [pid 5844] <... futex resumed>) = 0 [pid 4998] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5858] close(3 [pid 5857] close(3 [pid 5856] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 5850] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5849] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5844] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5858] <... close resumed>) = 0 [pid 5857] <... close resumed>) = 0 [pid 5856] <... mprotect resumed>) = 0 [pid 5850] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5849] <... futex resumed>) = 0 [pid 5844] <... mmap resumed>) = 0x7f5c234cf000 [pid 4998] lstat("./26/file0", [pid 5858] symlink("/dev/binderfs", "./binderfs" [pid 5857] symlink("/dev/binderfs", "./binderfs" [pid 5856] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5850] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5849] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5847] <... sendfile resumed>) = 63 [pid 5844] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5858] <... symlink resumed>) = 0 [pid 5857] <... symlink resumed>) = 0 [pid 5850] <... openat resumed>) = 5 [pid 5847] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5844] <... mprotect resumed>) = 0 [pid 4998] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5859 attached [pid 5858] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5857] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5856] <... clone resumed>, parent_tid=[5859], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 5859 [pid 5850] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5847] <... futex resumed>) = 0 [pid 5844] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5859] set_robust_list(0x7f5c2b8109e0, 24 [pid 5858] <... futex resumed>) = 0 [pid 5857] <... futex resumed>) = 0 [pid 5856] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5850] <... futex resumed>) = 1 [pid 5849] <... futex resumed>) = 0 [pid 5847] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4998] openat(AT_FDCWD, "./26/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 5860 attached [pid 5859] <... set_robust_list resumed>) = 0 [pid 5858] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5857] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5856] <... futex resumed>) = 0 [pid 5850] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5849] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5844] <... clone resumed>, parent_tid=[5860], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 5860 [pid 4998] <... openat resumed>) = 4 [pid 5860] set_robust_list(0x7f5c234ef9e0, 24 [pid 5859] memfd_create("syzkaller", 0 [pid 5858] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 5857] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 5856] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5850] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5849] <... futex resumed>) = 0 [pid 5860] <... set_robust_list resumed>) = 0 [ 119.108099][ T5847] EXT4-fs (loop0): free_blocks=2415919104 [ 119.113958][ T5847] EXT4-fs (loop0): dirty_blocks=16 [ 119.119258][ T5847] EXT4-fs (loop0): Block reservation details [ 119.125347][ T5847] EXT4-fs (loop0): i_reserved_data_blocks=1 [pid 5860] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5858] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 5850] open("./bus", O_RDWR [pid 5849] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5857] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 5844] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] fstat(4, [pid 5858] <... mprotect resumed>) = 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5860] <... futex resumed>) = 0 [pid 5844] <... futex resumed>) = 1 [pid 5860] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5850] <... open resumed>) = 6 [pid 5844] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] getdents64(4, [pid 5860] <... ioctl resumed>) = 0 [pid 5858] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5857] <... mprotect resumed>) = 0 [pid 5850] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 5860] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5850] <... futex resumed>) = 1 [pid 5849] <... futex resumed>) = 0 [pid 5860] <... futex resumed>) = 1 [pid 5857] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5844] <... futex resumed>) = 0 [pid 4998] getdents64(4, [pid 5860] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5850] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5849] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5844] exit_group(0 [pid 4998] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 5860] <... futex resumed>) = ? [pid 5849] <... futex resumed>) = 0 [pid 5847] <... futex resumed>) = ? [pid 5844] <... exit_group resumed>) = ? [pid 4998] close(4 [pid 5847] +++ exited with 0 +++ ./strace-static-x86_64: Process 5861 attached [pid 5850] <... mmap resumed>) = 0x20000000 [pid 5860] +++ exited with 0 +++ [pid 5861] set_robust_list(0x7f5c2b8109e0, 24 [pid 5849] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5861] <... set_robust_list resumed>) = 0 [pid 5861] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5859] <... memfd_create resumed>) = 3 [pid 5859] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5c233f0000 [pid 5859] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5857] <... clone resumed>, parent_tid=[5861], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 5861 [pid 5850] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5844] +++ exited with 0 +++ [pid 4998] <... close resumed>) = 0 [pid 5858] <... clone resumed>, parent_tid=[5862], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 5862 [pid 5857] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5850] <... futex resumed>) = 1 [pid 5849] <... futex resumed>) = 0 [pid 4998] rmdir("./26/file0" [pid 5858] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5857] <... futex resumed>) = 1 [pid 5850] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5849] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5861] <... futex resumed>) = 0 [pid 5861] memfd_create("syzkaller", 0 [pid 5858] <... futex resumed>) = 0 [pid 5857] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5850] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5849] <... futex resumed>) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 4994] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5844, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5861] <... memfd_create resumed>) = 3 [pid 5858] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5850] sendfile(4, 5, NULL, 2147483713 [pid 5849] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] getdents64(3, [pid 4994] umount2("./28", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5861] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5c233f0000 [pid 4998] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5861] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4994] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] close(3) = 0 [pid 4994] <... openat resumed>) = 3 [pid 4998] rmdir("./26" [pid 4994] fstat(3, [pid 4998] <... rmdir resumed>) = 0 [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] mkdir("./27", 0777 [pid 4994] getdents64(3, ./strace-static-x86_64: Process 5862 attached [pid 4998] <... mkdir resumed>) = 0 [pid 4994] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 5862] set_robust_list(0x7f5c2b8109e0, 24 [pid 4998] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4994] umount2("./28/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5862] <... set_robust_list resumed>) = 0 [pid 4998] <... openat resumed>) = 3 [pid 5859] <... write resumed>) = 1048576 [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5862] memfd_create("syzkaller", 0 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4994] lstat("./28/binderfs", [pid 5849] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5849] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5862] <... memfd_create resumed>) = 3 [pid 5849] <... futex resumed>) = 0 [pid 4998] close(3 [pid 5859] munmap(0x7f5c233f0000, 1048576 [pid 5849] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5862] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4998] <... close resumed>) = 0 [pid 4994] unlink("./28/binderfs" [pid 5849] <... mmap resumed>) = 0x7f5c234cf000 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5849] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 4994] <... unlink resumed>) = 0 [pid 5849] <... mprotect resumed>) = 0 [pid 5859] <... munmap resumed>) = 0 [ 119.199148][ T5850] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 119.230574][ T5850] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5862] <... mmap resumed>) = 0x7f5c233f0000 [pid 5849] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4998] <... clone resumed>, child_tidptr=0x555556fb95d0) = 5863 [pid 4994] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5864 attached ./strace-static-x86_64: Process 5863 attached [pid 5862] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5861] <... write resumed>) = 1048576 [pid 5859] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5849] <... clone resumed>, parent_tid=[5864], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 5864 [pid 5863] set_robust_list(0x555556fb95e0, 24 [pid 5861] munmap(0x7f5c233f0000, 1048576 [pid 5859] <... openat resumed>) = 4 [pid 5849] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5849] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5863] <... set_robust_list resumed>) = 0 [pid 5861] <... munmap resumed>) = 0 [pid 5859] ioctl(4, LOOP_SET_FD, 3 [pid 5863] chdir("./27" [pid 5859] <... ioctl resumed>) = 0 [pid 5864] set_robust_list(0x7f5c234ef9e0, 24 [pid 5863] <... chdir resumed>) = 0 [pid 5861] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5859] close(3 [pid 5863] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5864] <... set_robust_list resumed>) = 0 [pid 5863] <... prctl resumed>) = 0 [pid 5861] <... openat resumed>) = 4 [pid 5859] <... close resumed>) = 0 [ 119.259073][ T5850] EXT4-fs (loop5): This should not happen!! Data will be lost [ 119.259073][ T5850] [ 119.269491][ T5850] EXT4-fs (loop5): Total free blocks count 0 [ 119.269931][ T5608] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 119.275893][ T5850] EXT4-fs (loop5): Free/Dirty block details [ 119.296128][ T5859] loop3: detected capacity change from 0 to 2048 [ 119.303250][ T5850] EXT4-fs (loop5): free_blocks=2415919104 [pid 5864] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5863] setpgid(0, 0 [pid 5861] ioctl(4, LOOP_SET_FD, 3 [pid 5859] mkdir("./file0", 0777 [pid 5863] <... setpgid resumed>) = 0 [pid 5861] <... ioctl resumed>) = 0 [pid 5859] <... mkdir resumed>) = 0 [pid 5863] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5859] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5863] <... openat resumed>) = 3 [pid 5863] write(3, "1000", 4) = 4 [pid 5863] close(3) = 0 [pid 5862] <... write resumed>) = 1048576 [pid 5861] close(3 [pid 5863] symlink("/dev/binderfs", "./binderfs" [pid 5862] munmap(0x7f5c233f0000, 1048576 [pid 5861] <... close resumed>) = 0 [pid 5863] <... symlink resumed>) = 0 [pid 5862] <... munmap resumed>) = 0 [pid 5861] mkdir("./file0", 0777 [pid 5849] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5864] <... ioctl resumed>) = 0 [pid 5863] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5862] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5861] <... mkdir resumed>) = 0 [pid 5850] <... sendfile resumed>) = 63 [pid 5864] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5863] <... futex resumed>) = 0 [pid 5862] <... openat resumed>) = 4 [pid 5861] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5864] <... futex resumed>) = 0 [pid 5863] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5862] ioctl(4, LOOP_SET_FD, 3 [pid 5864] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5863] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 5863] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 5850] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5863] <... mprotect resumed>) = 0 [pid 5850] <... futex resumed>) = 0 [pid 5863] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5850] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5863] <... clone resumed>, parent_tid=[5867], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 5867 [ 119.309932][ T5850] EXT4-fs (loop5): dirty_blocks=16 [ 119.315853][ T5861] loop1: detected capacity change from 0 to 2048 [ 119.327155][ T5850] EXT4-fs (loop5): Block reservation details [ 119.333361][ T5850] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 119.346505][ T5862] loop2: detected capacity change from 0 to 2048 [pid 5863] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5863] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5862] <... ioctl resumed>) = 0 [pid 5862] close(3 [pid 5849] exit_group(0 [pid 5864] <... futex resumed>) = ? [pid 5850] <... futex resumed>) = ? [pid 5849] <... exit_group resumed>) = ? [pid 5864] +++ exited with 0 +++ [pid 5862] <... close resumed>) = 0 [pid 5850] +++ exited with 0 +++ [pid 5862] mkdir("./file0", 0777) = 0 [pid 5862] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue"./strace-static-x86_64: Process 5867 attached [pid 5867] set_robust_list(0x7f5c2b8109e0, 24) = 0 [pid 5867] memfd_create("syzkaller", 0) = 3 [pid 5867] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5c233f0000 [pid 5849] +++ exited with 0 +++ [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5849, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5867] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5859] <... mount resumed>) = 0 [pid 4999] restart_syscall(<... resuming interrupted clone ...> [pid 4994] <... umount2 resumed>) = 0 [pid 4999] <... restart_syscall resumed>) = 0 [pid 5859] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5859] chdir("./file0" [pid 4999] umount2("./27", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5859] <... chdir resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5859] ioctl(4, LOOP_CLR_FD [pid 4999] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5859] <... ioctl resumed>) = 0 [pid 4999] <... openat resumed>) = 3 [pid 5859] close(4 [pid 4999] fstat(3, [pid 5859] <... close resumed>) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5859] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] getdents64(3, [pid 5859] <... futex resumed>) = 1 [pid 5856] <... futex resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 5859] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5856] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] umount2("./27/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5859] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5856] <... futex resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5859] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5856] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 119.359393][ T5859] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [pid 4999] lstat("./27/binderfs", [pid 5859] <... open resumed>) = 4 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4994] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5867] <... write resumed>) = 1048576 [pid 5859] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5867] munmap(0x7f5c233f0000, 1048576) = 0 [pid 4999] unlink("./27/binderfs" [pid 5867] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5867] ioctl(4, LOOP_SET_FD, 3 [pid 4999] <... unlink resumed>) = 0 [pid 5867] <... ioctl resumed>) = 0 [pid 5867] close(3) = 0 [pid 5867] mkdir("./file0", 0777) = 0 [pid 5867] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 4999] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] lstat("./28/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] openat(AT_FDCWD, "./28/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4994] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] getdents64(4, 0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4994] getdents64(4, 0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4994] close(4) = 0 [pid 4994] rmdir("./28/file0") = 0 [pid 4994] getdents64(3, 0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4994] close(3) = 0 [pid 4994] rmdir("./28") = 0 [pid 4994] mkdir("./29", 0777 [pid 5856] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4994] <... mkdir resumed>) = 0 [pid 5856] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5856] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5859] <... futex resumed>) = 1 [pid 5856] <... futex resumed>) = 0 [pid 4994] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5859] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5856] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=48000000} [pid 4994] <... openat resumed>) = 3 [pid 5859] <... write resumed>) = 9 [pid 5859] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4994] close(3 [pid 5859] <... futex resumed>) = 1 [pid 5856] <... futex resumed>) = 0 [pid 5859] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5856] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5859] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5856] <... futex resumed>) = 0 [pid 5859] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5856] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5859] <... openat resumed>) = 5 [pid 5859] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5856] <... futex resumed>) = 0 [pid 5859] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5856] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5859] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5856] <... futex resumed>) = 0 [pid 5859] open("./bus", O_RDWR [pid 5856] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5862] <... mount resumed>) = 0 [pid 5861] <... mount resumed>) = 0 [pid 5859] <... open resumed>) = 6 [pid 4999] <... umount2 resumed>) = 0 [pid 4994] <... close resumed>) = 0 [pid 4994] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556fb95d0) = 5874 [ 119.423338][ T5861] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.423471][ T5867] loop4: detected capacity change from 0 to 2048 [ 119.438072][ T5862] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.457250][ T11] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5859] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5856] <... futex resumed>) = 0 [pid 5861] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5859] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5856] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5861] <... openat resumed>) = 3 [pid 5856] <... futex resumed>) = 0 [pid 5859] <... mmap resumed>) = 0x20000000 [pid 5856] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5859] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5861] chdir("./file0" [pid 5856] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5859] <... futex resumed>) = 0 [pid 5862] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5861] <... chdir resumed>) = 0 [pid 5859] sendfile(4, 5, NULL, 2147483713 [pid 5856] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] lstat("./27/file0", [pid 5861] ioctl(4, LOOP_CLR_FD [pid 5856] <... futex resumed>) = 0 [pid 5856] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5861] <... ioctl resumed>) = 0 [pid 5861] close(4) = 0 [pid 5861] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5857] <... futex resumed>) = 0 [pid 5861] <... futex resumed>) = 1 [pid 5857] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5861] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5857] <... futex resumed>) = 0 [pid 5857] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5867] <... mount resumed>) = 0 [pid 5867] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5861] <... open resumed>) = 4 [pid 5861] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5857] <... futex resumed>) = 0 [pid 5857] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5857] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5861] <... futex resumed>) = 1 [pid 5861] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9) = 9 [pid 5861] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5857] <... futex resumed>) = 0 [pid 5857] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5857] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5861] <... futex resumed>) = 1 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5861] openat(AT_FDCWD, "./bus", O_RDONLY [pid 4999] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5861] <... openat resumed>) = 5 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5861] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] openat(AT_FDCWD, "./27/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5862] <... openat resumed>) = 3 [pid 5861] <... futex resumed>) = 1 [pid 5857] <... futex resumed>) = 0 [ 119.497593][ T5867] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.526476][ T5859] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 4999] <... openat resumed>) = 4 [pid 5867] chdir("./file0" [pid 5862] chdir("./file0" [pid 5861] open("./bus", O_RDWR [pid 5857] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5857] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5867] <... chdir resumed>) = 0 [pid 5862] <... chdir resumed>) = 0 [pid 5861] <... open resumed>) = 6 [pid 4999] fstat(4, [pid 5867] ioctl(4, LOOP_CLR_FD [pid 5862] ioctl(4, LOOP_CLR_FD [pid 5861] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5867] <... ioctl resumed>) = 0 [pid 5862] <... ioctl resumed>) = 0 [pid 5861] <... futex resumed>) = 1 [pid 5857] <... futex resumed>) = 0 [pid 5856] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4999] getdents64(4, [pid 5867] close(4 [pid 5862] close(4 [pid 5861] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5857] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 5867] <... close resumed>) = 0 [pid 5862] <... close resumed>) = 0 [pid 5861] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5857] <... futex resumed>) = 0 [pid 4999] getdents64(4, ./strace-static-x86_64: Process 5874 attached [pid 5867] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5862] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5861] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5857] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 5874] set_robust_list(0x555556fb95e0, 24 [pid 5867] <... futex resumed>) = 1 [pid 5863] <... futex resumed>) = 0 [pid 5862] <... futex resumed>) = 1 [pid 5861] <... mmap resumed>) = 0x20000000 [pid 5858] <... futex resumed>) = 0 [pid 5856] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] close(4 [pid 5874] <... set_robust_list resumed>) = 0 [pid 5867] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5863] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5862] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5861] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5858] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... close resumed>) = 0 [pid 5874] chdir("./29" [pid 5867] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5863] <... futex resumed>) = 0 [pid 5862] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5861] <... futex resumed>) = 1 [pid 5858] <... futex resumed>) = 0 [pid 5857] <... futex resumed>) = 0 [pid 5856] <... futex resumed>) = 0 [pid 4999] rmdir("./27/file0" [pid 5874] <... chdir resumed>) = 0 [pid 5867] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5863] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5862] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5861] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5858] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5857] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... rmdir resumed>) = 0 [pid 5874] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5867] <... open resumed>) = 4 [pid 5862] <... open resumed>) = 4 [pid 5861] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5857] <... futex resumed>) = 0 [pid 5856] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4999] getdents64(3, [pid 5874] <... prctl resumed>) = 0 [ 119.543463][ T5859] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 119.556580][ T5859] EXT4-fs (loop3): This should not happen!! Data will be lost [ 119.556580][ T5859] [ 119.566895][ T5859] EXT4-fs (loop3): Total free blocks count 0 [ 119.575844][ T5859] EXT4-fs (loop3): Free/Dirty block details [ 119.582748][ T5859] EXT4-fs (loop3): free_blocks=2415919104 [ 119.589319][ T5859] EXT4-fs (loop3): dirty_blocks=16 [pid 5867] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5862] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5861] sendfile(4, 5, NULL, 2147483713 [pid 5857] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5856] <... mmap resumed>) = 0x7f5c234cf000 [pid 4999] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 5874] setpgid(0, 0 [pid 5867] <... futex resumed>) = 1 [pid 5863] <... futex resumed>) = 0 [pid 5862] <... futex resumed>) = 1 [pid 5858] <... futex resumed>) = 0 [pid 4999] close(3 [pid 5874] <... setpgid resumed>) = 0 [pid 5867] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5863] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5862] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5858] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5856] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 4999] <... close resumed>) = 0 [pid 5874] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5867] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 119.607271][ T5861] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 119.623766][ T5859] EXT4-fs (loop3): Block reservation details [ 119.636232][ T5861] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 119.649702][ T5861] EXT4-fs (loop1): This should not happen!! Data will be lost [pid 5863] <... futex resumed>) = 0 [pid 5862] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5858] <... futex resumed>) = 0 [pid 4999] rmdir("./27" [pid 5874] <... openat resumed>) = 3 [pid 5867] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5863] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5862] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5858] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5856] <... mprotect resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 5874] write(3, "1000", 4 [pid 5867] <... write resumed>) = 9 [pid 5862] <... write resumed>) = 9 [pid 4999] mkdir("./28", 0777 [pid 5874] <... write resumed>) = 4 [pid 5867] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5862] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5856] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4999] <... mkdir resumed>) = 0 [pid 5874] close(3 [pid 5867] <... futex resumed>) = 1 [pid 5863] <... futex resumed>) = 0 [pid 5862] <... futex resumed>) = 1 [pid 5858] <... futex resumed>) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5874] <... close resumed>) = 0 [pid 5867] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5863] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5862] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5858] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5857] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4999] <... openat resumed>) = 3 [pid 5874] symlink("/dev/binderfs", "./binderfs" [pid 5867] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5863] <... futex resumed>) = 0 [pid 5862] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5858] <... futex resumed>) = 0 [pid 5857] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5874] <... symlink resumed>) = 0 [pid 5867] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5863] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5862] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5858] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5857] <... futex resumed>) = 0 [pid 5856] <... clone resumed>, parent_tid=[5875], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 5875 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) ./strace-static-x86_64: Process 5875 attached [pid 5874] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5867] <... openat resumed>) = 5 [pid 5862] <... openat resumed>) = 5 [pid 5857] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4999] close(3 [pid 5875] set_robust_list(0x7f5c234ef9e0, 24 [pid 5874] <... futex resumed>) = 0 [pid 5867] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5862] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5857] <... mmap resumed>) = 0x7f5c234cf000 [pid 4999] <... close resumed>) = 0 [pid 5875] <... set_robust_list resumed>) = 0 [pid 5874] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5867] <... futex resumed>) = 1 [pid 5863] <... futex resumed>) = 0 [pid 5862] <... futex resumed>) = 1 [pid 5858] <... futex resumed>) = 0 [pid 5857] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5875] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5874] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 5867] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5863] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5862] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5858] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5857] <... mprotect resumed>) = 0 [pid 5874] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 5867] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5863] <... futex resumed>) = 0 [pid 5862] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5858] <... futex resumed>) = 0 [pid 5857] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5856] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... clone resumed>, child_tidptr=0x555556fb95d0) = 5876 [pid 5875] <... futex resumed>) = 0 [pid 5874] <... mprotect resumed>) = 0 [pid 5867] open("./bus", O_RDWR [pid 5863] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5862] open("./bus", O_RDWR [pid 5858] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5856] <... futex resumed>) = 1 [pid 5875] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5874] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5867] <... open resumed>) = 6 [pid 5862] <... open resumed>) = 6 [pid 5859] <... sendfile resumed>) = 63 [pid 5857] <... clone resumed>, parent_tid=[5877], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 5877 [pid 5856] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5877 attached ./strace-static-x86_64: Process 5876 attached [pid 5875] <... ioctl resumed>) = 0 [pid 5867] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5862] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5859] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [ 119.649702][ T5861] [ 119.660895][ T5861] EXT4-fs (loop1): Total free blocks count 0 [ 119.668140][ T5861] EXT4-fs (loop1): Free/Dirty block details [ 119.677179][ T5859] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 119.684149][ T5861] EXT4-fs (loop1): free_blocks=2415919104 [ 119.690243][ T5861] EXT4-fs (loop1): dirty_blocks=16 [pid 5857] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5877] set_robust_list(0x7f5c234ef9e0, 24 [pid 5876] set_robust_list(0x555556fb95e0, 24 [pid 5875] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5874] <... clone resumed>, parent_tid=[5878], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 5878 [pid 5867] <... futex resumed>) = 1 [pid 5863] <... futex resumed>) = 0 [pid 5862] <... futex resumed>) = 1 [pid 5859] <... futex resumed>) = 0 [pid 5858] <... futex resumed>) = 0 [pid 5857] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5878 attached [pid 5877] <... set_robust_list resumed>) = 0 [pid 5875] <... futex resumed>) = 1 [pid 5874] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5867] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5863] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5862] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5859] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5858] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5857] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5878] set_robust_list(0x7f5c2b8109e0, 24 [pid 5877] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5875] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5874] <... futex resumed>) = 0 [pid 5867] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5863] <... futex resumed>) = 0 [pid 5862] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5858] <... futex resumed>) = 0 [pid 5878] <... set_robust_list resumed>) = 0 [pid 5876] <... set_robust_list resumed>) = 0 [pid 5874] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5867] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5863] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5862] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5858] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5856] <... futex resumed>) = 0 [pid 5878] memfd_create("syzkaller", 0 [pid 5876] chdir("./28" [pid 5867] <... mmap resumed>) = 0x20000000 [pid 5862] <... mmap resumed>) = 0x20000000 [pid 5856] exit_group(0 [pid 5878] <... memfd_create resumed>) = 3 [pid 5876] <... chdir resumed>) = 0 [pid 5875] <... futex resumed>) = ? [pid 5867] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5862] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5859] <... futex resumed>) = ? [pid 5856] <... exit_group resumed>) = ? [pid 5878] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5876] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5875] +++ exited with 0 +++ [pid 5867] <... futex resumed>) = 1 [pid 5863] <... futex resumed>) = 0 [pid 5862] <... futex resumed>) = 1 [pid 5859] +++ exited with 0 +++ [pid 5858] <... futex resumed>) = 0 [pid 5878] <... mmap resumed>) = 0x7f5c233f0000 [pid 5867] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5863] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5862] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5858] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5877] <... ioctl resumed>) = 0 [pid 5876] <... prctl resumed>) = 0 [pid 5867] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5863] <... futex resumed>) = 0 [pid 5862] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5861] <... sendfile resumed>) = 63 [pid 5858] <... futex resumed>) = 0 [pid 5856] +++ exited with 0 +++ [pid 5878] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5877] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5876] setpgid(0, 0 [pid 5867] sendfile(4, 5, NULL, 2147483713 [pid 5863] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5862] sendfile(4, 5, NULL, 2147483713 [pid 5861] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5858] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5856, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5878] <... write resumed>) = 1048576 [pid 5877] <... futex resumed>) = 1 [pid 5876] <... setpgid resumed>) = 0 [pid 5861] <... futex resumed>) = 0 [ 119.715771][ T5861] EXT4-fs (loop1): Block reservation details [ 119.733780][ T5861] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 119.750927][ T5867] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 5857] <... futex resumed>) = 0 [pid 5878] munmap(0x7f5c233f0000, 1048576 [pid 5877] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5876] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5861] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5857] exit_group(0 [pid 5877] <... futex resumed>) = ? [pid 5857] <... exit_group resumed>) = ? [pid 5877] +++ exited with 0 +++ [ 119.766073][ T5867] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 119.770334][ T5862] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 119.779074][ T5867] EXT4-fs (loop4): This should not happen!! Data will be lost [ 119.779074][ T5867] [ 119.796854][ T5862] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5878] <... munmap resumed>) = 0 [pid 5876] <... openat resumed>) = 3 [pid 5861] <... futex resumed>) = ? [pid 5863] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5863] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5858] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5863] <... futex resumed>) = 0 [pid 5858] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5863] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5858] <... futex resumed>) = 0 [pid 5863] <... mmap resumed>) = 0x7f5c234cf000 [pid 5858] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5863] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 5858] <... mmap resumed>) = 0x7f5c234cf000 [pid 5863] <... mprotect resumed>) = 0 [pid 5858] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 5863] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5858] <... mprotect resumed>) = 0 [pid 5858] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5863] <... clone resumed>, parent_tid=[5879], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 5879 [pid 5863] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5858] <... clone resumed>, parent_tid=[5880], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 5880 [pid 5863] <... futex resumed>) = 0 [pid 5858] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5863] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5858] <... futex resumed>) = 0 [pid 5858] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5878] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5876] write(3, "1000", 4./strace-static-x86_64: Process 5879 attached [pid 5879] set_robust_list(0x7f5c234ef9e0, 24) = 0 [pid 5879] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040./strace-static-x86_64: Process 5880 attached [pid 5878] <... openat resumed>) = 4 [pid 5876] <... write resumed>) = 4 [pid 5861] +++ exited with 0 +++ [pid 5857] +++ exited with 0 +++ [pid 5880] set_robust_list(0x7f5c234ef9e0, 24 [pid 5878] ioctl(4, LOOP_SET_FD, 3 [pid 5876] close(3 [pid 4995] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5857, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5880] <... set_robust_list resumed>) = 0 [pid 5876] <... close resumed>) = 0 [pid 4997] umount2("./28", MNT_DETACH|UMOUNT_NOFOLLOW [ 119.806024][ T5867] EXT4-fs (loop4): Total free blocks count 0 [ 119.824554][ T5862] EXT4-fs (loop2): This should not happen!! Data will be lost [ 119.824554][ T5862] [ 119.827181][ T5867] EXT4-fs (loop4): Free/Dirty block details [ 119.836045][ T5862] EXT4-fs (loop2): Total free blocks count 0 [ 119.841477][ T5867] EXT4-fs (loop4): free_blocks=2415919104 [ 119.847742][ T5862] EXT4-fs (loop2): Free/Dirty block details [ 119.852995][ T5878] loop0: detected capacity change from 0 to 2048 [pid 5880] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5878] <... ioctl resumed>) = 0 [pid 5876] symlink("/dev/binderfs", "./binderfs" [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5863] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5858] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5878] close(3 [pid 5876] <... symlink resumed>) = 0 [pid 4997] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4995] umount2("./27", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5878] <... close resumed>) = 0 [pid 5876] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] <... openat resumed>) = 3 [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5878] mkdir("./file0", 0777 [pid 5876] <... futex resumed>) = 0 [pid 5867] <... sendfile resumed>) = 63 [pid 4997] fstat(3, [pid 4995] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5878] <... mkdir resumed>) = 0 [pid 5876] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] <... openat resumed>) = 3 [pid 5878] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5876] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 4997] getdents64(3, [pid 4995] fstat(3, [pid 5880] <... ioctl resumed>) = 0 [pid 5879] <... ioctl resumed>) = 0 [pid 5876] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 5862] <... sendfile resumed>) = 63 [pid 4997] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5880] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5879] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5876] <... mprotect resumed>) = 0 [pid 5867] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5862] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] umount2("./28/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] getdents64(3, [pid 5880] <... futex resumed>) = 0 [pid 5879] <... futex resumed>) = 0 [pid 5876] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5880] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5879] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5867] <... futex resumed>) = 0 [pid 5862] <... futex resumed>) = 0 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5881 attached [pid 4997] lstat("./28/binderfs", [pid 4995] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 5876] <... clone resumed>, parent_tid=[5881], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 5881 [pid 5863] exit_group(0 [pid 5858] exit_group(0 [pid 4997] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4995] umount2("./27/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5881] set_robust_list(0x7f5c2b8109e0, 24 [pid 5879] <... futex resumed>) = ? [pid 5876] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5863] <... exit_group resumed>) = ? [pid 5880] <... futex resumed>) = ? [pid 5858] <... exit_group resumed>) = ? [pid 4997] unlink("./28/binderfs" [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5881] <... set_robust_list resumed>) = 0 [pid 5880] +++ exited with 0 +++ [pid 5879] +++ exited with 0 +++ [pid 5876] <... futex resumed>) = 0 [pid 4997] <... unlink resumed>) = 0 [pid 4995] lstat("./27/binderfs", [pid 5876] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [ 119.865948][ T5862] EXT4-fs (loop2): free_blocks=2415919104 [ 119.866970][ T5867] EXT4-fs (loop4): dirty_blocks=16 [ 119.873742][ T5862] EXT4-fs (loop2): dirty_blocks=16 [ 119.878184][ T5867] EXT4-fs (loop4): Block reservation details [ 119.884687][ T5862] EXT4-fs (loop2): Block reservation details [ 119.889170][ T5867] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 119.896381][ T5862] EXT4-fs (loop2): i_reserved_data_blocks=1 [pid 4997] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5881] memfd_create("syzkaller", 0 [pid 5867] +++ exited with 0 +++ [pid 5863] +++ exited with 0 +++ [pid 5862] +++ exited with 0 +++ [pid 5858] +++ exited with 0 +++ [pid 4995] unlink("./27/binderfs" [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5863, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 4996] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5858, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 4995] <... unlink resumed>) = 0 [pid 4995] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] umount2("./29", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] umount2("./27", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] fstat(3, [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4996] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4996] getdents64(3, [pid 4998] <... openat resumed>) = 3 [pid 4996] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4998] fstat(3, [pid 4996] umount2("./29/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] getdents64(3, [pid 4996] lstat("./29/binderfs", [pid 4998] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4996] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] umount2("./27/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] unlink("./29/binderfs" [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4996] <... unlink resumed>) = 0 [pid 4998] lstat("./27/binderfs", [pid 4996] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./27/binderfs") = 0 [ 119.920659][ T5608] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 119.924491][ T5878] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.945635][ T11] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 4998] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5878] <... mount resumed>) = 0 [pid 5878] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5878] chdir("./file0") = 0 [pid 5878] ioctl(4, LOOP_CLR_FD) = 0 [pid 5878] close(4 [pid 5881] <... memfd_create resumed>) = 3 [pid 5878] <... close resumed>) = 0 [pid 5878] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5874] <... futex resumed>) = 0 [pid 5878] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5874] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5881] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5874] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5881] <... mmap resumed>) = 0x7f5c233f0000 [pid 5878] <... open resumed>) = 4 [pid 5878] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5874] <... futex resumed>) = 0 [pid 5874] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5874] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5878] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9) = 9 [pid 5878] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5874] <... futex resumed>) = 0 [pid 5878] <... futex resumed>) = 1 [pid 5874] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5874] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5878] openat(AT_FDCWD, "./bus", O_RDONLY [pid 4997] <... umount2 resumed>) = 0 [pid 4995] <... umount2 resumed>) = 0 [pid 4995] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5878] <... openat resumed>) = 5 [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] lstat("./27/file0", [pid 5878] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4995] openat(AT_FDCWD, "./27/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5878] <... futex resumed>) = 1 [pid 5874] <... futex resumed>) = 0 [pid 5874] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4995] fstat(4, [pid 5874] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5878] open("./bus", O_RDWR [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] getdents64(4, 0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4995] getdents64(4, 0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 5878] <... open resumed>) = 6 [pid 4995] close(4) = 0 [pid 4995] rmdir("./27/file0" [pid 5878] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] <... rmdir resumed>) = 0 [pid 5878] <... futex resumed>) = 1 [pid 5874] <... futex resumed>) = 0 [pid 5874] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5874] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4995] getdents64(3, 0x555556fba620 /* 0 entries */, 32768) = 0 [ 119.963607][ T5076] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 119.963765][ T5608] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 4995] close(3 [pid 5878] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5881] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4995] <... close resumed>) = 0 [pid 4995] rmdir("./27") = 0 [pid 4995] mkdir("./28", 0777 [pid 5878] <... mmap resumed>) = 0x20000000 [pid 4997] lstat("./28/file0", [pid 4995] <... mkdir resumed>) = 0 [pid 4995] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4995] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4995] close(3 [pid 5878] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] <... close resumed>) = 0 [pid 4995] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556fb95d0) = 5884 ./strace-static-x86_64: Process 5884 attached [pid 5884] set_robust_list(0x555556fb95e0, 24) = 0 [pid 5884] chdir("./28") = 0 [pid 5884] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5884] setpgid(0, 0) = 0 [pid 5884] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5884] write(3, "1000", 4) = 4 [pid 5884] close(3) = 0 [pid 5884] symlink("/dev/binderfs", "./binderfs" [pid 4997] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5878] <... futex resumed>) = 1 [pid 5874] <... futex resumed>) = 0 [pid 5874] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5874] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5884] <... symlink resumed>) = 0 [pid 5884] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5878] sendfile(4, 5, NULL, 2147483713 [pid 4997] openat(AT_FDCWD, "./28/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5884] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c2b7f0000 [pid 5884] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5884] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5885], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 5885 [pid 5884] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5884] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5885 attached [pid 4997] <... openat resumed>) = 4 [pid 5885] set_robust_list(0x7f5c2b8109e0, 24 [pid 4997] fstat(4, [pid 5885] <... set_robust_list resumed>) = 0 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5885] memfd_create("syzkaller", 0) = 3 [pid 5885] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5c233f0000 [pid 4997] getdents64(4, 0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4997] getdents64(4, 0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4997] close(4) = 0 [pid 4997] rmdir("./28/file0") = 0 [pid 5885] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4997] getdents64(3, [pid 5885] <... write resumed>) = 1048576 [pid 5885] munmap(0x7f5c233f0000, 1048576) = 0 [pid 5885] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5885] ioctl(4, LOOP_SET_FD, 3 [pid 5874] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4997] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 5874] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5874] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c234cf000 [pid 5874] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 5885] <... ioctl resumed>) = 0 [pid 5885] close(3 [pid 5874] <... mprotect resumed>) = 0 [pid 5885] <... close resumed>) = 0 [pid 5874] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5885] mkdir("./file0", 0777 [pid 4997] close(3 [pid 5874] <... clone resumed>, parent_tid=[5886], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 5886 [pid 5874] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5874] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5885] <... mkdir resumed>) = 0 [pid 4997] <... close resumed>) = 0 [pid 5885] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 4997] rmdir("./28") = 0 ./strace-static-x86_64: Process 5886 attached [pid 4997] mkdir("./29", 0777 [pid 5886] set_robust_list(0x7f5c234ef9e0, 24) = 0 [pid 5886] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 4997] <... mkdir resumed>) = 0 [pid 4997] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4996] <... umount2 resumed>) = 0 [pid 4997] <... openat resumed>) = 3 [pid 4997] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 120.071382][ T5878] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 120.094118][ T5885] loop1: detected capacity change from 0 to 2048 [pid 5881] <... write resumed>) = 1048576 [pid 4997] close(3 [pid 4996] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... close resumed>) = 0 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556fb95d0) = 5888 [pid 4996] lstat("./29/file0", [pid 5881] munmap(0x7f5c233f0000, 1048576 [pid 4996] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5888 attached [pid 5881] <... munmap resumed>) = 0 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5888] set_robust_list(0x555556fb95e0, 24 [pid 5881] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 4996] openat(AT_FDCWD, "./29/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5888] <... set_robust_list resumed>) = 0 [pid 5881] <... openat resumed>) = 4 [pid 4996] <... openat resumed>) = 4 [pid 5874] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5881] ioctl(4, LOOP_SET_FD, 3 [pid 4996] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 120.120775][ T5878] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 120.156925][ T5881] loop5: detected capacity change from 0 to 2048 [pid 5888] chdir("./29" [pid 4996] getdents64(4, [pid 5888] <... chdir resumed>) = 0 [pid 4998] <... umount2 resumed>) = 0 [pid 4996] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4998] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] getdents64(4, [pid 5888] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4996] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 5888] setpgid(0, 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4996] close(4) = 0 [pid 5888] <... setpgid resumed>) = 0 [pid 4996] rmdir("./29/file0" [pid 4998] lstat("./27/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] <... rmdir resumed>) = 0 [pid 4998] openat(AT_FDCWD, "./27/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4996] getdents64(3, [pid 5888] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4998] fstat(4, [pid 4996] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] close(3 [pid 4998] getdents64(4, [pid 4996] <... close resumed>) = 0 [pid 5888] <... openat resumed>) = 3 [pid 4998] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4996] rmdir("./29" [pid 4998] getdents64(4, 0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./27/file0") = 0 [pid 4996] <... rmdir resumed>) = 0 [pid 5888] write(3, "1000", 4 [pid 4998] getdents64(3, [pid 4996] mkdir("./30", 0777 [pid 5888] <... write resumed>) = 4 [pid 5885] <... mount resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 5885] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 4998] close(3 [pid 5888] close(3 [pid 5885] <... openat resumed>) = 3 [pid 4998] <... close resumed>) = 0 [pid 4996] <... mkdir resumed>) = 0 [pid 5888] <... close resumed>) = 0 [pid 5885] chdir("./file0" [pid 4998] rmdir("./27" [pid 4996] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5888] symlink("/dev/binderfs", "./binderfs" [pid 5885] <... chdir resumed>) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 5885] ioctl(4, LOOP_CLR_FD [pid 4998] mkdir("./28", 0777 [pid 4996] <... openat resumed>) = 3 [pid 5888] <... symlink resumed>) = 0 [pid 5885] <... ioctl resumed>) = 0 [pid 5881] <... ioctl resumed>) = 0 [pid 4996] ioctl(3, LOOP_CLR_FD [pid 5888] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5885] close(4 [pid 5881] close(3 [pid 4998] <... mkdir resumed>) = 0 [pid 4996] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5888] <... futex resumed>) = 0 [pid 5885] <... close resumed>) = 0 [pid 5881] <... close resumed>) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4996] close(3 [pid 5888] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5885] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5881] mkdir("./file0", 0777 [pid 4998] <... openat resumed>) = 3 [pid 4996] <... close resumed>) = 0 [pid 5888] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 5885] <... futex resumed>) = 1 [pid 5881] <... mkdir resumed>) = 0 [pid 4996] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5884] <... futex resumed>) = 0 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5888] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 5885] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5884] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [ 120.161185][ T5885] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.180161][ T5878] EXT4-fs (loop0): This should not happen!! Data will be lost [ 120.180161][ T5878] [pid 5881] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5888] <... mprotect resumed>) = 0 [pid 5885] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5884] <... futex resumed>) = 0 [pid 4996] <... clone resumed>, child_tidptr=0x555556fb95d0) = 5890 ./strace-static-x86_64: Process 5890 attached [pid 5888] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5885] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5884] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] close(3 [pid 5890] set_robust_list(0x555556fb95e0, 24) = 0 [pid 5888] <... clone resumed>, parent_tid=[5891], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 5891 [pid 5890] chdir("./30" [pid 5888] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5885] <... open resumed>) = 4 [pid 4998] <... close resumed>) = 0 [pid 5888] <... futex resumed>) = 0 [pid 5885] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5891 attached [pid 5890] <... chdir resumed>) = 0 [pid 5888] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5885] <... futex resumed>) = 1 [pid 5884] <... futex resumed>) = 0 [pid 5891] set_robust_list(0x7f5c2b8109e0, 24 [pid 5890] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5885] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5884] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5891] <... set_robust_list resumed>) = 0 [pid 5890] <... prctl resumed>) = 0 [ 120.235679][ T5878] EXT4-fs (loop0): Total free blocks count 0 [ 120.246501][ T5878] EXT4-fs (loop0): Free/Dirty block details [ 120.253848][ T5878] EXT4-fs (loop0): free_blocks=2415919104 [ 120.271280][ T5881] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [pid 5885] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5884] <... futex resumed>) = 0 [pid 5891] memfd_create("syzkaller", 0 [pid 5890] setpgid(0, 0 [pid 5885] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5884] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5891] <... memfd_create resumed>) = 3 [pid 5890] <... setpgid resumed>) = 0 [pid 5885] <... write resumed>) = 9 [pid 5891] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5890] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5885] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5891] <... mmap resumed>) = 0x7f5c233f0000 [pid 5890] <... openat resumed>) = 3 [pid 5885] <... futex resumed>) = 1 [pid 5884] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5894 attached [pid 5890] write(3, "1000", 4 [pid 5886] <... ioctl resumed>) = 0 [pid 5885] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5884] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5881] <... mount resumed>) = 0 [pid 5878] <... sendfile resumed>) = 63 [pid 4998] <... clone resumed>, child_tidptr=0x555556fb95d0) = 5894 [pid 5894] set_robust_list(0x555556fb95e0, 24 [pid 5890] <... write resumed>) = 4 [pid 5886] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5885] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5884] <... futex resumed>) = 0 [pid 5881] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5878] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5874] exit_group(0 [pid 5894] <... set_robust_list resumed>) = 0 [pid 5890] close(3 [pid 5886] <... futex resumed>) = ? [pid 5885] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5884] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5881] <... openat resumed>) = 3 [pid 5878] <... futex resumed>) = ? [pid 5874] <... exit_group resumed>) = ? [pid 5894] chdir("./28" [pid 5890] <... close resumed>) = 0 [pid 5886] +++ exited with 0 +++ [pid 5885] <... openat resumed>) = 5 [pid 5881] chdir("./file0" [pid 5878] +++ exited with 0 +++ [pid 5894] <... chdir resumed>) = 0 [pid 5881] <... chdir resumed>) = 0 [pid 5894] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5881] ioctl(4, LOOP_CLR_FD [pid 5894] <... prctl resumed>) = 0 [pid 5881] <... ioctl resumed>) = 0 [pid 5894] setpgid(0, 0 [pid 5881] close(4 [pid 5874] +++ exited with 0 +++ [pid 5890] symlink("/dev/binderfs", "./binderfs" [pid 5885] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5894] <... setpgid resumed>) = 0 [pid 5881] <... close resumed>) = 0 [pid 5894] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5881] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5890] <... symlink resumed>) = 0 [pid 5894] <... openat resumed>) = 3 [pid 5890] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5885] <... futex resumed>) = 1 [pid 5884] <... futex resumed>) = 0 [pid 5881] <... futex resumed>) = 1 [pid 5876] <... futex resumed>) = 0 [pid 4994] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5874, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5894] write(3, "1000", 4 [pid 5890] <... futex resumed>) = 0 [pid 5885] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5884] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5881] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5876] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] umount2("./29", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5894] <... write resumed>) = 4 [pid 5890] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5885] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5884] <... futex resumed>) = 0 [pid 5881] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5876] <... futex resumed>) = 0 [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5894] close(3 [pid 5890] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 5885] open("./bus", O_RDWR [pid 5884] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5881] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5876] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4994] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5894] <... close resumed>) = 0 [pid 5890] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 5885] <... open resumed>) = 6 [pid 5894] symlink("/dev/binderfs", "./binderfs" [pid 4994] <... openat resumed>) = 3 [pid 5894] <... symlink resumed>) = 0 [pid 5885] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5881] <... open resumed>) = 4 [pid 5894] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5890] <... mprotect resumed>) = 0 [pid 5885] <... futex resumed>) = 1 [pid 5884] <... futex resumed>) = 0 [pid 5881] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] fstat(3, [pid 5894] <... futex resumed>) = 0 [pid 5890] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5885] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5884] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5881] <... futex resumed>) = 1 [pid 5876] <... futex resumed>) = 0 [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5894] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5884] <... futex resumed>) = 0 [pid 5876] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5894] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 5894] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5885] <... mmap resumed>) = 0x20000000 [pid 5884] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5876] <... futex resumed>) = 0 [pid 5894] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5890] <... clone resumed>, parent_tid=[5895], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 5895 [pid 5885] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5884] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5881] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5876] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4994] getdents64(3, ./strace-static-x86_64: Process 5895 attached [pid 5890] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5885] <... futex resumed>) = 0 [pid 5884] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5895] set_robust_list(0x7f5c2b8109e0, 24 [pid 5894] <... clone resumed>, parent_tid=[5896], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 5896 [ 120.277545][ T5878] EXT4-fs (loop0): dirty_blocks=16 [ 120.288869][ T5878] EXT4-fs (loop0): Block reservation details [ 120.295371][ T5878] EXT4-fs (loop0): i_reserved_data_blocks=1 [pid 5884] <... futex resumed>) = 0 [pid 5881] <... write resumed>) = 9 [pid 5890] <... futex resumed>) = 0 [pid 5885] sendfile(4, 5, NULL, 2147483713 [pid 4994] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 5895] <... set_robust_list resumed>) = 0 [pid 5894] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5890] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5884] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5881] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5895] memfd_create("syzkaller", 0 [pid 5894] <... futex resumed>) = 0 [pid 5881] <... futex resumed>) = 1 [pid 5876] <... futex resumed>) = 0 [pid 4994] umount2("./29/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5895] <... memfd_create resumed>) = 3 [pid 5894] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5881] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5876] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5895] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5c233f0000 [pid 5881] <... openat resumed>) = 5 [pid 5876] <... futex resumed>) = 0 [pid 4994] lstat("./29/binderfs", [pid 5895] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5881] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5876] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5876] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5876] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4994] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5881] <... futex resumed>) = 1 [pid 5876] <... futex resumed>) = 0 [pid 4994] unlink("./29/binderfs" [pid 5881] open("./bus", O_RDWR [pid 5876] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4994] <... unlink resumed>) = 0 [pid 5881] <... open resumed>) = 6 [pid 5881] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5881] <... futex resumed>) = 1 [pid 5876] <... futex resumed>) = 0 [pid 5881] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5876] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5895] <... write resumed>) = 1048576 [pid 5895] munmap(0x7f5c233f0000, 1048576) = 0 [pid 5876] <... futex resumed>) = 0 [pid 5876] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5896 attached [pid 5896] set_robust_list(0x7f5c2b8109e0, 24) = 0 [pid 5896] memfd_create("syzkaller", 0 [pid 5881] <... mmap resumed>) = 0x20000000 [pid 5881] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5876] <... futex resumed>) = 0 [pid 5881] <... futex resumed>) = 1 [pid 5895] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5881] sendfile(4, 5, NULL, 2147483713 [pid 5876] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5876] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5896] <... memfd_create resumed>) = 3 [pid 5896] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5c233f0000 [pid 5895] <... openat resumed>) = 4 [ 120.338561][ T5885] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 120.358194][ T5457] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5891] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5895] ioctl(4, LOOP_SET_FD, 3 [pid 5896] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5884] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5884] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5884] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c234cf000 [pid 5884] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5884] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5897], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 5897 [pid 5884] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5884] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5896] <... write resumed>) = 1048576 [pid 5896] munmap(0x7f5c233f0000, 1048576) = 0 ./strace-static-x86_64: Process 5897 attached [pid 5896] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5897] set_robust_list(0x7f5c234ef9e0, 24 [pid 5896] ioctl(4, LOOP_SET_FD, 3 [pid 5897] <... set_robust_list resumed>) = 0 [pid 5876] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5876] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5876] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5896] <... ioctl resumed>) = 0 [pid 5876] <... mmap resumed>) = 0x7f5c234cf000 [pid 5896] close(3 [pid 5876] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 5896] <... close resumed>) = 0 [pid 5896] mkdir("./file0", 0777 [pid 5876] <... mprotect resumed>) = 0 [pid 5876] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5898], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 5898 [pid 5876] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5876] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5897] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5896] <... mkdir resumed>) = 0 [pid 5896] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5895] <... ioctl resumed>) = 0 [pid 5895] close(3) = 0 ./strace-static-x86_64: Process 5898 attached [pid 5898] set_robust_list(0x7f5c234ef9e0, 24) = 0 [ 120.382516][ T5881] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 120.401172][ T5895] loop2: detected capacity change from 0 to 2048 [ 120.419856][ T5896] loop4: detected capacity change from 0 to 2048 [pid 5898] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5884] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5895] mkdir("./file0", 0777) = 0 [pid 5895] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5891] <... write resumed>) = 1048576 [ 120.444938][ T5885] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 120.466381][ T5896] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.470730][ T5881] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5891] munmap(0x7f5c233f0000, 1048576 [pid 5876] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5896] <... mount resumed>) = 0 [pid 5896] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5896] chdir("./file0") = 0 [pid 5896] ioctl(4, LOOP_CLR_FD) = 0 [pid 5891] <... munmap resumed>) = 0 [pid 5896] close(4) = 0 [pid 5896] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5894] <... futex resumed>) = 0 [pid 5894] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5894] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5896] <... futex resumed>) = 1 [pid 5896] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5891] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 4994] <... umount2 resumed>) = 0 [ 120.491396][ T5885] EXT4-fs (loop1): This should not happen!! Data will be lost [ 120.491396][ T5885] [ 120.493544][ T5881] EXT4-fs (loop5): This should not happen!! Data will be lost [ 120.493544][ T5881] [ 120.529260][ T5881] EXT4-fs (loop5): Total free blocks count 0 [ 120.537278][ T5881] EXT4-fs (loop5): Free/Dirty block details [pid 5891] ioctl(4, LOOP_SET_FD, 3 [pid 5896] <... open resumed>) = 4 [pid 4994] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] lstat("./29/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5896] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5896] <... futex resumed>) = 0 [pid 5894] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] openat(AT_FDCWD, "./29/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5896] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4994] <... openat resumed>) = 4 [pid 4994] fstat(4, [pid 5894] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] getdents64(4, 0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 5896] <... futex resumed>) = 0 [pid 5894] <... futex resumed>) = 1 [ 120.537715][ T5891] loop3: detected capacity change from 0 to 2048 [ 120.543348][ T5881] EXT4-fs (loop5): free_blocks=2415919104 [ 120.555741][ T5885] EXT4-fs (loop1): Total free blocks count 0 [ 120.562171][ T5885] EXT4-fs (loop1): Free/Dirty block details [ 120.568900][ T5885] EXT4-fs (loop1): free_blocks=2415919104 [ 120.573091][ T5881] EXT4-fs (loop5): dirty_blocks=16 [ 120.575381][ T5885] EXT4-fs (loop1): dirty_blocks=16 [ 120.586282][ T5885] EXT4-fs (loop1): Block reservation details [pid 4994] getdents64(4, [pid 5897] <... ioctl resumed>) = 0 [pid 5896] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5894] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5891] <... ioctl resumed>) = 0 [pid 5885] <... sendfile resumed>) = 63 [pid 4994] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 5897] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5896] <... write resumed>) = 9 [pid 4994] close(4 [pid 5897] <... futex resumed>) = 0 [pid 5896] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] <... close resumed>) = 0 [pid 5898] <... ioctl resumed>) = 0 [pid 5897] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5896] <... futex resumed>) = 1 [pid 5895] <... mount resumed>) = 0 [pid 5894] <... futex resumed>) = 0 [pid 5891] close(3 [pid 5885] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5881] <... sendfile resumed>) = 63 [pid 4994] rmdir("./29/file0" [pid 5898] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5896] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5895] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5894] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5891] <... close resumed>) = 0 [pid 5885] <... futex resumed>) = 0 [pid 5884] exit_group(0 [pid 5898] <... futex resumed>) = 0 [pid 5897] <... futex resumed>) = ? [pid 5896] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5895] <... openat resumed>) = 3 [pid 5894] <... futex resumed>) = 0 [pid 5891] mkdir("./file0", 0777 [pid 5884] <... exit_group resumed>) = ? [pid 4994] <... rmdir resumed>) = 0 [pid 5898] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5897] +++ exited with 0 +++ [pid 5896] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5895] chdir("./file0" [pid 5894] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5891] <... mkdir resumed>) = 0 [pid 5885] +++ exited with 0 +++ [pid 5881] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5895] <... chdir resumed>) = 0 [pid 5891] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5895] ioctl(4, LOOP_CLR_FD [pid 5884] +++ exited with 0 +++ [pid 5895] <... ioctl resumed>) = 0 [pid 5876] exit_group(0 [pid 5895] close(4 [pid 5896] <... openat resumed>) = 5 [pid 5895] <... close resumed>) = 0 [pid 5895] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5895] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5890] <... futex resumed>) = 0 [pid 5890] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4995] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5884, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5898] <... futex resumed>) = ? [pid 5890] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5876] <... exit_group resumed>) = ? [pid 5898] +++ exited with 0 +++ [pid 5896] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5895] <... futex resumed>) = 0 [pid 5881] <... futex resumed>) = ? [pid 4995] restart_syscall(<... resuming interrupted clone ...> [pid 4994] getdents64(3, [pid 5896] <... futex resumed>) = 1 [pid 5895] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5881] +++ exited with 0 +++ [pid 5876] +++ exited with 0 +++ [pid 4995] <... restart_syscall resumed>) = 0 [pid 4994] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 5894] <... futex resumed>) = 0 [pid 5894] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5896] open("./bus", O_RDWR [pid 5894] <... futex resumed>) = 0 [pid 5896] <... open resumed>) = 6 [pid 5894] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5876, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 4994] close(3 [pid 4995] umount2("./28", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] <... close resumed>) = 0 [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] rmdir("./29") = 0 [pid 4995] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5896] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] umount2("./28", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4995] <... openat resumed>) = 3 [pid 4999] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5896] <... futex resumed>) = 1 [pid 5894] <... futex resumed>) = 0 [pid 4995] fstat(3, [pid 5896] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5894] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4999] <... openat resumed>) = 3 [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5896] <... mmap resumed>) = 0x20000000 [pid 5894] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] fstat(3, [pid 4995] getdents64(3, [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 5895] <... open resumed>) = 4 [pid 4999] getdents64(3, [pid 4995] umount2("./28/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] mkdir("./30", 0777 [pid 4999] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] umount2("./28/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] <... mkdir resumed>) = 0 [pid 4995] lstat("./28/binderfs", [pid 5895] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5895] <... futex resumed>) = 1 [pid 5890] <... futex resumed>) = 0 [pid 5890] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] lstat("./28/binderfs", [pid 4995] unlink("./28/binderfs" [pid 4994] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5890] <... futex resumed>) = 0 [pid 5890] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5895] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4995] <... unlink resumed>) = 0 [pid 4999] unlink("./28/binderfs") = 0 [pid 5895] <... write resumed>) = 9 [pid 4994] <... openat resumed>) = 3 [pid 5895] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] ioctl(3, LOOP_CLR_FD [ 120.592690][ T5885] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 120.594962][ T5895] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.599007][ T5881] EXT4-fs (loop5): Block reservation details [ 120.617516][ T5881] EXT4-fs (loop5): i_reserved_data_blocks=1 [pid 5896] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5895] <... futex resumed>) = 1 [pid 5890] <... futex resumed>) = 0 [pid 5896] <... futex resumed>) = 1 [pid 5895] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5894] <... futex resumed>) = 0 [pid 5890] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5896] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5895] <... openat resumed>) = 5 [pid 5895] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5895] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5894] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5894] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5896] <... futex resumed>) = 0 [pid 5896] sendfile(4, 5, NULL, 2147483713 [pid 5890] <... futex resumed>) = 1 [pid 5890] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5890] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5890] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5895] <... futex resumed>) = 0 [pid 5895] open("./bus", O_RDWR) = 6 [pid 5895] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5890] <... futex resumed>) = 0 [pid 5890] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5890] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5895] <... futex resumed>) = 1 [pid 5895] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5890] <... futex resumed>) = 0 [pid 5890] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5890] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5895] <... futex resumed>) = 1 [ 120.669379][ T5457] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 120.682905][ T5608] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 120.698089][ T5891] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [pid 5895] sendfile(4, 5, NULL, 2147483713 [pid 4994] close(3) = 0 [pid 4994] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556fb95d0) = 5905 [pid 4999] <... umount2 resumed>) = 0 [pid 4999] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./28/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5894] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5894] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5894] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4999] openat(AT_FDCWD, "./28/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5894] <... mmap resumed>) = 0x7f5c234cf000 [pid 5894] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 4999] <... openat resumed>) = 4 [pid 5894] <... mprotect resumed>) = 0 [pid 4999] fstat(4, [pid 5894] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, [pid 5894] <... clone resumed>, parent_tid=[5906], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 5906 [pid 4999] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 5894] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5890] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5894] <... futex resumed>) = 0 [pid 5890] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] getdents64(4, [pid 5894] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5890] <... futex resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 5890] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4999] close(4 [pid 5890] <... mmap resumed>) = 0x7f5c234cf000 [pid 4999] <... close resumed>) = 0 [pid 5890] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 4999] rmdir("./28/file0" [pid 5890] <... mprotect resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 5890] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4999] getdents64(3, 0x555556fba620 /* 0 entries */, 32768) = 0 [pid 5890] <... clone resumed>, parent_tid=[5907], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 5907 [pid 4999] close(3 [pid 5890] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... close resumed>) = 0 [pid 5890] <... futex resumed>) = 0 [pid 4999] rmdir("./28" [pid 5890] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] <... rmdir resumed>) = 0 [pid 4999] mkdir("./29", 0777) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556fb95d0) = 5908 ./strace-static-x86_64: Process 5905 attached [pid 5905] set_robust_list(0x555556fb95e0, 24) = 0 [pid 5905] chdir("./30") = 0 [pid 5905] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5905] setpgid(0, 0) = 0 [pid 5905] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5905] write(3, "1000", 4) = 4 [pid 5905] close(3) = 0 [pid 5905] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5905] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5905] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c2b7f0000 [pid 5905] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5905] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5909], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 5909 [pid 5905] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 120.717967][ T5896] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 120.752377][ T5895] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 5905] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5909 attached ./strace-static-x86_64: Process 5908 attached ./strace-static-x86_64: Process 5907 attached ./strace-static-x86_64: Process 5906 attached [pid 5891] <... mount resumed>) = 0 [pid 4995] <... umount2 resumed>) = 0 [pid 5909] set_robust_list(0x7f5c2b8109e0, 24 [pid 5908] set_robust_list(0x555556fb95e0, 24 [pid 5907] set_robust_list(0x7f5c234ef9e0, 24 [pid 5906] set_robust_list(0x7f5c234ef9e0, 24 [pid 5891] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 4995] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5894] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5906] <... set_robust_list resumed>) = 0 [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5891] <... openat resumed>) = 3 [pid 5907] <... set_robust_list resumed>) = 0 [pid 5909] <... set_robust_list resumed>) = 0 [pid 5907] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5906] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5909] memfd_create("syzkaller", 0 [pid 5891] chdir("./file0" [pid 4995] lstat("./28/file0", [pid 5909] <... memfd_create resumed>) = 3 [pid 5908] <... set_robust_list resumed>) = 0 [pid 5891] <... chdir resumed>) = 0 [pid 5890] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4995] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5909] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5908] chdir("./29" [pid 5891] ioctl(4, LOOP_CLR_FD [ 120.780547][ T5896] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 120.797627][ T5895] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 120.807994][ T5896] EXT4-fs (loop4): This should not happen!! Data will be lost [ 120.807994][ T5896] [pid 4995] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5909] <... mmap resumed>) = 0x7f5c233f0000 [pid 5908] <... chdir resumed>) = 0 [pid 5891] <... ioctl resumed>) = 0 [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5908] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5909] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5908] <... prctl resumed>) = 0 [pid 5891] close(4 [pid 4995] openat(AT_FDCWD, "./28/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5908] setpgid(0, 0 [pid 4995] fstat(4, [pid 5908] <... setpgid resumed>) = 0 [pid 5891] <... close resumed>) = 0 [pid 5908] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5891] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5908] <... openat resumed>) = 3 [pid 5891] <... futex resumed>) = 1 [pid 5888] <... futex resumed>) = 0 [pid 4995] getdents64(4, [pid 5908] write(3, "1000", 4 [pid 5891] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5888] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 5891] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5908] <... write resumed>) = 4 [pid 5888] <... futex resumed>) = 0 [pid 5908] close(3 [pid 5891] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 4995] getdents64(4, [pid 5888] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5908] <... close resumed>) = 0 [pid 5891] <... open resumed>) = 4 [pid 4995] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 5908] symlink("/dev/binderfs", "./binderfs" [pid 4995] close(4 [pid 5908] <... symlink resumed>) = 0 [pid 5891] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] <... close resumed>) = 0 [pid 5908] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5891] <... futex resumed>) = 1 [pid 5888] <... futex resumed>) = 0 [pid 4995] rmdir("./28/file0" [pid 5908] <... futex resumed>) = 0 [pid 5891] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5888] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5908] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5891] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5888] <... futex resumed>) = 0 [pid 4995] <... rmdir resumed>) = 0 [ 120.832862][ T5896] EXT4-fs (loop4): Total free blocks count 0 [ 120.842141][ T5896] EXT4-fs (loop4): Free/Dirty block details [ 120.849626][ T5896] EXT4-fs (loop4): free_blocks=2415919104 [ 120.858451][ T5896] EXT4-fs (loop4): dirty_blocks=16 [ 120.865323][ T5896] EXT4-fs (loop4): Block reservation details [ 120.874140][ T5896] EXT4-fs (loop4): i_reserved_data_blocks=1 [pid 5908] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 5891] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5888] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4995] getdents64(3, [pid 5909] <... write resumed>) = 1048576 [pid 5908] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 5906] <... ioctl resumed>) = 0 [pid 5896] <... sendfile resumed>) = 63 [pid 5891] <... write resumed>) = 9 [pid 4995] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 5891] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5888] <... futex resumed>) = 0 [pid 5891] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5888] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5909] munmap(0x7f5c233f0000, 1048576 [pid 5908] <... mprotect resumed>) = 0 [pid 5906] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5896] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5891] <... openat resumed>) = 5 [pid 5888] <... futex resumed>) = 0 [pid 5894] exit_group(0 [pid 5891] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5888] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5896] <... futex resumed>) = 0 [pid 4995] close(3 [pid 5891] <... futex resumed>) = 0 [pid 5888] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5909] <... munmap resumed>) = 0 [pid 5908] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5906] <... futex resumed>) = ? [pid 5894] <... exit_group resumed>) = ? [pid 5891] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5888] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] <... close resumed>) = 0 [pid 5909] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5906] +++ exited with 0 +++ [pid 5896] +++ exited with 0 +++ [pid 5894] +++ exited with 0 +++ [pid 5891] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5888] <... futex resumed>) = 0 [pid 4995] rmdir("./28" [pid 5909] <... openat resumed>) = 4 [pid 5908] <... clone resumed>, parent_tid=[5910], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 5910 [pid 5891] open("./bus", O_RDWR [pid 4995] <... rmdir resumed>) = 0 [pid 5909] ioctl(4, LOOP_SET_FD, 3 [pid 5908] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5894, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 4995] mkdir("./29", 0777./strace-static-x86_64: Process 5910 attached [pid 5908] <... futex resumed>) = 0 [pid 5891] <... open resumed>) = 6 [pid 5888] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] umount2("./28", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] <... mkdir resumed>) = 0 [pid 5908] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5910] set_robust_list(0x7f5c2b8109e0, 24 [pid 5909] <... ioctl resumed>) = 0 [pid 5891] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5888] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 120.881355][ T5895] EXT4-fs (loop2): This should not happen!! Data will be lost [ 120.881355][ T5895] [ 120.894610][ T5895] EXT4-fs (loop2): Total free blocks count 0 [ 120.905547][ T5895] EXT4-fs (loop2): Free/Dirty block details [ 120.919376][ T5909] loop0: detected capacity change from 0 to 2048 [ 120.927008][ T5895] EXT4-fs (loop2): free_blocks=2415919104 [pid 4998] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4995] <... openat resumed>) = 3 [pid 5909] close(3 [pid 4998] <... openat resumed>) = 3 [pid 4995] ioctl(3, LOOP_CLR_FD [pid 5909] <... close resumed>) = 0 [pid 4998] fstat(3, [pid 4995] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5910] <... set_robust_list resumed>) = 0 [pid 5909] mkdir("./file0", 0777 [pid 5891] <... futex resumed>) = 0 [pid 5888] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] close(3 [pid 5910] memfd_create("syzkaller", 0 [pid 5909] <... mkdir resumed>) = 0 [pid 5907] <... ioctl resumed>) = 0 [pid 5895] <... sendfile resumed>) = 63 [pid 5891] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5888] <... futex resumed>) = 0 [pid 4998] getdents64(3, [pid 4995] <... close resumed>) = 0 [pid 5910] <... memfd_create resumed>) = 3 [pid 5909] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5907] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4995] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5910] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5907] <... futex resumed>) = 0 [pid 5895] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5891] <... mmap resumed>) = 0x20000000 [pid 5888] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] umount2("./28/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5907] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] <... clone resumed>, child_tidptr=0x555556fb95d0) = 5911 [pid 4998] lstat("./28/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./28/binderfs") = 0 [pid 4998] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5911 attached [pid 5911] set_robust_list(0x555556fb95e0, 24) = 0 [pid 5910] <... mmap resumed>) = 0x7f5c233f0000 [pid 5895] <... futex resumed>) = 0 [pid 5891] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5910] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5895] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5891] <... futex resumed>) = 1 [pid 5890] exit_group(0 [pid 5888] <... futex resumed>) = 0 [pid 5911] chdir("./29" [pid 5907] <... futex resumed>) = ? [pid 5895] <... futex resumed>) = ? [pid 5891] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5890] <... exit_group resumed>) = ? [pid 5888] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [ 120.933562][ T5895] EXT4-fs (loop2): dirty_blocks=16 [ 120.939608][ T5895] EXT4-fs (loop2): Block reservation details [ 120.947240][ T5895] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 120.966872][ T74] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5911] <... chdir resumed>) = 0 [pid 5907] +++ exited with 0 +++ [pid 5895] +++ exited with 0 +++ [pid 5891] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5890] +++ exited with 0 +++ [pid 5888] <... futex resumed>) = 0 [pid 5911] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5909] <... mount resumed>) = 0 [pid 5891] sendfile(4, 5, NULL, 2147483713 [pid 5888] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] <... umount2 resumed>) = 0 [pid 5911] <... prctl resumed>) = 0 [pid 5910] <... write resumed>) = 1048576 [pid 5909] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 4998] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5890, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5911] setpgid(0, 0 [pid 5910] munmap(0x7f5c233f0000, 1048576 [pid 5909] <... openat resumed>) = 3 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4996] restart_syscall(<... resuming interrupted clone ...> [pid 5911] <... setpgid resumed>) = 0 [pid 5910] <... munmap resumed>) = 0 [pid 5909] chdir("./file0") = 0 [pid 5909] ioctl(4, LOOP_CLR_FD) = 0 [pid 5909] close(4) = 0 [pid 4998] lstat("./28/file0", [pid 4996] <... restart_syscall resumed>) = 0 [pid 5911] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5910] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5910] <... openat resumed>) = 4 [pid 5910] ioctl(4, LOOP_SET_FD, 3 [pid 5909] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5911] <... openat resumed>) = 3 [pid 5909] <... futex resumed>) = 1 [pid 5905] <... futex resumed>) = 0 [pid 5909] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [ 121.004551][ T5909] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.022943][ T5891] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 121.038640][ T5891] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5905] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5909] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5905] <... futex resumed>) = 0 [pid 5909] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5905] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5909] <... open resumed>) = 4 [pid 5909] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5905] <... futex resumed>) = 0 [pid 5909] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5905] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5909] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5905] <... futex resumed>) = 0 [pid 5909] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5905] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5909] <... write resumed>) = 9 [pid 5909] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5905] <... futex resumed>) = 0 [pid 5909] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5905] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5911] write(3, "1000", 4 [pid 5909] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5905] <... futex resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4996] umount2("./30", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5911] <... write resumed>) = 4 [pid 5909] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5905] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] openat(AT_FDCWD, "./28/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5911] close(3 [pid 5910] <... ioctl resumed>) = 0 [pid 5909] <... openat resumed>) = 5 [pid 5888] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4998] <... openat resumed>) = 4 [pid 4996] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5911] <... close resumed>) = 0 [pid 5909] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5888] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] fstat(4, [pid 4996] <... openat resumed>) = 3 [ 121.053119][ T5891] EXT4-fs (loop3): This should not happen!! Data will be lost [ 121.053119][ T5891] [ 121.063393][ T5910] loop5: detected capacity change from 0 to 2048 [ 121.070110][ T5891] EXT4-fs (loop3): Total free blocks count 0 [ 121.076205][ T5891] EXT4-fs (loop3): Free/Dirty block details [ 121.082146][ T5891] EXT4-fs (loop3): free_blocks=2415919104 [ 121.088103][ T5891] EXT4-fs (loop3): dirty_blocks=16 [ 121.093268][ T5891] EXT4-fs (loop3): Block reservation details [ 121.099330][ T5891] EXT4-fs (loop3): i_reserved_data_blocks=1 [pid 5911] symlink("/dev/binderfs", "./binderfs" [pid 5910] close(3 [pid 5909] <... futex resumed>) = 1 [pid 5905] <... futex resumed>) = 0 [pid 5891] <... sendfile resumed>) = 63 [pid 5888] <... futex resumed>) = 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] fstat(3, [pid 5911] <... symlink resumed>) = 0 [pid 5910] <... close resumed>) = 0 [pid 5909] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5905] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5891] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5888] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4998] getdents64(4, [pid 4996] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5911] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5910] mkdir("./file0", 0777 [pid 5909] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5905] <... futex resumed>) = 0 [pid 5891] <... futex resumed>) = 0 [pid 5911] <... futex resumed>) = 0 [pid 5909] open("./bus", O_RDWR [pid 5905] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5891] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5888] <... mmap resumed>) = 0x7f5c234cf000 [pid 4996] getdents64(3, [pid 5911] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5909] <... open resumed>) = 6 [pid 5911] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 5909] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5888] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 5911] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 5909] <... futex resumed>) = 1 [pid 5905] <... futex resumed>) = 0 [pid 5905] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5888] <... mprotect resumed>) = 0 [pid 5911] <... mprotect resumed>) = 0 [pid 5905] <... futex resumed>) = 0 [pid 5905] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5888] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5911] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5909] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5911] <... clone resumed>, parent_tid=[5915], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 5915 [pid 5911] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5909] <... mmap resumed>) = 0x20000000 ./strace-static-x86_64: Process 5914 attached [pid 5911] <... futex resumed>) = 0 [pid 5888] <... clone resumed>, parent_tid=[5914], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 5914 [pid 5911] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5909] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5888] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5909] <... futex resumed>) = 1 [pid 5905] <... futex resumed>) = 0 [pid 5888] <... futex resumed>) = 0 [pid 5905] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5909] sendfile(4, 5, NULL, 2147483713 [pid 5905] <... futex resumed>) = 0 [pid 5888] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5915 attached [pid 5915] set_robust_list(0x7f5c2b8109e0, 24 [pid 5905] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5915] <... set_robust_list resumed>) = 0 [pid 5915] memfd_create("syzkaller", 0) = 3 [pid 5915] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5c233f0000 [pid 5915] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5910] <... mkdir resumed>) = 0 [pid 5910] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 4996] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4998] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4996] umount2("./30/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] getdents64(4, [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4996] lstat("./30/binderfs", [pid 4998] close(4 [pid 4996] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] <... close resumed>) = 0 [pid 4996] unlink("./30/binderfs" [pid 4998] rmdir("./28/file0" [pid 4996] <... unlink resumed>) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 4998] getdents64(3, [pid 4996] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4998] close(3 [pid 5915] <... write resumed>) = 1048576 [pid 5915] munmap(0x7f5c233f0000, 1048576) = 0 [pid 5915] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5915] ioctl(4, LOOP_SET_FD, 3 [pid 5914] set_robust_list(0x7f5c234ef9e0, 24 [pid 4998] <... close resumed>) = 0 [pid 5915] <... ioctl resumed>) = 0 [pid 5915] close(3) = 0 [pid 5915] mkdir("./file0", 0777 [pid 5914] <... set_robust_list resumed>) = 0 [pid 4998] rmdir("./28") = 0 [pid 5888] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5905] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5914] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5905] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5915] <... mkdir resumed>) = 0 [ 121.126758][ T5909] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 121.148797][ T5457] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 121.151073][ T5915] loop1: detected capacity change from 0 to 2048 [pid 5915] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5905] <... futex resumed>) = 0 [pid 5914] <... ioctl resumed>) = 0 [pid 5905] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5914] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] mkdir("./29", 0777 [pid 5905] <... mmap resumed>) = 0x7f5c234cf000 [pid 5914] <... futex resumed>) = 0 [pid 5905] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 5914] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5905] <... mprotect resumed>) = 0 [pid 4998] <... mkdir resumed>) = 0 [pid 5905] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5888] exit_group(0 [pid 4998] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5914] <... futex resumed>) = ? [pid 5891] <... futex resumed>) = ? [pid 5888] <... exit_group resumed>) = ? [pid 4998] <... openat resumed>) = 3 [pid 5891] +++ exited with 0 +++ [pid 5914] +++ exited with 0 +++ [pid 5888] +++ exited with 0 +++ [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5888, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=14 /* 0.14 s */} --- [pid 5905] <... clone resumed>, parent_tid=[5919], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 5919 [pid 5905] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 4997] umount2("./29", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5905] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 121.174902][ T5909] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 121.178316][ T5910] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.199397][ T5909] EXT4-fs (loop0): This should not happen!! Data will be lost [ 121.199397][ T5909] [ 121.210250][ T5909] EXT4-fs (loop0): Total free blocks count 0 [ 121.216339][ T5909] EXT4-fs (loop0): Free/Dirty block details [pid 4998] close(3 [pid 4997] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4997] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(3, 0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4997] umount2("./29/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] <... close resumed>) = 0 [pid 4997] lstat("./29/binderfs", [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4997] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] unlink("./29/binderfs") = 0 [pid 4998] <... clone resumed>, child_tidptr=0x555556fb95d0) = 5920 [pid 4997] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5919 attached [pid 5909] <... sendfile resumed>) = 63 [pid 5910] <... mount resumed>) = 0 ./strace-static-x86_64: Process 5920 attached [pid 5919] set_robust_list(0x7f5c234ef9e0, 24 [pid 5920] set_robust_list(0x555556fb95e0, 24 [pid 5919] <... set_robust_list resumed>) = 0 [pid 5920] <... set_robust_list resumed>) = 0 [pid 5919] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [ 121.222348][ T5909] EXT4-fs (loop0): free_blocks=2415919104 [ 121.228204][ T5909] EXT4-fs (loop0): dirty_blocks=16 [ 121.233356][ T5909] EXT4-fs (loop0): Block reservation details [ 121.239642][ T5909] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 121.247071][ T74] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5920] chdir("./29" [pid 5919] <... ioctl resumed>) = 0 [pid 5910] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5909] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5910] <... openat resumed>) = 3 [pid 5909] <... futex resumed>) = 0 [pid 5910] chdir("./file0" [pid 5909] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5910] <... chdir resumed>) = 0 [pid 5910] ioctl(4, LOOP_CLR_FD [pid 5905] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5910] <... ioctl resumed>) = 0 [pid 5910] close(4) = 0 [pid 5910] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5908] <... futex resumed>) = 0 [pid 5910] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5908] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5920] <... chdir resumed>) = 0 [pid 5919] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5915] <... mount resumed>) = 0 [pid 5910] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5908] <... futex resumed>) = 0 [pid 5920] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5919] <... futex resumed>) = 0 [pid 5915] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5910] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5908] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5920] <... prctl resumed>) = 0 [pid 5919] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5915] <... openat resumed>) = 3 [pid 5910] <... open resumed>) = 4 [pid 5905] exit_group(0 [pid 5920] setpgid(0, 0 [pid 5919] <... futex resumed>) = ? [pid 5915] chdir("./file0" [pid 5909] <... futex resumed>) = ? [pid 5905] <... exit_group resumed>) = ? [pid 5920] <... setpgid resumed>) = 0 [pid 5919] +++ exited with 0 +++ [pid 5915] <... chdir resumed>) = 0 [pid 5910] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5909] +++ exited with 0 +++ [pid 5905] +++ exited with 0 +++ [pid 4997] <... umount2 resumed>) = 0 [pid 5920] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5915] ioctl(4, LOOP_CLR_FD [pid 5910] <... futex resumed>) = 1 [pid 5908] <... futex resumed>) = 0 [pid 4994] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5905, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5920] <... openat resumed>) = 3 [pid 5915] <... ioctl resumed>) = 0 [pid 5910] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5908] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] restart_syscall(<... resuming interrupted clone ...> [pid 5920] write(3, "1000", 4 [pid 5915] close(4 [pid 5910] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5908] <... futex resumed>) = 0 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] <... restart_syscall resumed>) = 0 [pid 5920] <... write resumed>) = 4 [pid 5915] <... close resumed>) = 0 [pid 5920] close(3 [pid 5915] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5920] <... close resumed>) = 0 [pid 5915] <... futex resumed>) = 1 [pid 5911] <... futex resumed>) = 0 [pid 4994] umount2("./30", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5920] symlink("/dev/binderfs", "./binderfs" [pid 5915] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5911] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5920] <... symlink resumed>) = 0 [pid 5915] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5911] <... futex resumed>) = 0 [pid 5910] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5908] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 121.276102][ T5915] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [pid 4994] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] lstat("./29/file0", [pid 5920] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5915] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5911] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5910] <... write resumed>) = 9 [pid 4994] <... openat resumed>) = 3 [pid 5920] <... futex resumed>) = 0 [pid 5910] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] <... umount2 resumed>) = 0 [pid 4994] fstat(3, [pid 5920] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5915] <... open resumed>) = 4 [pid 5910] <... futex resumed>) = 1 [pid 5908] <... futex resumed>) = 0 [pid 4997] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5920] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 5915] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5910] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5908] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4996] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] getdents64(3, [pid 5920] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 5915] <... futex resumed>) = 1 [pid 5911] <... futex resumed>) = 0 [pid 5910] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5908] <... futex resumed>) = 0 [pid 4997] openat(AT_FDCWD, "./29/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4994] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 5920] <... mprotect resumed>) = 0 [pid 5915] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5911] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5910] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5908] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4997] <... openat resumed>) = 4 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] umount2("./30/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5920] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5915] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5911] <... futex resumed>) = 0 [pid 5910] <... openat resumed>) = 5 [pid 4997] fstat(4, [pid 4996] lstat("./30/file0", [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5915] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5911] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5910] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] lstat("./30/binderfs", [pid 5920] <... clone resumed>, parent_tid=[5922], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 5922 [pid 5915] <... write resumed>) = 9 [pid 5910] <... futex resumed>) = 1 [pid 5908] <... futex resumed>) = 0 [pid 4997] getdents64(4, [pid 4996] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5920] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5915] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5910] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5908] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] unlink("./30/binderfs" [pid 5920] <... futex resumed>) = 0 [pid 4994] <... unlink resumed>) = 0 [pid 5920] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4994] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5922 attached [pid 5922] set_robust_list(0x7f5c2b8109e0, 24) = 0 [pid 5922] memfd_create("syzkaller", 0) = 3 [pid 5915] <... futex resumed>) = 1 [pid 5911] <... futex resumed>) = 0 [pid 5910] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5908] <... futex resumed>) = 0 [pid 4997] getdents64(4, [pid 4996] openat(AT_FDCWD, "./30/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5922] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5c233f0000 [pid 5922] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5915] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5911] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5910] open("./bus", O_RDWR [pid 5908] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4997] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4996] <... openat resumed>) = 4 [pid 5915] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5911] <... futex resumed>) = 0 [pid 5910] <... open resumed>) = 6 [pid 4997] close(4 [pid 5915] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5911] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4997] <... close resumed>) = 0 [pid 4996] fstat(4, [pid 5915] <... openat resumed>) = 5 [pid 5910] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] rmdir("./29/file0" [pid 4996] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5915] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5910] <... futex resumed>) = 1 [pid 5908] <... futex resumed>) = 0 [pid 5915] <... futex resumed>) = 1 [pid 5911] <... futex resumed>) = 0 [pid 5910] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5908] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] <... rmdir resumed>) = 0 [pid 4996] getdents64(4, [pid 5915] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5911] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5910] <... mmap resumed>) = 0x20000000 [pid 5908] <... futex resumed>) = 0 [pid 5915] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5911] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5910] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5908] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4997] getdents64(3, [pid 4996] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 5915] open("./bus", O_RDWR [pid 5910] <... futex resumed>) = 0 [pid 5908] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4997] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4996] getdents64(4, [pid 5915] <... open resumed>) = 6 [pid 5910] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5908] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] close(3 [pid 4996] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 5915] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5910] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5908] <... futex resumed>) = 0 [pid 4997] <... close resumed>) = 0 [pid 4996] close(4 [pid 4994] <... umount2 resumed>) = 0 [pid 5915] <... futex resumed>) = 1 [pid 5911] <... futex resumed>) = 0 [pid 5910] sendfile(4, 5, NULL, 2147483713 [ 121.366850][ T74] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5908] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4997] rmdir("./29" [pid 4996] <... close resumed>) = 0 [pid 5915] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5911] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] lstat("./30/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] openat(AT_FDCWD, "./30/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5911] <... futex resumed>) = 0 [pid 4997] <... rmdir resumed>) = 0 [pid 5915] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5911] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4997] mkdir("./30", 0777 [pid 4996] rmdir("./30/file0" [pid 4994] <... openat resumed>) = 4 [pid 5915] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 4997] <... mkdir resumed>) = 0 [pid 4994] fstat(4, [pid 4996] <... rmdir resumed>) = 0 [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] getdents64(4, [pid 5915] <... mmap resumed>) = 0x20000000 [pid 4997] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4996] getdents64(3, [pid 4994] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 5915] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] <... openat resumed>) = 3 [pid 4996] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4994] getdents64(4, [pid 5915] <... futex resumed>) = 1 [pid 5911] <... futex resumed>) = 0 [pid 4997] ioctl(3, LOOP_CLR_FD [pid 4996] close(3 [pid 4994] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 5915] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5911] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4996] <... close resumed>) = 0 [pid 4994] close(4 [pid 5915] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5911] <... futex resumed>) = 0 [pid 4997] close(3 [pid 4996] rmdir("./30" [pid 4994] <... close resumed>) = 0 [pid 5922] <... write resumed>) = 1048576 [pid 5915] sendfile(4, 5, NULL, 2147483713 [pid 5911] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4994] rmdir("./30/file0" [pid 5922] munmap(0x7f5c233f0000, 1048576 [pid 4994] <... rmdir resumed>) = 0 [pid 5922] <... munmap resumed>) = 0 [pid 4994] getdents64(3, 0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4994] close(3) = 0 [ 121.420958][ T5910] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 4994] rmdir("./30" [pid 5922] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4997] <... close resumed>) = 0 [pid 4994] <... rmdir resumed>) = 0 [pid 5922] <... openat resumed>) = 4 [pid 5908] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4996] <... rmdir resumed>) = 0 [pid 4994] mkdir("./31", 0777 [pid 5922] ioctl(4, LOOP_SET_FD, 3 [pid 5908] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] <... mkdir resumed>) = 0 [pid 5922] <... ioctl resumed>) = 0 [pid 5908] <... futex resumed>) = 0 [pid 4994] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5908] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4994] <... openat resumed>) = 3 [pid 4996] mkdir("./31", 0777 [pid 5908] <... mmap resumed>) = 0x7f5c234cf000 [pid 4994] ioctl(3, LOOP_CLR_FD [pid 5908] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 4994] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5908] <... mprotect resumed>) = 0 [pid 4994] close(3 [pid 5908] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4994] <... close resumed>) = 0 [pid 4994] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5908] <... clone resumed>, parent_tid=[5923], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 5923 [pid 5908] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] <... clone resumed>, child_tidptr=0x555556fb95d0) = 5924 [pid 5908] <... futex resumed>) = 0 [ 121.460053][ T5910] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 121.477353][ T5922] loop4: detected capacity change from 0 to 2048 [ 121.489478][ T5915] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 121.502423][ T5910] EXT4-fs (loop5): This should not happen!! Data will be lost [ 121.502423][ T5910] [pid 5908] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5925 attached ./strace-static-x86_64: Process 5923 attached [pid 4996] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 5924 attached [pid 5924] set_robust_list(0x555556fb95e0, 24) = 0 [pid 5925] set_robust_list(0x555556fb95e0, 24 [pid 5924] chdir("./31" [pid 5923] set_robust_list(0x7f5c234ef9e0, 24 [pid 5911] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5922] close(3 [pid 4997] <... clone resumed>, child_tidptr=0x555556fb95d0) = 5925 [pid 4996] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5924] <... chdir resumed>) = 0 [pid 5924] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5924] setpgid(0, 0) = 0 [pid 5924] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5925] <... set_robust_list resumed>) = 0 [pid 5924] <... openat resumed>) = 3 [pid 5923] <... set_robust_list resumed>) = 0 [pid 5911] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... openat resumed>) = 3 [pid 5925] chdir("./30" [pid 5924] write(3, "1000", 4 [pid 5923] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5922] <... close resumed>) = 0 [pid 5911] <... futex resumed>) = 0 [pid 5924] <... write resumed>) = 4 [pid 5924] close(3) = 0 [pid 5925] <... chdir resumed>) = 0 [pid 5924] symlink("/dev/binderfs", "./binderfs" [pid 5922] mkdir("./file0", 0777 [pid 5911] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4996] ioctl(3, LOOP_CLR_FD [pid 5925] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5924] <... symlink resumed>) = 0 [pid 5925] <... prctl resumed>) = 0 [pid 5924] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5922] <... mkdir resumed>) = 0 [pid 5911] <... mmap resumed>) = 0x7f5c234cf000 [pid 4996] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5925] setpgid(0, 0 [pid 5924] <... futex resumed>) = 0 [pid 5922] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5911] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 4996] close(3 [pid 5925] <... setpgid resumed>) = 0 [pid 5924] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5908] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5924] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 5924] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE) = 0 [ 121.517266][ T5910] EXT4-fs (loop5): Total free blocks count 0 [ 121.523308][ T5910] EXT4-fs (loop5): Free/Dirty block details [ 121.530843][ T5910] EXT4-fs (loop5): free_blocks=2415919104 [ 121.538523][ T5910] EXT4-fs (loop5): dirty_blocks=16 [ 121.551236][ T5915] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 121.554936][ T5910] EXT4-fs (loop5): Block reservation details [pid 5924] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5925] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5911] <... mprotect resumed>) = 0 [pid 4996] <... close resumed>) = 0 [pid 5924] <... clone resumed>, parent_tid=[5926], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 5926 [pid 5925] <... openat resumed>) = 3 [pid 5924] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5923] <... ioctl resumed>) = 0 [pid 5911] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5910] <... sendfile resumed>) = 63 [pid 4996] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5924] <... futex resumed>) = 0 [pid 5924] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5926 attached [pid 5923] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5926] set_robust_list(0x7f5c2b8109e0, 24 [pid 5923] <... futex resumed>) = 0 [pid 5926] <... set_robust_list resumed>) = 0 [pid 5923] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5926] memfd_create("syzkaller", 0) = 3 [pid 5925] write(3, "1000", 4 [pid 5910] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5927 attached [pid 5926] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5c233f0000 [ 121.571999][ T5910] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 121.579662][ T5915] EXT4-fs (loop1): This should not happen!! Data will be lost [ 121.579662][ T5915] [ 121.591987][ T5915] EXT4-fs (loop1): Total free blocks count 0 [ 121.599116][ T5915] EXT4-fs (loop1): Free/Dirty block details [ 121.605810][ T5915] EXT4-fs (loop1): free_blocks=2415919104 [pid 5927] set_robust_list(0x7f5c234ef9e0, 24 [pid 5925] <... write resumed>) = 4 [pid 5911] <... clone resumed>, parent_tid=[5927], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 5927 [pid 5910] <... futex resumed>) = 0 [pid 5908] exit_group(0 [pid 4996] <... clone resumed>, child_tidptr=0x555556fb95d0) = 5928 ./strace-static-x86_64: Process 5928 attached [pid 5923] <... futex resumed>) = ? [pid 5908] <... exit_group resumed>) = ? [pid 5928] set_robust_list(0x555556fb95e0, 24 [pid 5927] <... set_robust_list resumed>) = 0 [pid 5925] close(3 [pid 5923] +++ exited with 0 +++ [pid 5911] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5928] <... set_robust_list resumed>) = 0 [pid 5928] chdir("./31") = 0 [pid 5928] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5928] setpgid(0, 0) = 0 [pid 5928] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5928] write(3, "1000", 4) = 4 [pid 5927] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5925] <... close resumed>) = 0 [pid 5911] <... futex resumed>) = 0 [pid 5928] close(3) = 0 [pid 5928] symlink("/dev/binderfs", "./binderfs" [pid 5910] +++ exited with 0 +++ [pid 5908] +++ exited with 0 +++ [pid 5928] <... symlink resumed>) = 0 [pid 5926] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5925] symlink("/dev/binderfs", "./binderfs" [pid 5911] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5908, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5928] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5927] <... ioctl resumed>) = 0 [pid 5925] <... symlink resumed>) = 0 [pid 5922] <... mount resumed>) = 0 [pid 5915] <... sendfile resumed>) = 63 [pid 5928] <... futex resumed>) = 0 [pid 5927] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5925] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5922] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5915] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5928] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5927] <... futex resumed>) = 1 [pid 5925] <... futex resumed>) = 0 [pid 5922] <... openat resumed>) = 3 [pid 5915] <... futex resumed>) = 0 [pid 5911] <... futex resumed>) = 0 [pid 5927] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5925] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5922] chdir("./file0" [pid 5915] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5911] exit_group(0 [pid 5928] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 5927] <... futex resumed>) = ? [pid 5925] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 5922] <... chdir resumed>) = 0 [pid 5915] <... futex resumed>) = ? [pid 5911] <... exit_group resumed>) = ? [pid 5928] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 5927] +++ exited with 0 +++ [pid 5925] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 5915] +++ exited with 0 +++ [pid 5928] <... mprotect resumed>) = 0 [pid 5911] +++ exited with 0 +++ [pid 5928] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5925] <... mprotect resumed>) = 0 [pid 5922] ioctl(4, LOOP_CLR_FD [pid 4999] umount2("./29", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5911, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5925] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5922] <... ioctl resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5928] <... clone resumed>, parent_tid=[5931], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 5931 [pid 5922] close(4 [pid 4999] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5928] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5925] <... clone resumed>, parent_tid=[5932], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 5932 [pid 5922] <... close resumed>) = 0 [pid 4999] <... openat resumed>) = 3 [pid 4995] umount2("./29", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5928] <... futex resumed>) = 0 [pid 4999] fstat(3, [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5928] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] getdents64(3, [pid 4995] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5932 attached [pid 5925] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5922] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4995] fstat(3, [pid 5932] set_robust_list(0x7f5c2b8109e0, 24 [pid 5925] <... futex resumed>) = 0 [pid 5922] <... futex resumed>) = 1 [pid 5920] <... futex resumed>) = 0 [pid 4999] umount2("./29/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 5931 attached [pid 5932] <... set_robust_list resumed>) = 0 [pid 5926] <... write resumed>) = 1048576 [pid 5925] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5922] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5920] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] getdents64(3, [pid 5932] memfd_create("syzkaller", 0 [pid 5931] set_robust_list(0x7f5c2b8109e0, 24 [pid 5926] munmap(0x7f5c233f0000, 1048576 [pid 5922] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5920] <... futex resumed>) = 0 [pid 4999] lstat("./29/binderfs", [pid 4995] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 5932] <... memfd_create resumed>) = 3 [pid 5931] <... set_robust_list resumed>) = 0 [pid 5926] <... munmap resumed>) = 0 [pid 5922] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5920] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4995] umount2("./29/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5932] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4999] unlink("./29/binderfs" [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5932] <... mmap resumed>) = 0x7f5c233f0000 [pid 5931] memfd_create("syzkaller", 0 [pid 5926] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5922] <... open resumed>) = 4 [pid 4999] <... unlink resumed>) = 0 [pid 4995] lstat("./29/binderfs", [pid 5931] <... memfd_create resumed>) = 3 [pid 5926] <... openat resumed>) = 4 [pid 5922] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5932] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5931] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5926] ioctl(4, LOOP_SET_FD, 3 [pid 5922] <... futex resumed>) = 1 [pid 5920] <... futex resumed>) = 0 [ 121.607590][ T5922] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.611565][ T5915] EXT4-fs (loop1): dirty_blocks=16 [ 121.629435][ T5915] EXT4-fs (loop1): Block reservation details [ 121.647011][ T5915] EXT4-fs (loop1): i_reserved_data_blocks=1 [pid 4995] unlink("./29/binderfs" [pid 5931] <... mmap resumed>) = 0x7f5c233f0000 [pid 5922] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5920] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] <... unlink resumed>) = 0 [pid 5920] <... futex resumed>) = 0 [pid 4995] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5920] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5922] <... write resumed>) = 9 [pid 5922] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5932] <... write resumed>) = 1048576 [pid 5931] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5926] <... ioctl resumed>) = 0 [pid 5922] <... futex resumed>) = 1 [pid 5920] <... futex resumed>) = 0 [pid 5931] <... write resumed>) = 1048576 [pid 5926] close(3 [pid 5922] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5926] <... close resumed>) = 0 [pid 5920] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5926] mkdir("./file0", 0777 [pid 5932] munmap(0x7f5c233f0000, 1048576 [pid 5926] <... mkdir resumed>) = 0 [pid 5922] <... futex resumed>) = 0 [pid 5920] <... futex resumed>) = 1 [pid 5926] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5932] <... munmap resumed>) = 0 [pid 5922] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5920] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5932] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5922] <... openat resumed>) = 5 [pid 5932] <... openat resumed>) = 4 [pid 5922] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5932] ioctl(4, LOOP_SET_FD, 3 [pid 5922] <... futex resumed>) = 1 [pid 5920] <... futex resumed>) = 0 [pid 5922] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [ 121.702874][ T5926] loop0: detected capacity change from 0 to 2048 [ 121.717232][ T5457] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 121.730484][ T74] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5920] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5922] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5920] <... futex resumed>) = 0 [pid 5922] open("./bus", O_RDWR [pid 5920] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5922] <... open resumed>) = 6 [pid 5922] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5931] munmap(0x7f5c233f0000, 1048576 [pid 5922] <... futex resumed>) = 1 [pid 5920] <... futex resumed>) = 0 [pid 5922] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5920] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5922] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5920] <... futex resumed>) = 0 [pid 5922] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5920] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5931] <... munmap resumed>) = 0 [pid 5922] <... mmap resumed>) = 0x20000000 [pid 5922] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] <... umount2 resumed>) = 0 [pid 5931] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5931] ioctl(4, LOOP_SET_FD, 3 [pid 5922] <... futex resumed>) = 1 [pid 5920] <... futex resumed>) = 0 [pid 5922] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [ 121.753755][ T5932] loop3: detected capacity change from 0 to 2048 [ 121.777426][ T5931] loop2: detected capacity change from 0 to 2048 [pid 5920] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5922] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5920] <... futex resumed>) = 0 [pid 5922] sendfile(4, 5, NULL, 2147483713 [pid 5920] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5932] <... ioctl resumed>) = 0 [pid 5932] close(3) = 0 [pid 5932] mkdir("./file0", 0777) = 0 [pid 5932] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 4999] <... umount2 resumed>) = 0 [pid 5931] <... ioctl resumed>) = 0 [ 121.802385][ T5922] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 121.825104][ T5922] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 121.826990][ T5926] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [pid 4995] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5931] close(3 [pid 5920] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4999] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5931] <... close resumed>) = 0 [pid 5920] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5931] mkdir("./file0", 0777) = 0 [pid 5920] <... futex resumed>) = 0 [pid 4999] lstat("./29/file0", [pid 4995] lstat("./29/file0", [pid 5931] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5920] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5920] <... mmap resumed>) = 0x7f5c234cf000 [pid 4999] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5920] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 4999] openat(AT_FDCWD, "./29/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4995] openat(AT_FDCWD, "./29/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5920] <... mprotect resumed>) = 0 [pid 4995] <... openat resumed>) = 4 [pid 4999] <... openat resumed>) = 4 [pid 5920] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4999] fstat(4, [pid 4995] fstat(4, [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5920] <... clone resumed>, parent_tid=[5937], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 5937 [pid 4999] getdents64(4, ./strace-static-x86_64: Process 5937 attached [pid 5937] set_robust_list(0x7f5c234ef9e0, 24) = 0 [pid 5937] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5926] <... mount resumed>) = 0 [pid 5926] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5926] chdir("./file0") = 0 [pid 5926] ioctl(4, LOOP_CLR_FD) = 0 [pid 5926] close(4 [pid 5920] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [ 121.850023][ T5922] EXT4-fs (loop4): This should not happen!! Data will be lost [ 121.850023][ T5922] [ 121.865025][ T5922] EXT4-fs (loop4): Total free blocks count 0 [ 121.876960][ T5922] EXT4-fs (loop4): Free/Dirty block details [ 121.884620][ T5922] EXT4-fs (loop4): free_blocks=2415919104 [pid 4995] getdents64(4, [pid 5920] <... futex resumed>) = 1 [pid 4999] getdents64(4, [pid 4995] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 5937] <... futex resumed>) = 0 [pid 5920] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 5937] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 4999] close(4) = 0 [pid 4995] getdents64(4, [pid 4999] rmdir("./29/file0" [pid 4995] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 4995] close(4 [pid 5931] <... mount resumed>) = 0 [pid 4995] <... close resumed>) = 0 [pid 4999] getdents64(3, [pid 4995] rmdir("./29/file0" [pid 4999] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4995] <... rmdir resumed>) = 0 [pid 4999] close(3 [pid 4995] getdents64(3, [pid 4999] <... close resumed>) = 0 [pid 4995] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4999] rmdir("./29" [pid 4995] close(3 [pid 4999] <... rmdir resumed>) = 0 [pid 4995] <... close resumed>) = 0 [pid 4995] rmdir("./29" [pid 5931] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5932] <... mount resumed>) = 0 [pid 5926] <... close resumed>) = 0 [pid 4999] mkdir("./30", 0777 [pid 4995] <... rmdir resumed>) = 0 [pid 4999] <... mkdir resumed>) = 0 [pid 4995] mkdir("./30", 0777 [pid 5932] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5931] <... openat resumed>) = 3 [pid 5926] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 4995] <... mkdir resumed>) = 0 [pid 4999] <... openat resumed>) = 3 [pid 4995] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 4999] ioctl(3, LOOP_CLR_FD [pid 4995] <... openat resumed>) = 3 [pid 5932] <... openat resumed>) = 3 [pid 5931] chdir("./file0" [pid 5926] <... futex resumed>) = 1 [pid 5924] <... futex resumed>) = 0 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4995] ioctl(3, LOOP_CLR_FD [pid 5932] chdir("./file0" [pid 5931] <... chdir resumed>) = 0 [pid 5926] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5924] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] close(3 [pid 4995] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5937] <... ioctl resumed>) = 0 [pid 5932] <... chdir resumed>) = 0 [pid 5931] ioctl(4, LOOP_CLR_FD [pid 5926] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5924] <... futex resumed>) = 0 [pid 5922] <... sendfile resumed>) = 63 [pid 4999] <... close resumed>) = 0 [pid 5937] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5932] ioctl(4, LOOP_CLR_FD [pid 5931] <... ioctl resumed>) = 0 [pid 5926] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5924] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5937] <... futex resumed>) = 1 [pid 5932] <... ioctl resumed>) = 0 [pid 5931] close(4 [pid 5922] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5920] <... futex resumed>) = 0 [pid 4995] close(3 [pid 5937] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5922] <... futex resumed>) = 0 [pid 5920] exit_group(0 [pid 5937] <... futex resumed>) = ? [pid 5920] <... exit_group resumed>) = ? [pid 5937] +++ exited with 0 +++ [pid 5932] close(4 [pid 5931] <... close resumed>) = 0 [pid 5926] <... open resumed>) = 4 [pid 5922] +++ exited with 0 +++ [pid 5920] +++ exited with 0 +++ [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4995] <... close resumed>) = 0 [pid 5932] <... close resumed>) = 0 [pid 5931] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5926] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5940 attached [pid 5932] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5931] <... futex resumed>) = 1 [pid 5928] <... futex resumed>) = 0 [pid 5926] <... futex resumed>) = 1 [pid 5924] <... futex resumed>) = 0 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5920, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 4995] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5940] set_robust_list(0x555556fb95e0, 24 [pid 5932] <... futex resumed>) = 1 [pid 5931] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5928] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5926] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5925] <... futex resumed>) = 0 [pid 5924] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... clone resumed>, child_tidptr=0x555556fb95d0) = 5940 [pid 5940] <... set_robust_list resumed>) = 0 [pid 5932] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5931] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5928] <... futex resumed>) = 0 [pid 5926] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5925] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5924] <... futex resumed>) = 0 [pid 4995] <... clone resumed>, child_tidptr=0x555556fb95d0) = 5941 [pid 5940] chdir("./30" [pid 5932] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5931] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5928] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5926] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5925] <... futex resumed>) = 0 [pid 5924] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5940] <... chdir resumed>) = 0 [pid 5932] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5931] <... open resumed>) = 4 [pid 5926] <... write resumed>) = 9 [pid 5925] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5941 attached [pid 5940] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5932] <... open resumed>) = 4 [pid 5931] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5926] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5941] set_robust_list(0x555556fb95e0, 24 [pid 5940] <... prctl resumed>) = 0 [pid 5932] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5931] <... futex resumed>) = 1 [pid 5928] <... futex resumed>) = 0 [pid 5926] <... futex resumed>) = 1 [pid 5924] <... futex resumed>) = 0 [pid 4998] umount2("./29", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5940] setpgid(0, 0 [pid 5932] <... futex resumed>) = 1 [pid 5931] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5928] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5926] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5925] <... futex resumed>) = 0 [pid 5924] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5940] <... setpgid resumed>) = 0 [pid 5932] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5931] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5928] <... futex resumed>) = 0 [pid 5926] <... openat resumed>) = 5 [pid 5925] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5924] <... futex resumed>) = 0 [pid 5932] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5931] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5928] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5925] <... futex resumed>) = 0 [pid 5924] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5926] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5932] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5925] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5924] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5941] <... set_robust_list resumed>) = 0 [pid 5940] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5932] <... write resumed>) = 9 [pid 5931] <... write resumed>) = 9 [pid 5926] <... futex resumed>) = 0 [ 121.893456][ T5932] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.909549][ T5931] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.935073][ T5922] EXT4-fs (loop4): dirty_blocks=16 [ 121.940561][ T5922] EXT4-fs (loop4): Block reservation details [ 121.946783][ T5922] EXT4-fs (loop4): i_reserved_data_blocks=1 [pid 5924] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... openat resumed>) = 3 [pid 5941] chdir("./30" [pid 5940] <... openat resumed>) = 3 [pid 5932] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5931] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5926] open("./bus", O_RDWR [pid 5924] <... futex resumed>) = 0 [pid 4998] fstat(3, [pid 5941] <... chdir resumed>) = 0 [pid 5940] write(3, "1000", 4 [pid 5932] <... futex resumed>) = 1 [pid 5931] <... futex resumed>) = 1 [pid 5928] <... futex resumed>) = 0 [pid 5926] <... open resumed>) = 6 [pid 5925] <... futex resumed>) = 0 [pid 5924] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5941] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5940] <... write resumed>) = 4 [pid 5932] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5931] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5928] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5926] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5925] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5924] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4998] getdents64(3, [pid 5941] <... prctl resumed>) = 0 [pid 5940] close(3 [pid 5932] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5931] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5928] <... futex resumed>) = 0 [pid 5926] <... futex resumed>) = 0 [pid 5925] <... futex resumed>) = 0 [pid 5924] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 5941] setpgid(0, 0 [pid 5940] <... close resumed>) = 0 [pid 5932] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5931] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5928] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5926] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5925] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5924] <... futex resumed>) = 0 [pid 4998] umount2("./29/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5941] <... setpgid resumed>) = 0 [pid 5940] symlink("/dev/binderfs", "./binderfs" [pid 5932] <... openat resumed>) = 5 [pid 5931] <... openat resumed>) = 5 [pid 5926] <... mmap resumed>) = 0x20000000 [pid 5924] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5941] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5940] <... symlink resumed>) = 0 [pid 5932] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5931] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5926] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5924] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4998] lstat("./29/binderfs", [pid 5941] <... openat resumed>) = 3 [pid 5940] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5932] <... futex resumed>) = 1 [pid 5931] <... futex resumed>) = 1 [pid 5928] <... futex resumed>) = 0 [pid 5926] <... futex resumed>) = 0 [pid 5925] <... futex resumed>) = 0 [pid 5924] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5941] write(3, "1000", 4 [pid 5940] <... futex resumed>) = 0 [pid 5932] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5931] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5928] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5926] sendfile(4, 5, NULL, 2147483713 [pid 5925] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5924] <... futex resumed>) = 0 [pid 4998] unlink("./29/binderfs" [pid 5941] <... write resumed>) = 4 [pid 5940] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5932] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5931] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5928] <... futex resumed>) = 0 [pid 5925] <... futex resumed>) = 0 [pid 5924] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5941] close(3 [pid 4998] <... unlink resumed>) = 0 [pid 5940] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 5932] open("./bus", O_RDWR [pid 5931] open("./bus", O_RDWR [pid 5928] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5941] <... close resumed>) = 0 [pid 5925] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5932] <... open resumed>) = 6 [pid 5931] <... open resumed>) = 6 [pid 5941] symlink("/dev/binderfs", "./binderfs" [pid 5940] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 4998] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5932] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5931] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5941] <... symlink resumed>) = 0 [pid 5940] <... mprotect resumed>) = 0 [pid 5941] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5932] <... futex resumed>) = 1 [pid 5931] <... futex resumed>) = 1 [pid 5928] <... futex resumed>) = 0 [pid 5925] <... futex resumed>) = 0 [pid 5940] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5928] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5932] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5931] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5928] <... futex resumed>) = 0 [pid 5925] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5941] <... futex resumed>) = 0 [pid 5941] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5932] <... mmap resumed>) = 0x20000000 [pid 5931] <... mmap resumed>) = 0x20000000 [pid 5928] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5925] <... futex resumed>) = 0 [ 122.023073][ T5926] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 122.046404][ T5926] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 122.048441][ T74] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5941] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 5932] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5931] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5925] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5941] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 5940] <... clone resumed>, parent_tid=[5942], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 5942 [pid 5932] <... futex resumed>) = 0 [pid 5931] <... futex resumed>) = 1 [pid 5928] <... futex resumed>) = 0 [pid 5925] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5941] <... mprotect resumed>) = 0 [pid 5928] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5940] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5925] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5941] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5940] <... futex resumed>) = 0 [pid 5932] sendfile(4, 5, NULL, 2147483713 [pid 5931] sendfile(4, 5, NULL, 2147483713 [pid 5928] <... futex resumed>) = 0 [pid 5925] <... futex resumed>) = 0 [pid 5928] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5925] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5940] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5941] <... clone resumed>, parent_tid=[5943], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 5943 [pid 5941] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5941] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5942 attached [pid 5942] set_robust_list(0x7f5c2b8109e0, 24) = 0 [pid 5942] memfd_create("syzkaller", 0 [pid 5924] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5924] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5924] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5942] <... memfd_create resumed>) = 3 [pid 5924] <... mmap resumed>) = 0x7f5c234cf000 [pid 5924] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 5942] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5924] <... mprotect resumed>) = 0 [pid 5924] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5942] <... mmap resumed>) = 0x7f5c233f0000 [pid 5924] <... clone resumed>, parent_tid=[5944], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 5944 ./strace-static-x86_64: Process 5944 attached [pid 5944] set_robust_list(0x7f5c234ef9e0, 24) = 0 [pid 5944] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5924] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [ 122.059854][ T5926] EXT4-fs (loop0): This should not happen!! Data will be lost [ 122.059854][ T5926] [ 122.100357][ T5932] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 122.107728][ T5926] EXT4-fs (loop0): Total free blocks count 0 [pid 5942] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5942] munmap(0x7f5c233f0000, 1048576) = 0 [pid 5942] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5928] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5925] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5928] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5925] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5928] <... futex resumed>) = 0 [pid 5925] <... futex resumed>) = 0 [pid 5924] <... futex resumed>) = 1 [pid 5944] <... futex resumed>) = 0 [pid 5928] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5925] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5924] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5944] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5928] <... mmap resumed>) = 0x7f5c234cf000 [pid 5928] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 5925] <... mmap resumed>) = 0x7f5c234cf000 [pid 5928] <... mprotect resumed>) = 0 [pid 5925] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 5928] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5925] <... mprotect resumed>) = 0 [pid 5925] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5928] <... clone resumed>, parent_tid=[5945], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 5945 [pid 5928] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5925] <... clone resumed>, parent_tid=[5946], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 5946 [pid 5928] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5925] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5925] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5942] <... openat resumed>) = 4 ./strace-static-x86_64: Process 5943 attached [pid 5943] set_robust_list(0x7f5c2b8109e0, 24) = 0 [pid 5942] ioctl(4, LOOP_SET_FD, 3 [pid 5943] memfd_create("syzkaller", 0 [pid 5942] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 5945 attached ./strace-static-x86_64: Process 5946 attached [pid 5945] set_robust_list(0x7f5c234ef9e0, 24 [pid 5946] set_robust_list(0x7f5c234ef9e0, 24 [pid 5945] <... set_robust_list resumed>) = 0 [pid 5946] <... set_robust_list resumed>) = 0 [pid 5945] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5946] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5942] close(3) = 0 [pid 5942] mkdir("./file0", 0777) = 0 [pid 5942] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5943] <... memfd_create resumed>) = 3 [pid 5943] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5c233f0000 [ 122.118017][ T5931] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 122.147929][ T5942] loop5: detected capacity change from 0 to 2048 [ 122.154525][ T5931] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 122.154568][ T5926] EXT4-fs (loop0): Free/Dirty block details [pid 5943] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5924] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5928] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5925] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 122.176214][ T5932] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 122.190538][ T5926] EXT4-fs (loop0): free_blocks=2415919104 [ 122.203878][ T5926] EXT4-fs (loop0): dirty_blocks=16 [ 122.210595][ T5932] EXT4-fs (loop3): This should not happen!! Data will be lost [ 122.210595][ T5932] [pid 5943] <... write resumed>) = 1048576 [pid 5943] munmap(0x7f5c233f0000, 1048576) = 0 [pid 5942] <... mount resumed>) = 0 [pid 4998] <... umount2 resumed>) = 0 [pid 5944] <... ioctl resumed>) = 0 [pid 5943] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5942] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5926] <... sendfile resumed>) = 63 [pid 5944] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5943] <... openat resumed>) = 4 [ 122.221785][ T5926] EXT4-fs (loop0): Block reservation details [ 122.230608][ T5926] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 122.232354][ T5942] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.243184][ T5932] EXT4-fs (loop3): Total free blocks count 0 [ 122.265281][ T5931] EXT4-fs (loop2): This should not happen!! Data will be lost [ 122.265281][ T5931] [pid 5942] <... openat resumed>) = 3 [pid 5926] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5944] <... futex resumed>) = 0 [pid 5943] ioctl(4, LOOP_SET_FD, 3 [pid 5926] <... futex resumed>) = 0 [pid 5944] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5942] chdir("./file0" [pid 5926] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./29/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./29/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, [pid 5942] <... chdir resumed>) = 0 [pid 5924] exit_group(0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./29/file0") = 0 [pid 5944] <... futex resumed>) = ? [pid 5942] ioctl(4, LOOP_CLR_FD [pid 5926] <... futex resumed>) = ? [pid 5924] <... exit_group resumed>) = ? [pid 4998] getdents64(3, [pid 5944] +++ exited with 0 +++ [pid 5926] +++ exited with 0 +++ [pid 4998] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./29") = 0 [pid 5942] <... ioctl resumed>) = 0 [pid 5924] +++ exited with 0 +++ [pid 4998] mkdir("./30", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5943] <... ioctl resumed>) = 0 [pid 4998] <... openat resumed>) = 3 [pid 5943] close(3 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5943] <... close resumed>) = 0 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [ 122.286095][ T5932] EXT4-fs (loop3): Free/Dirty block details [ 122.289792][ T5943] loop1: detected capacity change from 0 to 2048 [ 122.292603][ T5932] EXT4-fs (loop3): free_blocks=2415919104 [ 122.307168][ T5932] EXT4-fs (loop3): dirty_blocks=16 [ 122.313125][ T5932] EXT4-fs (loop3): Block reservation details [ 122.318727][ T5931] EXT4-fs (loop2): Total free blocks count 0 [ 122.322711][ T5932] EXT4-fs (loop3): i_reserved_data_blocks=1 [pid 5943] mkdir("./file0", 0777 [pid 4998] close(3 [pid 5946] <... ioctl resumed>) = 0 [pid 5943] <... mkdir resumed>) = 0 [pid 5942] close(4 [pid 5932] <... sendfile resumed>) = 63 [pid 4998] <... close resumed>) = 0 [pid 4994] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5924, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=19 /* 0.19 s */} --- [pid 5946] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5943] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5942] <... close resumed>) = 0 [pid 5932] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5925] exit_group(0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5946] <... futex resumed>) = ? [pid 5942] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5932] <... futex resumed>) = ? [pid 5925] <... exit_group resumed>) = ? [pid 5946] +++ exited with 0 +++ [pid 4998] <... clone resumed>, child_tidptr=0x555556fb95d0) = 5949 [pid 5942] <... futex resumed>) = 1 [pid 5932] +++ exited with 0 +++ [pid 5925] +++ exited with 0 +++ [pid 5940] <... futex resumed>) = 0 [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5925, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5940] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5942] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5940] <... futex resumed>) = 0 [pid 4994] umount2("./31", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5940] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5942] <... open resumed>) = 4 [pid 4994] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5949 attached [pid 5945] <... ioctl resumed>) = 0 [pid 5942] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5931] <... sendfile resumed>) = 63 [pid 4997] umount2("./30", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] fstat(3, [pid 5949] set_robust_list(0x555556fb95e0, 24 [pid 5945] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5942] <... futex resumed>) = 1 [pid 5940] <... futex resumed>) = 0 [pid 5931] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5949] <... set_robust_list resumed>) = 0 [pid 5945] <... futex resumed>) = 0 [pid 5942] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5940] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5931] <... futex resumed>) = 0 [pid 4997] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4994] getdents64(3, [pid 5949] chdir("./30" [pid 5945] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5942] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5940] <... futex resumed>) = 0 [pid 5931] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5928] exit_group(0 [pid 4997] <... openat resumed>) = 3 [pid 5945] <... futex resumed>) = ? [pid 5928] <... exit_group resumed>) = ? [pid 5949] <... chdir resumed>) = 0 [pid 5945] +++ exited with 0 +++ [pid 5942] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5940] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5931] <... futex resumed>) = ? [pid 4997] fstat(3, [pid 4994] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 5949] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5942] <... write resumed>) = 9 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] umount2("./31/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5949] <... prctl resumed>) = 0 [pid 5942] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] getdents64(3, [pid 5942] <... futex resumed>) = 1 [pid 5940] <... futex resumed>) = 0 [pid 5942] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5940] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5949] setpgid(0, 0 [pid 5942] <... openat resumed>) = 5 [pid 5940] <... futex resumed>) = 0 [pid 4997] umount2("./30/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] lstat("./31/binderfs", [pid 5949] <... setpgid resumed>) = 0 [pid 5942] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5940] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5931] +++ exited with 0 +++ [pid 5928] +++ exited with 0 +++ [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5949] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5942] <... futex resumed>) = 0 [pid 5940] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4997] lstat("./30/binderfs", [pid 4996] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5928, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 4994] unlink("./31/binderfs" [pid 5949] <... openat resumed>) = 3 [pid 5942] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5940] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4994] <... unlink resumed>) = 0 [pid 5949] write(3, "1000", 4 [pid 5942] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5940] <... futex resumed>) = 0 [ 122.332246][ T5931] EXT4-fs (loop2): Free/Dirty block details [ 122.338489][ T5931] EXT4-fs (loop2): free_blocks=2415919104 [ 122.345060][ T5931] EXT4-fs (loop2): dirty_blocks=16 [ 122.350963][ T5931] EXT4-fs (loop2): Block reservation details [ 122.358099][ T5931] EXT4-fs (loop2): i_reserved_data_blocks=1 [pid 4997] unlink("./30/binderfs" [pid 4994] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5949] <... write resumed>) = 4 [pid 5942] open("./bus", O_RDWR [pid 5940] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4997] <... unlink resumed>) = 0 [pid 5949] close(3) = 0 [pid 5949] symlink("/dev/binderfs", "./binderfs" [pid 5943] <... mount resumed>) = 0 [pid 5942] <... open resumed>) = 6 [pid 4997] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5949] <... symlink resumed>) = 0 [pid 5943] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5942] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5949] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5943] <... openat resumed>) = 3 [pid 5942] <... futex resumed>) = 1 [pid 5949] <... futex resumed>) = 0 [pid 5943] chdir("./file0" [pid 5942] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5949] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5943] <... chdir resumed>) = 0 [pid 5949] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 5943] ioctl(4, LOOP_CLR_FD [pid 5949] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 5943] <... ioctl resumed>) = 0 [pid 5949] <... mprotect resumed>) = 0 [pid 5943] close(4 [pid 5949] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5943] <... close resumed>) = 0 [pid 5940] <... futex resumed>) = 0 [pid 5943] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5940] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5952 attached [pid 5949] <... clone resumed>, parent_tid=[5952], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 5952 [pid 5943] <... futex resumed>) = 1 [pid 5942] <... futex resumed>) = 0 [pid 5941] <... futex resumed>) = 0 [pid 5940] <... futex resumed>) = 1 [pid 4996] umount2("./31", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5952] set_robust_list(0x7f5c2b8109e0, 24 [pid 5949] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5943] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5952] <... set_robust_list resumed>) = 0 [pid 5949] <... futex resumed>) = 0 [pid 5952] memfd_create("syzkaller", 0 [pid 5949] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5952] <... memfd_create resumed>) = 3 [ 122.395250][ T5943] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.408491][ T11] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5952] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5c233f0000 [pid 5952] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5942] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5941] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5940] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5943] <... futex resumed>) = 0 [pid 5942] <... mmap resumed>) = 0x20000000 [pid 5941] <... futex resumed>) = 1 [pid 5943] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 4996] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5941] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5942] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... openat resumed>) = 3 [pid 5942] <... futex resumed>) = 1 [pid 5940] <... futex resumed>) = 0 [pid 4996] fstat(3, [pid 5943] <... open resumed>) = 4 [pid 5942] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5940] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5943] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5942] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5940] <... futex resumed>) = 0 [pid 4996] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5943] <... futex resumed>) = 1 [pid 5942] sendfile(4, 5, NULL, 2147483713 [pid 5941] <... futex resumed>) = 0 [pid 5940] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5943] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4996] getdents64(3, [pid 5943] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5941] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4996] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 5943] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5941] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4996] umount2("./31/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] lstat("./31/binderfs", [pid 5943] <... write resumed>) = 9 [pid 4996] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5943] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [ 122.439799][ T74] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 4996] unlink("./31/binderfs" [pid 5952] <... write resumed>) = 1048576 [pid 5943] <... futex resumed>) = 1 [pid 5941] <... futex resumed>) = 0 [pid 4996] <... unlink resumed>) = 0 [pid 5943] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5941] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5943] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5941] <... futex resumed>) = 0 [pid 4996] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5943] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5941] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5952] munmap(0x7f5c233f0000, 1048576) = 0 [pid 5952] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5943] <... openat resumed>) = 5 [pid 5952] ioctl(4, LOOP_SET_FD, 3 [pid 5943] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5940] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5940] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5940] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c234cf000 [pid 5940] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5943] <... futex resumed>) = 1 [pid 5941] <... futex resumed>) = 0 [pid 5940] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5943] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5941] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5943] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5941] <... futex resumed>) = 0 [pid 5940] <... clone resumed>, parent_tid=[5953], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 5953 [pid 5943] open("./bus", O_RDWR [pid 5941] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5940] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5943] <... open resumed>) = 6 [pid 5940] <... futex resumed>) = 0 [pid 5943] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5940] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5943] <... futex resumed>) = 1 [pid 5941] <... futex resumed>) = 0 [pid 5943] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5941] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5943] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5941] <... futex resumed>) = 0 [pid 5943] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5941] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5952] <... ioctl resumed>) = 0 [pid 5952] close(3 [pid 5943] <... mmap resumed>) = 0x20000000 [pid 5952] <... close resumed>) = 0 [pid 5952] mkdir("./file0", 0777) = 0 [ 122.483287][ T5942] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 122.510555][ T5952] loop4: detected capacity change from 0 to 2048 [ 122.531675][ T74] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5952] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5943] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5953 attached ) = 1 [pid 5941] <... futex resumed>) = 0 [pid 5953] set_robust_list(0x7f5c234ef9e0, 24 [pid 5943] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5941] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5953] <... set_robust_list resumed>) = 0 [pid 5943] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5941] <... futex resumed>) = 0 [pid 5953] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5943] sendfile(4, 5, NULL, 2147483713 [pid 5941] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5940] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4997] <... umount2 resumed>) = 0 [pid 4994] <... umount2 resumed>) = 0 [pid 4994] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] lstat("./31/file0", [pid 4997] lstat("./30/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] openat(AT_FDCWD, "./30/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4994] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... openat resumed>) = 4 [ 122.538029][ T5942] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 122.564943][ T5943] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 5941] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4997] fstat(4, [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5941] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5941] <... futex resumed>) = 0 [pid 4994] openat(AT_FDCWD, "./31/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5941] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4997] getdents64(4, [pid 5941] <... mmap resumed>) = 0x7f5c234cf000 [pid 4997] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4994] <... openat resumed>) = 4 [pid 4996] <... umount2 resumed>) = 0 [pid 4996] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 122.608288][ T5943] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 122.640832][ T5952] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [pid 4996] lstat("./31/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] openat(AT_FDCWD, "./31/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4996] fstat(4, [pid 5952] <... mount resumed>) = 0 [pid 5943] <... sendfile resumed>) = 63 [pid 5941] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 4997] getdents64(4, [pid 4996] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] fstat(4, [pid 5952] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5943] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5941] <... mprotect resumed>) = 0 [pid 4997] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5952] <... openat resumed>) = 3 [pid 5943] <... futex resumed>) = 0 [pid 5941] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4997] close(4 [pid 4994] getdents64(4, [pid 5952] chdir("./file0" [pid 5943] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4997] <... close resumed>) = 0 [pid 4994] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 5952] <... chdir resumed>) = 0 [pid 5941] <... clone resumed>, parent_tid=[5956], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 5956 [pid 4997] rmdir("./30/file0" [pid 4994] getdents64(4, [pid 5952] ioctl(4, LOOP_CLR_FD [pid 5941] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] <... rmdir resumed>) = 0 [pid 4994] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 5952] <... ioctl resumed>) = 0 [pid 5941] <... futex resumed>) = 0 [pid 4997] getdents64(3, [pid 4994] close(4 [pid 5952] close(4 [pid 5941] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4997] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4994] <... close resumed>) = 0 [pid 5952] <... close resumed>) = 0 [pid 4997] close(3 [pid 4994] rmdir("./31/file0" [pid 5952] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] <... close resumed>) = 0 [pid 4994] <... rmdir resumed>) = 0 [pid 5952] <... futex resumed>) = 1 [pid 4997] rmdir("./30" [pid 4994] getdents64(3, [pid 5952] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4997] <... rmdir resumed>) = 0 [pid 4994] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4997] mkdir("./31", 0777 [pid 4994] close(3 [pid 4997] <... mkdir resumed>) = 0 [pid 4994] <... close resumed>) = 0 [pid 4997] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4994] rmdir("./31" [pid 4997] <... openat resumed>) = 3 [pid 4994] <... rmdir resumed>) = 0 [pid 4997] ioctl(3, LOOP_CLR_FD [pid 4994] mkdir("./32", 0777 [pid 4997] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4994] <... mkdir resumed>) = 0 [pid 4997] close(3 [pid 4994] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 4997] <... close resumed>) = 0 [pid 4994] <... openat resumed>) = 3 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4994] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 5957 attached ./strace-static-x86_64: Process 5956 attached [pid 5949] <... futex resumed>) = 0 [pid 4996] getdents64(4, [pid 4994] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5957] set_robust_list(0x555556fb95e0, 24 [pid 5956] set_robust_list(0x7f5c234ef9e0, 24 [pid 5949] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] <... clone resumed>, child_tidptr=0x555556fb95d0) = 5957 [pid 4996] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4994] close(3 [pid 5957] <... set_robust_list resumed>) = 0 [pid 5956] <... set_robust_list resumed>) = 0 [pid 5952] <... futex resumed>) = 0 [pid 5949] <... futex resumed>) = 1 [pid 4996] getdents64(4, [pid 4994] <... close resumed>) = 0 [pid 5957] chdir("./31" [pid 5956] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5952] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 4994] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5957] <... chdir resumed>) = 0 [pid 5956] <... ioctl resumed>) = 0 [pid 5949] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4996] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 5957] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5956] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5952] <... open resumed>) = 4 [pid 4996] close(4 [pid 4994] <... clone resumed>, child_tidptr=0x555556fb95d0) = 5958 [pid 5957] <... prctl resumed>) = 0 [pid 5956] <... futex resumed>) = 1 [pid 5952] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5941] <... futex resumed>) = 0 [pid 4996] <... close resumed>) = 0 [pid 5957] setpgid(0, 0 [pid 5956] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5952] <... futex resumed>) = 1 [pid 5949] <... futex resumed>) = 0 [ 122.641963][ T5943] EXT4-fs (loop1): This should not happen!! Data will be lost [ 122.641963][ T5943] [ 122.663198][ T5942] EXT4-fs (loop5): This should not happen!! Data will be lost [ 122.663198][ T5942] [ 122.672850][ T5943] EXT4-fs (loop1): Total free blocks count 0 [ 122.672877][ T5943] EXT4-fs (loop1): Free/Dirty block details [ 122.672899][ T5943] EXT4-fs (loop1): free_blocks=2415919104 [ 122.672921][ T5943] EXT4-fs (loop1): dirty_blocks=16 [ 122.672941][ T5943] EXT4-fs (loop1): Block reservation details [ 122.672960][ T5943] EXT4-fs (loop1): i_reserved_data_blocks=1 [pid 5941] exit_group(0 [pid 4996] rmdir("./31/file0" [pid 5957] <... setpgid resumed>) = 0 [pid 5956] <... futex resumed>) = ? [pid 5952] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5949] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5943] <... futex resumed>) = ? [pid 5941] <... exit_group resumed>) = ? [pid 5956] +++ exited with 0 +++ [pid 5949] <... futex resumed>) = 0 [pid 5943] +++ exited with 0 +++ [pid 4996] <... rmdir resumed>) = 0 [pid 5957] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5952] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5949] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5941] +++ exited with 0 +++ [pid 4996] getdents64(3, [pid 5957] <... openat resumed>) = 3 [pid 5952] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 4996] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4995] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5941, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5957] write(3, "1000", 4) = 4 [pid 4996] close(3 [pid 5957] close(3 [pid 4996] <... close resumed>) = 0 [ 122.734016][ T5942] EXT4-fs (loop5): Total free blocks count 0 [ 122.745237][ T5942] EXT4-fs (loop5): Free/Dirty block details [ 122.749031][ T26] kauditd_printk_skb: 98 callbacks suppressed [pid 5957] <... close resumed>) = 0 [pid 4996] rmdir("./31" [pid 5957] symlink("/dev/binderfs", "./binderfs" [pid 4996] <... rmdir resumed>) = 0 [pid 5952] <... write resumed>) = 9 [pid 4995] umount2("./30", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5958 attached [pid 5957] <... symlink resumed>) = 0 [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5952] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5957] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] mkdir("./32", 0777 [pid 4995] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5957] <... futex resumed>) = 0 [pid 5952] <... futex resumed>) = 1 [pid 5949] <... futex resumed>) = 0 [pid 5949] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... mkdir resumed>) = 0 [pid 4995] <... openat resumed>) = 3 [pid 5949] <... futex resumed>) = 0 [pid 5952] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5949] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4995] fstat(3, [pid 5957] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4996] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5952] <... openat resumed>) = 5 [pid 5958] set_robust_list(0x555556fb95e0, 24) = 0 [pid 5958] chdir("./32") = 0 [pid 5958] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5958] setpgid(0, 0) = 0 [pid 5958] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5958] write(3, "1000", 4) = 4 [pid 5958] close(3) = 0 [pid 5958] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5958] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5958] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c2b7f0000 [pid 5958] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5958] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5959], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 5959 [pid 5958] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5958] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5959 attached [pid 5959] set_robust_list(0x7f5c2b8109e0, 24) = 0 [pid 5959] memfd_create("syzkaller", 0) = 3 [pid 5959] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5c233f0000 [pid 5959] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5952] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5957] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 5957] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 5952] <... futex resumed>) = 1 [pid 5949] <... futex resumed>) = 0 [pid 4995] getdents64(3, [pid 5952] open("./bus", O_RDWR [pid 5949] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... openat resumed>) = 3 [pid 5949] <... futex resumed>) = 0 [pid 4995] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 5952] <... open resumed>) = 6 [pid 5949] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4995] umount2("./30/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5957] <... mprotect resumed>) = 0 [pid 5957] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5952] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] ioctl(3, LOOP_CLR_FD [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5952] <... futex resumed>) = 1 [pid 5949] <... futex resumed>) = 0 [pid 4996] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4995] lstat("./30/binderfs", [pid 5957] <... clone resumed>, parent_tid=[5960], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 5960 [pid 5952] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5949] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] close(3 [pid 5957] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5952] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5949] <... futex resumed>) = 0 [pid 4996] <... close resumed>) = 0 [pid 4995] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5957] <... futex resumed>) = 0 [pid 5952] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5949] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4996] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4995] unlink("./30/binderfs" [pid 5957] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5952] <... mmap resumed>) = 0x20000000 [pid 4995] <... unlink resumed>) = 0 [pid 5952] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5952] <... futex resumed>) = 1 [pid 5949] <... futex resumed>) = 0 [pid 4996] <... clone resumed>, child_tidptr=0x555556fb95d0) = 5961 [pid 5952] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5949] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5960 attached [pid 5952] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5949] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5961 attached [pid 5960] set_robust_list(0x7f5c2b8109e0, 24 [pid 5961] set_robust_list(0x555556fb95e0, 24 [pid 5960] <... set_robust_list resumed>) = 0 [pid 5961] <... set_robust_list resumed>) = 0 [pid 5960] memfd_create("syzkaller", 0 [pid 5961] chdir("./32" [pid 5960] <... memfd_create resumed>) = 3 [pid 5961] <... chdir resumed>) = 0 [pid 5960] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5961] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5960] <... mmap resumed>) = 0x7f5c233f0000 [pid 5952] sendfile(4, 5, NULL, 2147483713 [pid 5949] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5961] <... prctl resumed>) = 0 [pid 5960] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5961] setpgid(0, 0) = 0 [pid 5961] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5961] write(3, "1000", 4) = 4 [pid 5961] close(3) = 0 [ 122.749050][ T26] audit: type=1804 audit(1687834592.812:852): pid=5952 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor113" name="/root/syzkaller.qSu2w6/30/file0/bus" dev="loop4" ino=18 res=1 errno=0 [ 122.797853][ T5942] EXT4-fs (loop5): free_blocks=2415919104 [ 122.803733][ T5942] EXT4-fs (loop5): dirty_blocks=16 [ 122.810723][ T11] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5961] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5961] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5961] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c2b7f0000 [pid 5961] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5961] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5962], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 5962 [pid 5961] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5961] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5962 attached [pid 5959] <... write resumed>) = 1048576 [pid 5962] set_robust_list(0x7f5c2b8109e0, 24) = 0 [pid 5959] munmap(0x7f5c233f0000, 1048576 [pid 5962] memfd_create("syzkaller", 0) = 3 [pid 5960] <... write resumed>) = 1048576 [pid 5959] <... munmap resumed>) = 0 [pid 5962] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5959] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5962] <... mmap resumed>) = 0x7f5c233f0000 [pid 5959] <... openat resumed>) = 4 [pid 5959] ioctl(4, LOOP_SET_FD, 3 [pid 5949] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5953] <... ioctl resumed>) = 0 [pid 5949] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5942] <... sendfile resumed>) = 63 [pid 5962] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5953] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5949] <... futex resumed>) = 0 [pid 5942] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] <... umount2 resumed>) = 0 [pid 5953] <... futex resumed>) = 0 [pid 5949] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5942] <... futex resumed>) = 0 [pid 5953] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5949] <... mmap resumed>) = 0x7f5c234cf000 [pid 5942] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5940] exit_group(0 [pid 5953] <... futex resumed>) = ? [pid 5949] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 5940] <... exit_group resumed>) = ? [pid 5953] +++ exited with 0 +++ [pid 4995] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5949] <... mprotect resumed>) = 0 [pid 5949] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5949] <... clone resumed>, parent_tid=[5963], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 5963 [pid 4995] lstat("./30/file0", [pid 5949] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5942] <... futex resumed>) = ? [pid 4995] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5959] <... ioctl resumed>) = 0 [pid 5949] <... futex resumed>) = 0 [pid 4995] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5959] close(3 [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5959] <... close resumed>) = 0 [ 122.827436][ T5952] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 122.842696][ T5942] EXT4-fs (loop5): Block reservation details [ 122.854618][ T5942] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 122.867596][ T5959] loop0: detected capacity change from 0 to 2048 [pid 5949] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4995] openat(AT_FDCWD, "./30/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5959] mkdir("./file0", 0777 [pid 5942] +++ exited with 0 +++ [pid 5940] +++ exited with 0 +++ [pid 4995] <... openat resumed>) = 4 [pid 5959] <... mkdir resumed>) = 0 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5940, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 4995] fstat(4, ./strace-static-x86_64: Process 5963 attached [pid 5960] munmap(0x7f5c233f0000, 1048576 [pid 5959] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 4999] restart_syscall(<... resuming interrupted clone ...> [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5963] set_robust_list(0x7f5c234ef9e0, 24 [pid 5960] <... munmap resumed>) = 0 [pid 4999] <... restart_syscall resumed>) = 0 [pid 4995] getdents64(4, [pid 5963] <... set_robust_list resumed>) = 0 [pid 5960] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4995] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 5963] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5960] <... openat resumed>) = 4 [pid 4995] getdents64(4, [pid 5960] ioctl(4, LOOP_SET_FD, 3 [ 122.918933][ T5952] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 122.925988][ T26] audit: type=1804 audit(1687834592.852:853): pid=5952 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor113" name="/root/syzkaller.qSu2w6/30/file0/bus" dev="loop4" ino=18 res=1 errno=0 [pid 4999] umount2("./30", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 5962] <... write resumed>) = 1048576 [pid 5949] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] close(4 [pid 4999] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4995] <... close resumed>) = 0 [pid 4999] <... openat resumed>) = 3 [pid 4995] rmdir("./30/file0" [pid 5962] munmap(0x7f5c233f0000, 1048576 [pid 4999] fstat(3, [pid 4995] <... rmdir resumed>) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] getdents64(3, [pid 4999] getdents64(3, [pid 4995] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 5962] <... munmap resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4995] close(3 [pid 5962] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4999] umount2("./30/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] <... close resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] rmdir("./30" [pid 5962] <... openat resumed>) = 4 [pid 4999] lstat("./30/binderfs", [pid 4995] <... rmdir resumed>) = 0 [pid 5962] ioctl(4, LOOP_SET_FD, 3 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4995] mkdir("./31", 0777 [pid 4999] unlink("./30/binderfs" [pid 4995] <... mkdir resumed>) = 0 [pid 4999] <... unlink resumed>) = 0 [pid 4995] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5960] <... ioctl resumed>) = 0 [pid 4999] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] <... openat resumed>) = 3 [pid 5960] close(3 [pid 4995] ioctl(3, LOOP_CLR_FD [pid 5960] <... close resumed>) = 0 [pid 4995] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5960] mkdir("./file0", 0777 [pid 4995] close(3 [pid 5960] <... mkdir resumed>) = 0 [pid 4995] <... close resumed>) = 0 [pid 5960] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 4995] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556fb95d0) = 5966 ./strace-static-x86_64: Process 5966 attached [pid 5966] set_robust_list(0x555556fb95e0, 24) = 0 [ 122.963516][ T5960] loop3: detected capacity change from 0 to 2048 [ 122.987088][ T5962] loop2: detected capacity change from 0 to 2048 [ 122.994686][ T74] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 123.013228][ T26] audit: type=1804 audit(1687834592.852:854): pid=5952 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor113" name="/root/syzkaller.qSu2w6/30/file0/bus" dev="loop4" ino=18 res=1 errno=0 [ 123.013633][ T5959] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [pid 5966] chdir("./31") = 0 [pid 5962] <... ioctl resumed>) = 0 [pid 5959] <... mount resumed>) = 0 [pid 5962] close(3 [pid 5959] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5966] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5962] <... close resumed>) = 0 [pid 5962] mkdir("./file0", 0777 [pid 5959] <... openat resumed>) = 3 [pid 5962] <... mkdir resumed>) = 0 [pid 5959] chdir("./file0" [pid 5962] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5959] <... chdir resumed>) = 0 [pid 5966] <... prctl resumed>) = 0 [pid 5959] ioctl(4, LOOP_CLR_FD [pid 5966] setpgid(0, 0) = 0 [pid 5959] <... ioctl resumed>) = 0 [pid 5966] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5966] write(3, "1000", 4) = 4 [pid 5966] close(3) = 0 [pid 5966] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5959] close(4 [pid 5966] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5966] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c2b7f0000 [pid 4999] <... umount2 resumed>) = 0 [ 123.037036][ T26] audit: type=1804 audit(1687834592.852:855): pid=5952 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor113" name="/root/syzkaller.qSu2w6/30/file0/bus" dev="loop4" ino=18 res=1 errno=0 [ 123.052314][ T5952] EXT4-fs (loop4): This should not happen!! Data will be lost [ 123.052314][ T5952] [ 123.095653][ T5952] EXT4-fs (loop4): Total free blocks count 0 [ 123.101933][ T5952] EXT4-fs (loop4): Free/Dirty block details [ 123.108507][ T5952] EXT4-fs (loop4): free_blocks=2415919104 [ 123.114719][ T5952] EXT4-fs (loop4): dirty_blocks=16 [pid 5966] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5959] <... close resumed>) = 0 [pid 5966] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4999] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5966] <... clone resumed>, parent_tid=[5969], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 5969 [pid 5966] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5966] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5969 attached [pid 5963] <... ioctl resumed>) = 0 [pid 5959] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5952] <... sendfile resumed>) = 63 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5969] set_robust_list(0x7f5c2b8109e0, 24 [pid 5963] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5959] <... futex resumed>) = 1 [pid 5958] <... futex resumed>) = 0 [pid 5952] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5949] exit_group(0 [pid 4999] lstat("./30/file0", [pid 5969] <... set_robust_list resumed>) = 0 [pid 5963] <... futex resumed>) = ? [pid 5959] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5958] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5952] <... futex resumed>) = ? [pid 5949] <... exit_group resumed>) = ? [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5969] memfd_create("syzkaller", 0 [pid 5963] +++ exited with 0 +++ [pid 5959] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5958] <... futex resumed>) = 0 [pid 5952] +++ exited with 0 +++ [pid 5949] +++ exited with 0 +++ [pid 4999] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5969] <... memfd_create resumed>) = 3 [pid 5959] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5958] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5969] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5959] <... open resumed>) = 4 [pid 4999] openat(AT_FDCWD, "./30/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5949, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5969] <... mmap resumed>) = 0x7f5c233f0000 [pid 5959] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... openat resumed>) = 4 [pid 4998] restart_syscall(<... resuming interrupted clone ...> [pid 5969] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4998] <... restart_syscall resumed>) = 0 [pid 4998] umount2("./30", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./30/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./30/binderfs", [pid 5959] <... futex resumed>) = 1 [pid 5958] <... futex resumed>) = 0 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./30/binderfs" [pid 5959] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5958] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] fstat(4, [pid 4998] <... unlink resumed>) = 0 [ 123.122606][ T5952] EXT4-fs (loop4): Block reservation details [ 123.129196][ T5952] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 123.159411][ T5960] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [pid 5960] <... mount resumed>) = 0 [pid 5959] <... write resumed>) = 9 [pid 5958] <... futex resumed>) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5969] <... write resumed>) = 1048576 [pid 5962] <... mount resumed>) = 0 [pid 5960] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5959] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5958] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] getdents64(4, [pid 5969] munmap(0x7f5c233f0000, 1048576 [pid 5962] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5960] <... openat resumed>) = 3 [pid 5959] <... futex resumed>) = 0 [pid 5958] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4999] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 5969] <... munmap resumed>) = 0 [pid 5962] <... openat resumed>) = 3 [pid 5960] chdir("./file0" [pid 5959] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5958] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] getdents64(4, [pid 5969] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5962] chdir("./file0" [pid 5960] <... chdir resumed>) = 0 [pid 5959] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5958] <... futex resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 5969] <... openat resumed>) = 4 [pid 5962] <... chdir resumed>) = 0 [pid 5960] ioctl(4, LOOP_CLR_FD [ 123.177740][ T5962] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.191898][ T74] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5959] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5958] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] close(4 [pid 5969] ioctl(4, LOOP_SET_FD, 3 [pid 5962] ioctl(4, LOOP_CLR_FD [pid 5960] <... ioctl resumed>) = 0 [pid 5959] <... openat resumed>) = 5 [pid 4999] <... close resumed>) = 0 [pid 5962] <... ioctl resumed>) = 0 [pid 5960] close(4 [pid 5959] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] rmdir("./30/file0" [pid 5969] <... ioctl resumed>) = 0 [pid 5962] close(4 [pid 5960] <... close resumed>) = 0 [pid 4998] <... umount2 resumed>) = 0 [pid 4998] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./30/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5962] <... close resumed>) = 0 [pid 5960] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5959] <... futex resumed>) = 1 [pid 5958] <... futex resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 5962] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5960] <... futex resumed>) = 1 [pid 5959] open("./bus", O_RDWR [pid 5958] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5957] <... futex resumed>) = 0 [pid 4999] getdents64(3, [pid 5962] <... futex resumed>) = 1 [pid 5961] <... futex resumed>) = 0 [pid 5960] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5959] <... open resumed>) = 6 [pid 5958] <... futex resumed>) = 0 [pid 5957] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5962] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5961] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5959] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5958] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5957] <... futex resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 5962] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5961] <... futex resumed>) = 0 [pid 5960] <... open resumed>) = 4 [pid 5959] <... futex resumed>) = 0 [pid 5958] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 123.210252][ T26] audit: type=1804 audit(1687834593.272:856): pid=5959 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor113" name="/root/syzkaller.slA38Q/32/file0/bus" dev="loop0" ino=18 res=1 errno=0 [ 123.211067][ T5969] loop1: detected capacity change from 0 to 2048 [pid 5957] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 123.268302][ T26] audit: type=1804 audit(1687834593.322:857): pid=5959 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor113" name="/root/syzkaller.slA38Q/32/file0/bus" dev="loop0" ino=18 res=1 errno=0 [pid 4999] close(3 [pid 5962] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5961] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5960] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5959] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5958] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5957] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4999] <... close resumed>) = 0 [pid 5969] close(3 [pid 5962] <... open resumed>) = 4 [pid 5960] <... futex resumed>) = 0 [pid 5959] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5958] <... futex resumed>) = 0 [pid 5957] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] openat(AT_FDCWD, "./30/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] rmdir("./30" [pid 5969] <... close resumed>) = 0 [pid 5962] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5960] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5959] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5958] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5957] <... futex resumed>) = 0 [pid 4998] <... openat resumed>) = 4 [pid 5969] mkdir("./file0", 0777 [pid 4999] <... rmdir resumed>) = 0 [pid 4998] fstat(4, [pid 5969] <... mkdir resumed>) = 0 [pid 5962] <... futex resumed>) = 1 [pid 5961] <... futex resumed>) = 0 [pid 5960] <... write resumed>) = 9 [pid 5959] <... mmap resumed>) = 0x20000000 [pid 5957] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] mkdir("./31", 0777 [pid 5962] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5961] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5960] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5959] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5957] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4999] <... mkdir resumed>) = 0 [pid 5969] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5962] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5961] <... futex resumed>) = 0 [pid 5960] <... futex resumed>) = 0 [pid 5959] <... futex resumed>) = 1 [pid 5958] <... futex resumed>) = 0 [pid 5957] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5962] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5961] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5960] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5959] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5958] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5957] <... futex resumed>) = 0 [pid 4999] <... openat resumed>) = 3 [pid 5962] <... write resumed>) = 9 [pid 5960] <... openat resumed>) = 5 [pid 5959] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5958] <... futex resumed>) = 0 [pid 5957] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5962] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5960] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5959] sendfile(4, 5, NULL, 2147483713 [pid 5958] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5957] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [ 123.304360][ T26] audit: type=1804 audit(1687834593.362:858): pid=5959 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor113" name="/root/syzkaller.slA38Q/32/file0/bus" dev="loop0" ino=18 res=1 errno=0 [ 123.328721][ T26] audit: type=1804 audit(1687834593.362:859): pid=5959 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor113" name="/root/syzkaller.slA38Q/32/file0/bus" dev="loop0" ino=18 res=1 errno=0 [ 123.348105][ T5959] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 5962] <... futex resumed>) = 1 [pid 5961] <... futex resumed>) = 0 [pid 5960] <... futex resumed>) = 0 [pid 5957] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] close(3 [pid 4998] getdents64(4, [pid 5962] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5961] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5960] open("./bus", O_RDWR [pid 5957] <... futex resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 5962] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5961] <... futex resumed>) = 0 [pid 5960] <... open resumed>) = 6 [pid 5957] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5962] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5961] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5960] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5957] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5962] <... openat resumed>) = 5 [pid 5960] <... futex resumed>) = 0 [pid 5957] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... clone resumed>, child_tidptr=0x555556fb95d0) = 5973 [pid 5962] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5960] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5957] <... futex resumed>) = 0 [pid 5962] <... futex resumed>) = 1 [pid 5961] <... futex resumed>) = 0 [pid 5960] <... mmap resumed>) = 0x20000000 [pid 5957] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5973 attached [pid 5962] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5961] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5960] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5957] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5973] set_robust_list(0x555556fb95e0, 24 [pid 5962] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5961] <... futex resumed>) = 0 [pid 5960] <... futex resumed>) = 0 [pid 5957] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5973] <... set_robust_list resumed>) = 0 [pid 5962] open("./bus", O_RDWR [pid 5961] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5960] sendfile(4, 5, NULL, 2147483713 [pid 5957] <... futex resumed>) = 0 [pid 5973] chdir("./31" [pid 5962] <... open resumed>) = 6 [pid 5957] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5973] <... chdir resumed>) = 0 [pid 5962] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5973] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5962] <... futex resumed>) = 1 [pid 5961] <... futex resumed>) = 0 [pid 5973] <... prctl resumed>) = 0 [ 123.368225][ T26] audit: type=1804 audit(1687834593.392:860): pid=5960 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor113" name="/root/syzkaller.nAdl82/31/file0/bus" dev="loop3" ino=18 res=1 errno=0 [ 123.394339][ T5959] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5962] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5961] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5958] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5973] setpgid(0, 0 [pid 5962] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5961] <... futex resumed>) = 0 [pid 5958] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5973] <... setpgid resumed>) = 0 [pid 5962] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5961] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5958] <... futex resumed>) = 0 [pid 5973] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5962] <... mmap resumed>) = 0x20000000 [pid 5958] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5973] <... openat resumed>) = 3 [pid 5962] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5958] <... mmap resumed>) = 0x7f5c234cf000 [pid 5973] write(3, "1000", 4 [pid 5962] <... futex resumed>) = 1 [pid 5961] <... futex resumed>) = 0 [pid 5958] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 5973] <... write resumed>) = 4 [pid 5962] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5961] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5958] <... mprotect resumed>) = 0 [pid 5973] close(3 [pid 5962] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5961] <... futex resumed>) = 0 [pid 5958] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4998] getdents64(4, [pid 5973] <... close resumed>) = 0 [pid 5962] sendfile(4, 5, NULL, 2147483713 [pid 5961] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5973] symlink("/dev/binderfs", "./binderfs" [pid 5958] <... clone resumed>, parent_tid=[5975], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 5975 [pid 5973] <... symlink resumed>) = 0 [pid 5958] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5973] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5958] <... futex resumed>) = 0 [pid 5973] <... futex resumed>) = 0 [pid 5958] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5973] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c2b7f0000 [pid 4998] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 5973] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 4998] close(4 [pid 5973] <... mprotect resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 5973] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5976], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 5976 [pid 5973] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 123.408112][ T26] audit: type=1804 audit(1687834593.452:861): pid=5960 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor113" name="/root/syzkaller.nAdl82/31/file0/bus" dev="loop3" ino=18 res=1 errno=0 [ 123.434862][ T5959] EXT4-fs (loop0): This should not happen!! Data will be lost [ 123.434862][ T5959] [ 123.448683][ T5960] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 5973] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4998] rmdir("./30/file0" [pid 5957] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5957] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5957] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c234cf000 [pid 5957] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5957] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5977], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 5977 [pid 5957] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5957] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] <... rmdir resumed>) = 0 [pid 4998] getdents64(3, 0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4998] close(3./strace-static-x86_64: Process 5975 attached [pid 5961] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5958] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4998] <... close resumed>) = 0 [pid 4998] rmdir("./30" [pid 5975] set_robust_list(0x7f5c234ef9e0, 24 [pid 5961] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... rmdir resumed>) = 0 [pid 5975] <... set_robust_list resumed>) = 0 [pid 5961] <... futex resumed>) = 0 [pid 4998] mkdir("./31", 0777 [pid 5975] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [ 123.457602][ T5959] EXT4-fs (loop0): Total free blocks count 0 [ 123.466331][ T5969] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.485783][ T5960] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 123.486354][ T5962] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 5961] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4998] <... mkdir resumed>) = 0 [pid 5961] <... mmap resumed>) = 0x7f5c234cf000 [pid 4998] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5961] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 4998] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5977 attached [pid 5961] <... mprotect resumed>) = 0 [pid 4998] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 5976 attached [pid 5977] set_robust_list(0x7f5c234ef9e0, 24 [pid 5961] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] close(3./strace-static-x86_64: Process 5978 attached [pid 5977] <... set_robust_list resumed>) = 0 [pid 5976] set_robust_list(0x7f5c2b8109e0, 24 [pid 5961] <... clone resumed>, parent_tid=[5978], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 5978 [pid 5957] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4998] <... close resumed>) = 0 [pid 5978] set_robust_list(0x7f5c234ef9e0, 24 [pid 5977] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5976] <... set_robust_list resumed>) = 0 [pid 5961] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5978] <... set_robust_list resumed>) = 0 [pid 5977] <... ioctl resumed>) = 0 [pid 5976] memfd_create("syzkaller", 0 [pid 5969] <... mount resumed>) = 0 [pid 5961] <... futex resumed>) = 0 [pid 5960] <... sendfile resumed>) = 63 [pid 5978] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5977] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5976] <... memfd_create resumed>) = 3 [pid 5961] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] <... clone resumed>, child_tidptr=0x555556fb95d0) = 5979 ./strace-static-x86_64: Process 5979 attached [pid 5977] <... futex resumed>) = 0 [pid 5976] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5969] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [ 123.498203][ T5960] EXT4-fs (loop3): This should not happen!! Data will be lost [ 123.498203][ T5960] [ 123.522895][ T5960] EXT4-fs (loop3): Total free blocks count 0 [ 123.529086][ T5960] EXT4-fs (loop3): Free/Dirty block details [ 123.535300][ T5960] EXT4-fs (loop3): free_blocks=2415919104 [ 123.541316][ T5960] EXT4-fs (loop3): dirty_blocks=16 [ 123.546550][ T5960] EXT4-fs (loop3): Block reservation details [ 123.552797][ T5960] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 123.559351][ T5959] EXT4-fs (loop0): Free/Dirty block details [pid 5960] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5977] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5976] <... mmap resumed>) = 0x7f5c233f0000 [pid 5979] set_robust_list(0x555556fb95e0, 24 [pid 5976] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5975] <... ioctl resumed>) = 0 [pid 5969] <... openat resumed>) = 3 [pid 5960] <... futex resumed>) = 0 [pid 5959] <... sendfile resumed>) = 63 [pid 5975] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5979] <... set_robust_list resumed>) = 0 [pid 5975] <... futex resumed>) = 0 [pid 5969] chdir("./file0" [pid 5960] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5959] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5957] exit_group(0 [pid 5975] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5958] exit_group(0 [pid 5979] chdir("./31" [pid 5977] <... futex resumed>) = ? [pid 5975] <... futex resumed>) = ? [pid 5969] <... chdir resumed>) = 0 [pid 5959] <... futex resumed>) = ? [pid 5958] <... exit_group resumed>) = ? [pid 5957] <... exit_group resumed>) = ? [pid 5960] <... futex resumed>) = ? [pid 5977] +++ exited with 0 +++ [pid 5975] +++ exited with 0 +++ [pid 5961] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5979] <... chdir resumed>) = 0 [pid 5969] ioctl(4, LOOP_CLR_FD [pid 5959] +++ exited with 0 +++ [pid 5958] +++ exited with 0 +++ [pid 5960] +++ exited with 0 +++ [pid 5957] +++ exited with 0 +++ [pid 4994] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5958, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [ 123.565663][ T5959] EXT4-fs (loop0): free_blocks=2415919104 [ 123.572176][ T5959] EXT4-fs (loop0): dirty_blocks=16 [ 123.577420][ T5959] EXT4-fs (loop0): Block reservation details [ 123.583649][ T5959] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 123.590127][ T5962] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 123.602677][ T5962] EXT4-fs (loop2): This should not happen!! Data will be lost [ 123.602677][ T5962] [ 123.613369][ T5962] EXT4-fs (loop2): Total free blocks count 0 [pid 5979] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5969] <... ioctl resumed>) = 0 [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5957, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 4994] restart_syscall(<... resuming interrupted clone ...> [pid 5979] <... prctl resumed>) = 0 [pid 5976] <... write resumed>) = 1048576 [pid 5969] close(4 [pid 4997] restart_syscall(<... resuming interrupted clone ...> [pid 4994] <... restart_syscall resumed>) = 0 [pid 4997] <... restart_syscall resumed>) = 0 [pid 5979] setpgid(0, 0 [pid 5969] <... close resumed>) = 0 [pid 4994] umount2("./32", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] umount2("./31", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5979] <... setpgid resumed>) = 0 [pid 5969] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5979] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5978] <... ioctl resumed>) = 0 [pid 5976] munmap(0x7f5c233f0000, 1048576 [pid 5969] <... futex resumed>) = 1 [pid 5966] <... futex resumed>) = 0 [pid 5962] <... sendfile resumed>) = 63 [pid 4997] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4994] <... openat resumed>) = 3 [pid 5979] <... openat resumed>) = 3 [pid 5978] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5976] <... munmap resumed>) = 0 [pid 5969] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5966] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5962] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] <... openat resumed>) = 3 [pid 4994] fstat(3, [pid 5979] write(3, "1000", 4 [pid 5976] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5969] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5962] <... futex resumed>) = 0 [pid 5979] <... write resumed>) = 4 [pid 5976] <... openat resumed>) = 4 [pid 5969] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5962] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5979] close(3 [pid 5978] <... futex resumed>) = 0 [pid 5976] ioctl(4, LOOP_SET_FD, 3 [pid 5966] <... futex resumed>) = 0 [pid 5979] <... close resumed>) = 0 [pid 5978] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5969] <... open resumed>) = 4 [pid 5966] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5961] exit_group(0 [pid 4997] fstat(3, [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5979] symlink("/dev/binderfs", "./binderfs" [pid 5969] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5966] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5962] <... futex resumed>) = ? [pid 5961] <... exit_group resumed>) = ? [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5978] <... futex resumed>) = ? [pid 4994] getdents64(3, [pid 5979] <... symlink resumed>) = 0 [pid 5976] <... ioctl resumed>) = 0 [pid 5969] <... futex resumed>) = 0 [pid 5966] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5962] +++ exited with 0 +++ [pid 5979] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5976] close(3 [pid 5969] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5979] <... futex resumed>) = 0 [pid 5976] <... close resumed>) = 0 [pid 5979] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c2b7f0000 [pid 5976] mkdir("./file0", 0777 [pid 5979] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5978] +++ exited with 0 +++ [pid 5976] <... mkdir resumed>) = 0 [pid 5969] <... write resumed>) = 9 [pid 5966] <... futex resumed>) = 0 [pid 5961] +++ exited with 0 +++ [pid 4997] getdents64(3, [pid 4994] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 5979] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5976] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5969] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5966] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5969] <... futex resumed>) = 0 [pid 5966] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4997] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4996] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5961, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 4994] umount2("./32/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5979] <... clone resumed>, parent_tid=[5980], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 5980 [pid 5969] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5966] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] umount2("./31/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4996] restart_syscall(<... resuming interrupted clone ...> [pid 5979] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5969] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5966] <... futex resumed>) = 0 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4996] <... restart_syscall resumed>) = 0 [pid 4994] lstat("./32/binderfs", [pid 5979] <... futex resumed>) = 0 [pid 5969] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5966] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4997] lstat("./31/binderfs", [pid 5979] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5969] <... openat resumed>) = 5 [pid 4994] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5969] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4994] unlink("./32/binderfs" [pid 5969] <... futex resumed>) = 1 [pid 5966] <... futex resumed>) = 0 [pid 4997] unlink("./31/binderfs" [pid 4996] umount2("./32", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5969] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4994] <... unlink resumed>) = 0 [pid 5966] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] <... unlink resumed>) = 0 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5969] <... futex resumed>) = 0 [pid 5966] <... futex resumed>) = 1 [pid 4997] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5969] open("./bus", O_RDWR [pid 4996] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5969] <... open resumed>) = 6 [pid 5966] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5969] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... openat resumed>) = 3 [pid 5969] <... futex resumed>) = 0 [ 123.626374][ T5962] EXT4-fs (loop2): Free/Dirty block details [ 123.632425][ T5962] EXT4-fs (loop2): free_blocks=2415919104 [ 123.638718][ T5962] EXT4-fs (loop2): dirty_blocks=16 [ 123.643890][ T5962] EXT4-fs (loop2): Block reservation details [ 123.650245][ T5962] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 123.664946][ T5976] loop5: detected capacity change from 0 to 2048 [pid 5966] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5969] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4996] fstat(3, [pid 5966] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5969] <... futex resumed>) = 0 [pid 5966] <... futex resumed>) = 1 [pid 5969] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5966] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4996] getdents64(3, [pid 5969] <... mmap resumed>) = 0x20000000 [pid 4996] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4996] umount2("./32/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] lstat("./32/binderfs", [pid 5969] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5966] <... futex resumed>) = 0 [pid 5969] sendfile(4, 5, NULL, 2147483713 [pid 5966] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5966] <... futex resumed>) = 0 [pid 4996] unlink("./32/binderfs" [pid 5966] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4996] <... unlink resumed>) = 0 [ 123.691238][ T11] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 123.691544][ T74] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 123.726354][ T5076] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 4996] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5980 attached [pid 4997] <... umount2 resumed>) = 0 [pid 5980] set_robust_list(0x7f5c2b8109e0, 24 [pid 4997] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5980] <... set_robust_list resumed>) = 0 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5966] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5966] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5980] memfd_create("syzkaller", 0 [pid 4997] lstat("./31/file0", [pid 5966] <... futex resumed>) = 0 [pid 5966] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c234cf000 [pid 5966] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5966] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5983], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 5983 [pid 5966] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4997] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5966] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5980] <... memfd_create resumed>) = 3 [pid 4997] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5980] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5c233f0000 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./31/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4997] fstat(4, [ 123.742447][ T5976] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.755019][ T5969] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 5980] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5976] <... mount resumed>) = 0 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 5983 attached [pid 5983] set_robust_list(0x7f5c234ef9e0, 24) = 0 [pid 5983] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5976] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 4997] getdents64(4, [pid 5976] <... openat resumed>) = 3 [pid 4997] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 5976] chdir("./file0" [pid 4997] getdents64(4, [pid 5976] <... chdir resumed>) = 0 [pid 4997] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 5976] ioctl(4, LOOP_CLR_FD [pid 4997] close(4 [pid 5976] <... ioctl resumed>) = 0 [pid 4997] <... close resumed>) = 0 [pid 5976] close(4 [pid 4997] rmdir("./31/file0" [pid 5976] <... close resumed>) = 0 [pid 4997] <... rmdir resumed>) = 0 [pid 5976] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] getdents64(3, [pid 5980] <... write resumed>) = 1048576 [pid 5976] <... futex resumed>) = 1 [pid 5973] <... futex resumed>) = 0 [pid 5966] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4997] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 5980] munmap(0x7f5c233f0000, 1048576 [pid 5976] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5973] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] close(3 [pid 4996] <... umount2 resumed>) = 0 [pid 4994] <... umount2 resumed>) = 0 [pid 5976] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5973] <... futex resumed>) = 0 [pid 4997] <... close resumed>) = 0 [ 123.797447][ T5969] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 123.834937][ T5969] EXT4-fs (loop1): This should not happen!! Data will be lost [ 123.834937][ T5969] [pid 5976] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5973] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4997] rmdir("./31" [pid 5980] <... munmap resumed>) = 0 [pid 5976] <... open resumed>) = 4 [pid 4997] <... rmdir resumed>) = 0 [pid 4996] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5980] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5976] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] mkdir("./32", 0777 [pid 5980] <... openat resumed>) = 4 [pid 5976] <... futex resumed>) = 1 [pid 5973] <... futex resumed>) = 0 [pid 4997] <... mkdir resumed>) = 0 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5980] ioctl(4, LOOP_SET_FD, 3 [pid 5976] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5973] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4996] lstat("./32/file0", [pid 4994] lstat("./32/file0", [pid 5980] <... ioctl resumed>) = 0 [pid 5976] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5973] <... futex resumed>) = 0 [pid 4997] <... openat resumed>) = 3 [pid 4996] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5980] close(3 [pid 5976] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5973] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4997] ioctl(3, LOOP_CLR_FD [pid 4996] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5980] <... close resumed>) = 0 [pid 5976] <... write resumed>) = 9 [pid 4997] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5980] mkdir("./file0", 0777 [pid 5976] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] close(3 [pid 4996] openat(AT_FDCWD, "./32/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4994] openat(AT_FDCWD, "./32/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5983] <... ioctl resumed>) = 0 [pid 5980] <... mkdir resumed>) = 0 [pid 5976] <... futex resumed>) = 1 [pid 5973] <... futex resumed>) = 0 [pid 5969] <... sendfile resumed>) = 63 [pid 4997] <... close resumed>) = 0 [pid 4996] <... openat resumed>) = 4 [pid 4994] <... openat resumed>) = 4 [pid 5983] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5980] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5976] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5973] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5969] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4996] fstat(4, [pid 4994] fstat(4, [pid 5983] <... futex resumed>) = 0 [pid 5976] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5973] <... futex resumed>) = 0 [pid 5969] <... futex resumed>) = 0 [pid 4996] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 5984 attached [pid 5983] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5976] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5973] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5969] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5966] exit_group(0 [pid 4997] <... clone resumed>, child_tidptr=0x555556fb95d0) = 5984 [pid 4996] getdents64(4, [pid 4994] getdents64(4, [pid 5983] <... futex resumed>) = ? [pid 5976] <... openat resumed>) = 5 [pid 5969] <... futex resumed>) = ? [pid 5966] <... exit_group resumed>) = ? [pid 4996] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4994] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 5984] set_robust_list(0x555556fb95e0, 24 [pid 5983] +++ exited with 0 +++ [pid 5976] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5969] +++ exited with 0 +++ [pid 5984] <... set_robust_list resumed>) = 0 [pid 5984] chdir("./32") = 0 [pid 5976] <... futex resumed>) = 1 [pid 5973] <... futex resumed>) = 0 [pid 5966] +++ exited with 0 +++ [pid 4996] getdents64(4, [pid 4994] getdents64(4, [pid 5984] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5976] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5973] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 5984] <... prctl resumed>) = 0 [ 123.845076][ T5969] EXT4-fs (loop1): Total free blocks count 0 [ 123.853272][ T5969] EXT4-fs (loop1): Free/Dirty block details [ 123.860079][ T5969] EXT4-fs (loop1): free_blocks=2415919104 [ 123.860752][ T5980] loop4: detected capacity change from 0 to 2048 [ 123.866678][ T5969] EXT4-fs (loop1): dirty_blocks=16 [ 123.878461][ T5969] EXT4-fs (loop1): Block reservation details [ 123.885399][ T5969] EXT4-fs (loop1): i_reserved_data_blocks=1 [pid 5976] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5973] <... futex resumed>) = 0 [pid 4996] close(4 [pid 4994] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 5984] setpgid(0, 0 [pid 5976] open("./bus", O_RDWR [pid 5973] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4996] <... close resumed>) = 0 [pid 4995] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5966, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- [pid 4994] close(4 [pid 5984] <... setpgid resumed>) = 0 [pid 5984] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5976] <... open resumed>) = 6 [pid 4996] rmdir("./32/file0" [pid 5984] <... openat resumed>) = 3 [pid 4995] umount2("./31", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] <... close resumed>) = 0 [pid 5984] write(3, "1000", 4 [pid 5976] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... rmdir resumed>) = 0 [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] rmdir("./32/file0" [pid 5984] <... write resumed>) = 4 [pid 5984] close(3) = 0 [pid 5980] <... mount resumed>) = 0 [pid 5984] symlink("/dev/binderfs", "./binderfs" [pid 5980] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5976] <... futex resumed>) = 1 [pid 5973] <... futex resumed>) = 0 [pid 4996] getdents64(3, [pid 4995] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4994] <... rmdir resumed>) = 0 [pid 5984] <... symlink resumed>) = 0 [pid 5980] <... openat resumed>) = 3 [pid 5976] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5973] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 5984] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5980] chdir("./file0" [pid 5976] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5973] <... futex resumed>) = 0 [pid 4996] close(3 [pid 4995] <... openat resumed>) = 3 [pid 4994] getdents64(3, [pid 5984] <... futex resumed>) = 0 [pid 5980] <... chdir resumed>) = 0 [pid 5976] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5973] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4996] <... close resumed>) = 0 [pid 4995] fstat(3, [pid 4994] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 5984] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5980] ioctl(4, LOOP_CLR_FD [pid 5984] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 5984] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5976] <... mmap resumed>) = 0x20000000 [pid 5984] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5980] <... ioctl resumed>) = 0 [pid 5976] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] rmdir("./32" [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] close(3 [pid 5980] close(4 [pid 5976] <... futex resumed>) = 1 [pid 5973] <... futex resumed>) = 0 [pid 5984] <... clone resumed>, parent_tid=[5987], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 5987 [pid 5984] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4996] <... rmdir resumed>) = 0 [pid 5984] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4995] getdents64(3, [pid 4994] <... close resumed>) = 0 [pid 5980] <... close resumed>) = 0 [pid 5973] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5987 attached [pid 5987] set_robust_list(0x7f5c2b8109e0, 24) = 0 [pid 5987] memfd_create("syzkaller", 0) = 3 [pid 5987] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5c233f0000 [pid 5987] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4995] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 5980] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5973] <... futex resumed>) = 0 [pid 4995] umount2("./31/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] rmdir("./32" [pid 4996] mkdir("./33", 0777 [pid 5980] <... futex resumed>) = 1 [pid 5979] <... futex resumed>) = 0 [pid 5976] sendfile(4, 5, NULL, 2147483713 [pid 5973] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] <... rmdir resumed>) = 0 [pid 5979] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5980] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 4995] lstat("./31/binderfs", [pid 4996] <... mkdir resumed>) = 0 [pid 5979] <... futex resumed>) = 0 [pid 5979] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4995] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4995] unlink("./31/binderfs" [pid 4994] mkdir("./33", 0777 [pid 4995] <... unlink resumed>) = 0 [pid 4994] <... mkdir resumed>) = 0 [pid 4995] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 4994] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4996] ioctl(3, LOOP_CLR_FD [pid 4994] ioctl(3, LOOP_CLR_FD [pid 4996] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4994] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4996] close(3) = 0 [pid 4994] close(3) = 0 [pid 4996] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4994] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5987] <... write resumed>) = 1048576 ./strace-static-x86_64: Process 5988 attached [pid 5988] set_robust_list(0x555556fb95e0, 24) = 0 [pid 5988] chdir("./33" [pid 5987] munmap(0x7f5c233f0000, 1048576) = 0 [pid 5988] <... chdir resumed>) = 0 [pid 5988] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5988] setpgid(0, 0) = 0 [pid 5988] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5988] write(3, "1000", 4) = 4 [pid 5988] close(3) = 0 [pid 5988] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5987] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5987] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5987] close(3) = 0 [pid 5987] mkdir("./file0", 0777) = 0 [pid 5987] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5973] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5973] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5973] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c234cf000 [pid 5973] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5973] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4996] <... clone resumed>, child_tidptr=0x555556fb95d0) = 5988 [pid 5979] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5973] <... clone resumed>, parent_tid=[5990], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 5990 [pid 5979] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5973] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] <... clone resumed>, child_tidptr=0x555556fb95d0) = 5989 [pid 5979] <... futex resumed>) = 0 [pid 5979] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c234cf000 [pid 5979] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 5973] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5989 attached [pid 5988] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5980] <... open resumed>) = 4 [pid 5979] <... mprotect resumed>) = 0 [pid 5973] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5988] <... futex resumed>) = 0 [pid 5980] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5979] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5989] set_robust_list(0x555556fb95e0, 24 [pid 5988] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5980] <... futex resumed>) = 0 [pid 5988] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 5980] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5989] <... set_robust_list resumed>) = 0 [pid 5988] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 5979] <... clone resumed>, parent_tid=[5992], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 5992 ./strace-static-x86_64: Process 5990 attached [pid 5990] set_robust_list(0x7f5c234ef9e0, 24) = 0 [pid 5990] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5979] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5979] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5988] <... mprotect resumed>) = 0 [pid 5989] chdir("./33" [pid 5988] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5989] <... chdir resumed>) = 0 [pid 5989] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5989] setpgid(0, 0 [pid 5988] <... clone resumed>, parent_tid=[5993], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 5993 [pid 5989] <... setpgid resumed>) = 0 [pid 5988] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5989] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5988] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5993 attached ./strace-static-x86_64: Process 5992 attached [pid 5989] <... openat resumed>) = 3 [pid 5988] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4995] <... umount2 resumed>) = 0 [pid 5987] <... mount resumed>) = 0 [pid 5989] write(3, "1000", 4) = 4 [pid 5987] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5989] close(3) = 0 [pid 5987] <... openat resumed>) = 3 [pid 5989] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5989] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5987] chdir("./file0" [pid 5989] <... futex resumed>) = 0 [pid 5992] set_robust_list(0x7f5c234ef9e0, 24 [pid 5987] <... chdir resumed>) = 0 [ 123.972349][ T74] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 123.978350][ T5987] loop3: detected capacity change from 0 to 2048 [ 123.986906][ T5976] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 5993] set_robust_list(0x7f5c2b8109e0, 24 [pid 5989] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5987] ioctl(4, LOOP_CLR_FD [pid 5992] <... set_robust_list resumed>) = 0 [pid 5989] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 5989] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 5987] <... ioctl resumed>) = 0 [pid 5989] <... mprotect resumed>) = 0 [pid 5993] <... set_robust_list resumed>) = 0 [pid 5992] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5989] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5987] close(4 [pid 4995] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5993] memfd_create("syzkaller", 0) = 3 [pid 5992] <... write resumed>) = 9 [pid 5987] <... close resumed>) = 0 [pid 5973] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5979] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5995 attached [pid 5993] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5992] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5989] <... clone resumed>, parent_tid=[5995], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 5995 [pid 5987] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5979] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] lstat("./31/file0", [pid 5993] <... mmap resumed>) = 0x7f5c233f0000 [pid 5992] <... futex resumed>) = 0 [pid 5989] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5987] <... futex resumed>) = 1 [pid 5979] <... futex resumed>) = 1 [pid 4995] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5992] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5984] <... futex resumed>) = 0 [pid 5980] <... futex resumed>) = 0 [pid 5989] <... futex resumed>) = 0 [pid 5987] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5984] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5979] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4995] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5980] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5984] <... futex resumed>) = 0 [pid 5989] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5980] <... openat resumed>) = 5 [pid 5987] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5984] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5987] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5980] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5979] <... futex resumed>) = 0 [pid 4995] openat(AT_FDCWD, "./31/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5979] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4995] <... openat resumed>) = 4 [pid 5980] open("./bus", O_RDWR [pid 5979] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4995] fstat(4, [pid 5995] set_robust_list(0x7f5c2b8109e0, 24 [pid 5987] <... open resumed>) = 4 [pid 5980] <... open resumed>) = 6 [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5987] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5984] <... futex resumed>) = 0 [pid 4995] getdents64(4, [pid 5984] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5980] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5995] <... set_robust_list resumed>) = 0 [pid 5984] <... futex resumed>) = 0 [pid 5980] <... futex resumed>) = 1 [pid 4995] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 5979] <... futex resumed>) = 0 [pid 5984] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5987] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [ 124.054347][ T5976] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 124.067606][ T5976] EXT4-fs (loop5): This should not happen!! Data will be lost [ 124.067606][ T5976] [pid 5995] memfd_create("syzkaller", 0 [pid 5987] <... write resumed>) = 9 [pid 5980] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5979] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] getdents64(4, [pid 5987] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5987] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5995] <... memfd_create resumed>) = 3 [pid 5993] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5984] <... futex resumed>) = 0 [pid 5980] <... mmap resumed>) = 0x20000000 [pid 5979] <... futex resumed>) = 0 [pid 4995] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 5995] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5c233f0000 [pid 5984] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5980] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5979] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4995] close(4 [pid 5984] <... futex resumed>) = 1 [pid 5980] <... futex resumed>) = 0 [pid 5987] <... futex resumed>) = 0 [pid 5987] openat(AT_FDCWD, "./bus", O_RDONLY) = 5 [pid 5987] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5987] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5984] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5980] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5979] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4995] <... close resumed>) = 0 [pid 5979] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5980] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5984] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5980] sendfile(4, 5, NULL, 2147483713 [pid 5979] <... futex resumed>) = 0 [pid 4995] rmdir("./31/file0" [pid 5984] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5979] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4995] <... rmdir resumed>) = 0 [pid 5984] <... futex resumed>) = 1 [pid 4995] getdents64(3, [pid 5984] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4995] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4995] close(3) = 0 [ 124.106721][ T5976] EXT4-fs (loop5): Total free blocks count 0 [ 124.127916][ T5976] EXT4-fs (loop5): Free/Dirty block details [ 124.133887][ T5976] EXT4-fs (loop5): free_blocks=2415919104 [ 124.142572][ T5976] EXT4-fs (loop5): dirty_blocks=16 [pid 4995] rmdir("./31" [pid 5995] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5993] <... write resumed>) = 1048576 [pid 5987] <... futex resumed>) = 0 [pid 4995] <... rmdir resumed>) = 0 [pid 5987] open("./bus", O_RDWR) = 6 [pid 5987] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5984] <... futex resumed>) = 0 [pid 5987] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5984] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5987] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5984] <... futex resumed>) = 0 [pid 5987] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5984] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5987] <... mmap resumed>) = 0x20000000 [pid 5987] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5984] <... futex resumed>) = 0 [pid 5987] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5984] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5987] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5984] <... futex resumed>) = 0 [pid 5987] sendfile(4, 5, NULL, 2147483713 [pid 5984] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5995] <... write resumed>) = 1048576 [pid 5993] munmap(0x7f5c233f0000, 1048576 [ 124.156175][ T5980] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 124.160054][ T5976] EXT4-fs (loop5): Block reservation details [ 124.179824][ T5987] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 124.188478][ T5976] EXT4-fs (loop5): i_reserved_data_blocks=1 [pid 4995] mkdir("./32", 0777 [pid 5995] munmap(0x7f5c233f0000, 1048576 [pid 5993] <... munmap resumed>) = 0 [pid 5979] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5976] <... sendfile resumed>) = 63 [pid 4995] <... mkdir resumed>) = 0 [pid 5990] <... ioctl resumed>) = 0 [pid 5990] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5990] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5995] <... munmap resumed>) = 0 [pid 5993] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5979] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5976] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5995] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5993] <... openat resumed>) = 4 [pid 5979] <... futex resumed>) = 1 [pid 5995] <... openat resumed>) = 4 [pid 5993] ioctl(4, LOOP_SET_FD, 3 [ 124.198679][ T5980] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 124.208264][ T5987] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 124.214702][ T5980] EXT4-fs (loop4): This should not happen!! Data will be lost [ 124.214702][ T5980] [ 124.227259][ T5987] EXT4-fs (loop3): This should not happen!! Data will be lost [ 124.227259][ T5987] [ 124.238058][ T5993] loop2: detected capacity change from 0 to 2048 [ 124.245246][ T5987] EXT4-fs (loop3): Total free blocks count 0 [pid 5979] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5995] ioctl(4, LOOP_SET_FD, 3 [pid 5992] <... futex resumed>) = 0 [pid 5984] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5976] <... futex resumed>) = 0 [pid 4995] <... openat resumed>) = 3 [pid 5992] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5984] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5976] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5973] exit_group(0 [pid 4995] ioctl(3, LOOP_CLR_FD [pid 5984] <... futex resumed>) = 0 [pid 5984] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c234cf000 [pid 5984] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5984] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5996], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 5996 [pid 5984] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5984] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5973] <... exit_group resumed>) = ? [pid 5990] <... futex resumed>) = ? [pid 5976] <... futex resumed>) = ? [pid 4995] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5990] +++ exited with 0 +++ [pid 5976] +++ exited with 0 +++ ./strace-static-x86_64: Process 5996 attached [pid 5996] set_robust_list(0x7f5c234ef9e0, 24) = 0 [pid 5973] +++ exited with 0 +++ [pid 4995] close(3 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5973, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 4995] <... close resumed>) = 0 [pid 5996] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5995] <... ioctl resumed>) = 0 [pid 5995] close(3) = 0 [pid 5995] mkdir("./file0", 0777) = 0 [pid 5995] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5993] <... ioctl resumed>) = 0 [pid 4999] restart_syscall(<... resuming interrupted clone ...> [pid 4995] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] <... restart_syscall resumed>) = 0 [pid 5993] close(3) = 0 [pid 4995] <... clone resumed>, child_tidptr=0x555556fb95d0) = 5997 [pid 4999] umount2("./31", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5979] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, ./strace-static-x86_64: Process 5997 attached [pid 5993] mkdir("./file0", 0777) = 0 [pid 5993] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x555556fba620 /* 4 entries */, 32768) = 112 [pid 5997] set_robust_list(0x555556fb95e0, 24) = 0 [pid 4999] umount2("./31/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./31/binderfs", [pid 5997] chdir("./32" [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./31/binderfs" [pid 5997] <... chdir resumed>) = 0 [pid 5997] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4999] <... unlink resumed>) = 0 [ 124.257213][ T5987] EXT4-fs (loop3): Free/Dirty block details [ 124.258228][ T5995] loop0: detected capacity change from 0 to 2048 [ 124.263525][ T5987] EXT4-fs (loop3): free_blocks=2415919104 [ 124.290676][ T5987] EXT4-fs (loop3): dirty_blocks=16 [pid 5997] <... prctl resumed>) = 0 [pid 4999] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5997] setpgid(0, 0) = 0 [pid 5984] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5997] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5987] <... sendfile resumed>) = 63 [pid 5997] write(3, "1000", 4) = 4 [pid 5996] <... ioctl resumed>) = 0 [ 124.304190][ T5980] EXT4-fs (loop4): Total free blocks count 0 [ 124.312672][ T74] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 124.313036][ T5987] EXT4-fs (loop3): Block reservation details [ 124.327264][ T5980] EXT4-fs (loop4): Free/Dirty block details [ 124.333725][ T5987] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 124.340337][ T5980] EXT4-fs (loop4): free_blocks=2415919104 [ 124.350057][ T5980] EXT4-fs (loop4): dirty_blocks=16 [pid 5996] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5997] close(3 [pid 5996] <... futex resumed>) = 0 [pid 5997] <... close resumed>) = 0 [pid 5997] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5997] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5997] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c2b7f0000 [pid 5997] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5996] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5997] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4999] <... umount2 resumed>) = 0 [pid 4999] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5997] <... clone resumed>, parent_tid=[6002], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6002 [pid 5997] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5987] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5997] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5987] <... futex resumed>) = 0 [pid 5993] <... mount resumed>) = 0 [pid 5987] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5993] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5984] exit_group(0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6002 attached [pid 5996] <... futex resumed>) = ? [pid 5993] chdir("./file0" [pid 5987] <... futex resumed>) = ? [pid 5984] <... exit_group resumed>) = ? [pid 6002] set_robust_list(0x7f5c2b8109e0, 24 [pid 5996] +++ exited with 0 +++ [pid 5995] <... mount resumed>) = 0 [pid 5993] <... chdir resumed>) = 0 [pid 5992] <... ioctl resumed>) = 0 [pid 5987] +++ exited with 0 +++ [pid 5984] +++ exited with 0 +++ [pid 5980] <... sendfile resumed>) = 63 [pid 4999] lstat("./31/file0", [pid 6002] <... set_robust_list resumed>) = 0 [pid 5992] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5984, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 6002] memfd_create("syzkaller", 0 [pid 5992] <... futex resumed>) = 0 [pid 4997] restart_syscall(<... resuming interrupted clone ...> [pid 6002] <... memfd_create resumed>) = 3 [pid 5992] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4997] <... restart_syscall resumed>) = 0 [pid 5995] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6002] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5993] ioctl(4, LOOP_CLR_FD [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6002] <... mmap resumed>) = 0x7f5c233f0000 [pid 5995] <... openat resumed>) = 3 [pid 5993] <... ioctl resumed>) = 0 [pid 4999] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5980] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5995] chdir("./file0" [pid 5993] close(4 [pid 5980] <... futex resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] umount2("./32", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5995] <... chdir resumed>) = 0 [pid 5993] <... close resumed>) = 0 [pid 5980] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5979] exit_group(0 [pid 4999] openat(AT_FDCWD, "./31/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5995] ioctl(4, LOOP_CLR_FD [pid 5993] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5992] <... futex resumed>) = ? [pid 5980] <... futex resumed>) = ? [pid 5979] <... exit_group resumed>) = ? [pid 4999] <... openat resumed>) = 4 [pid 4997] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5995] <... ioctl resumed>) = 0 [pid 5993] <... futex resumed>) = 1 [pid 5992] +++ exited with 0 +++ [pid 5988] <... futex resumed>) = 0 [pid 5980] +++ exited with 0 +++ [pid 4999] fstat(4, [pid 5995] close(4 [pid 5993] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5979] +++ exited with 0 +++ [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5995] <... close resumed>) = 0 [pid 5993] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5988] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] getdents64(4, [pid 4997] <... openat resumed>) = 3 [pid 6002] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5995] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5993] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5988] <... futex resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5979, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 4997] fstat(3, [pid 5995] <... futex resumed>) = 1 [pid 5993] <... open resumed>) = 4 [ 124.356893][ T5980] EXT4-fs (loop4): Block reservation details [ 124.370958][ T5980] EXT4-fs (loop4): i_reserved_data_blocks=1 [pid 5989] <... futex resumed>) = 0 [pid 5988] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] getdents64(4, [pid 4998] restart_syscall(<... resuming interrupted clone ...> [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5995] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5993] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5989] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5988] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4999] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4998] <... restart_syscall resumed>) = 0 [pid 4997] getdents64(3, [pid 5995] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5993] <... futex resumed>) = 0 [pid 5989] <... futex resumed>) = 0 [pid 5988] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] close(4 [pid 4997] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 5995] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5993] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5989] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5988] <... futex resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 5995] <... open resumed>) = 4 [pid 5993] <... write resumed>) = 9 [pid 5988] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] rmdir("./31/file0" [pid 4998] umount2("./31", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] umount2("./32/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5995] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5993] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5988] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4999] <... rmdir resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5995] <... futex resumed>) = 1 [pid 5993] <... futex resumed>) = 0 [pid 5989] <... futex resumed>) = 0 [pid 5988] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] getdents64(3, [pid 4998] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] lstat("./32/binderfs", [pid 5995] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5993] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5989] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5988] <... futex resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4998] <... openat resumed>) = 3 [pid 5995] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5993] <... openat resumed>) = 5 [pid 5989] <... futex resumed>) = 0 [pid 5988] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] close(3 [pid 4998] fstat(3, [pid 4997] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5995] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5993] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5989] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5988] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4999] <... close resumed>) = 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] unlink("./32/binderfs" [pid 5995] <... write resumed>) = 9 [pid 5993] <... futex resumed>) = 0 [pid 5988] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] rmdir("./31" [pid 4998] getdents64(3, [pid 5995] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5993] open("./bus", O_RDWR [pid 5988] <... futex resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 4997] <... unlink resumed>) = 0 [pid 5995] <... futex resumed>) = 1 [pid 5993] <... open resumed>) = 6 [pid 5989] <... futex resumed>) = 0 [pid 5988] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] mkdir("./32", 0777 [pid 4998] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4997] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5995] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5993] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5989] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5988] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4999] <... mkdir resumed>) = 0 [pid 4998] umount2("./31/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5995] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5993] <... futex resumed>) = 0 [pid 5989] <... futex resumed>) = 0 [pid 5988] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5995] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5993] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5989] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5988] <... futex resumed>) = 0 [pid 4999] <... openat resumed>) = 3 [pid 4998] lstat("./31/binderfs", [pid 5995] <... openat resumed>) = 5 [pid 5993] <... mmap resumed>) = 0x20000000 [pid 5988] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5995] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5993] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5988] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5995] <... futex resumed>) = 1 [pid 5993] <... futex resumed>) = 0 [pid 5989] <... futex resumed>) = 0 [ 124.436391][ T11] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 124.461912][ T5993] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 5988] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] close(3 [pid 4998] unlink("./31/binderfs" [pid 5995] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5993] sendfile(4, 5, NULL, 2147483713 [pid 5989] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5988] <... futex resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 5995] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5989] <... futex resumed>) = 0 [pid 5988] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] <... unlink resumed>) = 0 [pid 5995] open("./bus", O_RDWR [pid 5989] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5995] <... open resumed>) = 6 [pid 4999] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6003 [pid 5995] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5995] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5989] <... futex resumed>) = 0 [pid 5989] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5995] <... futex resumed>) = 0 [pid 5989] <... futex resumed>) = 1 [pid 5995] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5995] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5989] <... futex resumed>) = 0 [pid 5995] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5989] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5995] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5989] <... futex resumed>) = 0 [pid 5989] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5995] sendfile(4, 5, NULL, 2147483713 [pid 5988] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5988] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5988] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6002] <... write resumed>) = 1048576 [pid 6002] munmap(0x7f5c233f0000, 1048576) = 0 [pid 6002] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6002] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 6003 attached [pid 6003] set_robust_list(0x555556fb95e0, 24) = 0 [pid 5988] <... mmap resumed>) = 0x7f5c234cf000 [pid 5988] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 6003] chdir("./32" [pid 5988] <... mprotect resumed>) = 0 [pid 5988] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6004], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6004 [pid 5988] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 124.488034][ T11] EXT4-fs (loop3): This should not happen!! Data will be lost [ 124.488034][ T11] [ 124.491305][ T5995] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 124.514943][ T5457] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5988] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5989] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5989] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5989] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c234cf000 [pid 5989] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE) = 0 ./strace-static-x86_64: Process 6004 attached [pid 5989] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6005 attached [pid 6004] set_robust_list(0x7f5c234ef9e0, 24 [pid 5989] <... clone resumed>, parent_tid=[6005], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6005 [pid 6003] <... chdir resumed>) = 0 [pid 6003] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6003] setpgid(0, 0) = 0 [pid 6003] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6003] write(3, "1000", 4) = 4 [pid 6003] close(3) = 0 [pid 6003] symlink("/dev/binderfs", "./binderfs" [pid 6004] <... set_robust_list resumed>) = 0 [pid 6003] <... symlink resumed>) = 0 [pid 5989] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6004] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6005] set_robust_list(0x7f5c234ef9e0, 24 [pid 5989] <... futex resumed>) = 0 [pid 6003] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6003] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6005] <... set_robust_list resumed>) = 0 [pid 6003] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 5989] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6002] <... ioctl resumed>) = 0 [pid 6002] close(3) = 0 [pid 6003] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6002] mkdir("./file0", 0777 [pid 6003] <... mprotect resumed>) = 0 [pid 6002] <... mkdir resumed>) = 0 [pid 6003] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6006], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6006 [pid 6002] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6003] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6003] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6006 attached [pid 5988] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 124.532818][ T6002] loop1: detected capacity change from 0 to 2048 [ 124.550128][ T5457] EXT4-fs (loop4): This should not happen!! Data will be lost [ 124.550128][ T5457] [ 124.561159][ T5993] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 6005] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6006] set_robust_list(0x7f5c2b8109e0, 24) = 0 [pid 6006] memfd_create("syzkaller", 0) = 3 [pid 6006] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5c233f0000 [pid 4997] <... umount2 resumed>) = 0 [pid 4997] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] <... umount2 resumed>) = 0 [pid 4997] lstat("./32/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./32/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4997] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(4, 0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4997] getdents64(4, 0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 6006] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5989] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4998] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] close(4 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./31/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] <... close resumed>) = 0 [pid 4998] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] rmdir("./32/file0" [pid 4998] openat(AT_FDCWD, "./31/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] <... rmdir resumed>) = 0 [pid 4998] <... openat resumed>) = 4 [ 124.592328][ T5995] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 124.625765][ T5993] EXT4-fs (loop2): This should not happen!! Data will be lost [ 124.625765][ T5993] [pid 4997] getdents64(3, 0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4997] close(3) = 0 [pid 4997] rmdir("./32") = 0 [pid 4997] mkdir("./33", 0777) = 0 [pid 4997] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4998] fstat(4, [pid 4997] <... openat resumed>) = 3 [pid 4997] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4997] close(3 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] <... close resumed>) = 0 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556fb95d0) = 6009 [pid 4998] getdents64(4, 0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, ./strace-static-x86_64: Process 6009 attached 0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 6002] <... mount resumed>) = 0 [pid 6002] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6002] chdir("./file0") = 0 [pid 6002] ioctl(4, LOOP_CLR_FD) = 0 [pid 6009] set_robust_list(0x555556fb95e0, 24 [pid 6002] close(4 [pid 4998] close(4 [pid 6002] <... close resumed>) = 0 [ 124.645746][ T5995] EXT4-fs (loop0): This should not happen!! Data will be lost [ 124.645746][ T5995] [ 124.658580][ T5995] EXT4-fs (loop0): Total free blocks count 0 [ 124.664910][ T5993] EXT4-fs (loop2): Total free blocks count 0 [ 124.672347][ T5995] EXT4-fs (loop0): Free/Dirty block details [ 124.679405][ T5993] EXT4-fs (loop2): Free/Dirty block details [pid 6009] <... set_robust_list resumed>) = 0 [pid 6002] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... close resumed>) = 0 [pid 6009] chdir("./33" [pid 6002] <... futex resumed>) = 1 [pid 5997] <... futex resumed>) = 0 [pid 6009] <... chdir resumed>) = 0 [pid 6002] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4998] rmdir("./31/file0" [pid 5997] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6009] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4998] <... rmdir resumed>) = 0 [pid 6009] <... prctl resumed>) = 0 [pid 6002] <... futex resumed>) = 0 [pid 5997] <... futex resumed>) = 1 [pid 4998] getdents64(3, [pid 6002] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000) = 4 [pid 6002] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6002] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6009] setpgid(0, 0) = 0 [pid 5997] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 6006] <... write resumed>) = 1048576 [pid 6006] munmap(0x7f5c233f0000, 1048576) = 0 [pid 6009] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5997] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6009] <... openat resumed>) = 3 [pid 5997] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] close(3 [pid 6006] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6006] ioctl(4, LOOP_SET_FD, 3 [pid 6009] write(3, "1000", 4 [pid 6002] <... futex resumed>) = 0 [ 124.691586][ T5995] EXT4-fs (loop0): free_blocks=2415919104 [ 124.698738][ T5993] EXT4-fs (loop2): free_blocks=2415919104 [ 124.704768][ T5993] EXT4-fs (loop2): dirty_blocks=16 [ 124.711520][ T5995] EXT4-fs (loop0): dirty_blocks=16 [ 124.718252][ T5993] EXT4-fs (loop2): Block reservation details [ 124.725267][ T5995] EXT4-fs (loop0): Block reservation details [ 124.728951][ T6006] loop5: detected capacity change from 0 to 2048 [ 124.732179][ T5993] EXT4-fs (loop2): i_reserved_data_blocks=1 [pid 5997] <... futex resumed>) = 1 [pid 4998] <... close resumed>) = 0 [pid 6009] <... write resumed>) = 4 [pid 6004] <... ioctl resumed>) = 0 [pid 6002] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5997] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5993] <... sendfile resumed>) = 63 [pid 4998] rmdir("./31" [pid 6009] close(3 [pid 6006] <... ioctl resumed>) = 0 [pid 6004] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6002] <... write resumed>) = 9 [pid 6004] <... futex resumed>) = 0 [pid 6002] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5993] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6009] <... close resumed>) = 0 [pid 6004] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6002] <... futex resumed>) = 1 [pid 5997] <... futex resumed>) = 0 [pid 5993] <... futex resumed>) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 6009] symlink("/dev/binderfs", "./binderfs" [pid 6002] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5997] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5993] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5988] exit_group(0 [pid 4998] mkdir("./32", 0777 [pid 6009] <... symlink resumed>) = 0 [pid 6004] <... futex resumed>) = ? [pid 6002] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5997] <... futex resumed>) = 0 [pid 5993] <... futex resumed>) = ? [pid 5988] <... exit_group resumed>) = ? [pid 6009] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6004] +++ exited with 0 +++ [pid 6002] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5997] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5993] +++ exited with 0 +++ [pid 4998] <... mkdir resumed>) = 0 [pid 6009] <... futex resumed>) = 0 [pid 6006] close(3 [pid 6005] <... ioctl resumed>) = 0 [pid 6002] <... openat resumed>) = 5 [pid 5995] <... sendfile resumed>) = 63 [pid 5988] +++ exited with 0 +++ [pid 4998] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6009] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6006] <... close resumed>) = 0 [pid 6005] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6002] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5995] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... openat resumed>) = 3 [pid 4996] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5988, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 6009] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6006] mkdir("./file0", 0777 [pid 6005] <... futex resumed>) = 0 [pid 6002] <... futex resumed>) = 1 [pid 5997] <... futex resumed>) = 0 [pid 5995] <... futex resumed>) = 0 [pid 5989] exit_group(0 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 6009] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6006] <... mkdir resumed>) = 0 [pid 6002] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5997] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5989] <... exit_group resumed>) = ? [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6009] <... mprotect resumed>) = 0 [pid 6006] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6005] +++ exited with 0 +++ [pid 6002] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5997] <... futex resumed>) = 0 [pid 5995] +++ exited with 0 +++ [pid 5989] +++ exited with 0 +++ [pid 4998] close(3 [pid 6009] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6002] open("./bus", O_RDWR [pid 5997] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] <... close resumed>) = 0 [pid 6002] <... open resumed>) = 6 [pid 4994] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5989, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 6002] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5997] <... futex resumed>) = 0 [pid 6002] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5997] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6009] <... clone resumed>, parent_tid=[6010], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6010 [pid 6002] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5997] <... futex resumed>) = 0 [ 124.738805][ T5995] EXT4-fs (loop0): i_reserved_data_blocks=1 [pid 6002] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5997] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6009] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6002] <... mmap resumed>) = 0x20000000 [pid 4998] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6011 [pid 4996] umount2("./33", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6011 attached ./strace-static-x86_64: Process 6010 attached [pid 6009] <... futex resumed>) = 0 [pid 6002] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] umount2("./33", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6011] set_robust_list(0x555556fb95e0, 24 [pid 6010] set_robust_list(0x7f5c2b8109e0, 24 [pid 6009] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6002] <... futex resumed>) = 1 [pid 5997] <... futex resumed>) = 0 [pid 4996] openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6011] <... set_robust_list resumed>) = 0 [pid 6010] <... set_robust_list resumed>) = 0 [pid 6002] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5997] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... openat resumed>) = 3 [pid 6011] chdir("./32" [pid 6010] memfd_create("syzkaller", 0 [pid 6002] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5997] <... futex resumed>) = 0 [pid 4996] fstat(3, [pid 4994] openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6010] <... memfd_create resumed>) = 3 [pid 6006] <... mount resumed>) = 0 [pid 6002] sendfile(4, 5, NULL, 2147483713 [pid 5997] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6011] <... chdir resumed>) = 0 [pid 6010] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6006] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 4996] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] <... openat resumed>) = 3 [pid 6011] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6006] <... openat resumed>) = 3 [pid 4996] getdents64(3, [pid 4994] fstat(3, [pid 6011] <... prctl resumed>) = 0 [pid 6006] chdir("./file0" [pid 4996] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6011] setpgid(0, 0 [pid 6006] <... chdir resumed>) = 0 [pid 4996] umount2("./33/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] getdents64(3, [pid 6011] <... setpgid resumed>) = 0 [pid 6006] ioctl(4, LOOP_CLR_FD [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 6011] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6006] <... ioctl resumed>) = 0 [pid 4996] lstat("./33/binderfs", [pid 4994] umount2("./33/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6011] <... openat resumed>) = 3 [pid 6006] close(4 [pid 4996] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6011] write(3, "1000", 4 [pid 6010] <... mmap resumed>) = 0x7f5c233f0000 [pid 6006] <... close resumed>) = 0 [pid 4996] unlink("./33/binderfs" [pid 4994] lstat("./33/binderfs", [pid 6011] <... write resumed>) = 4 [pid 6006] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... unlink resumed>) = 0 [pid 4994] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6011] close(3 [pid 6006] <... futex resumed>) = 1 [pid 6003] <... futex resumed>) = 0 [pid 4996] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] unlink("./33/binderfs" [pid 6011] <... close resumed>) = 0 [pid 6006] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6003] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] <... unlink resumed>) = 0 [pid 6011] symlink("/dev/binderfs", "./binderfs" [pid 6006] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6003] <... futex resumed>) = 0 [pid 4994] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6011] <... symlink resumed>) = 0 [pid 6006] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6011] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6011] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c2b7f0000 [pid 6011] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE) = 0 [ 124.803464][ T6002] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 124.828910][ T5457] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 6011] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6014 attached , parent_tid=[6014], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6014 [pid 6010] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6006] <... open resumed>) = 4 [pid 6003] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6011] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6006] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6011] <... futex resumed>) = 0 [pid 6006] <... futex resumed>) = 0 [pid 6011] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6006] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6014] set_robust_list(0x7f5c2b8109e0, 24) = 0 [pid 6003] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5997] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6003] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5997] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6014] memfd_create("syzkaller", 0 [pid 6006] <... futex resumed>) = 0 [pid 6003] <... futex resumed>) = 1 [pid 5997] <... futex resumed>) = 0 [pid 6014] <... memfd_create resumed>) = 3 [pid 6006] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6003] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 124.841982][ T11] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 124.844704][ T5457] EXT4-fs (loop2): This should not happen!! Data will be lost [ 124.844704][ T5457] [ 124.864258][ T6002] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 124.890658][ T11] EXT4-fs (loop0): This should not happen!! Data will be lost [ 124.890658][ T11] [pid 5997] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6014] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6010] <... write resumed>) = 1048576 [pid 6006] <... write resumed>) = 9 [pid 5997] <... mmap resumed>) = 0x7f5c234cf000 [pid 6014] <... mmap resumed>) = 0x7f5c233f0000 [pid 6010] munmap(0x7f5c233f0000, 1048576 [pid 6006] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5997] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 6014] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6010] <... munmap resumed>) = 0 [pid 6006] <... futex resumed>) = 1 [pid 6003] <... futex resumed>) = 0 [pid 5997] <... mprotect resumed>) = 0 [ 124.893868][ T6002] EXT4-fs (loop1): This should not happen!! Data will be lost [ 124.893868][ T6002] [ 124.911140][ T6002] EXT4-fs (loop1): Total free blocks count 0 [ 124.927795][ T6002] EXT4-fs (loop1): Free/Dirty block details [ 124.944246][ T6002] EXT4-fs (loop1): free_blocks=2415919104 [pid 6014] <... write resumed>) = 1048576 [pid 6010] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6006] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6003] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5997] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6014] munmap(0x7f5c233f0000, 1048576 [pid 6010] <... openat resumed>) = 4 [pid 6006] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6003] <... futex resumed>) = 0 [pid 4996] <... umount2 resumed>) = 0 [pid 6010] ioctl(4, LOOP_SET_FD, 3 [pid 6006] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6003] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5997] <... clone resumed>, parent_tid=[6015], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6015 [pid 4996] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] lstat("./33/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] openat(AT_FDCWD, "./33/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6010] <... ioctl resumed>) = 0 [pid 5997] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... openat resumed>) = 4 [pid 6006] <... openat resumed>) = 5 [pid 4996] fstat(4, [pid 6006] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5997] <... futex resumed>) = 0 [pid 6006] <... futex resumed>) = 1 [pid 6003] <... futex resumed>) = 0 [pid 5997] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4996] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6006] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6003] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] getdents64(4, [pid 4994] <... umount2 resumed>) = 0 [pid 6014] <... munmap resumed>) = 0 [pid 6006] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6003] <... futex resumed>) = 0 [pid 4996] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 6006] open("./bus", O_RDWR [pid 6003] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4996] getdents64(4, [pid 4994] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6006] <... open resumed>) = 6 [pid 4996] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 6006] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] close(4 [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6006] <... futex resumed>) = 1 [pid 6003] <... futex resumed>) = 0 [pid 4996] <... close resumed>) = 0 [pid 4994] lstat("./33/file0", [pid 6006] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6003] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] rmdir("./33/file0" [pid 4994] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6014] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6006] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6003] <... futex resumed>) = 0 [pid 4996] <... rmdir resumed>) = 0 [pid 4994] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6014] <... openat resumed>) = 4 [pid 6006] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6003] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4996] getdents64(3, [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4996] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4994] openat(AT_FDCWD, "./33/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4996] close(3 [pid 4994] <... openat resumed>) = 4 [pid 6006] <... mmap resumed>) = 0x20000000 [pid 4996] <... close resumed>) = 0 [pid 4994] fstat(4, ./strace-static-x86_64: Process 6015 attached [pid 6014] ioctl(4, LOOP_SET_FD, 3 [pid 6006] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] rmdir("./33" [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] <... rmdir resumed>) = 0 [pid 4994] getdents64(4, [pid 4996] mkdir("./34", 0777 [pid 4994] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4996] <... mkdir resumed>) = 0 [pid 4994] getdents64(4, [pid 4996] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4994] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4996] <... openat resumed>) = 3 [pid 4994] close(4 [pid 4996] ioctl(3, LOOP_CLR_FD [pid 4994] <... close resumed>) = 0 [pid 4996] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4994] rmdir("./33/file0" [pid 4996] close(3 [pid 4994] <... rmdir resumed>) = 0 [pid 6006] <... futex resumed>) = 1 [pid 6003] <... futex resumed>) = 0 [pid 4996] <... close resumed>) = 0 [pid 4994] getdents64(3, [pid 6006] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6003] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4994] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 6015] set_robust_list(0x7f5c234ef9e0, 24 [pid 6006] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6003] <... futex resumed>) = 0 [pid 4994] close(3 [pid 6006] sendfile(4, 5, NULL, 2147483713 [ 124.950164][ T6002] EXT4-fs (loop1): dirty_blocks=16 [ 124.956553][ T6002] EXT4-fs (loop1): Block reservation details [ 124.967812][ T6010] loop3: detected capacity change from 0 to 2048 [ 124.985012][ T6014] loop4: detected capacity change from 0 to 2048 [pid 6003] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4996] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6016 [pid 4994] <... close resumed>) = 0 [pid 6015] <... set_robust_list resumed>) = 0 [pid 6014] <... ioctl resumed>) = 0 [pid 6010] close(3 [pid 4994] rmdir("./33") = 0 [pid 4994] mkdir("./34", 0777) = 0 ./strace-static-x86_64: Process 6016 attached [pid 4994] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6016] set_robust_list(0x555556fb95e0, 24 [pid 6015] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6010] <... close resumed>) = 0 [pid 4994] <... openat resumed>) = 3 [pid 6014] close(3 [pid 6016] <... set_robust_list resumed>) = 0 [pid 6010] mkdir("./file0", 0777 [pid 4994] ioctl(3, LOOP_CLR_FD [pid 6016] chdir("./34" [pid 4994] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6016] <... chdir resumed>) = 0 [pid 6010] <... mkdir resumed>) = 0 [pid 4994] close(3 [pid 6016] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6015] <... ioctl resumed>) = 0 [pid 6014] <... close resumed>) = 0 [pid 6010] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6002] <... sendfile resumed>) = 63 [pid 5997] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4994] <... close resumed>) = 0 [pid 6016] <... prctl resumed>) = 0 [pid 4994] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6016] setpgid(0, 0) = 0 [pid 4994] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6017 [pid 6016] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6016] write(3, "1000", 4) = 4 [pid 6016] close(3) = 0 [pid 6016] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6016] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 6017 attached [pid 6016] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6017] set_robust_list(0x555556fb95e0, 24 [pid 6016] <... mmap resumed>) = 0x7f5c2b7f0000 [ 124.999370][ T6006] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 125.005828][ T6002] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 125.033003][ T6006] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 6015] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6014] mkdir("./file0", 0777 [pid 6017] <... set_robust_list resumed>) = 0 [pid 6016] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6003] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6002] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5997] exit_group(0 [pid 6017] chdir("./34" [pid 6016] <... mprotect resumed>) = 0 [pid 6017] <... chdir resumed>) = 0 [pid 6016] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6017] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6016] <... clone resumed>, parent_tid=[6018], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6018 [pid 6017] setpgid(0, 0 [pid 6016] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6017] <... setpgid resumed>) = 0 [pid 6016] <... futex resumed>) = 0 [pid 6017] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6016] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6017] <... openat resumed>) = 3 [pid 6017] write(3, "1000", 4 [pid 6015] <... futex resumed>) = 0 [pid 6017] <... write resumed>) = 4 [pid 6017] close(3 [pid 6014] <... mkdir resumed>) = 0 [pid 6017] <... close resumed>) = 0 ./strace-static-x86_64: Process 6018 attached [pid 6017] symlink("/dev/binderfs", "./binderfs" [pid 6018] set_robust_list(0x7f5c2b8109e0, 24 [pid 6017] <... symlink resumed>) = 0 [pid 6018] <... set_robust_list resumed>) = 0 [pid 6017] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6018] memfd_create("syzkaller", 0 [pid 6017] <... futex resumed>) = 0 [pid 6018] <... memfd_create resumed>) = 3 [pid 6017] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6018] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6017] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6018] <... mmap resumed>) = 0x7f5c233f0000 [pid 6017] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6003] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5997] <... exit_group resumed>) = ? [pid 6017] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6002] <... futex resumed>) = ? [pid 6017] <... clone resumed>, parent_tid=[6020], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6020 [pid 6015] +++ exited with 0 +++ [pid 6003] <... futex resumed>) = 0 [pid 6017] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6014] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6003] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6002] +++ exited with 0 +++ [pid 5997] +++ exited with 0 +++ [pid 6017] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6003] <... mmap resumed>) = 0x7f5c234cf000 [pid 4995] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5997, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- ./strace-static-x86_64: Process 6020 attached [pid 6003] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 6020] set_robust_list(0x7f5c2b8109e0, 24 [pid 6003] <... mprotect resumed>) = 0 [pid 6020] <... set_robust_list resumed>) = 0 [pid 6003] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4995] umount2("./32", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6020] memfd_create("syzkaller", 0 [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6020] <... memfd_create resumed>) = 3 [pid 6003] <... clone resumed>, parent_tid=[6022], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6022 [pid 4995] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6020] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6018] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6003] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] <... openat resumed>) = 3 [pid 6020] <... mmap resumed>) = 0x7f5c233f0000 [ 125.047648][ T6006] EXT4-fs (loop5): This should not happen!! Data will be lost [ 125.047648][ T6006] [pid 6003] <... futex resumed>) = 0 [pid 4995] fstat(3, ./strace-static-x86_64: Process 6022 attached [pid 6020] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6010] <... mount resumed>) = 0 [pid 6003] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6022] set_robust_list(0x7f5c234ef9e0, 24 [pid 6010] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 4995] getdents64(3, [pid 6010] <... openat resumed>) = 3 [pid 4995] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 6010] chdir("./file0" [pid 4995] umount2("./32/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6010] <... chdir resumed>) = 0 [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6010] ioctl(4, LOOP_CLR_FD [pid 4995] lstat("./32/binderfs", [pid 6010] <... ioctl resumed>) = 0 [pid 4995] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6010] close(4 [pid 4995] unlink("./32/binderfs" [pid 6022] <... set_robust_list resumed>) = 0 [pid 6010] <... close resumed>) = 0 [pid 4995] <... unlink resumed>) = 0 [pid 6010] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [ 125.091873][ T6006] EXT4-fs (loop5): Total free blocks count 0 [ 125.098035][ T6006] EXT4-fs (loop5): Free/Dirty block details [ 125.104982][ T6006] EXT4-fs (loop5): free_blocks=2415919104 [ 125.111567][ T6006] EXT4-fs (loop5): dirty_blocks=16 [ 125.117468][ T6006] EXT4-fs (loop5): Block reservation details [ 125.123505][ T6006] EXT4-fs (loop5): i_reserved_data_blocks=1 [pid 4995] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6022] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6020] <... write resumed>) = 1048576 [pid 6014] <... mount resumed>) = 0 [pid 6010] <... futex resumed>) = 1 [pid 6009] <... futex resumed>) = 0 [pid 6006] <... sendfile resumed>) = 63 [pid 6014] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6010] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6009] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6014] <... openat resumed>) = 3 [pid 6010] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6009] <... futex resumed>) = 0 [pid 6014] chdir("./file0" [pid 6010] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6009] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6022] <... ioctl resumed>) = 0 [pid 6020] munmap(0x7f5c233f0000, 1048576 [pid 6014] <... chdir resumed>) = 0 [pid 6010] <... open resumed>) = 4 [pid 6006] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6022] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6014] ioctl(4, LOOP_CLR_FD [pid 6010] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6014] <... ioctl resumed>) = 0 [pid 6010] <... futex resumed>) = 1 [pid 6009] <... futex resumed>) = 0 [pid 6020] <... munmap resumed>) = 0 [pid 6022] <... futex resumed>) = 1 [ 125.131746][ T5457] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 6014] close(4 [pid 6010] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6009] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6006] <... futex resumed>) = 0 [pid 6003] <... futex resumed>) = 0 [pid 6022] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6020] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6018] <... write resumed>) = 1048576 [pid 6014] <... close resumed>) = 0 [pid 6010] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6009] <... futex resumed>) = 0 [pid 6020] <... openat resumed>) = 4 [pid 6014] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6010] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6009] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6006] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6003] exit_group(0 [pid 6020] ioctl(4, LOOP_SET_FD, 3 [pid 6018] munmap(0x7f5c233f0000, 1048576 [pid 6014] <... futex resumed>) = 1 [pid 6006] <... futex resumed>) = ? [pid 6003] <... exit_group resumed>) = ? [pid 6022] <... futex resumed>) = ? [pid 6018] <... munmap resumed>) = 0 [pid 6011] <... futex resumed>) = 0 [pid 6006] +++ exited with 0 +++ [pid 6018] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6018] ioctl(4, LOOP_SET_FD, 3 [pid 6022] +++ exited with 0 +++ [pid 6020] <... ioctl resumed>) = 0 [pid 6018] <... ioctl resumed>) = 0 [pid 6014] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6011] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6010] <... write resumed>) = 9 [pid 6003] +++ exited with 0 +++ [pid 6018] close(3 [pid 6011] <... futex resumed>) = 0 [pid 6010] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6014] <... open resumed>) = 4 [pid 6011] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6010] <... futex resumed>) = 1 [pid 6009] <... futex resumed>) = 0 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6003, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 6014] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6011] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6010] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6009] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] restart_syscall(<... resuming interrupted clone ...> [pid 6014] <... futex resumed>) = 0 [pid 6011] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6010] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6009] <... futex resumed>) = 0 [pid 4999] <... restart_syscall resumed>) = 0 [pid 6014] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6011] <... futex resumed>) = 0 [pid 6010] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6009] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6018] <... close resumed>) = 0 [pid 6011] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] umount2("./32", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6020] close(3 [pid 6018] mkdir("./file0", 0777 [pid 6010] <... openat resumed>) = 5 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6014] <... write resumed>) = 9 [pid 6010] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6014] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6010] <... futex resumed>) = 1 [pid 6009] <... futex resumed>) = 0 [pid 6014] <... futex resumed>) = 1 [pid 6010] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6009] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... openat resumed>) = 3 [pid 6011] <... futex resumed>) = 0 [pid 6014] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6011] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6010] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6009] <... futex resumed>) = 0 [pid 4999] fstat(3, [pid 6014] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6011] <... futex resumed>) = 0 [pid 6010] open("./bus", O_RDWR [pid 6009] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6014] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6011] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6020] <... close resumed>) = 0 [pid 6018] <... mkdir resumed>) = 0 [pid 6014] <... openat resumed>) = 5 [pid 6010] <... open resumed>) = 6 [pid 4999] getdents64(3, [pid 6020] mkdir("./file0", 0777 [pid 6018] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6020] <... mkdir resumed>) = 0 [pid 6020] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6014] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6010] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 6014] <... futex resumed>) = 1 [pid 6011] <... futex resumed>) = 0 [pid 6010] <... futex resumed>) = 1 [pid 6009] <... futex resumed>) = 0 [pid 6011] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6009] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] umount2("./32/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6014] open("./bus", O_RDWR [pid 6011] <... futex resumed>) = 0 [pid 6010] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6009] <... futex resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6009] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6011] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6014] <... open resumed>) = 6 [pid 4999] lstat("./32/binderfs", [pid 6010] <... mmap resumed>) = 0x20000000 [pid 6014] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6010] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6014] <... futex resumed>) = 1 [pid 6011] <... futex resumed>) = 0 [pid 6010] <... futex resumed>) = 1 [pid 6009] <... futex resumed>) = 0 [pid 4999] unlink("./32/binderfs" [pid 6014] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6011] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6010] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6009] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... unlink resumed>) = 0 [pid 6009] <... futex resumed>) = 0 [pid 6011] <... futex resumed>) = 0 [pid 6014] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6011] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6010] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6009] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6014] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6010] sendfile(4, 5, NULL, 2147483713 [pid 6014] <... mmap resumed>) = 0x20000000 [pid 4995] <... umount2 resumed>) = 0 [pid 4995] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 125.163128][ T5457] EXT4-fs (loop1): This should not happen!! Data will be lost [ 125.163128][ T5457] [ 125.182548][ T6020] loop0: detected capacity change from 0 to 2048 [ 125.185334][ T6018] loop2: detected capacity change from 0 to 2048 [pid 4995] lstat("./32/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4995] openat(AT_FDCWD, "./32/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4995] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] getdents64(4, 0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4995] getdents64(4, 0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4995] close(4) = 0 [pid 4995] rmdir("./32/file0") = 0 [pid 4995] getdents64(3, 0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4995] close(3 [pid 6014] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] <... close resumed>) = 0 [pid 4995] rmdir("./32" [pid 6011] <... futex resumed>) = 0 [pid 6014] <... futex resumed>) = 1 [pid 6014] sendfile(4, 5, NULL, 2147483713 [pid 6011] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6011] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4995] <... rmdir resumed>) = 0 [pid 4995] mkdir("./33", 0777) = 0 [pid 4995] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4995] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4995] close(3) = 0 [pid 4995] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556fb95d0) = 6029 ./strace-static-x86_64: Process 6029 attached [pid 6029] set_robust_list(0x555556fb95e0, 24) = 0 [pid 6029] chdir("./33") = 0 [pid 6029] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6029] setpgid(0, 0) = 0 [pid 6029] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6029] write(3, "1000", 4) = 4 [pid 6029] close(3) = 0 [pid 6029] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6029] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6029] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c2b7f0000 [pid 6029] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6029] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6030], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6030 [pid 6029] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 125.239058][ T11] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 125.259817][ T6014] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 6029] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6030 attached [pid 6009] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6009] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6009] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c234cf000 [pid 6009] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6009] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6031], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6031 [pid 6009] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6009] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6030] set_robust_list(0x7f5c2b8109e0, 24) = 0 [pid 6030] memfd_create("syzkaller", 0 [pid 6020] <... mount resumed>) = 0 [pid 6030] <... memfd_create resumed>) = 3 [pid 6030] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6018] <... mount resumed>) = 0 [pid 6020] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6018] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6011] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6020] <... openat resumed>) = 3 [pid 6030] <... mmap resumed>) = 0x7f5c233f0000 [pid 6020] chdir("./file0" [pid 6018] <... openat resumed>) = 3 [pid 6011] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6031 attached [pid 6020] <... chdir resumed>) = 0 [pid 6018] chdir("./file0" [pid 6011] <... futex resumed>) = 0 [pid 6031] set_robust_list(0x7f5c234ef9e0, 24) = 0 [pid 6031] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6020] ioctl(4, LOOP_CLR_FD [pid 6018] <... chdir resumed>) = 0 [pid 6011] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6020] <... ioctl resumed>) = 0 [pid 6018] ioctl(4, LOOP_CLR_FD [pid 6011] <... mmap resumed>) = 0x7f5c234cf000 [pid 6020] close(4 [pid 6018] <... ioctl resumed>) = 0 [pid 6011] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 6020] <... close resumed>) = 0 [ 125.276592][ T6010] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 6020] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6018] close(4 [pid 6011] <... mprotect resumed>) = 0 [pid 6020] <... futex resumed>) = 1 [pid 6018] <... close resumed>) = 0 [pid 6017] <... futex resumed>) = 0 [pid 6011] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6030] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6020] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6018] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6017] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6032 attached [pid 6032] set_robust_list(0x7f5c234ef9e0, 24) = 0 [pid 6032] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6020] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6018] <... futex resumed>) = 1 [pid 6017] <... futex resumed>) = 0 [pid 6011] <... clone resumed>, parent_tid=[6032], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6032 [pid 6020] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6018] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6017] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6016] <... futex resumed>) = 0 [pid 6011] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6030] <... write resumed>) = 1048576 [pid 6020] <... open resumed>) = 4 [pid 6018] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6016] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6011] <... futex resumed>) = 1 [pid 6009] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6020] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6018] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6016] <... futex resumed>) = 0 [pid 6011] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6020] <... futex resumed>) = 1 [pid 6017] <... futex resumed>) = 0 [pid 6020] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6017] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6020] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6017] <... futex resumed>) = 0 [pid 6020] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6017] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6020] <... write resumed>) = 9 [pid 6020] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6017] <... futex resumed>) = 0 [pid 6020] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6017] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6032] <... futex resumed>) = 0 [pid 6030] munmap(0x7f5c233f0000, 1048576 [pid 6020] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6017] <... futex resumed>) = 0 [pid 4999] <... umount2 resumed>) = 0 [pid 6020] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6017] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6032] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6030] <... munmap resumed>) = 0 [pid 6020] <... openat resumed>) = 5 [pid 6018] <... open resumed>) = 4 [pid 6016] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 125.325075][ T11] EXT4-fs (loop5): This should not happen!! Data will be lost [ 125.325075][ T11] [ 125.358537][ T6010] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 6020] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6018] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6020] <... futex resumed>) = 1 [pid 6018] <... futex resumed>) = 0 [pid 6017] <... futex resumed>) = 0 [pid 6020] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6018] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6017] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6030] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6020] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6017] <... futex resumed>) = 0 [pid 6016] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6011] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6020] open("./bus", O_RDWR [pid 6017] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6030] <... openat resumed>) = 4 [pid 6020] <... open resumed>) = 6 [ 125.371509][ T6010] EXT4-fs (loop3): This should not happen!! Data will be lost [ 125.371509][ T6010] [ 125.378510][ T6014] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 125.382001][ T6010] EXT4-fs (loop3): Total free blocks count 0 [ 125.399655][ T6010] EXT4-fs (loop3): Free/Dirty block details [ 125.405729][ T6010] EXT4-fs (loop3): free_blocks=2415919104 [ 125.411634][ T6010] EXT4-fs (loop3): dirty_blocks=16 [ 125.416930][ T6010] EXT4-fs (loop3): Block reservation details [pid 6030] ioctl(4, LOOP_SET_FD, 3 [pid 6020] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6017] <... futex resumed>) = 0 [pid 6016] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6020] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6017] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6020] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6017] <... futex resumed>) = 0 [pid 6020] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6017] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6031] <... ioctl resumed>) = 0 [pid 6020] <... mmap resumed>) = 0x20000000 [pid 6018] <... futex resumed>) = 0 [pid 6016] <... futex resumed>) = 1 [pid 6010] <... sendfile resumed>) = 63 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6031] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6020] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6018] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 4999] lstat("./32/file0", [pid 6031] <... futex resumed>) = 0 [pid 6020] <... futex resumed>) = 1 [pid 6018] <... write resumed>) = 9 [pid 6017] <... futex resumed>) = 0 [pid 6016] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6010] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6031] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6030] <... ioctl resumed>) = 0 [pid 6020] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6018] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6017] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6009] exit_group(0 [pid 4999] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6031] <... futex resumed>) = ? [pid 6030] close(3 [pid 6020] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6018] <... futex resumed>) = 0 [pid 6017] <... futex resumed>) = 0 [pid 6016] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6009] <... exit_group resumed>) = ? [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6031] +++ exited with 0 +++ [pid 6030] <... close resumed>) = 0 [pid 6020] sendfile(4, 5, NULL, 2147483713 [pid 6018] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6017] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 125.423064][ T6030] loop1: detected capacity change from 0 to 2048 [ 125.423196][ T6010] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 125.436478][ T6014] EXT4-fs (loop4): This should not happen!! Data will be lost [ 125.436478][ T6014] [ 125.446436][ T6014] EXT4-fs (loop4): Total free blocks count 0 [ 125.452483][ T6014] EXT4-fs (loop4): Free/Dirty block details [ 125.458622][ T6014] EXT4-fs (loop4): free_blocks=2415919104 [ 125.464395][ T6014] EXT4-fs (loop4): dirty_blocks=16 [ 125.469846][ T6014] EXT4-fs (loop4): Block reservation details [pid 4999] openat(AT_FDCWD, "./32/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6030] mkdir("./file0", 0777 [pid 6018] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6016] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6010] <... futex resumed>) = ? [pid 4999] <... openat resumed>) = 4 [pid 6030] <... mkdir resumed>) = 0 [pid 6018] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6016] <... futex resumed>) = 0 [pid 6010] +++ exited with 0 +++ [pid 6009] +++ exited with 0 +++ [pid 4999] fstat(4, [pid 6030] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6018] <... openat resumed>) = 5 [pid 6016] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6018] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] getdents64(4, [pid 6018] <... futex resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 6018] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4999] getdents64(4, 0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 6016] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4999] close(4) = 0 [pid 4999] rmdir("./32/file0") = 0 [pid 4999] getdents64(3, 0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./32") = 0 [pid 4999] mkdir("./33", 0777) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6032] <... ioctl resumed>) = 0 [pid 6016] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6014] <... sendfile resumed>) = 63 [pid 4999] <... openat resumed>) = 3 [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6009, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 6032] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 6032] <... futex resumed>) = 0 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [ 125.476124][ T6014] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 125.488446][ T6020] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 6032] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4999] close(3 [pid 6018] <... futex resumed>) = 0 [pid 6017] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6016] <... futex resumed>) = 1 [pid 6014] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... close resumed>) = 0 [pid 4997] umount2("./33", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6018] open("./bus", O_RDWR [pid 6017] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6018] <... open resumed>) = 6 [pid 6017] <... futex resumed>) = 0 [pid 6011] exit_group(0 [pid 6032] <... futex resumed>) = ? [pid 6018] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6017] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6011] <... exit_group resumed>) = ? [pid 4999] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6035 ./strace-static-x86_64: Process 6035 attached [pid 6032] +++ exited with 0 +++ [pid 6030] <... mount resumed>) = 0 [pid 6018] <... futex resumed>) = 0 [pid 6017] <... mmap resumed>) = 0x7f5c234cf000 [pid 6016] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6014] <... futex resumed>) = ? [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6035] set_robust_list(0x555556fb95e0, 24 [pid 6030] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6018] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6017] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 6030] <... openat resumed>) = 3 [pid 6017] <... mprotect resumed>) = 0 [pid 6030] chdir("./file0" [pid 6017] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6030] <... chdir resumed>) = 0 [pid 6016] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6030] ioctl(4, LOOP_CLR_FD [pid 6017] <... clone resumed>, parent_tid=[6036], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6036 [pid 6035] <... set_robust_list resumed>) = 0 [pid 6030] <... ioctl resumed>) = 0 [pid 6017] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6016] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6020] <... sendfile resumed>) = 63 [pid 6014] +++ exited with 0 +++ [pid 6011] +++ exited with 0 +++ [pid 4997] openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 6036 attached [pid 6035] chdir("./33" [pid 6030] close(4 [pid 6020] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6018] <... futex resumed>) = 0 [pid 6017] <... futex resumed>) = 0 [pid 6016] <... futex resumed>) = 1 [pid 4997] <... openat resumed>) = 3 [pid 6036] set_robust_list(0x7f5c234ef9e0, 24 [pid 6035] <... chdir resumed>) = 0 [pid 6030] <... close resumed>) = 0 [pid 6020] <... futex resumed>) = 0 [pid 6018] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6017] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6016] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6011, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 4997] fstat(3, [pid 6036] <... set_robust_list resumed>) = 0 [pid 6035] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6030] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6020] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6018] <... mmap resumed>) = 0x20000000 [pid 4998] restart_syscall(<... resuming interrupted clone ...> [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6036] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6035] <... prctl resumed>) = 0 [pid 6030] <... futex resumed>) = 1 [pid 6029] <... futex resumed>) = 0 [pid 6018] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... restart_syscall resumed>) = 0 [pid 4997] getdents64(3, [pid 6036] <... ioctl resumed>) = 0 [pid 6035] setpgid(0, 0 [pid 6030] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6029] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6018] <... futex resumed>) = 1 [pid 6016] <... futex resumed>) = 0 [ 125.516430][ T6020] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 125.529291][ T6020] EXT4-fs (loop0): This should not happen!! Data will be lost [ 125.529291][ T6020] [ 125.539418][ T6020] EXT4-fs (loop0): Total free blocks count 0 [ 125.545837][ T6020] EXT4-fs (loop0): Free/Dirty block details [ 125.552102][ T6020] EXT4-fs (loop0): free_blocks=2415919104 [ 125.557995][ T6020] EXT4-fs (loop0): dirty_blocks=16 [ 125.563150][ T6020] EXT4-fs (loop0): Block reservation details [ 125.569273][ T6020] EXT4-fs (loop0): i_reserved_data_blocks=1 [pid 4997] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 6036] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6035] <... setpgid resumed>) = 0 [pid 6030] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6029] <... futex resumed>) = 0 [pid 6018] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6016] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] umount2("./33/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6036] <... futex resumed>) = 1 [pid 6035] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6017] <... futex resumed>) = 0 [pid 4998] umount2("./32", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6035] <... openat resumed>) = 3 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./33/binderfs", [pid 6036] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6035] write(3, "1000", 4 [pid 6030] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6029] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6018] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6017] exit_group(0 [pid 6016] <... futex resumed>) = 0 [pid 4998] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6035] <... write resumed>) = 4 [pid 6020] <... futex resumed>) = ? [pid 6018] sendfile(4, 5, NULL, 2147483713 [pid 6017] <... exit_group resumed>) = ? [pid 6016] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] <... openat resumed>) = 3 [pid 4997] unlink("./33/binderfs" [pid 6035] close(3 [pid 6020] +++ exited with 0 +++ [pid 4998] fstat(3, [pid 4997] <... unlink resumed>) = 0 [pid 6035] <... close resumed>) = 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6036] <... futex resumed>) = ? [pid 6035] symlink("/dev/binderfs", "./binderfs" [pid 6030] <... open resumed>) = 4 [pid 4998] getdents64(3, [pid 6035] <... symlink resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 6035] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] umount2("./32/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6035] <... futex resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6035] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4998] lstat("./32/binderfs", [pid 6035] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6035] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 4998] unlink("./32/binderfs" [pid 6035] <... mprotect resumed>) = 0 [pid 4998] <... unlink resumed>) = 0 [pid 6035] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4998] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6035] <... clone resumed>, parent_tid=[6037], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6037 [pid 6035] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6035] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6037 attached [pid 6037] set_robust_list(0x7f5c2b8109e0, 24) = 0 [pid 6037] memfd_create("syzkaller", 0) = 3 [pid 6037] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5c233f0000 [pid 6036] +++ exited with 0 +++ [pid 6030] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6029] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6017] +++ exited with 0 +++ [pid 6016] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6030] <... futex resumed>) = 0 [pid 6029] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6016] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6030] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6016] <... futex resumed>) = 0 [pid 4994] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6017, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6029] <... futex resumed>) = 0 [pid 6029] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6016] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6030] <... write resumed>) = 9 [pid 6016] <... mmap resumed>) = 0x7f5c234cf000 [pid 6030] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6016] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 6030] <... futex resumed>) = 1 [pid 6029] <... futex resumed>) = 0 [pid 6016] <... mprotect resumed>) = 0 [pid 6030] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6029] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6030] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 125.613171][ T5457] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 125.615044][ T6018] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 125.636295][ T5457] EXT4-fs (loop3): This should not happen!! Data will be lost [ 125.636295][ T5457] [ 125.650709][ T74] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 6030] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6029] <... futex resumed>) = 0 [pid 6016] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6030] <... openat resumed>) = 5 [pid 6029] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4994] umount2("./34", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6037] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576./strace-static-x86_64: Process 6038 attached [pid 6038] set_robust_list(0x7f5c234ef9e0, 24) = 0 [pid 6038] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6030] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6029] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6016] <... clone resumed>, parent_tid=[6038], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6038 [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6016] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6030] <... futex resumed>) = 0 [pid 6029] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6030] open("./bus", O_RDWR [pid 6016] <... futex resumed>) = 1 [pid 4994] openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6038] <... futex resumed>) = 0 [pid 6038] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6029] <... futex resumed>) = 0 [pid 6030] <... open resumed>) = 6 [pid 6029] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6016] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4994] <... openat resumed>) = 3 [pid 6030] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] fstat(3, [pid 6030] <... futex resumed>) = 1 [pid 6029] <... futex resumed>) = 0 [pid 6030] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6029] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6037] <... write resumed>) = 1048576 [pid 6037] munmap(0x7f5c233f0000, 1048576 [pid 6030] <... mmap resumed>) = 0x20000000 [pid 6029] <... futex resumed>) = 0 [ 125.671577][ T6018] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 125.677295][ T74] EXT4-fs (loop4): This should not happen!! Data will be lost [ 125.677295][ T74] [ 125.685191][ T6018] EXT4-fs (loop2): This should not happen!! Data will be lost [ 125.685191][ T6018] [ 125.710725][ T6018] EXT4-fs (loop2): Total free blocks count 0 [pid 4994] getdents64(3, [pid 6030] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6029] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4994] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 6030] <... futex resumed>) = 0 [pid 6029] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4994] umount2("./34/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6030] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6029] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6030] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6029] <... futex resumed>) = 0 [pid 6030] sendfile(4, 5, NULL, 2147483713 [pid 4994] lstat("./34/binderfs", [pid 6029] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4994] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6037] <... munmap resumed>) = 0 [pid 6037] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [ 125.721919][ T6018] EXT4-fs (loop2): Free/Dirty block details [ 125.736084][ T6018] EXT4-fs (loop2): free_blocks=2415919104 [ 125.741859][ T6018] EXT4-fs (loop2): dirty_blocks=16 [ 125.750717][ T6030] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 125.761244][ T6037] loop5: detected capacity change from 0 to 2048 [pid 6037] ioctl(4, LOOP_SET_FD, 3 [pid 6016] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4994] unlink("./34/binderfs" [pid 4997] <... umount2 resumed>) = 0 [pid 4994] <... unlink resumed>) = 0 [pid 4997] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] lstat("./33/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./33/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [ 125.768731][ T6018] EXT4-fs (loop2): Block reservation details [ 125.780578][ T6018] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 125.789183][ T6030] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 125.789221][ T5457] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 125.801644][ T6030] EXT4-fs (loop1): This should not happen!! Data will be lost [pid 4997] fstat(4, [pid 6038] <... ioctl resumed>) = 0 [pid 6037] <... ioctl resumed>) = 0 [pid 6018] <... sendfile resumed>) = 63 [pid 6038] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6038] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(4, 0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4997] getdents64(4, 0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4997] close(4) = 0 [pid 4997] rmdir("./33/file0" [pid 6037] close(3) = 0 [pid 6037] mkdir("./file0", 0777 [pid 4997] <... rmdir resumed>) = 0 [pid 6037] <... mkdir resumed>) = 0 [pid 4997] getdents64(3, 0x555556fba620 /* 0 entries */, 32768) = 0 [pid 6018] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6016] exit_group(0 [pid 6029] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6038] <... futex resumed>) = ? [pid 6029] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6018] <... futex resumed>) = ? [pid 6016] <... exit_group resumed>) = ? [pid 4998] <... umount2 resumed>) = 0 [pid 4997] close(3 [pid 6037] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 4997] <... close resumed>) = 0 [pid 4997] rmdir("./33" [pid 6038] +++ exited with 0 +++ [pid 6029] <... futex resumed>) = 0 [pid 6018] +++ exited with 0 +++ [pid 4997] <... rmdir resumed>) = 0 [pid 6016] +++ exited with 0 +++ [pid 4998] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6016, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 4996] umount2("./34", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6029] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4996] openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4996] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] getdents64(3, 0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4996] umount2("./34/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] lstat("./34/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] mkdir("./34", 0777 [pid 4996] unlink("./34/binderfs" [pid 6029] <... mmap resumed>) = 0x7f5c234cf000 [pid 4998] lstat("./32/file0", [pid 4997] <... mkdir resumed>) = 0 [pid 4996] <... unlink resumed>) = 0 [pid 4997] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4996] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... openat resumed>) = 3 [pid 4997] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4997] close(3) = 0 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556fb95d0) = 6039 [ 125.801644][ T6030] [ 125.833173][ T6030] EXT4-fs (loop1): Total free blocks count 0 [ 125.848240][ T6030] EXT4-fs (loop1): Free/Dirty block details [ 125.854244][ T6030] EXT4-fs (loop1): free_blocks=2415919104 ./strace-static-x86_64: Process 6039 attached [pid 6029] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6039] set_robust_list(0x555556fb95e0, 24 [pid 6029] <... mprotect resumed>) = 0 [pid 4998] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6039] <... set_robust_list resumed>) = 0 [pid 6029] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4998] openat(AT_FDCWD, "./32/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6039] chdir("./34" [pid 4998] <... openat resumed>) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6039] <... chdir resumed>) = 0 [pid 6029] <... clone resumed>, parent_tid=[6042], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6042 [pid 4998] getdents64(4, [pid 6039] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6029] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6042 attached [pid 6039] <... prctl resumed>) = 0 [pid 6029] <... futex resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 6042] set_robust_list(0x7f5c234ef9e0, 24 [pid 6039] setpgid(0, 0 [pid 6029] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] getdents64(4, 0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 6042] <... set_robust_list resumed>) = 0 [pid 6042] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 4998] close(4 [pid 6039] <... setpgid resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 6037] <... mount resumed>) = 0 [pid 4998] rmdir("./32/file0" [pid 6039] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4998] <... rmdir resumed>) = 0 [pid 4998] getdents64(3, 0x555556fba620 /* 0 entries */, 32768) = 0 [pid 6039] write(3, "1000", 4) = 4 [pid 4998] close(3 [pid 6039] close(3 [pid 4998] <... close resumed>) = 0 [pid 6039] <... close resumed>) = 0 [pid 4998] rmdir("./32" [pid 6039] symlink("/dev/binderfs", "./binderfs" [pid 6037] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 4998] <... rmdir resumed>) = 0 [pid 6039] <... symlink resumed>) = 0 [pid 6037] <... openat resumed>) = 3 [ 125.860998][ T5608] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 125.861409][ T6030] EXT4-fs (loop1): dirty_blocks=16 [ 125.882113][ T6030] EXT4-fs (loop1): Block reservation details [ 125.893939][ T5608] EXT4-fs (loop2): This should not happen!! Data will be lost [ 125.893939][ T5608] [ 125.894136][ T6030] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 125.914356][ T5457] EXT4-fs (loop0): This should not happen!! Data will be lost [pid 4998] mkdir("./33", 0777 [pid 6042] <... ioctl resumed>) = 0 [pid 6039] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6037] chdir("./file0" [pid 6030] <... sendfile resumed>) = 63 [pid 4998] <... mkdir resumed>) = 0 [pid 6030] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6030] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6042] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6039] <... futex resumed>) = 0 [pid 6037] <... chdir resumed>) = 0 [pid 6042] <... futex resumed>) = 1 [pid 6039] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6037] ioctl(4, LOOP_CLR_FD [pid 6029] <... futex resumed>) = 0 [pid 6042] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6029] exit_group(0 [pid 6039] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6042] <... futex resumed>) = ? [pid 6029] <... exit_group resumed>) = ? [pid 6037] <... ioctl resumed>) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6042] +++ exited with 0 +++ [pid 4998] <... openat resumed>) = 3 [pid 6039] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6037] close(4 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556fb95d0) = 6043 [pid 6039] <... mprotect resumed>) = 0 [pid 6037] <... close resumed>) = 0 [pid 6037] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6030] <... futex resumed>) = ? [pid 6039] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6037] <... futex resumed>) = 1 [pid 6035] <... futex resumed>) = 0 [pid 6030] +++ exited with 0 +++ [pid 6029] +++ exited with 0 +++ [pid 6035] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6029, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 6037] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6035] <... futex resumed>) = 0 [pid 6035] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6043 attached [pid 6039] <... clone resumed>, parent_tid=[6044], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6044 [pid 6039] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6043] set_robust_list(0x555556fb95e0, 24 [pid 4995] umount2("./33", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6039] <... futex resumed>) = 0 [pid 6037] <... open resumed>) = 4 [pid 6037] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6039] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4995] openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4995] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] getdents64(3, 0x555556fba620 /* 4 entries */, 32768) = 112 [pid 6037] <... futex resumed>) = 1 [pid 6035] <... futex resumed>) = 0 [pid 4995] umount2("./33/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6037] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6035] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6043] <... set_robust_list resumed>) = 0 [pid 6037] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6035] <... futex resumed>) = 0 [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6043] chdir("./33" [pid 6037] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6035] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4995] lstat("./33/binderfs", [pid 6043] <... chdir resumed>) = 0 [pid 6037] <... write resumed>) = 9 [pid 6043] prctl(PR_SET_PDEATHSIG, SIGKILL [ 125.914356][ T5457] [pid 6037] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6043] <... prctl resumed>) = 0 [pid 6037] <... futex resumed>) = 1 [pid 6035] <... futex resumed>) = 0 [pid 4995] unlink("./33/binderfs" [pid 6043] setpgid(0, 0 [pid 6037] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6035] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6043] <... setpgid resumed>) = 0 [pid 6035] <... futex resumed>) = 0 [pid 4995] <... unlink resumed>) = 0 [pid 6037] <... openat resumed>) = 5 ./strace-static-x86_64: Process 6044 attached [pid 6043] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6037] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6035] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4995] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6044] set_robust_list(0x7f5c2b8109e0, 24 [pid 6043] <... openat resumed>) = 3 [pid 6037] <... futex resumed>) = 0 [pid 6035] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6043] write(3, "1000", 4 [pid 6035] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6043] <... write resumed>) = 4 [pid 6037] open("./bus", O_RDWR [pid 6035] <... futex resumed>) = 0 [pid 6043] close(3 [pid 6035] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6043] <... close resumed>) = 0 [pid 6043] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6043] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6043] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c2b7f0000 [pid 6043] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6043] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6045], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6045 [pid 6043] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6043] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6044] <... set_robust_list resumed>) = 0 [pid 6037] <... open resumed>) = 6 [pid 6037] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6035] <... futex resumed>) = 0 [pid 6044] memfd_create("syzkaller", 0 [pid 6037] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6035] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6045 attached [pid 6044] <... memfd_create resumed>) = 3 [pid 6037] <... mmap resumed>) = 0x20000000 [pid 6035] <... futex resumed>) = 0 [pid 4996] <... umount2 resumed>) = 0 [pid 4994] <... umount2 resumed>) = 0 [pid 6045] set_robust_list(0x7f5c2b8109e0, 24 [pid 6044] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6037] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6035] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4996] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6045] <... set_robust_list resumed>) = 0 [pid 6044] <... mmap resumed>) = 0x7f5c233f0000 [pid 6037] <... futex resumed>) = 0 [pid 6035] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6045] memfd_create("syzkaller", 0 [pid 6044] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [ 125.971577][ T5608] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 125.992396][ T5608] EXT4-fs (loop1): This should not happen!! Data will be lost [ 125.992396][ T5608] [pid 6037] sendfile(4, 5, NULL, 2147483713 [pid 6035] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] lstat("./34/file0", [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6045] <... memfd_create resumed>) = 3 [pid 6044] <... write resumed>) = 1048576 [pid 6035] <... futex resumed>) = 0 [pid 4996] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] <... umount2 resumed>) = 0 [pid 4994] lstat("./34/file0", [pid 6045] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4996] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6045] <... mmap resumed>) = 0x7f5c233f0000 [ 126.026163][ T6037] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 126.047674][ T6037] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 126.061239][ T6037] EXT4-fs (loop5): This should not happen!! Data will be lost [ 126.061239][ T6037] [pid 6044] munmap(0x7f5c233f0000, 1048576 [pid 6035] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] openat(AT_FDCWD, "./34/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4995] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4996] <... openat resumed>) = 4 [pid 4994] openat(AT_FDCWD, "./34/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4996] fstat(4, [pid 4994] <... openat resumed>) = 4 [pid 6044] <... munmap resumed>) = 0 [pid 4996] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] fstat(4, [pid 4996] getdents64(4, [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4994] getdents64(4, [pid 4996] getdents64(4, [pid 4994] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4996] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4994] getdents64(4, [pid 6045] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6044] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4996] close(4 [pid 4995] lstat("./33/file0", [pid 4994] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4996] <... close resumed>) = 0 [pid 4994] close(4 [pid 4996] rmdir("./34/file0" [pid 4994] <... close resumed>) = 0 [pid 6044] <... openat resumed>) = 4 [pid 4996] <... rmdir resumed>) = 0 [pid 4995] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] rmdir("./34/file0" [pid 6044] ioctl(4, LOOP_SET_FD, 3 [pid 4996] getdents64(3, [pid 4995] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6044] <... ioctl resumed>) = 0 [pid 6037] <... sendfile resumed>) = 63 [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6044] close(3 [pid 6037] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] openat(AT_FDCWD, "./33/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6044] <... close resumed>) = 0 [pid 6037] <... futex resumed>) = 1 [pid 4995] <... openat resumed>) = 4 [pid 6035] <... futex resumed>) = 0 [pid 6044] mkdir("./file0", 0777 [pid 6037] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6035] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4995] fstat(4, [pid 4994] <... rmdir resumed>) = 0 [pid 4996] close(3 [pid 4994] getdents64(3, [pid 4996] <... close resumed>) = 0 [pid 4994] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 6044] <... mkdir resumed>) = 0 [pid 6037] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6035] <... futex resumed>) = 0 [pid 4996] rmdir("./34" [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] close(3 [pid 6044] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6037] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6035] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4996] <... rmdir resumed>) = 0 [pid 4994] <... close resumed>) = 0 [pid 6037] <... ioctl resumed>) = 0 [pid 4996] mkdir("./35", 0777 [pid 4995] getdents64(4, [pid 4994] rmdir("./34" [pid 6045] <... write resumed>) = 1048576 [pid 6037] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... mkdir resumed>) = 0 [pid 4995] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4994] <... rmdir resumed>) = 0 [pid 6045] munmap(0x7f5c233f0000, 1048576 [pid 6037] <... futex resumed>) = 1 [pid 6035] <... futex resumed>) = 0 [pid 4996] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4994] mkdir("./35", 0777 [pid 6045] <... munmap resumed>) = 0 [pid 6037] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6035] exit_group(0 [pid 4996] <... openat resumed>) = 3 [pid 4995] getdents64(4, [pid 4994] <... mkdir resumed>) = 0 [pid 6045] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6037] <... futex resumed>) = ? [pid 6035] <... exit_group resumed>) = ? [pid 4996] ioctl(3, LOOP_CLR_FD [pid 4995] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4994] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6045] <... openat resumed>) = 4 [pid 6037] +++ exited with 0 +++ [pid 4996] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4994] <... openat resumed>) = 3 [pid 4996] close(3 [ 126.071099][ T6037] EXT4-fs (loop5): Total free blocks count 0 [ 126.077759][ T6037] EXT4-fs (loop5): Free/Dirty block details [ 126.083707][ T6037] EXT4-fs (loop5): free_blocks=2415919104 [ 126.091550][ T6037] EXT4-fs (loop5): dirty_blocks=16 [ 126.098016][ T6037] EXT4-fs (loop5): Block reservation details [ 126.104860][ T6037] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 126.111622][ T6044] loop3: detected capacity change from 0 to 2048 [pid 4994] ioctl(3, LOOP_CLR_FD [pid 6045] ioctl(4, LOOP_SET_FD, 3 [pid 6035] +++ exited with 0 +++ [pid 4996] <... close resumed>) = 0 [pid 4995] close(4 [pid 6044] <... mount resumed>) = 0 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6035, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 4996] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4995] <... close resumed>) = 0 [pid 4994] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6045] <... ioctl resumed>) = 0 [pid 6044] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 4995] rmdir("./33/file0" [pid 6045] close(3 [pid 6044] <... openat resumed>) = 3 [pid 4995] <... rmdir resumed>) = 0 [pid 4994] close(3 [pid 6045] <... close resumed>) = 0 [pid 6044] chdir("./file0" [pid 4999] umount2("./33", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6048 [pid 4995] getdents64(3, ./strace-static-x86_64: Process 6048 attached [pid 6045] mkdir("./file0", 0777 [pid 6044] <... chdir resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4994] <... close resumed>) = 0 [pid 6048] set_robust_list(0x555556fb95e0, 24 [pid 6045] <... mkdir resumed>) = 0 [pid 6044] ioctl(4, LOOP_CLR_FD [pid 4999] openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4995] close(3 [pid 4994] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6048] <... set_robust_list resumed>) = 0 [pid 6045] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6044] <... ioctl resumed>) = 0 [pid 4999] <... openat resumed>) = 3 [pid 4995] <... close resumed>) = 0 [pid 4995] rmdir("./33" [pid 6048] chdir("./35" [pid 6044] close(4 [pid 4999] fstat(3, [pid 4995] <... rmdir resumed>) = 0 [pid 4994] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6049 [pid 6048] <... chdir resumed>) = 0 [pid 6044] <... close resumed>) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] mkdir("./34", 0777 [pid 6048] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6044] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] getdents64(3, [pid 4995] <... mkdir resumed>) = 0 [pid 6048] <... prctl resumed>) = 0 [pid 6044] <... futex resumed>) = 1 [pid 6039] <... futex resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4995] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6048] setpgid(0, 0 [pid 6044] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6039] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] umount2("./33/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] <... openat resumed>) = 3 [pid 6048] <... setpgid resumed>) = 0 [pid 6039] <... futex resumed>) = 0 [pid 4995] ioctl(3, LOOP_CLR_FD [pid 6039] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4995] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] close(3 [pid 6048] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4999] lstat("./33/binderfs", [pid 4995] <... close resumed>) = 0 [pid 4995] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6048] <... openat resumed>) = 3 [pid 6044] <... open resumed>) = 4 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [ 126.159685][ T6045] loop4: detected capacity change from 0 to 2048 [pid 6048] write(3, "1000", 4 [pid 6044] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] unlink("./33/binderfs" [pid 4995] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6051 ./strace-static-x86_64: Process 6049 attached [pid 6048] <... write resumed>) = 4 [pid 6044] <... futex resumed>) = 1 [pid 6039] <... futex resumed>) = 0 [pid 4999] <... unlink resumed>) = 0 [pid 6049] set_robust_list(0x555556fb95e0, 24 [pid 6048] close(3 [pid 6044] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6039] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6049] <... set_robust_list resumed>) = 0 [pid 6048] <... close resumed>) = 0 [pid 6044] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6039] <... futex resumed>) = 0 [pid 6049] chdir("./35" [pid 6048] symlink("/dev/binderfs", "./binderfs" [pid 6044] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6039] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6049] <... chdir resumed>) = 0 [pid 6049] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6049] setpgid(0, 0) = 0 [pid 6049] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6049] write(3, "1000", 4) = 4 [pid 6049] close(3) = 0 [pid 6049] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6049] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6049] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c2b7f0000 [pid 6049] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6049] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6053], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6053 [pid 6049] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6049] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6048] <... symlink resumed>) = 0 [pid 6044] <... write resumed>) = 9 [pid 6048] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6044] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6048] <... futex resumed>) = 0 [pid 6044] <... futex resumed>) = 1 [pid 6039] <... futex resumed>) = 0 [pid 6048] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6044] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6039] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6048] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6044] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6039] <... futex resumed>) = 0 [pid 6048] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6044] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6039] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6048] <... mprotect resumed>) = 0 [pid 6044] <... openat resumed>) = 5 [pid 6048] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6044] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6045] <... mount resumed>) = 0 [pid 6045] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6044] <... futex resumed>) = 1 [pid 6039] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6054 attached ./strace-static-x86_64: Process 6051 attached [pid 6048] <... clone resumed>, parent_tid=[6054], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6054 [pid 6045] <... openat resumed>) = 3 [pid 6044] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6039] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6054] set_robust_list(0x7f5c2b8109e0, 24 [pid 6051] set_robust_list(0x555556fb95e0, 24 [pid 6048] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6045] chdir("./file0" [pid 6044] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6039] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6053 attached [pid 6054] <... set_robust_list resumed>) = 0 [pid 6051] <... set_robust_list resumed>) = 0 [pid 6048] <... futex resumed>) = 0 [pid 6045] <... chdir resumed>) = 0 [pid 6044] open("./bus", O_RDWR [pid 6039] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6054] memfd_create("syzkaller", 0 [pid 6053] set_robust_list(0x7f5c2b8109e0, 24 [pid 6051] chdir("./34" [pid 6048] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6045] ioctl(4, LOOP_CLR_FD [pid 6044] <... open resumed>) = 6 [pid 6054] <... memfd_create resumed>) = 3 [pid 6053] <... set_robust_list resumed>) = 0 [pid 6051] <... chdir resumed>) = 0 [ 126.202170][ T11] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 6045] <... ioctl resumed>) = 0 [pid 6044] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6054] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6053] memfd_create("syzkaller", 0 [pid 6051] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6045] close(4 [pid 6044] <... futex resumed>) = 1 [pid 6039] <... futex resumed>) = 0 [pid 6054] <... mmap resumed>) = 0x7f5c233f0000 [pid 6053] <... memfd_create resumed>) = 3 [pid 6051] <... prctl resumed>) = 0 [pid 6045] <... close resumed>) = 0 [pid 6044] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6039] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6053] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6051] setpgid(0, 0 [pid 6045] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6044] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6039] <... futex resumed>) = 0 [pid 6053] <... mmap resumed>) = 0x7f5c233f0000 [pid 6051] <... setpgid resumed>) = 0 [pid 6045] <... futex resumed>) = 1 [pid 6044] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6043] <... futex resumed>) = 0 [pid 6039] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6054] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6053] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6051] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6045] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6044] <... mmap resumed>) = 0x20000000 [pid 6043] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6051] <... openat resumed>) = 3 [pid 6045] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6044] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6043] <... futex resumed>) = 0 [pid 6051] write(3, "1000", 4 [pid 6045] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6044] <... futex resumed>) = 1 [pid 6043] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6039] <... futex resumed>) = 0 [pid 6051] <... write resumed>) = 4 [pid 6045] <... open resumed>) = 4 [pid 6044] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6039] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6051] close(3 [pid 6045] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6044] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6039] <... futex resumed>) = 0 [pid 6051] <... close resumed>) = 0 [pid 6045] <... futex resumed>) = 1 [pid 6044] sendfile(4, 5, NULL, 2147483713 [pid 6043] <... futex resumed>) = 0 [pid 6039] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 126.245942][ T11] EXT4-fs (loop5): This should not happen!! Data will be lost [ 126.245942][ T11] [pid 6043] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6054] <... write resumed>) = 1048576 [pid 6051] symlink("/dev/binderfs", "./binderfs" [pid 6045] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6043] <... futex resumed>) = 0 [pid 6053] <... write resumed>) = 1048576 [pid 6043] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6054] munmap(0x7f5c233f0000, 1048576 [pid 6053] munmap(0x7f5c233f0000, 1048576 [pid 6054] <... munmap resumed>) = 0 [pid 6051] <... symlink resumed>) = 0 [pid 6045] <... write resumed>) = 9 [pid 6054] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6053] <... munmap resumed>) = 0 [pid 6054] ioctl(4, LOOP_SET_FD, 3 [pid 6051] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6045] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6053] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6051] <... futex resumed>) = 0 [pid 6045] <... futex resumed>) = 1 [pid 6043] <... futex resumed>) = 0 [pid 6053] <... openat resumed>) = 4 [pid 6051] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6045] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6043] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6053] ioctl(4, LOOP_SET_FD, 3 [pid 6051] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6045] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6043] <... futex resumed>) = 0 [pid 6054] <... ioctl resumed>) = 0 [pid 6051] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6045] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6043] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6054] close(3) = 0 [pid 6054] mkdir("./file0", 0777 [pid 6051] <... mprotect resumed>) = 0 [pid 6045] <... openat resumed>) = 5 [pid 6054] <... mkdir resumed>) = 0 [pid 6051] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6054] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6045] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6039] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6039] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6039] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c234cf000 [pid 6039] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6039] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6056], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6056 [pid 6039] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6039] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6053] <... ioctl resumed>) = 0 [pid 6053] close(3) = 0 [pid 6053] mkdir("./file0", 0777) = 0 [ 126.299981][ T6044] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 126.321503][ T6054] loop2: detected capacity change from 0 to 2048 [ 126.332508][ T6053] loop0: detected capacity change from 0 to 2048 [pid 6053] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6051] <... clone resumed>, parent_tid=[6055], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6055 [pid 6045] <... futex resumed>) = 1 [pid 6043] <... futex resumed>) = 0 [pid 4999] <... umount2 resumed>) = 0 [pid 6051] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6045] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6043] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6051] <... futex resumed>) = 0 [pid 6045] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6043] <... futex resumed>) = 0 [pid 6051] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6045] open("./bus", O_RDWR [pid 6043] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6045] <... open resumed>) = 6 [pid 6045] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6043] <... futex resumed>) = 0 [pid 6045] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6043] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6045] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6043] <... futex resumed>) = 0 [pid 6045] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6043] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6045] <... mmap resumed>) = 0x20000000 ./strace-static-x86_64: Process 6055 attached [pid 6045] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6043] <... futex resumed>) = 0 [pid 6045] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6043] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6045] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6043] <... futex resumed>) = 0 [pid 6045] sendfile(4, 5, NULL, 2147483713 [pid 6043] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6055] set_robust_list(0x7f5c2b8109e0, 24 [ 126.357865][ T6044] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 126.373097][ T6044] EXT4-fs (loop3): This should not happen!! Data will be lost [ 126.373097][ T6044] [ 126.392668][ T6045] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 4999] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6055] <... set_robust_list resumed>) = 0 [pid 6055] memfd_create("syzkaller", 0 [pid 6039] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6055] <... memfd_create resumed>) = 3 [pid 6055] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4999] lstat("./33/file0", [pid 6055] <... mmap resumed>) = 0x7f5c233f0000 [pid 6054] <... mount resumed>) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 6056 attached [pid 4999] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./33/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 6054] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 4999] close(4 [pid 6056] set_robust_list(0x7f5c234ef9e0, 24 [pid 4999] <... close resumed>) = 0 [pid 4999] rmdir("./33/file0" [pid 6056] <... set_robust_list resumed>) = 0 [pid 6054] <... openat resumed>) = 3 [pid 4999] <... rmdir resumed>) = 0 [pid 4999] getdents64(3, 0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./33") = 0 [pid 4999] mkdir("./34", 0777) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6056] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6054] chdir("./file0" [pid 4999] <... openat resumed>) = 3 [pid 6054] <... chdir resumed>) = 0 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 6054] ioctl(4, LOOP_CLR_FD [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6054] <... ioctl resumed>) = 0 [pid 4999] close(3 [pid 6054] close(4 [pid 4999] <... close resumed>) = 0 [pid 6054] <... close resumed>) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6054] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6048] <... futex resumed>) = 0 [pid 4999] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6059 [pid 6054] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6048] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6054] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6048] <... futex resumed>) = 0 [pid 6054] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6048] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6054] <... open resumed>) = 4 [pid 6054] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6048] <... futex resumed>) = 0 [pid 6054] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6048] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6054] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6048] <... futex resumed>) = 0 [pid 6054] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6048] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6053] <... mount resumed>) = 0 [pid 6054] <... write resumed>) = 9 [pid 6053] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6054] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6053] <... openat resumed>) = 3 [pid 6054] <... futex resumed>) = 1 [pid 6053] chdir("./file0" [pid 6048] <... futex resumed>) = 0 [pid 6054] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6053] <... chdir resumed>) = 0 [pid 6048] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6054] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6053] ioctl(4, LOOP_CLR_FD [pid 6048] <... futex resumed>) = 0 [pid 6055] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6054] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6053] <... ioctl resumed>) = 0 [pid 6048] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6043] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6054] <... openat resumed>) = 5 [pid 6053] close(4 [pid 6043] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6054] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6053] <... close resumed>) = 0 [pid 6043] <... futex resumed>) = 0 [pid 6054] <... futex resumed>) = 1 [pid 6053] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6048] <... futex resumed>) = 0 [pid 6043] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6054] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6053] <... futex resumed>) = 1 [pid 6049] <... futex resumed>) = 0 [pid 6048] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6043] <... mmap resumed>) = 0x7f5c234cf000 [ 126.392763][ T6044] EXT4-fs (loop3): Total free blocks count 0 [ 126.418829][ T6044] EXT4-fs (loop3): Free/Dirty block details [ 126.424853][ T6044] EXT4-fs (loop3): free_blocks=2415919104 [ 126.433129][ T6044] EXT4-fs (loop3): dirty_blocks=16 [pid 6055] <... write resumed>) = 1048576 [pid 6054] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6053] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6049] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6048] <... futex resumed>) = 0 [pid 6043] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 6059 attached [pid 6054] open("./bus", O_RDWR [pid 6053] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6049] <... futex resumed>) = 0 [ 126.466014][ T6045] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 126.478006][ T6044] EXT4-fs (loop3): Block reservation details [ 126.479245][ T6045] EXT4-fs (loop4): This should not happen!! Data will be lost [ 126.479245][ T6045] [ 126.484915][ T6044] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 126.494465][ T6045] EXT4-fs (loop4): Total free blocks count 0 [ 126.506149][ T6045] EXT4-fs (loop4): Free/Dirty block details [pid 6048] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6059] set_robust_list(0x555556fb95e0, 24 [pid 6054] <... open resumed>) = 6 [pid 6053] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6049] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6043] <... mprotect resumed>) = 0 [pid 6059] <... set_robust_list resumed>) = 0 [pid 6054] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6053] <... open resumed>) = 4 [pid 6059] chdir("./34" [pid 6054] <... futex resumed>) = 1 [pid 6053] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6048] <... futex resumed>) = 0 [pid 6059] <... chdir resumed>) = 0 [pid 6054] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6053] <... futex resumed>) = 1 [pid 6049] <... futex resumed>) = 0 [pid 6048] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6059] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6054] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6053] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6049] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6048] <... futex resumed>) = 0 [pid 6059] <... prctl resumed>) = 0 [pid 6054] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6053] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6049] <... futex resumed>) = 0 [pid 6048] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6059] setpgid(0, 0 [pid 6054] <... mmap resumed>) = 0x20000000 [pid 6053] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6049] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6059] <... setpgid resumed>) = 0 [pid 6054] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6053] <... write resumed>) = 9 [pid 6043] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6059] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6054] <... futex resumed>) = 1 [pid 6053] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6048] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6062 attached [pid 6059] <... openat resumed>) = 3 [pid 6054] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6053] <... futex resumed>) = 1 [pid 6049] <... futex resumed>) = 0 [pid 6048] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6059] write(3, "1000", 4 [pid 6054] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6053] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6049] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6048] <... futex resumed>) = 0 [pid 6059] <... write resumed>) = 4 [pid 6055] munmap(0x7f5c233f0000, 1048576 [pid 6054] sendfile(4, 5, NULL, 2147483713 [pid 6053] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6049] <... futex resumed>) = 0 [pid 6048] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6059] close(3 [pid 6055] <... munmap resumed>) = 0 [pid 6053] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6049] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6059] <... close resumed>) = 0 [pid 6055] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6053] <... openat resumed>) = 5 [pid 6059] symlink("/dev/binderfs", "./binderfs" [pid 6055] <... openat resumed>) = 4 [pid 6053] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6062] set_robust_list(0x7f5c234ef9e0, 24 [pid 6059] <... symlink resumed>) = 0 [pid 6056] <... ioctl resumed>) = 0 [pid 6045] <... sendfile resumed>) = 63 [pid 6044] <... sendfile resumed>) = 63 [pid 6043] <... clone resumed>, parent_tid=[6062], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6062 [pid 6062] <... set_robust_list resumed>) = 0 [pid 6056] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6045] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6044] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6043] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6039] exit_group(0 [pid 6062] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6059] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6056] <... futex resumed>) = ? [pid 6053] <... futex resumed>) = 1 [pid 6049] <... futex resumed>) = 0 [pid 6045] <... futex resumed>) = 0 [pid 6044] <... futex resumed>) = ? [pid 6043] <... futex resumed>) = 0 [pid 6039] <... exit_group resumed>) = ? [pid 6062] <... ioctl resumed>) = 0 [pid 6059] <... futex resumed>) = 0 [pid 6056] +++ exited with 0 +++ [pid 6053] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6049] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6045] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6044] +++ exited with 0 +++ [pid 6043] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6039] +++ exited with 0 +++ [pid 6062] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6059] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6053] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6049] <... futex resumed>) = 0 [pid 6043] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6055] ioctl(4, LOOP_SET_FD, 3 [pid 6062] <... futex resumed>) = 0 [pid 6059] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6053] open("./bus", O_RDWR [pid 6049] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 126.512096][ T6045] EXT4-fs (loop4): free_blocks=2415919104 [ 126.526220][ T6045] EXT4-fs (loop4): dirty_blocks=16 [ 126.531544][ T6045] EXT4-fs (loop4): Block reservation details [ 126.540305][ T6045] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 126.550855][ T6054] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 6043] exit_group(0 [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6039, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 6045] <... futex resumed>) = ? [pid 6043] <... exit_group resumed>) = ? [pid 6062] +++ exited with 0 +++ [pid 6045] +++ exited with 0 +++ [pid 6043] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6043, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 4998] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 6059] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6053] <... open resumed>) = 6 [pid 4997] restart_syscall(<... resuming interrupted clone ...> [pid 6059] <... mprotect resumed>) = 0 [pid 6053] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6048] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4997] <... restart_syscall resumed>) = 0 [pid 6059] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6053] <... futex resumed>) = 1 [pid 6049] <... futex resumed>) = 0 [pid 6048] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] umount2("./33", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6055] <... ioctl resumed>) = 0 [pid 6053] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6049] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6048] <... futex resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6059] <... clone resumed>, parent_tid=[6063], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6063 [pid 6055] close(3 [pid 6053] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6049] <... futex resumed>) = 0 [pid 6048] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4998] openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 6063 attached [pid 6059] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6055] <... close resumed>) = 0 [pid 6053] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6049] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6048] <... mmap resumed>) = 0x7f5c234cf000 [pid 4998] <... openat resumed>) = 3 [pid 4997] umount2("./34", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6063] set_robust_list(0x7f5c2b8109e0, 24 [pid 6059] <... futex resumed>) = 0 [pid 4998] fstat(3, [pid 6063] <... set_robust_list resumed>) = 0 [pid 6059] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6055] mkdir("./file0", 0777 [pid 6053] <... mmap resumed>) = 0x20000000 [pid 6048] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6063] memfd_create("syzkaller", 0 [pid 6053] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6048] <... mprotect resumed>) = 0 [pid 4998] getdents64(3, [pid 6063] <... memfd_create resumed>) = 3 [pid 6055] <... mkdir resumed>) = 0 [pid 6053] <... futex resumed>) = 1 [pid 6049] <... futex resumed>) = 0 [pid 6048] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4998] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4997] openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6063] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6055] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6053] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6049] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] umount2("./33/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... openat resumed>) = 3 [pid 6063] <... mmap resumed>) = 0x7f5c233f0000 [pid 6053] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6049] <... futex resumed>) = 0 [pid 6048] <... clone resumed>, parent_tid=[6064], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6064 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] fstat(3, ./strace-static-x86_64: Process 6064 attached [pid 6063] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6053] sendfile(4, 5, NULL, 2147483713 [pid 6049] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6048] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] lstat("./33/binderfs", [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6064] set_robust_list(0x7f5c234ef9e0, 24 [pid 6048] <... futex resumed>) = 0 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] getdents64(3, [pid 6064] <... set_robust_list resumed>) = 0 [pid 6048] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] unlink("./33/binderfs" [pid 6064] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 4998] <... unlink resumed>) = 0 [pid 4997] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW [ 126.586069][ T6055] loop1: detected capacity change from 0 to 2048 [pid 4997] umount2("./34/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./34/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] unlink("./34/binderfs") = 0 [pid 6055] <... mount resumed>) = 0 [pid 4997] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6063] <... write resumed>) = 1048576 [pid 6063] munmap(0x7f5c233f0000, 1048576) = 0 [ 126.630478][ T6053] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 126.649933][ T6053] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 126.661044][ T6054] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 6063] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6063] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6055] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6049] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6048] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6055] <... openat resumed>) = 3 [pid 6049] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6055] chdir("./file0" [pid 6049] <... futex resumed>) = 0 [pid 6055] <... chdir resumed>) = 0 [pid 6049] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6055] ioctl(4, LOOP_CLR_FD [pid 6049] <... mmap resumed>) = 0x7f5c234cf000 [pid 6055] <... ioctl resumed>) = 0 [pid 6049] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 6055] close(4 [pid 6049] <... mprotect resumed>) = 0 [ 126.662695][ T74] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 126.686315][ T6063] loop5: detected capacity change from 0 to 2048 [ 126.688352][ T5608] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 126.693010][ T6053] EXT4-fs (loop0): This should not happen!! Data will be lost [ 126.693010][ T6053] [ 126.715978][ T74] EXT4-fs (loop4): This should not happen!! Data will be lost [ 126.715978][ T74] [pid 6063] close(3 [pid 6055] <... close resumed>) = 0 [pid 6049] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6063] <... close resumed>) = 0 [pid 6055] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6063] mkdir("./file0", 0777 [pid 6055] <... futex resumed>) = 1 [pid 6051] <... futex resumed>) = 0 [pid 6049] <... clone resumed>, parent_tid=[6067], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6067 [pid 6063] <... mkdir resumed>) = 0 [pid 6055] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6051] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6049] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6063] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6055] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6051] <... futex resumed>) = 0 [pid 6049] <... futex resumed>) = 0 [pid 6055] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6051] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6049] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6067 attached [pid 6055] <... open resumed>) = 4 [pid 6067] set_robust_list(0x7f5c234ef9e0, 24 [pid 6055] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6067] <... set_robust_list resumed>) = 0 [pid 6055] <... futex resumed>) = 1 [pid 6051] <... futex resumed>) = 0 [pid 6067] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6055] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6051] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6055] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6051] <... futex resumed>) = 0 [pid 6055] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6051] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6055] <... write resumed>) = 9 [pid 6055] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6051] <... futex resumed>) = 0 [pid 6055] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6051] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6055] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6051] <... futex resumed>) = 0 [pid 6055] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6051] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6055] <... openat resumed>) = 5 [pid 6055] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6051] <... futex resumed>) = 0 [pid 6055] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6051] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6055] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 126.727317][ T6054] EXT4-fs (loop2): This should not happen!! Data will be lost [ 126.727317][ T6054] [ 126.738034][ T6054] EXT4-fs (loop2): Total free blocks count 0 [ 126.744078][ T6054] EXT4-fs (loop2): Free/Dirty block details [ 126.750269][ T6054] EXT4-fs (loop2): free_blocks=2415919104 [ 126.756292][ T6054] EXT4-fs (loop2): dirty_blocks=16 [ 126.761552][ T6054] EXT4-fs (loop2): Block reservation details [ 126.770178][ T6054] EXT4-fs (loop2): i_reserved_data_blocks=1 [pid 6051] <... futex resumed>) = 0 [pid 6064] <... ioctl resumed>) = 0 [pid 6063] <... mount resumed>) = 0 [pid 6055] open("./bus", O_RDWR [pid 6054] <... sendfile resumed>) = 63 [pid 6051] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6063] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6055] <... open resumed>) = 6 [pid 6063] <... openat resumed>) = 3 [pid 6055] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6063] chdir("./file0" [pid 6055] <... futex resumed>) = 1 [pid 6051] <... futex resumed>) = 0 [pid 6063] <... chdir resumed>) = 0 [pid 6055] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6051] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6064] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6063] ioctl(4, LOOP_CLR_FD [pid 6055] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6051] <... futex resumed>) = 0 [pid 6049] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6064] <... futex resumed>) = 0 [pid 6063] <... ioctl resumed>) = 0 [pid 6055] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6054] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6051] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6064] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6063] close(4 [pid 6055] <... mmap resumed>) = 0x20000000 [pid 6048] exit_group(0 [pid 4998] <... umount2 resumed>) = 0 [pid 6064] <... futex resumed>) = ? [pid 6063] <... close resumed>) = 0 [pid 6055] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6048] <... exit_group resumed>) = ? [pid 6064] +++ exited with 0 +++ [pid 6063] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6055] <... futex resumed>) = 1 [pid 6051] <... futex resumed>) = 0 [pid 4998] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6063] <... futex resumed>) = 1 [pid 6059] <... futex resumed>) = 0 [pid 6055] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6054] <... futex resumed>) = ? [pid 6051] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] <... umount2 resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6063] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6059] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6055] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6051] <... futex resumed>) = 0 [pid 6063] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6059] <... futex resumed>) = 0 [ 126.776898][ T5608] EXT4-fs (loop3): This should not happen!! Data will be lost [ 126.776898][ T5608] [ 126.795711][ T6053] EXT4-fs (loop0): Total free blocks count 0 [ 126.804089][ T6053] EXT4-fs (loop0): Free/Dirty block details [pid 6055] sendfile(4, 5, NULL, 2147483713 [pid 6054] +++ exited with 0 +++ [pid 6051] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6048] +++ exited with 0 +++ [pid 4998] lstat("./33/file0", [pid 6067] <... ioctl resumed>) = 0 [pid 6063] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6059] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6053] <... sendfile resumed>) = 63 [pid 4997] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6067] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6063] <... open resumed>) = 4 [pid 6053] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6049] exit_group(0 [pid 4998] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6048, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6067] <... futex resumed>) = ? [pid 6063] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6053] <... futex resumed>) = ? [pid 6049] <... exit_group resumed>) = ? [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./34/file0", [pid 4996] restart_syscall(<... resuming interrupted clone ...> [pid 6067] +++ exited with 0 +++ [pid 6063] <... futex resumed>) = 1 [pid 6059] <... futex resumed>) = 0 [pid 6053] +++ exited with 0 +++ [pid 4996] <... restart_syscall resumed>) = 0 [pid 4996] umount2("./35", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6063] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6059] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6049] +++ exited with 0 +++ [pid 4998] openat(AT_FDCWD, "./33/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6063] <... write resumed>) = 9 [pid 6059] <... futex resumed>) = 0 [pid 4998] <... openat resumed>) = 4 [pid 4996] openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4994] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6049, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 6063] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6059] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] fstat(4, [pid 4997] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] <... openat resumed>) = 3 [pid 4994] restart_syscall(<... resuming interrupted clone ...> [pid 6063] <... futex resumed>) = 0 [pid 6059] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4996] fstat(3, [pid 4994] <... restart_syscall resumed>) = 0 [pid 6063] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6059] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] getdents64(4, [pid 4997] openat(AT_FDCWD, "./34/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4996] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6063] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6059] <... futex resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4997] <... openat resumed>) = 4 [pid 4996] getdents64(3, [pid 6063] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6059] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] getdents64(4, [pid 4997] fstat(4, [pid 4996] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4994] umount2("./35", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6063] <... openat resumed>) = 5 [pid 4998] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] umount2("./35/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6063] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] close(4 [pid 4997] getdents64(4, [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6063] <... futex resumed>) = 1 [pid 6059] <... futex resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 4997] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4996] lstat("./35/binderfs", [pid 4994] <... openat resumed>) = 3 [pid 6063] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6059] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] rmdir("./33/file0" [pid 4997] getdents64(4, [pid 4996] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4994] fstat(3, [pid 6063] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6059] <... futex resumed>) = 0 [ 126.828887][ T6053] EXT4-fs (loop0): free_blocks=2415919104 [ 126.834749][ T6053] EXT4-fs (loop0): dirty_blocks=16 [ 126.840904][ T6053] EXT4-fs (loop0): Block reservation details [ 126.843769][ T6055] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 126.847866][ T6053] EXT4-fs (loop0): i_reserved_data_blocks=1 [pid 4996] unlink("./35/binderfs" [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6063] open("./bus", O_RDWR [pid 6059] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] <... rmdir resumed>) = 0 [pid 4997] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4996] <... unlink resumed>) = 0 [pid 4994] getdents64(3, [pid 6063] <... open resumed>) = 6 [pid 4998] getdents64(3, [pid 4997] close(4 [pid 4996] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 6063] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4997] <... close resumed>) = 0 [pid 4994] umount2("./35/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] lstat("./35/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4994] unlink("./35/binderfs") = 0 [pid 4994] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6063] <... futex resumed>) = 1 [pid 6059] <... futex resumed>) = 0 [pid 6051] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4998] close(3 [pid 4997] rmdir("./34/file0" [pid 6063] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6059] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6051] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... close resumed>) = 0 [pid 6063] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6059] <... futex resumed>) = 0 [pid 6051] <... futex resumed>) = 0 [pid 4998] rmdir("./33" [pid 4997] <... rmdir resumed>) = 0 [ 126.904071][ T5608] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 126.907168][ T6055] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 126.930706][ T11] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 126.944114][ T11] EXT4-fs (loop0): This should not happen!! Data will be lost [ 126.944114][ T11] [pid 6063] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6059] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6051] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4998] <... rmdir resumed>) = 0 [pid 4997] getdents64(3, [pid 6063] <... mmap resumed>) = 0x20000000 [pid 6051] <... mmap resumed>) = 0x7f5c234cf000 [pid 4998] mkdir("./34", 0777 [pid 4997] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 6063] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6051] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 4998] <... mkdir resumed>) = 0 [pid 4997] close(3 [pid 6063] <... futex resumed>) = 1 [pid 6059] <... futex resumed>) = 0 [pid 6051] <... mprotect resumed>) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4997] <... close resumed>) = 0 [pid 6059] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6051] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6059] <... futex resumed>) = 0 [pid 6063] sendfile(4, 5, NULL, 2147483713 [pid 4997] rmdir("./34" [pid 4998] <... openat resumed>) = 3 [pid 6059] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6051] <... clone resumed>, parent_tid=[6070], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6070 [pid 6051] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6051] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] ioctl(3, LOOP_CLR_FD [pid 4997] <... rmdir resumed>) = 0 [ 126.945644][ T5608] EXT4-fs (loop2): This should not happen!! Data will be lost [ 126.945644][ T5608] [ 126.956005][ T6055] EXT4-fs (loop1): This should not happen!! Data will be lost [ 126.956005][ T6055] [ 126.979527][ T6055] EXT4-fs (loop1): Total free blocks count 0 [ 126.986357][ T6055] EXT4-fs (loop1): Free/Dirty block details [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4997] mkdir("./35", 0777./strace-static-x86_64: Process 6070 attached [pid 4998] close(3 [pid 4997] <... mkdir resumed>) = 0 [pid 6070] set_robust_list(0x7f5c234ef9e0, 24 [pid 4998] <... close resumed>) = 0 [pid 4997] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6070] <... set_robust_list resumed>) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6071 attached [pid 6070] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6059] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6051] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4997] <... openat resumed>) = 3 [pid 6059] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6059] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c234cf000 [pid 6059] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6059] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6072], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6072 [pid 6059] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6059] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6071] set_robust_list(0x555556fb95e0, 24 [pid 4998] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6071 [ 126.988452][ T6063] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 126.992799][ T6055] EXT4-fs (loop1): free_blocks=2415919104 [ 127.009417][ T6063] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 127.028448][ T6063] EXT4-fs (loop5): This should not happen!! Data will be lost [ 127.028448][ T6063] [ 127.038897][ T6055] EXT4-fs (loop1): dirty_blocks=16 [ 127.039775][ T6063] EXT4-fs (loop5): Total free blocks count 0 [pid 4997] ioctl(3, LOOP_CLR_FD [pid 6071] <... set_robust_list resumed>) = 0 [pid 4997] <... ioctl resumed>) = -1 ENXIO (No such device or address) ./strace-static-x86_64: Process 6072 attached [pid 6072] set_robust_list(0x7f5c234ef9e0, 24) = 0 [pid 6072] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6071] chdir("./34" [pid 4997] close(3 [pid 6071] <... chdir resumed>) = 0 [pid 4997] <... close resumed>) = 0 [pid 6071] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6071] <... prctl resumed>) = 0 [pid 4997] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6073 [pid 6071] setpgid(0, 0./strace-static-x86_64: Process 6073 attached ) = 0 [pid 6073] set_robust_list(0x555556fb95e0, 24 [pid 6071] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6073] <... set_robust_list resumed>) = 0 [pid 6071] <... openat resumed>) = 3 [pid 6059] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6055] <... sendfile resumed>) = 63 [pid 6055] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6055] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6073] chdir("./35" [pid 6071] write(3, "1000", 4 [pid 6070] <... ioctl resumed>) = 0 [ 127.045981][ T6055] EXT4-fs (loop1): Block reservation details [ 127.052283][ T6063] EXT4-fs (loop5): Free/Dirty block details [ 127.063362][ T6063] EXT4-fs (loop5): free_blocks=2415919104 [ 127.078903][ T6063] EXT4-fs (loop5): dirty_blocks=16 [ 127.081850][ T6055] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 127.091815][ T6063] EXT4-fs (loop5): Block reservation details [pid 6073] <... chdir resumed>) = 0 [pid 6072] <... ioctl resumed>) = 0 [pid 6071] <... write resumed>) = 4 [pid 6070] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6063] <... sendfile resumed>) = 63 [pid 6051] exit_group(0 [pid 4994] <... umount2 resumed>) = 0 [pid 6072] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6073] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6071] close(3 [pid 6070] <... futex resumed>) = 0 [pid 6073] <... prctl resumed>) = 0 [pid 6071] <... close resumed>) = 0 [pid 6070] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6063] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6073] setpgid(0, 0 [pid 6071] symlink("/dev/binderfs", "./binderfs" [pid 6063] <... futex resumed>) = 0 [pid 6073] <... setpgid resumed>) = 0 [pid 6072] <... futex resumed>) = 0 [pid 6071] <... symlink resumed>) = 0 [pid 6070] <... futex resumed>) = ? [pid 6063] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6051] <... exit_group resumed>) = ? [pid 6073] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6072] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6071] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6073] <... openat resumed>) = 3 [pid 6071] <... futex resumed>) = 0 [pid 6070] +++ exited with 0 +++ [pid 6059] exit_group(0 [pid 6073] write(3, "1000", 4 [pid 6072] <... futex resumed>) = ? [pid 6071] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6063] <... futex resumed>) = ? [pid 6059] <... exit_group resumed>) = ? [pid 6073] <... write resumed>) = 4 [pid 6072] +++ exited with 0 +++ [pid 6071] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6063] +++ exited with 0 +++ [pid 6055] <... futex resumed>) = ? [pid 4994] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6073] close(3 [pid 6071] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6073] <... close resumed>) = 0 [pid 6071] <... mprotect resumed>) = 0 [pid 6059] +++ exited with 0 +++ [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6073] symlink("/dev/binderfs", "./binderfs" [pid 6071] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6059, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 6073] <... symlink resumed>) = 0 [pid 4996] <... umount2 resumed>) = 0 [pid 4994] lstat("./35/file0", [pid 6073] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6071] <... clone resumed>, parent_tid=[6074], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6074 [pid 4994] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6073] <... futex resumed>) = 0 [pid 6071] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6055] +++ exited with 0 +++ [pid 6051] +++ exited with 0 +++ [pid 4994] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6073] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6071] <... futex resumed>) = 0 [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6073] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6071] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4995] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6051, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 4994] openat(AT_FDCWD, "./35/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6073] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 4999] umount2("./34", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] umount2("./34", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] <... openat resumed>) = 4 ./strace-static-x86_64: Process 6074 attached [pid 6073] <... mprotect resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] fstat(4, [pid 6074] set_robust_list(0x7f5c2b8109e0, 24 [pid 6073] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4999] openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4995] openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6074] <... set_robust_list resumed>) = 0 [pid 4999] <... openat resumed>) = 3 [ 127.100394][ T6063] EXT4-fs (loop5): i_reserved_data_blocks=1 [pid 4995] <... openat resumed>) = 3 [pid 4994] getdents64(4, [pid 6074] memfd_create("syzkaller", 0 [pid 6073] <... clone resumed>, parent_tid=[6075], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6075 [pid 4999] fstat(3, [pid 4995] fstat(3, [pid 4994] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 6074] <... memfd_create resumed>) = 3 [pid 6073] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] getdents64(4, [pid 6074] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6073] <... futex resumed>) = 0 [pid 4999] getdents64(3, [pid 4995] getdents64(3, [pid 4994] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 6074] <... mmap resumed>) = 0x7f5c233f0000 [pid 6073] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4999] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4995] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4994] close(4./strace-static-x86_64: Process 6075 attached [pid 6074] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4999] umount2("./34/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] umount2("./34/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] <... close resumed>) = 0 [pid 6075] set_robust_list(0x7f5c2b8109e0, 24 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] rmdir("./35/file0" [pid 6075] <... set_robust_list resumed>) = 0 [pid 4999] lstat("./34/binderfs", [pid 4996] lstat("./35/file0", [pid 4995] lstat("./34/binderfs", [pid 4994] <... rmdir resumed>) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4995] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4994] getdents64(3, [pid 4999] unlink("./34/binderfs" [pid 4996] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] unlink("./34/binderfs" [pid 4994] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 6075] memfd_create("syzkaller", 0 [pid 4999] <... unlink resumed>) = 0 [pid 4996] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] <... unlink resumed>) = 0 [pid 4994] close(3 [pid 6075] <... memfd_create resumed>) = 3 [pid 4999] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] <... close resumed>) = 0 [pid 6075] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6074] <... write resumed>) = 1048576 [pid 4996] openat(AT_FDCWD, "./35/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4994] rmdir("./35") = 0 [pid 4994] mkdir("./36", 0777) = 0 [pid 4994] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4994] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4994] close(3) = 0 [pid 4994] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556fb95d0) = 6076 ./strace-static-x86_64: Process 6076 attached [pid 6076] set_robust_list(0x555556fb95e0, 24) = 0 [ 127.172972][ T5608] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 127.187108][ T11] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 127.197429][ T5608] EXT4-fs (loop5): This should not happen!! Data will be lost [ 127.197429][ T5608] [ 127.214494][ T11] EXT4-fs (loop1): This should not happen!! Data will be lost [pid 6076] chdir("./36" [pid 6075] <... mmap resumed>) = 0x7f5c233f0000 [pid 6074] munmap(0x7f5c233f0000, 1048576 [pid 4996] <... openat resumed>) = 4 [pid 6076] <... chdir resumed>) = 0 [pid 6076] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6076] setpgid(0, 0) = 0 [pid 6076] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6076] write(3, "1000", 4) = 4 [pid 6074] <... munmap resumed>) = 0 [pid 4996] fstat(4, [pid 6076] close(3 [pid 6074] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6076] <... close resumed>) = 0 [pid 6076] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4996] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6076] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6074] <... openat resumed>) = 4 [pid 6076] <... futex resumed>) = 0 [pid 6076] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4996] getdents64(4, [pid 6074] ioctl(4, LOOP_SET_FD, 3 [pid 6076] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 4996] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 6076] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 4996] getdents64(4, [pid 6076] <... mprotect resumed>) = 0 [pid 6076] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6077], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6077 [pid 6076] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6076] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6074] <... ioctl resumed>) = 0 [pid 4996] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4996] close(4) = 0 [pid 4996] rmdir("./35/file0") = 0 [pid 4996] getdents64(3, 0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4996] close(3 [pid 6075] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6074] close(3 [pid 4996] <... close resumed>) = 0 ./strace-static-x86_64: Process 6077 attached [pid 6077] set_robust_list(0x7f5c2b8109e0, 24) = 0 [pid 6077] memfd_create("syzkaller", 0) = 3 [pid 6077] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6074] <... close resumed>) = 0 [pid 4996] rmdir("./35" [pid 6074] mkdir("./file0", 0777 [pid 4996] <... rmdir resumed>) = 0 [pid 6077] <... mmap resumed>) = 0x7f5c233f0000 [pid 6074] <... mkdir resumed>) = 0 [pid 4996] mkdir("./36", 0777 [pid 6074] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 4996] <... mkdir resumed>) = 0 [pid 4995] <... umount2 resumed>) = 0 [pid 4996] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 4995] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4995] lstat("./34/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] ioctl(3, LOOP_CLR_FD [pid 4995] openat(AT_FDCWD, "./34/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4996] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4995] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] getdents64(4, 0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4995] getdents64(4, 0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4995] close(4 [pid 4996] close(3 [pid 4995] <... close resumed>) = 0 [pid 4996] <... close resumed>) = 0 [ 127.214494][ T11] [ 127.229050][ T6074] loop4: detected capacity change from 0 to 2048 [pid 4995] rmdir("./34/file0" [pid 4996] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4995] <... rmdir resumed>) = 0 [pid 4995] getdents64(3, 0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4995] close(3 [pid 4996] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6078 [pid 4995] <... close resumed>) = 0 [pid 4995] rmdir("./34"./strace-static-x86_64: Process 6078 attached ) = 0 [pid 4995] mkdir("./35", 0777 [pid 6078] set_robust_list(0x555556fb95e0, 24 [pid 6075] <... write resumed>) = 1048576 [pid 4999] <... umount2 resumed>) = 0 [pid 4995] <... mkdir resumed>) = 0 [pid 4995] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4995] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4995] close(3 [pid 6078] <... set_robust_list resumed>) = 0 [pid 6075] munmap(0x7f5c233f0000, 1048576 [pid 4995] <... close resumed>) = 0 [pid 6078] chdir("./36" [pid 6075] <... munmap resumed>) = 0 [pid 4995] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6077] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4999] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6078] <... chdir resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6082 [pid 4999] lstat("./34/file0", ./strace-static-x86_64: Process 6082 attached [pid 6078] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6075] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6082] set_robust_list(0x555556fb95e0, 24 [pid 6078] <... prctl resumed>) = 0 [pid 6075] <... openat resumed>) = 4 [pid 6074] <... mount resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6074] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 4999] openat(AT_FDCWD, "./34/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6082] <... set_robust_list resumed>) = 0 [pid 6078] setpgid(0, 0 [pid 6075] ioctl(4, LOOP_SET_FD, 3 [pid 6074] <... openat resumed>) = 3 [pid 4999] <... openat resumed>) = 4 [pid 6078] <... setpgid resumed>) = 0 [pid 6074] chdir("./file0" [pid 4999] fstat(4, [pid 6074] <... chdir resumed>) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6074] ioctl(4, LOOP_CLR_FD [pid 4999] getdents64(4, [pid 6074] <... ioctl resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 6074] close(4 [pid 4999] getdents64(4, [pid 6078] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6074] <... close resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 6082] chdir("./35" [pid 6078] <... openat resumed>) = 3 [pid 6077] <... write resumed>) = 1048576 [pid 6075] <... ioctl resumed>) = 0 [pid 6074] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] close(4 [pid 6074] <... futex resumed>) = 1 [pid 6071] <... futex resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 6082] <... chdir resumed>) = 0 [pid 6078] write(3, "1000", 4 [pid 6077] munmap(0x7f5c233f0000, 1048576 [pid 6075] close(3 [pid 6074] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6071] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] rmdir("./34/file0" [pid 6082] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6078] <... write resumed>) = 4 [pid 6077] <... munmap resumed>) = 0 [pid 6075] <... close resumed>) = 0 [pid 6074] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6071] <... futex resumed>) = 0 [pid 6082] <... prctl resumed>) = 0 [pid 6078] close(3 [pid 6077] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6075] mkdir("./file0", 0777 [pid 6074] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6071] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] <... rmdir resumed>) = 0 [pid 6082] setpgid(0, 0 [pid 6078] <... close resumed>) = 0 [pid 6077] <... openat resumed>) = 4 [pid 6075] <... mkdir resumed>) = 0 [pid 6082] <... setpgid resumed>) = 0 [pid 6078] symlink("/dev/binderfs", "./binderfs" [pid 6077] ioctl(4, LOOP_SET_FD, 3 [pid 6075] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6074] <... open resumed>) = 4 [pid 4999] getdents64(3, [pid 6082] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6078] <... symlink resumed>) = 0 [pid 6077] <... ioctl resumed>) = 0 [pid 6074] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 6074] <... futex resumed>) = 1 [pid 6071] <... futex resumed>) = 0 [pid 4999] close(3 [pid 6074] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6071] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... close resumed>) = 0 [pid 6074] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6071] <... futex resumed>) = 0 [pid 4999] rmdir("./34" [pid 6074] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6071] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] <... rmdir resumed>) = 0 [pid 4999] mkdir("./35", 0777) = 0 [pid 6074] <... write resumed>) = 9 [pid 6082] <... openat resumed>) = 3 [pid 6078] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6082] write(3, "1000", 4 [pid 6078] <... futex resumed>) = 0 [pid 6074] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... openat resumed>) = 3 [pid 6082] <... write resumed>) = 4 [pid 6078] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6074] <... futex resumed>) = 1 [pid 6071] <... futex resumed>) = 0 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 6082] close(3 [pid 6078] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6074] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6071] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6082] <... close resumed>) = 0 [pid 6078] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6074] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6071] <... futex resumed>) = 0 [pid 4999] close(3 [pid 6082] symlink("/dev/binderfs", "./binderfs" [pid 6078] <... mprotect resumed>) = 0 [pid 6077] close(3 [pid 6074] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6071] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] <... close resumed>) = 0 [pid 6082] <... symlink resumed>) = 0 [pid 6078] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6077] <... close resumed>) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6082] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [ 127.331170][ T6075] loop3: detected capacity change from 0 to 2048 [ 127.366485][ T6077] loop0: detected capacity change from 0 to 2048 [pid 6077] mkdir("./file0", 0777 [pid 6074] <... openat resumed>) = 5 [pid 6082] <... futex resumed>) = 0 [pid 6078] <... clone resumed>, parent_tid=[6084], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6084 [pid 6077] <... mkdir resumed>) = 0 [pid 6074] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6085 attached ./strace-static-x86_64: Process 6084 attached [pid 6082] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6078] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6077] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6074] <... futex resumed>) = 1 [pid 6071] <... futex resumed>) = 0 [pid 4999] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6085 [pid 6085] set_robust_list(0x555556fb95e0, 24 [pid 6084] set_robust_list(0x7f5c2b8109e0, 24 [pid 6082] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6078] <... futex resumed>) = 0 [pid 6075] <... mount resumed>) = 0 [pid 6074] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6071] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6082] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6078] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6082] <... mprotect resumed>) = 0 [pid 6074] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6071] <... futex resumed>) = 0 [pid 6082] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6075] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6074] open("./bus", O_RDWR./strace-static-x86_64: Process 6087 attached [pid 6085] <... set_robust_list resumed>) = 0 [pid 6084] <... set_robust_list resumed>) = 0 [pid 6071] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6082] <... clone resumed>, parent_tid=[6087], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6087 [pid 6082] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6075] <... openat resumed>) = 3 [pid 6082] <... futex resumed>) = 0 [pid 6087] set_robust_list(0x7f5c2b8109e0, 24 [pid 6085] chdir("./35" [pid 6084] memfd_create("syzkaller", 0 [pid 6082] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6075] chdir("./file0" [pid 6074] <... open resumed>) = 6 [pid 6074] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6071] <... futex resumed>) = 0 [pid 6074] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6071] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6074] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6071] <... futex resumed>) = 0 [pid 6074] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6071] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6087] <... set_robust_list resumed>) = 0 [pid 6085] <... chdir resumed>) = 0 [pid 6084] <... memfd_create resumed>) = 3 [pid 6075] <... chdir resumed>) = 0 [pid 6074] <... mmap resumed>) = 0x20000000 [pid 6087] memfd_create("syzkaller", 0 [pid 6085] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6084] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6077] <... mount resumed>) = 0 [pid 6075] ioctl(4, LOOP_CLR_FD [pid 6074] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6087] <... memfd_create resumed>) = 3 [pid 6085] <... prctl resumed>) = 0 [pid 6084] <... mmap resumed>) = 0x7f5c233f0000 [pid 6077] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6075] <... ioctl resumed>) = 0 [pid 6074] <... futex resumed>) = 1 [pid 6071] <... futex resumed>) = 0 [pid 6087] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6085] setpgid(0, 0 [pid 6084] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6077] <... openat resumed>) = 3 [pid 6075] close(4 [pid 6074] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6071] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6087] <... mmap resumed>) = 0x7f5c233f0000 [pid 6085] <... setpgid resumed>) = 0 [pid 6084] <... write resumed>) = 1048576 [pid 6077] chdir("./file0" [pid 6075] <... close resumed>) = 0 [pid 6074] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6071] <... futex resumed>) = 0 [pid 6077] <... chdir resumed>) = 0 [pid 6074] sendfile(4, 5, NULL, 2147483713 [pid 6071] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6085] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6077] ioctl(4, LOOP_CLR_FD [pid 6075] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6085] <... openat resumed>) = 3 [pid 6077] <... ioctl resumed>) = 0 [pid 6075] <... futex resumed>) = 1 [pid 6073] <... futex resumed>) = 0 [pid 6085] write(3, "1000", 4 [pid 6077] close(4 [pid 6073] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6085] <... write resumed>) = 4 [pid 6077] <... close resumed>) = 0 [pid 6075] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6073] <... futex resumed>) = 0 [pid 6085] close(3 [pid 6077] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6076] <... futex resumed>) = 0 [pid 6073] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6077] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6076] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6085] <... close resumed>) = 0 [pid 6077] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6076] <... futex resumed>) = 0 [pid 6075] <... open resumed>) = 4 [pid 6085] symlink("/dev/binderfs", "./binderfs" [pid 6077] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6076] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6077] <... open resumed>) = 4 [pid 6075] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6077] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6076] <... futex resumed>) = 0 [pid 6077] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6076] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6077] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6076] <... futex resumed>) = 0 [pid 6077] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6076] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6077] <... write resumed>) = 9 [pid 6077] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6076] <... futex resumed>) = 0 [pid 6077] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6076] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6077] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6076] <... futex resumed>) = 0 [pid 6077] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6076] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6077] <... openat resumed>) = 5 [pid 6077] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6076] <... futex resumed>) = 0 [pid 6077] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6076] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6077] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6076] <... futex resumed>) = 0 [pid 6077] open("./bus", O_RDWR [pid 6076] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6077] <... open resumed>) = 6 [pid 6077] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6076] <... futex resumed>) = 0 [pid 6077] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6076] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6077] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6076] <... futex resumed>) = 0 [pid 6077] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6076] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6077] <... mmap resumed>) = 0x20000000 [pid 6077] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6085] <... symlink resumed>) = 0 [pid 6077] <... futex resumed>) = 1 [pid 6076] <... futex resumed>) = 0 [pid 6075] <... futex resumed>) = 1 [pid 6073] <... futex resumed>) = 0 [pid 6085] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6077] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6076] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6075] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6073] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6085] <... futex resumed>) = 0 [pid 6077] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6076] <... futex resumed>) = 0 [pid 6073] <... futex resumed>) = 0 [pid 6085] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6077] sendfile(4, 5, NULL, 2147483713 [pid 6076] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6075] <... write resumed>) = 9 [pid 6073] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6085] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6085] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6084] munmap(0x7f5c233f0000, 1048576 [pid 6085] <... mprotect resumed>) = 0 [pid 6075] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6084] <... munmap resumed>) = 0 [pid 6084] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6084] ioctl(4, LOOP_SET_FD, 3 [pid 6085] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6075] <... futex resumed>) = 1 [pid 6073] <... futex resumed>) = 0 [pid 6073] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6075] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6073] <... futex resumed>) = 0 [pid 6073] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6085] <... clone resumed>, parent_tid=[6090], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6090 [pid 6075] <... openat resumed>) = 5 [pid 6071] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6085] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6075] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6085] <... futex resumed>) = 0 [pid 6073] <... futex resumed>) = 0 [pid 6085] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6075] <... futex resumed>) = 1 [pid 6073] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6075] open("./bus", O_RDWR [pid 6073] <... futex resumed>) = 0 [pid 6073] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6075] <... open resumed>) = 6 [pid 6071] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6075] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6071] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6090 attached [pid 6075] <... futex resumed>) = 1 [pid 6073] <... futex resumed>) = 0 [pid 6071] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6090] set_robust_list(0x7f5c2b8109e0, 24 [pid 6075] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6073] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6071] <... mmap resumed>) = 0x7f5c234cf000 [pid 6090] <... set_robust_list resumed>) = 0 [pid 6075] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6073] <... futex resumed>) = 0 [pid 6071] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 6090] memfd_create("syzkaller", 0 [pid 6075] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6073] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6071] <... mprotect resumed>) = 0 [pid 6087] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6071] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6075] <... mmap resumed>) = 0x20000000 [pid 6090] <... memfd_create resumed>) = 3 [pid 6075] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6071] <... clone resumed>, parent_tid=[6091], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6091 [pid 6090] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6075] <... futex resumed>) = 1 [pid 6073] <... futex resumed>) = 0 [pid 6071] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6090] <... mmap resumed>) = 0x7f5c233f0000 [pid 6075] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6073] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6071] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6091 attached [pid 6075] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6073] <... futex resumed>) = 0 [pid 6071] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6091] set_robust_list(0x7f5c234ef9e0, 24 [pid 6075] sendfile(4, 5, NULL, 2147483713 [pid 6073] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6091] <... set_robust_list resumed>) = 0 [pid 6091] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6084] <... ioctl resumed>) = 0 [pid 6076] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6076] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6084] close(3 [pid 6076] <... futex resumed>) = 0 [ 127.462691][ T6074] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 127.489652][ T6077] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 127.492819][ T6084] loop2: detected capacity change from 0 to 2048 [pid 6084] <... close resumed>) = 0 [pid 6076] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6084] mkdir("./file0", 0777 [pid 6076] <... mmap resumed>) = 0x7f5c234cf000 [pid 6084] <... mkdir resumed>) = 0 [pid 6076] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 6084] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6076] <... mprotect resumed>) = 0 [pid 6076] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6092], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6092 [pid 6076] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6076] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6092 attached [pid 6092] set_robust_list(0x7f5c234ef9e0, 24) = 0 [pid 6092] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6087] <... write resumed>) = 1048576 [pid 6073] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6071] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6073] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6090] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6073] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c234cf000 [pid 6073] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6073] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6094], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6094 [pid 6073] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 6094 attached [pid 6073] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6094] set_robust_list(0x7f5c234ef9e0, 24) = 0 [ 127.538277][ T6075] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 127.562064][ T6077] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 127.575364][ T6074] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 6094] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6087] munmap(0x7f5c233f0000, 1048576 [pid 6084] <... mount resumed>) = 0 [pid 6076] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6084] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6084] chdir("./file0") = 0 [pid 6084] ioctl(4, LOOP_CLR_FD) = 0 [pid 6084] close(4 [pid 6087] <... munmap resumed>) = 0 [pid 6084] <... close resumed>) = 0 [pid 6087] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6084] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6087] <... openat resumed>) = 4 [pid 6084] <... futex resumed>) = 1 [pid 6078] <... futex resumed>) = 0 [pid 6087] ioctl(4, LOOP_SET_FD, 3 [pid 6084] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6078] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6084] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6078] <... futex resumed>) = 0 [ 127.601017][ T6074] EXT4-fs (loop4): This should not happen!! Data will be lost [ 127.601017][ T6074] [ 127.615947][ T6077] EXT4-fs (loop0): This should not happen!! Data will be lost [ 127.615947][ T6077] [ 127.626435][ T6077] EXT4-fs (loop0): Total free blocks count 0 [ 127.632404][ T6087] loop1: detected capacity change from 0 to 2048 [ 127.633108][ T6077] EXT4-fs (loop0): Free/Dirty block details [pid 6084] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6078] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6084] <... open resumed>) = 4 [pid 6073] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6084] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6078] <... futex resumed>) = 0 [pid 6084] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6078] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6084] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6078] <... futex resumed>) = 0 [pid 6084] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6078] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6092] <... ioctl resumed>) = 0 [pid 6090] <... write resumed>) = 1048576 [pid 6084] <... write resumed>) = 9 [pid 6077] <... sendfile resumed>) = 63 [pid 6092] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6084] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6092] <... futex resumed>) = 0 [pid 6090] munmap(0x7f5c233f0000, 1048576 [pid 6084] <... futex resumed>) = 1 [pid 6078] <... futex resumed>) = 0 [pid 6092] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6084] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6078] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6077] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [ 127.639443][ T6075] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 127.645139][ T6077] EXT4-fs (loop0): free_blocks=2415919104 [ 127.663002][ T6077] EXT4-fs (loop0): dirty_blocks=16 [ 127.668646][ T6077] EXT4-fs (loop0): Block reservation details [ 127.675588][ T6077] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 127.682973][ T6074] EXT4-fs (loop4): Total free blocks count 0 [ 127.689755][ T6074] EXT4-fs (loop4): Free/Dirty block details [ 127.696006][ T6074] EXT4-fs (loop4): free_blocks=2415919104 [pid 6076] exit_group(0 [pid 6092] <... futex resumed>) = ? [pid 6090] <... munmap resumed>) = 0 [pid 6087] <... ioctl resumed>) = 0 [pid 6084] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6078] <... futex resumed>) = 0 [pid 6077] <... futex resumed>) = ? [pid 6076] <... exit_group resumed>) = ? [pid 6092] +++ exited with 0 +++ [pid 6090] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6087] close(3 [pid 6084] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6078] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6077] +++ exited with 0 +++ [pid 6076] +++ exited with 0 +++ [pid 6090] <... openat resumed>) = 4 [pid 6087] <... close resumed>) = 0 [pid 6084] <... openat resumed>) = 5 [pid 4994] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6076, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 6091] <... ioctl resumed>) = 0 [pid 6090] ioctl(4, LOOP_SET_FD, 3 [pid 6087] mkdir("./file0", 0777 [pid 6084] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6074] <... sendfile resumed>) = 63 [pid 4994] restart_syscall(<... resuming interrupted clone ...> [pid 6091] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6087] <... mkdir resumed>) = 0 [pid 6084] <... futex resumed>) = 1 [pid 6078] <... futex resumed>) = 0 [pid 4994] <... restart_syscall resumed>) = 0 [pid 6091] <... futex resumed>) = 0 [pid 6087] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6084] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6078] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6091] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6084] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6078] <... futex resumed>) = 0 [pid 6074] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6071] exit_group(0 [pid 6091] <... futex resumed>) = ? [ 127.701775][ T6074] EXT4-fs (loop4): dirty_blocks=16 [ 127.707019][ T6074] EXT4-fs (loop4): Block reservation details [ 127.713519][ T6074] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 127.720235][ T6075] EXT4-fs (loop3): This should not happen!! Data will be lost [ 127.720235][ T6075] [ 127.721226][ T6090] loop5: detected capacity change from 0 to 2048 [ 127.730086][ T6075] EXT4-fs (loop3): Total free blocks count 0 [ 127.743335][ T6075] EXT4-fs (loop3): Free/Dirty block details [pid 6084] open("./bus", O_RDWR [pid 6078] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6071] <... exit_group resumed>) = ? [pid 4994] umount2("./36", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6091] +++ exited with 0 +++ [pid 6084] <... open resumed>) = 6 [pid 6074] <... futex resumed>) = ? [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6084] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6084] <... futex resumed>) = 1 [pid 6078] <... futex resumed>) = 0 [pid 4994] <... openat resumed>) = 3 [pid 6084] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6078] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] fstat(3, [pid 6084] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6078] <... futex resumed>) = 0 [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6084] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6078] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4994] getdents64(3, [pid 6084] <... mmap resumed>) = 0x20000000 [pid 4994] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 6084] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] umount2("./36/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6084] <... futex resumed>) = 1 [pid 6078] <... futex resumed>) = 0 [pid 6074] +++ exited with 0 +++ [pid 6071] +++ exited with 0 +++ [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6084] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6078] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] lstat("./36/binderfs", [pid 6084] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 127.750047][ T6075] EXT4-fs (loop3): free_blocks=2415919104 [ 127.756833][ T6075] EXT4-fs (loop3): dirty_blocks=16 [ 127.764877][ T26] kauditd_printk_skb: 100 callbacks suppressed [ 127.764895][ T26] audit: type=1804 audit(1687834597.822:962): pid=6084 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor113" name="/root/syzkaller.k2b0rY/36/file0/bus" dev="loop2" ino=18 res=1 errno=0 [pid 6078] <... futex resumed>) = 0 [pid 4994] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6084] sendfile(4, 5, NULL, 2147483713 [pid 6078] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4994] unlink("./36/binderfs") = 0 [pid 4994] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6087] <... mount resumed>) = 0 [pid 6087] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6071, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 6087] <... openat resumed>) = 3 [pid 6087] chdir("./file0") = 0 [pid 6087] ioctl(4, LOOP_CLR_FD) = 0 [pid 6087] close(4) = 0 [pid 6087] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6087] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6082] <... futex resumed>) = 0 [pid 4998] restart_syscall(<... resuming interrupted clone ...> [pid 6090] <... ioctl resumed>) = 0 [pid 6090] close(3 [pid 6082] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... restart_syscall resumed>) = 0 [pid 6090] <... close resumed>) = 0 [pid 6090] mkdir("./file0", 0777) = 0 [ 127.791339][ T6084] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 127.795789][ T6075] EXT4-fs (loop3): Block reservation details [ 127.816148][ T6075] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 127.822890][ T5608] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 6090] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6094] <... ioctl resumed>) = 0 [pid 6087] <... futex resumed>) = 0 [pid 6082] <... futex resumed>) = 1 [pid 6075] <... sendfile resumed>) = 63 [pid 6087] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6082] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6087] <... open resumed>) = 4 [pid 4998] umount2("./34", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6087] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6087] <... futex resumed>) = 1 [pid 6082] <... futex resumed>) = 0 [pid 4998] openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6087] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6082] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... openat resumed>) = 3 [pid 6087] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6082] <... futex resumed>) = 0 [pid 4998] fstat(3, [pid 6087] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6082] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6094] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6087] <... write resumed>) = 9 [pid 6078] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6075] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] getdents64(3, [pid 6094] <... futex resumed>) = 0 [pid 6087] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6078] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6075] <... futex resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 6087] <... futex resumed>) = 1 [pid 6082] <... futex resumed>) = 0 [pid 4998] umount2("./34/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6094] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6087] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6082] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6078] <... futex resumed>) = 0 [pid 6075] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6073] exit_group(0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6094] <... futex resumed>) = ? [pid 6087] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6082] <... futex resumed>) = 0 [pid 6078] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6075] <... futex resumed>) = ? [pid 6073] <... exit_group resumed>) = ? [pid 4998] lstat("./34/binderfs", [pid 6094] +++ exited with 0 +++ [pid 6087] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6082] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6078] <... mmap resumed>) = 0x7f5c234cf000 [pid 6075] +++ exited with 0 +++ [pid 6073] +++ exited with 0 +++ [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4994] <... umount2 resumed>) = 0 [pid 6087] <... openat resumed>) = 5 [pid 6078] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [ 127.835784][ T26] audit: type=1804 audit(1687834597.822:963): pid=6084 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor113" name="/root/syzkaller.k2b0rY/36/file0/bus" dev="loop2" ino=18 res=1 errno=0 [ 127.859932][ T5608] EXT4-fs (loop0): This should not happen!! Data will be lost [ 127.859932][ T5608] [ 127.881713][ T6084] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 127.894081][ T6084] EXT4-fs (loop2): This should not happen!! Data will be lost [pid 4998] unlink("./34/binderfs" [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6073, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 6087] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6078] <... mprotect resumed>) = 0 [pid 4998] <... unlink resumed>) = 0 [pid 4994] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6090] <... mount resumed>) = 0 [pid 6087] <... futex resumed>) = 1 [pid 6082] <... futex resumed>) = 0 [pid 6078] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4998] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6100 attached [pid 6090] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6087] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6082] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] umount2("./35", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] lstat("./36/file0", [pid 6090] <... openat resumed>) = 3 [pid 6087] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6082] <... futex resumed>) = 0 [pid 6078] <... clone resumed>, parent_tid=[6100], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6100 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6100] set_robust_list(0x7f5c234ef9e0, 24 [pid 6090] chdir("./file0" [pid 6087] open("./bus", O_RDWR [pid 6082] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6078] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4994] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6100] <... set_robust_list resumed>) = 0 [pid 6090] <... chdir resumed>) = 0 [pid 6087] <... open resumed>) = 6 [pid 6078] <... futex resumed>) = 0 [pid 4997] <... openat resumed>) = 3 [ 127.894081][ T6084] [ 127.903976][ T26] audit: type=1804 audit(1687834597.962:964): pid=6087 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor113" name="/root/syzkaller.0rM9bT/35/file0/bus" dev="loop1" ino=18 res=1 errno=0 [ 127.928254][ T6084] EXT4-fs (loop2): Total free blocks count 0 [ 127.932796][ T74] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 127.934281][ T6084] EXT4-fs (loop2): Free/Dirty block details [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6100] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6090] ioctl(4, LOOP_CLR_FD [pid 6087] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6078] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4997] fstat(3, [pid 4994] openat(AT_FDCWD, "./36/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6090] <... ioctl resumed>) = 0 [pid 6087] <... futex resumed>) = 1 [pid 6082] <... futex resumed>) = 0 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] <... openat resumed>) = 4 [pid 6090] close(4 [pid 6087] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6082] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] getdents64(3, [pid 4994] fstat(4, [pid 6090] <... close resumed>) = 0 [pid 6087] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6082] <... futex resumed>) = 0 [pid 4997] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6090] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6087] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6082] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4997] umount2("./35/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] getdents64(4, [pid 6090] <... futex resumed>) = 1 [pid 6087] <... mmap resumed>) = 0x20000000 [pid 6085] <... futex resumed>) = 0 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 6090] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6087] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6085] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] lstat("./35/binderfs", [pid 4994] getdents64(4, [pid 6090] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6087] <... futex resumed>) = 1 [pid 6085] <... futex resumed>) = 0 [pid 6082] <... futex resumed>) = 0 [pid 4997] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4994] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 6090] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6087] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6085] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6082] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] unlink("./35/binderfs" [pid 4994] close(4 [pid 6090] <... open resumed>) = 4 [pid 6087] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6082] <... futex resumed>) = 0 [pid 4997] <... unlink resumed>) = 0 [pid 4994] <... close resumed>) = 0 [pid 6090] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6087] sendfile(4, 5, NULL, 2147483713 [pid 6082] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4997] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] rmdir("./36/file0" [pid 6090] <... futex resumed>) = 1 [pid 6085] <... futex resumed>) = 0 [pid 4994] <... rmdir resumed>) = 0 [pid 4994] getdents64(3, 0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4994] close(3) = 0 [pid 6090] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6085] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] rmdir("./36") = 0 [pid 4994] mkdir("./37", 0777) = 0 [pid 4994] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4994] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4994] close(3) = 0 [pid 4994] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556fb95d0) = 6101 [ 127.960895][ T26] audit: type=1804 audit(1687834598.022:965): pid=6087 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor113" name="/root/syzkaller.0rM9bT/35/file0/bus" dev="loop1" ino=18 res=1 errno=0 [ 127.993310][ T6084] EXT4-fs (loop2): free_blocks=2415919104 [pid 6090] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6085] <... futex resumed>) = 0 [pid 6078] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6090] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6085] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6090] <... write resumed>) = 9 [pid 6090] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6085] <... futex resumed>) = 0 [ 127.999887][ T11] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 128.012128][ T74] EXT4-fs (loop4): This should not happen!! Data will be lost [ 128.012128][ T74] [ 128.026549][ T6087] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters ./strace-static-x86_64: Process 6101 attached [pid 6090] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6085] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6101] set_robust_list(0x555556fb95e0, 24 [pid 6090] <... openat resumed>) = 5 [pid 6085] <... futex resumed>) = 0 [pid 6082] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6101] <... set_robust_list resumed>) = 0 [pid 6090] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6085] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6090] <... futex resumed>) = 0 [pid 6085] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6090] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 6085] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6090] open("./bus", O_RDWR [pid 6085] <... futex resumed>) = 0 [pid 6101] chdir("./37" [pid 6082] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6082] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6090] <... open resumed>) = 6 [pid 6101] <... chdir resumed>) = 0 [pid 6085] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6082] <... mmap resumed>) = 0x7f5c234cf000 [pid 6082] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6082] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6101] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6090] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6082] <... clone resumed>, parent_tid=[6102], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6102 [pid 6082] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6082] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6102 attached [pid 6102] set_robust_list(0x7f5c234ef9e0, 24) = 0 [pid 6102] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6101] <... prctl resumed>) = 0 [pid 6090] <... futex resumed>) = 1 [pid 6085] <... futex resumed>) = 0 [ 128.039215][ T26] audit: type=1804 audit(1687834598.042:966): pid=6087 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor113" name="/root/syzkaller.0rM9bT/35/file0/bus" dev="loop1" ino=18 res=1 errno=0 [ 128.074867][ T6084] EXT4-fs (loop2): dirty_blocks=16 [ 128.080560][ T11] EXT4-fs (loop3): This should not happen!! Data will be lost [ 128.080560][ T11] [ 128.099271][ T6084] EXT4-fs (loop2): Block reservation details [pid 6101] setpgid(0, 0 [pid 6090] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6085] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6101] <... setpgid resumed>) = 0 [pid 6090] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6085] <... futex resumed>) = 0 [pid 6082] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 128.101286][ T26] audit: type=1804 audit(1687834598.042:967): pid=6087 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor113" name="/root/syzkaller.0rM9bT/35/file0/bus" dev="loop1" ino=18 res=1 errno=0 [ 128.106394][ T6087] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 128.141619][ T6084] EXT4-fs (loop2): i_reserved_data_blocks=1 [pid 6101] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6100] <... ioctl resumed>) = 0 [pid 6090] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6085] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6084] <... sendfile resumed>) = 63 [pid 6101] <... openat resumed>) = 3 [pid 6100] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6101] write(3, "1000", 4 [pid 6100] <... futex resumed>) = 0 [pid 6090] <... mmap resumed>) = 0x20000000 [pid 6084] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6078] exit_group(0 [pid 4998] <... umount2 resumed>) = 0 [pid 6101] <... write resumed>) = 4 [pid 6078] <... exit_group resumed>) = ? [pid 6101] close(3 [pid 6100] +++ exited with 0 +++ [pid 6090] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6101] <... close resumed>) = 0 [pid 6090] <... futex resumed>) = 1 [pid 6085] <... futex resumed>) = 0 [pid 6101] symlink("/dev/binderfs", "./binderfs" [pid 6085] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6101] <... symlink resumed>) = 0 [pid 6085] <... futex resumed>) = 0 [pid 6090] sendfile(4, 5, NULL, 2147483713 [pid 6101] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6085] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6084] <... futex resumed>) = ? [pid 6101] <... futex resumed>) = 0 [pid 6101] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c2b7f0000 [pid 6101] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE) = 0 [ 128.143836][ T26] audit: type=1804 audit(1687834598.132:968): pid=6090 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor113" name="/root/syzkaller.drywye/35/file0/bus" dev="loop5" ino=18 res=1 errno=0 [pid 6101] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6103], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6103 ./strace-static-x86_64: Process 6103 attached [pid 6101] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6084] +++ exited with 0 +++ [pid 6078] +++ exited with 0 +++ [pid 4998] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... umount2 resumed>) = 0 [pid 6103] set_robust_list(0x7f5c2b8109e0, 24 [pid 6101] <... futex resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] lstat("./34/file0", [pid 4996] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6078, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] umount2("./36", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4996] openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] openat(AT_FDCWD, "./34/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4996] <... openat resumed>) = 3 [pid 4998] <... openat resumed>) = 4 [pid 4996] fstat(3, [pid 4998] fstat(4, [pid 4996] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6103] <... set_robust_list resumed>) = 0 [pid 6101] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4996] getdents64(3, [pid 4998] getdents64(4, [pid 4996] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4998] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4996] umount2("./36/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] getdents64(4, [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6103] memfd_create("syzkaller", 0 [pid 6085] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4998] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4997] lstat("./35/file0", [pid 4996] lstat("./36/binderfs", [pid 4998] close(4 [pid 4996] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] <... close resumed>) = 0 [pid 4996] unlink("./36/binderfs" [pid 6103] <... memfd_create resumed>) = 3 [pid 6085] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] rmdir("./34/file0" [pid 4996] <... unlink resumed>) = 0 [ 128.198291][ T6090] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 128.228049][ T6087] EXT4-fs (loop1): This should not happen!! Data will be lost [ 128.228049][ T6087] [ 128.238568][ T6087] EXT4-fs (loop1): Total free blocks count 0 [ 128.245222][ T6087] EXT4-fs (loop1): Free/Dirty block details [pid 4998] <... rmdir resumed>) = 0 [pid 4996] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] getdents64(3, [pid 6103] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6085] <... futex resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4997] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./34" [pid 6103] <... mmap resumed>) = 0x7f5c233f0000 [pid 6085] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4998] <... rmdir resumed>) = 0 [pid 4997] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6085] <... mmap resumed>) = 0x7f5c234cf000 [pid 4998] mkdir("./35", 0777 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6085] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 4998] <... mkdir resumed>) = 0 [pid 4997] openat(AT_FDCWD, "./35/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6085] <... mprotect resumed>) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6085] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4998] <... openat resumed>) = 3 [pid 4997] <... openat resumed>) = 4 [pid 6103] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3 [pid 6085] <... clone resumed>, parent_tid=[6104], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6104 [pid 4998] <... close resumed>) = 0 [pid 4997] fstat(4, ./strace-static-x86_64: Process 6104 attached [pid 6085] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556fb95d0) = 6105 ./strace-static-x86_64: Process 6105 attached [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6085] <... futex resumed>) = 0 [ 128.260555][ T11] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 128.278629][ T6087] EXT4-fs (loop1): free_blocks=2415919104 [ 128.295389][ T6090] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 128.302025][ T6087] EXT4-fs (loop1): dirty_blocks=16 [pid 6104] set_robust_list(0x7f5c234ef9e0, 24) = 0 [pid 6085] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4997] getdents64(4, [pid 6105] set_robust_list(0x555556fb95e0, 24 [pid 6104] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6103] <... write resumed>) = 1048576 [pid 6105] <... set_robust_list resumed>) = 0 [pid 6105] chdir("./35") = 0 [pid 6105] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6105] setpgid(0, 0) = 0 [pid 4997] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 6105] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6103] munmap(0x7f5c233f0000, 1048576 [pid 6105] <... openat resumed>) = 3 [pid 6105] write(3, "1000", 4) = 4 [pid 6105] close(3) = 0 [pid 6105] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6105] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4997] getdents64(4, [pid 6105] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c2b7f0000 [pid 4997] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 6103] <... munmap resumed>) = 0 [pid 6105] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6105] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6106], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6106 [pid 6105] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6105] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4997] close(4 [pid 6103] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 4997] <... close resumed>) = 0 ./strace-static-x86_64: Process 6106 attached [pid 6103] <... openat resumed>) = 4 [ 128.315182][ T6087] EXT4-fs (loop1): Block reservation details [ 128.322259][ T11] EXT4-fs (loop2): This should not happen!! Data will be lost [ 128.322259][ T11] [ 128.334187][ T6087] EXT4-fs (loop1): i_reserved_data_blocks=1 [pid 4997] rmdir("./35/file0" [pid 6106] set_robust_list(0x7f5c2b8109e0, 24 [pid 6103] ioctl(4, LOOP_SET_FD, 3 [pid 6106] <... set_robust_list resumed>) = 0 [pid 6102] <... ioctl resumed>) = 0 [pid 6087] <... sendfile resumed>) = 63 [pid 6085] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4997] <... rmdir resumed>) = 0 [pid 6103] <... ioctl resumed>) = 0 [pid 6102] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6087] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6082] exit_group(0 [pid 4997] getdents64(3, [pid 6103] close(3 [pid 6102] <... futex resumed>) = ? [pid 6087] <... futex resumed>) = ? [pid 6082] <... exit_group resumed>) = ? [pid 4997] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 6103] <... close resumed>) = 0 [pid 6102] +++ exited with 0 +++ [pid 6087] +++ exited with 0 +++ [pid 4997] close(3 [pid 6103] mkdir("./file0", 0777 [pid 4997] <... close resumed>) = 0 [pid 6103] <... mkdir resumed>) = 0 [pid 4997] rmdir("./35" [pid 6103] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6082] +++ exited with 0 +++ [pid 4997] <... rmdir resumed>) = 0 [pid 6106] memfd_create("syzkaller", 0 [pid 4997] mkdir("./36", 0777 [pid 4995] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6082, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=10 /* 0.10 s */} --- [pid 6106] <... memfd_create resumed>) = 3 [pid 4997] <... mkdir resumed>) = 0 [pid 6106] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4997] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 4997] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4995] umount2("./35", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] close(3) = 0 [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4995] openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6107 [pid 4995] <... openat resumed>) = 3 [pid 4995] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] getdents64(3, 0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4995] umount2("./35/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4995] lstat("./35/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4995] unlink("./35/binderfs") = 0 [pid 6106] <... mmap resumed>) = 0x7f5c233f0000 [ 128.345582][ T26] audit: type=1804 audit(1687834598.132:969): pid=6090 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor113" name="/root/syzkaller.drywye/35/file0/bus" dev="loop5" ino=18 res=1 errno=0 [ 128.347986][ T6090] EXT4-fs (loop5): This should not happen!! Data will be lost [ 128.347986][ T6090] [ 128.379700][ T6103] loop0: detected capacity change from 0 to 2048 [ 128.402147][ T6090] EXT4-fs (loop5): Total free blocks count 0 [pid 4995] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 6107 attached [pid 6107] set_robust_list(0x555556fb95e0, 24 [pid 6106] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4996] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6107] <... set_robust_list resumed>) = 0 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6107] chdir("./36" [pid 4996] lstat("./36/file0", [pid 6107] <... chdir resumed>) = 0 [pid 6107] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4996] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6107] <... prctl resumed>) = 0 [pid 4996] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6107] setpgid(0, 0) = 0 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6107] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4996] openat(AT_FDCWD, "./36/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6107] <... openat resumed>) = 3 [pid 4996] <... openat resumed>) = 4 [pid 6107] write(3, "1000", 4 [pid 4996] fstat(4, [pid 6107] <... write resumed>) = 4 [pid 4996] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6107] close(3) = 0 [pid 6103] <... mount resumed>) = 0 [pid 4996] getdents64(4, [pid 6107] symlink("/dev/binderfs", "./binderfs" [pid 6103] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6103] chdir("./file0") = 0 [pid 6107] <... symlink resumed>) = 0 [pid 6103] ioctl(4, LOOP_CLR_FD [pid 6107] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 6107] <... futex resumed>) = 0 [pid 6103] <... ioctl resumed>) = 0 [pid 4996] getdents64(4, [pid 6107] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6103] close(4 [pid 4996] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 6107] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6103] <... close resumed>) = 0 [pid 4996] close(4 [pid 6107] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6103] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6101] <... futex resumed>) = 0 [pid 4996] <... close resumed>) = 0 [pid 6107] <... mprotect resumed>) = 0 [pid 6103] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [ 128.410363][ T11] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 128.423964][ T6090] EXT4-fs (loop5): Free/Dirty block details [ 128.432084][ T11] EXT4-fs (loop1): This should not happen!! Data will be lost [ 128.432084][ T11] [pid 6101] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] rmdir("./36/file0" [pid 6107] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6103] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6101] <... futex resumed>) = 0 [pid 6103] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6101] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6103] <... open resumed>) = 4 [pid 4996] <... rmdir resumed>) = 0 [pid 6107] <... clone resumed>, parent_tid=[6110], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6110 [pid 6103] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] getdents64(3, [pid 6107] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 6107] <... futex resumed>) = 0 [pid 4996] close(3 [pid 6107] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4996] <... close resumed>) = 0 [pid 4996] rmdir("./36") = 0 [pid 4996] mkdir("./37", 0777./strace-static-x86_64: Process 6110 attached ) = 0 [pid 4996] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 6110] set_robust_list(0x7f5c2b8109e0, 24 [pid 4996] ioctl(3, LOOP_CLR_FD [pid 6103] <... futex resumed>) = 1 [pid 6101] <... futex resumed>) = 0 [pid 4996] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6110] <... set_robust_list resumed>) = 0 [pid 4996] close(3 [pid 6110] memfd_create("syzkaller", 0 [pid 4996] <... close resumed>) = 0 [pid 6110] <... memfd_create resumed>) = 3 [ 128.465293][ T6090] EXT4-fs (loop5): free_blocks=2415919104 [ 128.474461][ T26] audit: type=1804 audit(1687834598.232:970): pid=6090 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor113" name="/root/syzkaller.drywye/35/file0/bus" dev="loop5" ino=18 res=1 errno=0 [pid 4996] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [ 128.498388][ T26] audit: type=1804 audit(1687834598.232:971): pid=6090 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor113" name="/root/syzkaller.drywye/35/file0/bus" dev="loop5" ino=18 res=1 errno=0 [ 128.508531][ T6090] EXT4-fs (loop5): dirty_blocks=16 [pid 6110] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6103] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6101] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] <... umount2 resumed>) = 0 [pid 6110] <... mmap resumed>) = 0x7f5c233f0000 [pid 6101] <... futex resumed>) = 0 [pid 4996] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6111 ./strace-static-x86_64: Process 6111 attached [pid 6110] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6106] <... write resumed>) = 1048576 [pid 6104] <... ioctl resumed>) = 0 [pid 6103] <... write resumed>) = 9 [pid 6101] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6090] <... sendfile resumed>) = 63 [pid 4995] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6111] set_robust_list(0x555556fb95e0, 24 [pid 6106] munmap(0x7f5c233f0000, 1048576 [pid 6104] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6103] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6101] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6090] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6111] <... set_robust_list resumed>) = 0 [pid 6104] <... futex resumed>) = 0 [pid 6103] <... futex resumed>) = 0 [pid 6101] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6104] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6103] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6101] <... futex resumed>) = 0 [pid 6111] chdir("./37" [pid 6106] <... munmap resumed>) = 0 [pid 6103] <... openat resumed>) = 5 [pid 6101] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6090] <... futex resumed>) = 0 [pid 4995] lstat("./35/file0", [pid 6111] <... chdir resumed>) = 0 [pid 6106] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6103] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6101] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6090] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6085] exit_group(0 [pid 6111] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6104] <... futex resumed>) = ? [pid 6103] <... futex resumed>) = 0 [pid 6101] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6090] <... futex resumed>) = ? [pid 6085] <... exit_group resumed>) = ? [pid 4995] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6106] <... openat resumed>) = 4 [pid 6111] <... prctl resumed>) = 0 [pid 6106] ioctl(4, LOOP_SET_FD, 3 [pid 6104] +++ exited with 0 +++ [pid 6103] open("./bus", O_RDWR [pid 6101] <... futex resumed>) = 0 [pid 6090] +++ exited with 0 +++ [pid 4995] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6111] setpgid(0, 0 [pid 6106] <... ioctl resumed>) = 0 [pid 6103] <... open resumed>) = 6 [pid 6101] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6085] +++ exited with 0 +++ [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6111] <... setpgid resumed>) = 0 [pid 6106] close(3 [pid 6103] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6101] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6085, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 4995] openat(AT_FDCWD, "./35/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6111] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6103] <... futex resumed>) = 0 [pid 6101] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] <... openat resumed>) = 4 [pid 6111] <... openat resumed>) = 3 [pid 6103] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6101] <... futex resumed>) = 0 [pid 4995] fstat(4, [pid 6111] write(3, "1000", 4 [pid 6110] <... write resumed>) = 1048576 [pid 6106] <... close resumed>) = 0 [pid 6103] <... mmap resumed>) = 0x20000000 [pid 6101] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6111] <... write resumed>) = 4 [pid 6110] munmap(0x7f5c233f0000, 1048576 [pid 6106] mkdir("./file0", 0777 [pid 6103] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6101] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4995] getdents64(4, [pid 6111] close(3 [pid 6110] <... munmap resumed>) = 0 [pid 6106] <... mkdir resumed>) = 0 [pid 6103] <... futex resumed>) = 0 [pid 6101] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 6111] <... close resumed>) = 0 [pid 6110] openat(AT_FDCWD, "/dev/loop3", O_RDWR [ 128.563184][ T6090] EXT4-fs (loop5): Block reservation details [ 128.569424][ T6090] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 128.599097][ T6106] loop4: detected capacity change from 0 to 2048 [pid 6106] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6103] sendfile(4, 5, NULL, 2147483713 [pid 6101] <... futex resumed>) = 0 [pid 4999] umount2("./35", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] getdents64(4, [pid 6111] symlink("/dev/binderfs", "./binderfs" [pid 6110] <... openat resumed>) = 4 [pid 6101] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4995] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 6111] <... symlink resumed>) = 0 [pid 6110] ioctl(4, LOOP_SET_FD, 3 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] close(4 [pid 6111] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] <... close resumed>) = 0 [pid 6111] <... futex resumed>) = 0 [pid 4995] rmdir("./35/file0" [pid 6111] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4995] <... rmdir resumed>) = 0 [pid 6111] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 4995] getdents64(3, [pid 6111] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 4995] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 6111] <... mprotect resumed>) = 0 [pid 4995] close(3 [pid 6111] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4995] <... close resumed>) = 0 [pid 4995] rmdir("./35" [pid 6111] <... clone resumed>, parent_tid=[6112], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6112 [pid 4995] <... rmdir resumed>) = 0 [pid 6111] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] mkdir("./36", 0777 [pid 6111] <... futex resumed>) = 0 [pid 4995] <... mkdir resumed>) = 0 [pid 6111] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4995] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4995] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4995] close(3./strace-static-x86_64: Process 6112 attached [pid 4999] openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4995] <... close resumed>) = 0 [pid 4995] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556fb95d0) = 6113 [pid 6110] <... ioctl resumed>) = 0 [pid 6110] close(3) = 0 [pid 6110] mkdir("./file0", 0777) = 0 [pid 6110] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue"./strace-static-x86_64: Process 6113 attached [pid 6113] set_robust_list(0x555556fb95e0, 24) = 0 [pid 6113] chdir("./36") = 0 [pid 6113] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6113] setpgid(0, 0) = 0 [pid 6113] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6113] write(3, "1000", 4) = 4 [pid 6113] close(3) = 0 [pid 6112] set_robust_list(0x7f5c2b8109e0, 24 [pid 6113] symlink("/dev/binderfs", "./binderfs" [pid 4999] <... openat resumed>) = 3 [pid 6113] <... symlink resumed>) = 0 [pid 6112] <... set_robust_list resumed>) = 0 [pid 4999] fstat(3, [pid 6113] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6113] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c2b7f0000 [pid 6112] memfd_create("syzkaller", 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6113] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6101] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 128.621216][ T6110] loop3: detected capacity change from 0 to 2048 [ 128.622922][ T6103] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 128.645634][ T6103] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 128.659895][ T6103] EXT4-fs (loop0): This should not happen!! Data will be lost [ 128.659895][ T6103] [pid 6113] <... mprotect resumed>) = 0 [pid 6112] <... memfd_create resumed>) = 3 [pid 6101] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] getdents64(3, [pid 6113] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6115], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6115 [pid 6113] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6113] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6115 attached [pid 6115] set_robust_list(0x7f5c2b8109e0, 24) = 0 [pid 6115] memfd_create("syzkaller", 0) = 3 [pid 6115] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5c233f0000 [pid 6112] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6101] <... futex resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 6101] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6112] <... mmap resumed>) = 0x7f5c233f0000 [pid 6101] <... mmap resumed>) = 0x7f5c234cf000 [pid 4999] umount2("./35/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./35/binderfs", [pid 6101] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6101] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6118], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6118 [pid 6101] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] unlink("./35/binderfs" [pid 6101] <... futex resumed>) = 0 [pid 6101] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] <... unlink resumed>) = 0 [pid 4999] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6118 attached [pid 6118] set_robust_list(0x7f5c234ef9e0, 24) = 0 [pid 6118] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6115] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6112] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6106] <... mount resumed>) = 0 [pid 6106] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6106] chdir("./file0") = 0 [pid 6106] ioctl(4, LOOP_CLR_FD) = 0 [pid 6106] close(4) = 0 [pid 6106] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6106] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6105] <... futex resumed>) = 0 [pid 6105] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6105] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6106] <... futex resumed>) = 0 [pid 6106] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000) = 4 [ 128.673345][ T6103] EXT4-fs (loop0): Total free blocks count 0 [ 128.691225][ T5076] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 128.699999][ T6103] EXT4-fs (loop0): Free/Dirty block details [ 128.710828][ T5076] EXT4-fs (loop5): This should not happen!! Data will be lost [ 128.710828][ T5076] [pid 6106] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6112] <... write resumed>) = 1048576 [pid 6106] <... futex resumed>) = 1 [pid 6105] <... futex resumed>) = 0 [pid 6101] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6112] munmap(0x7f5c233f0000, 1048576 [pid 6110] <... mount resumed>) = 0 [pid 6106] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6105] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6110] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6112] <... munmap resumed>) = 0 [pid 6110] <... openat resumed>) = 3 [pid 6112] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6110] chdir("./file0" [pid 6106] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6105] <... futex resumed>) = 0 [pid 6110] <... chdir resumed>) = 0 [pid 6115] <... write resumed>) = 1048576 [pid 6112] <... openat resumed>) = 4 [pid 6110] ioctl(4, LOOP_CLR_FD [pid 6106] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6105] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6110] <... ioctl resumed>) = 0 [pid 6110] close(4) = 0 [pid 6110] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6110] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6112] ioctl(4, LOOP_SET_FD, 3 [pid 6107] <... futex resumed>) = 0 [pid 4999] <... umount2 resumed>) = 0 [pid 4999] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./35/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./35/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4999] close(4) = 0 [pid 6107] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6110] <... futex resumed>) = 0 [pid 6107] <... futex resumed>) = 1 [pid 6110] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6106] <... write resumed>) = 9 [pid 4999] rmdir("./35/file0" [pid 6110] <... open resumed>) = 4 [pid 6107] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6106] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... rmdir resumed>) = 0 [pid 6110] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6106] <... futex resumed>) = 1 [pid 6105] <... futex resumed>) = 0 [pid 4999] getdents64(3, [pid 6110] <... futex resumed>) = 0 [pid 6107] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6106] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6105] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 6110] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6107] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6106] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6105] <... futex resumed>) = 0 [pid 4999] close(3 [pid 6110] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6107] <... futex resumed>) = 0 [pid 6106] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6105] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6115] munmap(0x7f5c233f0000, 1048576 [pid 6110] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6107] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6106] <... openat resumed>) = 5 [pid 4999] <... close resumed>) = 0 [pid 6110] <... write resumed>) = 9 [pid 6106] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] rmdir("./35" [pid 6110] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6106] <... futex resumed>) = 1 [pid 6105] <... futex resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 6110] <... futex resumed>) = 1 [pid 6107] <... futex resumed>) = 0 [pid 6106] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6105] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] mkdir("./36", 0777 [pid 6115] <... munmap resumed>) = 0 [pid 6110] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6107] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6106] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6105] <... futex resumed>) = 0 [pid 4999] <... mkdir resumed>) = 0 [pid 6110] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6107] <... futex resumed>) = 0 [pid 6106] open("./bus", O_RDWR [pid 6105] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] openat(AT_FDCWD, "/dev/loop5", O_RDWR [ 128.741309][ T6103] EXT4-fs (loop0): free_blocks=2415919104 [ 128.752702][ T6103] EXT4-fs (loop0): dirty_blocks=16 [ 128.781404][ T6112] loop2: detected capacity change from 0 to 2048 [pid 6115] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6110] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6107] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6106] <... open resumed>) = 6 [pid 4999] <... openat resumed>) = 3 [pid 6115] <... openat resumed>) = 4 [pid 6110] <... openat resumed>) = 5 [pid 6106] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 6110] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6106] <... futex resumed>) = 1 [pid 6105] <... futex resumed>) = 0 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6110] <... futex resumed>) = 1 [pid 6107] <... futex resumed>) = 0 [pid 6106] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6105] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] close(3 [pid 6110] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6107] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6106] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6105] <... futex resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 6110] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6107] <... futex resumed>) = 0 [pid 6106] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6105] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6115] ioctl(4, LOOP_SET_FD, 3 [pid 6110] open("./bus", O_RDWR [pid 6107] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6106] <... mmap resumed>) = 0x20000000 [pid 6110] <... open resumed>) = 6 [pid 6106] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6120 [pid 6110] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6106] <... futex resumed>) = 1 [pid 6105] <... futex resumed>) = 0 [pid 6110] <... futex resumed>) = 1 [pid 6107] <... futex resumed>) = 0 [pid 6106] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6105] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6110] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6107] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6106] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6105] <... futex resumed>) = 0 [pid 6110] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6107] <... futex resumed>) = 0 [pid 6106] sendfile(4, 5, NULL, 2147483713 [pid 6105] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6112] <... ioctl resumed>) = 0 [pid 6110] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6107] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6110] <... mmap resumed>) = 0x20000000 ./strace-static-x86_64: Process 6120 attached [pid 6110] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6120] set_robust_list(0x555556fb95e0, 24 [pid 6110] <... futex resumed>) = 1 [pid 6107] <... futex resumed>) = 0 [pid 6120] <... set_robust_list resumed>) = 0 [pid 6110] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6107] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6120] chdir("./36" [pid 6110] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6107] <... futex resumed>) = 0 [pid 6120] <... chdir resumed>) = 0 [ 128.804383][ T6103] EXT4-fs (loop0): Block reservation details [ 128.814460][ T6115] loop1: detected capacity change from 0 to 2048 [ 128.821342][ T6106] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 128.835955][ T6103] EXT4-fs (loop0): i_reserved_data_blocks=1 [pid 6110] sendfile(4, 5, NULL, 2147483713 [pid 6107] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6120] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6118] <... ioctl resumed>) = 0 [pid 6115] <... ioctl resumed>) = 0 [pid 6112] close(3 [pid 6103] <... sendfile resumed>) = 63 [pid 6120] <... prctl resumed>) = 0 [pid 6118] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6120] setpgid(0, 0 [pid 6118] <... futex resumed>) = 0 [pid 6120] <... setpgid resumed>) = 0 [pid 6118] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6120] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6120] write(3, "1000", 4) = 4 [pid 6120] close(3) = 0 [pid 6120] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6120] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6120] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c2b7f0000 [pid 6120] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6120] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6121], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6121 [pid 6115] close(3 [pid 6112] <... close resumed>) = 0 [pid 6103] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6120] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6115] <... close resumed>) = 0 [pid 6105] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6120] <... futex resumed>) = 0 [pid 6105] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6120] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6115] mkdir("./file0", 0777 [pid 6112] mkdir("./file0", 0777 [pid 6105] <... futex resumed>) = 0 [pid 6103] <... futex resumed>) = 0 [pid 6105] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6101] exit_group(0 [pid 6118] <... futex resumed>) = ? [pid 6115] <... mkdir resumed>) = 0 [pid 6105] <... mmap resumed>) = 0x7f5c234cf000 [pid 6101] <... exit_group resumed>) = ? [pid 6118] +++ exited with 0 +++ [pid 6115] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6112] <... mkdir resumed>) = 0 [pid 6105] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 6121 attached ) = 0 [pid 6121] set_robust_list(0x7f5c2b8109e0, 24 [pid 6105] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6121] <... set_robust_list resumed>) = 0 [pid 6121] memfd_create("syzkaller", 0 [pid 6105] <... clone resumed>, parent_tid=[6122], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6122 [pid 6121] <... memfd_create resumed>) = 3 [pid 6105] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6121] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6105] <... futex resumed>) = 0 [pid 6121] <... mmap resumed>) = 0x7f5c233f0000 [pid 6105] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6112] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6103] +++ exited with 0 +++ [pid 6101] +++ exited with 0 +++ ./strace-static-x86_64: Process 6122 attached [pid 6122] set_robust_list(0x7f5c234ef9e0, 24) = 0 [pid 6122] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 4994] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6101, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=14 /* 0.14 s */} --- [pid 4994] umount2("./37", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4994] fstat(3, [pid 6121] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] getdents64(3, 0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4994] umount2("./37/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 128.848841][ T6106] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 128.856268][ T6110] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 128.861770][ T6106] EXT4-fs (loop4): This should not happen!! Data will be lost [ 128.861770][ T6106] [pid 4994] lstat("./37/binderfs", [pid 6115] <... mount resumed>) = 0 [pid 4994] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6107] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6107] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6107] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c234cf000 [pid 6107] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6107] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6127], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6127 [pid 6115] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6112] <... mount resumed>) = 0 [pid 6107] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] unlink("./37/binderfs" [pid 6107] <... futex resumed>) = 0 [pid 6107] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6127 attached [pid 6127] set_robust_list(0x7f5c234ef9e0, 24) = 0 [pid 6127] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6115] <... openat resumed>) = 3 [pid 6112] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6105] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4994] <... unlink resumed>) = 0 [pid 6115] chdir("./file0" [pid 6121] <... write resumed>) = 1048576 [pid 6112] <... openat resumed>) = 3 [pid 4994] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6115] <... chdir resumed>) = 0 [pid 6112] chdir("./file0" [ 128.913582][ T6110] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 128.922576][ T6106] EXT4-fs (loop4): Total free blocks count 0 [ 128.935823][ T6110] EXT4-fs (loop3): This should not happen!! Data will be lost [ 128.935823][ T6110] [ 128.944643][ T6106] EXT4-fs (loop4): Free/Dirty block details [ 128.947414][ T6110] EXT4-fs (loop3): Total free blocks count 0 [pid 6115] ioctl(4, LOOP_CLR_FD [pid 6112] <... chdir resumed>) = 0 [pid 6115] <... ioctl resumed>) = 0 [pid 6121] munmap(0x7f5c233f0000, 1048576) = 0 [pid 6121] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6121] ioctl(4, LOOP_SET_FD, 3 [pid 6115] close(4 [pid 6112] ioctl(4, LOOP_CLR_FD [pid 6107] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6107] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6115] <... close resumed>) = 0 [pid 6112] <... ioctl resumed>) = 0 [pid 6115] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6112] close(4 [pid 6115] <... futex resumed>) = 1 [pid 6113] <... futex resumed>) = 0 [pid 6112] <... close resumed>) = 0 [pid 6115] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6113] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6112] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6115] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6113] <... futex resumed>) = 0 [pid 6112] <... futex resumed>) = 1 [pid 6111] <... futex resumed>) = 0 [pid 6115] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6113] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6112] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6111] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6112] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6111] <... futex resumed>) = 0 [pid 6112] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6111] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6115] <... open resumed>) = 4 [ 128.960458][ T11] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 128.961040][ T6110] EXT4-fs (loop3): Free/Dirty block details [ 128.979067][ T6121] loop5: detected capacity change from 0 to 2048 [ 128.979561][ T6110] EXT4-fs (loop3): free_blocks=2415919104 [ 128.988472][ T6106] EXT4-fs (loop4): free_blocks=2415919104 [ 129.004136][ T11] EXT4-fs (loop0): This should not happen!! Data will be lost [ 129.004136][ T11] [pid 6112] <... open resumed>) = 4 [pid 6115] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6112] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6115] <... futex resumed>) = 1 [pid 6113] <... futex resumed>) = 0 [pid 6112] <... futex resumed>) = 1 [pid 6111] <... futex resumed>) = 0 [pid 6115] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6113] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6112] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6111] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6121] <... ioctl resumed>) = 0 [pid 6115] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6113] <... futex resumed>) = 0 [pid 6112] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6111] <... futex resumed>) = 0 [pid 6121] close(3 [pid 6115] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6113] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6112] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6111] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6121] <... close resumed>) = 0 [pid 6115] <... write resumed>) = 9 [pid 6112] <... write resumed>) = 9 [pid 6121] mkdir("./file0", 0777 [pid 6115] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6112] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6122] <... ioctl resumed>) = 0 [pid 6121] <... mkdir resumed>) = 0 [pid 6112] <... futex resumed>) = 1 [pid 6111] <... futex resumed>) = 0 [pid 6106] <... sendfile resumed>) = 63 [pid 6122] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6121] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6115] <... futex resumed>) = 1 [pid 6113] <... futex resumed>) = 0 [pid 6112] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6111] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6127] <... ioctl resumed>) = 0 [pid 6122] <... futex resumed>) = 0 [pid 6115] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6113] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6112] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6111] <... futex resumed>) = 0 [pid 6110] <... sendfile resumed>) = 63 [pid 6106] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6127] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6122] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6113] <... futex resumed>) = 0 [pid 6112] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6111] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6105] exit_group(0 [pid 6127] <... futex resumed>) = 0 [pid 6122] <... futex resumed>) = ? [pid 6115] <... openat resumed>) = 5 [pid 6113] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6112] <... openat resumed>) = 5 [pid 6110] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6106] <... futex resumed>) = ? [pid 6105] <... exit_group resumed>) = ? [pid 6127] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6122] +++ exited with 0 +++ [pid 6115] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6112] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6110] <... futex resumed>) = 0 [pid 6107] exit_group(0 [pid 6106] +++ exited with 0 +++ [pid 6105] +++ exited with 0 +++ [pid 4994] <... umount2 resumed>) = 0 [pid 6127] <... futex resumed>) = ? [pid 6112] <... futex resumed>) = 1 [pid 6111] <... futex resumed>) = 0 [pid 6107] <... exit_group resumed>) = ? [pid 4994] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6127] +++ exited with 0 +++ [pid 6112] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6111] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6112] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6111] <... futex resumed>) = 0 [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6112] open("./bus", O_RDWR [pid 6111] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6115] <... futex resumed>) = 1 [pid 6113] <... futex resumed>) = 0 [pid 6112] <... open resumed>) = 6 [pid 4994] lstat("./37/file0", [pid 6115] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6113] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6112] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6113] <... futex resumed>) = 0 [pid 6112] <... futex resumed>) = 1 [pid 6111] <... futex resumed>) = 0 [pid 4994] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6113] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6112] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6111] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6112] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6115] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6111] <... futex resumed>) = 0 [pid 6110] +++ exited with 0 +++ [pid 6107] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6105, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 4994] openat(AT_FDCWD, "./37/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6115] open("./bus", O_RDWR [ 129.005732][ T6110] EXT4-fs (loop3): dirty_blocks=16 [ 129.025773][ T6106] EXT4-fs (loop4): dirty_blocks=16 [ 129.031301][ T6106] EXT4-fs (loop4): Block reservation details [ 129.037691][ T6106] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 129.047683][ T6110] EXT4-fs (loop3): Block reservation details [ 129.054061][ T6110] EXT4-fs (loop3): i_reserved_data_blocks=1 [pid 6112] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6111] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] umount2("./35", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6107, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 4994] <... openat resumed>) = 4 [pid 6115] <... open resumed>) = 6 [pid 6112] <... mmap resumed>) = 0x20000000 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] restart_syscall(<... resuming interrupted clone ...> [pid 4994] fstat(4, [pid 6115] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6112] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] <... restart_syscall resumed>) = 0 [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6115] <... futex resumed>) = 1 [pid 6113] <... futex resumed>) = 0 [pid 6112] <... futex resumed>) = 1 [pid 6111] <... futex resumed>) = 0 [pid 4998] <... openat resumed>) = 3 [pid 4994] getdents64(4, [pid 6115] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6113] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6112] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6111] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] fstat(3, [pid 4994] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 6121] <... mount resumed>) = 0 [pid 6115] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6113] <... futex resumed>) = 0 [pid 6112] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6111] <... futex resumed>) = 0 [pid 4994] getdents64(4, [pid 6121] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6112] sendfile(4, 5, NULL, 2147483713 [pid 6111] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./36", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 6121] <... openat resumed>) = 3 [pid 6115] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6113] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] getdents64(3, [pid 4994] close(4 [pid 6121] chdir("./file0" [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] <... close resumed>) = 0 [pid 6121] <... chdir resumed>) = 0 [pid 4994] rmdir("./37/file0" [pid 6121] ioctl(4, LOOP_CLR_FD [pid 6115] <... mmap resumed>) = 0x20000000 [pid 4998] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4997] openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4994] <... rmdir resumed>) = 0 [pid 6121] <... ioctl resumed>) = 0 [pid 4997] <... openat resumed>) = 3 [pid 4994] getdents64(3, [pid 6121] close(4 [pid 4998] umount2("./35/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] fstat(3, [pid 4994] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 6121] <... close resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] close(3 [pid 6121] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] lstat("./35/binderfs", [pid 4997] getdents64(3, [pid 4994] <... close resumed>) = 0 [pid 6121] <... futex resumed>) = 1 [pid 6120] <... futex resumed>) = 0 [pid 4994] rmdir("./37" [pid 6121] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6120] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4994] <... rmdir resumed>) = 0 [pid 6121] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6120] <... futex resumed>) = 0 [pid 4994] mkdir("./38", 0777 [pid 6121] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6120] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4994] <... mkdir resumed>) = 0 [pid 4998] unlink("./35/binderfs" [pid 4994] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4998] <... unlink resumed>) = 0 [pid 4997] umount2("./36/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] ioctl(3, LOOP_CLR_FD [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4997] lstat("./36/binderfs", [pid 4994] close(3) = 0 [pid 4994] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6121] <... open resumed>) = 4 [pid 4998] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6121] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6115] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6130 [pid 6121] <... futex resumed>) = 1 [pid 6120] <... futex resumed>) = 0 [pid 6121] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6120] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6115] <... futex resumed>) = 1 [pid 6113] <... futex resumed>) = 0 [pid 4997] unlink("./36/binderfs" [pid 6121] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6120] <... futex resumed>) = 0 [pid 6113] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6121] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [ 129.131036][ T6112] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 129.154124][ T6115] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 6120] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6115] sendfile(4, 5, NULL, 2147483713 [pid 6113] <... futex resumed>) = 0 [pid 4997] <... unlink resumed>) = 0 [pid 6121] <... write resumed>) = 9 [pid 6113] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4997] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6121] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6120] <... futex resumed>) = 0 [pid 6121] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6120] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6121] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6120] <... futex resumed>) = 0 [pid 6121] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6120] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6111] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6111] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6111] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c234cf000 [pid 6111] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 6130 attached [pid 6121] <... openat resumed>) = 5 [pid 6111] <... mprotect resumed>) = 0 [pid 6121] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6121] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6113] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6113] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6113] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c234cf000 [pid 6113] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6113] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6130] set_robust_list(0x555556fb95e0, 24 [pid 6111] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6120] <... futex resumed>) = 0 [pid 6113] <... clone resumed>, parent_tid=[6131], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6131 [pid 6113] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6113] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6131 attached [pid 6131] set_robust_list(0x7f5c234ef9e0, 24) = 0 [pid 6131] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6130] <... set_robust_list resumed>) = 0 [pid 6120] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6132 attached [pid 6132] set_robust_list(0x7f5c234ef9e0, 24 [pid 6130] chdir("./38" [pid 6121] <... futex resumed>) = 0 [pid 6120] <... futex resumed>) = 1 [pid 6111] <... clone resumed>, parent_tid=[6132], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6132 [pid 6121] open("./bus", O_RDWR) = 6 [pid 6121] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6121] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6132] <... set_robust_list resumed>) = 0 [pid 6130] <... chdir resumed>) = 0 [pid 6120] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 129.169678][ T6112] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 129.170499][ T5076] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 129.182319][ T6112] EXT4-fs (loop2): This should not happen!! Data will be lost [ 129.182319][ T6112] [ 129.204475][ T6112] EXT4-fs (loop2): Total free blocks count 0 [ 129.210948][ T6112] EXT4-fs (loop2): Free/Dirty block details [ 129.217521][ T6112] EXT4-fs (loop2): free_blocks=2415919104 [ 129.223576][ T6112] EXT4-fs (loop2): dirty_blocks=16 [pid 6111] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6132] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6130] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6120] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6112] <... sendfile resumed>) = 63 [pid 6111] <... futex resumed>) = 0 [pid 6132] <... ioctl resumed>) = 0 [pid 6113] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6132] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6132] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6130] <... prctl resumed>) = 0 [pid 6120] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6112] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6111] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6130] setpgid(0, 0 [pid 6121] <... futex resumed>) = 0 [pid 6120] <... futex resumed>) = 1 [pid 6112] <... futex resumed>) = 0 [pid 6111] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6121] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 0 [pid 6121] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6120] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6112] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6111] exit_group(0 [pid 6120] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6132] <... futex resumed>) = ? [pid 6130] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6112] <... futex resumed>) = ? [pid 6111] <... exit_group resumed>) = ? [pid 6132] +++ exited with 0 +++ [pid 6120] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6112] +++ exited with 0 +++ [pid 6130] <... openat resumed>) = 3 [pid 6121] <... futex resumed>) = 0 [pid 6120] <... futex resumed>) = 1 [pid 6111] +++ exited with 0 +++ [pid 6121] sendfile(4, 5, NULL, 2147483713 [pid 4996] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6111, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=12 /* 0.12 s */} --- [pid 6130] write(3, "1000", 4 [pid 6120] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4996] umount2("./37", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4996] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] getdents64(3, 0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4996] umount2("./37/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] lstat("./37/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4996] unlink("./37/binderfs") = 0 [pid 4996] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6130] <... write resumed>) = 4 [ 129.276553][ T6115] EXT4-fs (loop1): Total free blocks count 0 [ 129.283563][ T6115] EXT4-fs (loop1): Free/Dirty block details [ 129.291489][ T11] EXT4-fs (loop3): This should not happen!! Data will be lost [ 129.291489][ T11] [ 129.292544][ T6115] EXT4-fs (loop1): free_blocks=2415919104 [ 129.310634][ T6121] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 6130] close(3) = 0 [pid 6130] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6130] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6120] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 129.326341][ T5076] EXT4-fs (loop4): This should not happen!! Data will be lost [ 129.326341][ T5076] [ 129.326360][ T6115] EXT4-fs (loop1): dirty_blocks=16 [ 129.337656][ T74] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 129.342206][ T6121] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 129.366838][ T6115] EXT4-fs (loop1): Block reservation details [ 129.376453][ T6115] EXT4-fs (loop1): i_reserved_data_blocks=1 [pid 6130] <... futex resumed>) = 0 [pid 6120] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6130] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6120] <... futex resumed>) = 0 [pid 6130] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6120] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6130] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6120] <... mmap resumed>) = 0x7f5c234cf000 [pid 6130] <... mprotect resumed>) = 0 [pid 6120] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 6130] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6120] <... mprotect resumed>) = 0 [pid 6130] <... clone resumed>, parent_tid=[6133], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6133 [pid 6120] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6130] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6133 attached ) = 0 [pid 6130] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6120] <... clone resumed>, parent_tid=[6134], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6134 [pid 6133] set_robust_list(0x7f5c2b8109e0, 24 [pid 6131] <... ioctl resumed>) = 0 [pid 6120] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6115] <... sendfile resumed>) = 63 [pid 4998] <... umount2 resumed>) = 0 [pid 6133] <... set_robust_list resumed>) = 0 [pid 6131] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6120] <... futex resumed>) = 0 [pid 6115] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6113] exit_group(0 [pid 4998] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6133] memfd_create("syzkaller", 0 [pid 6131] <... futex resumed>) = ? [pid 6120] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6115] <... futex resumed>) = ? [pid 6113] <... exit_group resumed>) = ? [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6131] +++ exited with 0 +++ [pid 6133] <... memfd_create resumed>) = 3 [pid 6133] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6115] +++ exited with 0 +++ [pid 6113] +++ exited with 0 +++ [pid 4998] lstat("./35/file0", [pid 4997] <... umount2 resumed>) = 0 [pid 6133] <... mmap resumed>) = 0x7f5c233f0000 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6113, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- ./strace-static-x86_64: Process 6134 attached [pid 6134] set_robust_list(0x7f5c234ef9e0, 24) = 0 [pid 6134] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6133] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4998] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./35/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4995] umount2("./36", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... openat resumed>) = 4 [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./36/file0", [pid 4998] fstat(4, [pid 4995] openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./36/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] <... openat resumed>) = 3 [pid 4998] getdents64(4, [pid 4995] fstat(3, [pid 4998] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, [pid 4995] getdents64(3, [pid 4998] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4995] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4998] close(4) = 0 [pid 4997] <... openat resumed>) = 4 [pid 4995] umount2("./36/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] rmdir("./35/file0" [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(4, [pid 4998] <... rmdir resumed>) = 0 [pid 4997] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4995] lstat("./36/binderfs", [pid 4998] getdents64(3, [pid 4997] getdents64(4, [pid 4995] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4995] unlink("./36/binderfs" [pid 4997] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4997] close(4 [pid 4995] <... unlink resumed>) = 0 [pid 4998] close(3 [pid 4997] <... close resumed>) = 0 [pid 4995] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] rmdir("./36/file0" [pid 4998] <... close resumed>) = 0 [pid 4997] <... rmdir resumed>) = 0 [pid 4998] rmdir("./35") = 0 [pid 4997] getdents64(3, 0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4997] close(3) = 0 [pid 4997] rmdir("./36") = 0 [pid 4997] mkdir("./37", 0777) = 0 [pid 4997] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 4997] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4997] close(3) = 0 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556fb95d0) = 6135 [ 129.426755][ T74] EXT4-fs (loop2): This should not happen!! Data will be lost [ 129.426755][ T74] [ 129.439373][ T6121] EXT4-fs (loop5): This should not happen!! Data will be lost [ 129.439373][ T6121] [ 129.447817][ T5608] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 6133] <... write resumed>) = 1048576 [pid 6120] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4998] mkdir("./36", 0777./strace-static-x86_64: Process 6135 attached [pid 6135] set_robust_list(0x555556fb95e0, 24) = 0 [pid 6135] chdir("./37") = 0 [pid 6135] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6135] setpgid(0, 0) = 0 [pid 6135] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6133] munmap(0x7f5c233f0000, 1048576 [pid 4998] <... mkdir resumed>) = 0 [pid 6135] write(3, "1000", 4) = 4 [pid 6135] close(3 [pid 6133] <... munmap resumed>) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 6133] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 4998] ioctl(3, LOOP_CLR_FD [pid 6135] <... close resumed>) = 0 [pid 6135] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6135] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6135] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c2b7f0000 [pid 6135] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6135] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6136 attached [pid 6133] <... openat resumed>) = 4 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [ 129.463837][ T5608] EXT4-fs (loop1): This should not happen!! Data will be lost [ 129.463837][ T5608] [ 129.481088][ T6121] EXT4-fs (loop5): Total free blocks count 0 [ 129.489200][ T6121] EXT4-fs (loop5): Free/Dirty block details [ 129.500470][ T6121] EXT4-fs (loop5): free_blocks=2415919104 [ 129.507580][ T6121] EXT4-fs (loop5): dirty_blocks=16 [ 129.512815][ T6121] EXT4-fs (loop5): Block reservation details [ 129.519336][ T6121] EXT4-fs (loop5): i_reserved_data_blocks=1 [pid 6135] <... clone resumed>, parent_tid=[6136], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6136 [pid 6136] set_robust_list(0x7f5c2b8109e0, 24 [pid 6133] ioctl(4, LOOP_SET_FD, 3 [pid 6136] <... set_robust_list resumed>) = 0 [pid 4998] close(3 [pid 6135] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6135] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4996] <... umount2 resumed>) = 0 [pid 4996] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6133] <... ioctl resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4996] lstat("./37/file0", [pid 6136] memfd_create("syzkaller", 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4996] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] openat(AT_FDCWD, "./37/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4996] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] getdents64(4, 0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4996] getdents64(4, 0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4996] close(4) = 0 [pid 4996] rmdir("./37/file0" [pid 6136] <... memfd_create resumed>) = 3 [pid 6136] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4998] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6137 [pid 6134] <... ioctl resumed>) = 0 [pid 6133] close(3 [pid 6121] <... sendfile resumed>) = 63 ./strace-static-x86_64: Process 6137 attached [pid 6134] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6136] <... mmap resumed>) = 0x7f5c233f0000 [pid 6134] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6137] set_robust_list(0x555556fb95e0, 24 [pid 6133] <... close resumed>) = 0 [pid 6121] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... rmdir resumed>) = 0 [pid 6137] <... set_robust_list resumed>) = 0 [pid 6133] mkdir("./file0", 0777 [pid 6121] <... futex resumed>) = 0 [pid 6120] exit_group(0 [pid 6134] <... futex resumed>) = ? [pid 6120] <... exit_group resumed>) = ? [pid 4996] getdents64(3, [pid 6134] +++ exited with 0 +++ [pid 4996] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4996] close(3) = 0 [pid 4996] rmdir("./37") = 0 [pid 6133] <... mkdir resumed>) = 0 [pid 6133] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 4996] mkdir("./38", 0777) = 0 [pid 6137] chdir("./36" [pid 4996] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6137] <... chdir resumed>) = 0 [pid 6137] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6121] +++ exited with 0 +++ [pid 6120] +++ exited with 0 +++ [pid 4996] <... openat resumed>) = 3 [pid 6137] <... prctl resumed>) = 0 [pid 4996] ioctl(3, LOOP_CLR_FD [pid 6137] setpgid(0, 0 [pid 6136] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6120, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 4996] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6137] <... setpgid resumed>) = 0 [pid 4999] restart_syscall(<... resuming interrupted clone ...> [pid 4996] close(3 [pid 4995] <... umount2 resumed>) = 0 [pid 4996] <... close resumed>) = 0 [ 129.527190][ T6133] loop0: detected capacity change from 0 to 2048 [pid 4996] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6137] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4999] <... restart_syscall resumed>) = 0 [pid 4996] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6139 [pid 6137] <... openat resumed>) = 3 [pid 4999] umount2("./36", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6137] write(3, "1000", 4./strace-static-x86_64: Process 6139 attached [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6137] <... write resumed>) = 4 [pid 6137] close(3 [pid 4999] openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6137] <... close resumed>) = 0 [pid 4999] <... openat resumed>) = 3 [pid 6139] set_robust_list(0x555556fb95e0, 24 [pid 6137] symlink("/dev/binderfs", "./binderfs" [pid 4999] fstat(3, [pid 4995] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6139] <... set_robust_list resumed>) = 0 [pid 6139] chdir("./38" [pid 6137] <... symlink resumed>) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6139] <... chdir resumed>) = 0 [pid 6137] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] getdents64(3, [pid 6139] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6137] <... futex resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4995] lstat("./36/file0", [pid 6139] <... prctl resumed>) = 0 [pid 6137] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4999] umount2("./36/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6139] setpgid(0, 0 [pid 6137] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6139] <... setpgid resumed>) = 0 [pid 6137] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 4999] lstat("./36/binderfs", [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6139] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6137] <... mprotect resumed>) = 0 [pid 4995] openat(AT_FDCWD, "./36/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6139] <... openat resumed>) = 3 [pid 6137] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4995] <... openat resumed>) = 4 [pid 6139] write(3, "1000", 4 [pid 4999] unlink("./36/binderfs" [pid 4995] fstat(4, [pid 6139] <... write resumed>) = 4 [pid 6137] <... clone resumed>, parent_tid=[6140], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6140 [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6139] close(3 [pid 6137] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... unlink resumed>) = 0 [pid 4995] getdents64(4, [pid 6139] <... close resumed>) = 0 [pid 6137] <... futex resumed>) = 0 [pid 4999] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 6139] symlink("/dev/binderfs", "./binderfs" [pid 6137] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4995] getdents64(4, [pid 6139] <... symlink resumed>) = 0 [pid 4995] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 6139] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] close(4 [pid 6139] <... futex resumed>) = 0 [pid 4995] <... close resumed>) = 0 [pid 6139] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4995] rmdir("./36/file0"./strace-static-x86_64: Process 6140 attached [pid 6139] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6136] <... write resumed>) = 1048576 [pid 6133] <... mount resumed>) = 0 [pid 6140] set_robust_list(0x7f5c2b8109e0, 24 [pid 6139] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6136] munmap(0x7f5c233f0000, 1048576 [pid 6133] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 4995] <... rmdir resumed>) = 0 [pid 6140] <... set_robust_list resumed>) = 0 [pid 6136] <... munmap resumed>) = 0 [pid 6133] <... openat resumed>) = 3 [pid 6140] memfd_create("syzkaller", 0 [pid 6139] <... mprotect resumed>) = 0 [pid 4995] getdents64(3, [pid 6140] <... memfd_create resumed>) = 3 [pid 6139] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6136] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6133] chdir("./file0" [pid 4995] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 6140] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6136] <... openat resumed>) = 4 [pid 6133] <... chdir resumed>) = 0 [pid 4995] close(3 [pid 6140] <... mmap resumed>) = 0x7f5c233f0000 [pid 6139] <... clone resumed>, parent_tid=[6142], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6142 [pid 6133] ioctl(4, LOOP_CLR_FD [pid 4995] <... close resumed>) = 0 [pid 6136] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 6142 attached [pid 6139] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] rmdir("./36" [pid 6139] <... futex resumed>) = 0 [pid 6133] <... ioctl resumed>) = 0 [pid 4995] <... rmdir resumed>) = 0 [pid 6139] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4995] mkdir("./37", 0777) = 0 [pid 4995] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4995] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4995] close(3 [pid 6133] close(4 [pid 4995] <... close resumed>) = 0 [pid 6133] <... close resumed>) = 0 [pid 4995] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6133] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6130] <... futex resumed>) = 0 [pid 6133] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6130] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6133] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6130] <... futex resumed>) = 0 [pid 4995] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6143 [pid 6142] set_robust_list(0x7f5c2b8109e0, 24 [pid 6133] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6130] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6142] <... set_robust_list resumed>) = 0 [pid 6142] memfd_create("syzkaller", 0) = 3 [pid 6133] <... open resumed>) = 4 [pid 6142] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6133] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6142] <... mmap resumed>) = 0x7f5c233f0000 [pid 6133] <... futex resumed>) = 1 [pid 6130] <... futex resumed>) = 0 [pid 6142] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6133] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6130] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6133] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6130] <... futex resumed>) = 0 [pid 6136] <... ioctl resumed>) = 0 [pid 6133] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6130] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6143 attached [pid 6140] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6136] close(3 [pid 6133] <... write resumed>) = 9 [pid 6136] <... close resumed>) = 0 [pid 6133] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6143] set_robust_list(0x555556fb95e0, 24 [pid 6136] mkdir("./file0", 0777 [pid 6133] <... futex resumed>) = 1 [pid 6130] <... futex resumed>) = 0 [pid 6143] <... set_robust_list resumed>) = 0 [pid 6136] <... mkdir resumed>) = 0 [pid 6133] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6130] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6136] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6133] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6130] <... futex resumed>) = 0 [pid 6143] chdir("./37" [pid 6133] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6130] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6143] <... chdir resumed>) = 0 [pid 6133] <... openat resumed>) = 5 [pid 4999] <... umount2 resumed>) = 0 [ 129.616492][ T5608] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 129.635674][ T5608] EXT4-fs (loop5): This should not happen!! Data will be lost [ 129.635674][ T5608] [ 129.652404][ T6136] loop3: detected capacity change from 0 to 2048 [pid 6143] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6133] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6143] <... prctl resumed>) = 0 [pid 6133] <... futex resumed>) = 1 [pid 6130] <... futex resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6143] setpgid(0, 0 [pid 6142] <... write resumed>) = 1048576 [pid 6133] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6130] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] lstat("./36/file0", [pid 6143] <... setpgid resumed>) = 0 [pid 6133] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6130] <... futex resumed>) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6143] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6133] open("./bus", O_RDWR [pid 6130] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6143] <... openat resumed>) = 3 [pid 6133] <... open resumed>) = 6 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6143] write(3, "1000", 4 [pid 6133] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] openat(AT_FDCWD, "./36/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6143] <... write resumed>) = 4 [pid 6133] <... futex resumed>) = 1 [pid 6130] <... futex resumed>) = 0 [pid 4999] <... openat resumed>) = 4 [pid 6143] close(3 [pid 6140] <... write resumed>) = 1048576 [pid 6133] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6130] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] fstat(4, [pid 6143] <... close resumed>) = 0 [pid 6140] munmap(0x7f5c233f0000, 1048576 [pid 6133] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6130] <... futex resumed>) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6143] symlink("/dev/binderfs", "./binderfs" [pid 6140] <... munmap resumed>) = 0 [pid 6133] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6130] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] getdents64(4, [pid 6143] <... symlink resumed>) = 0 [pid 6140] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6133] <... mmap resumed>) = 0x20000000 [pid 4999] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 6143] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6133] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6143] <... futex resumed>) = 0 [pid 6136] <... mount resumed>) = 0 [pid 6140] <... openat resumed>) = 4 [pid 6133] <... futex resumed>) = 1 [pid 6130] <... futex resumed>) = 0 [pid 4999] getdents64(4, [pid 6143] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6140] ioctl(4, LOOP_SET_FD, 3 [pid 6136] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6133] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6130] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 6143] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6136] <... openat resumed>) = 3 [pid 6133] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6130] <... futex resumed>) = 0 [pid 6133] sendfile(4, 5, NULL, 2147483713 [pid 6130] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6143] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6140] <... ioctl resumed>) = 0 [pid 6136] chdir("./file0" [pid 4999] close(4 [pid 6143] <... mprotect resumed>) = 0 [pid 6142] munmap(0x7f5c233f0000, 1048576 [pid 6140] close(3 [pid 6136] <... chdir resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 6143] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6140] <... close resumed>) = 0 [pid 6136] ioctl(4, LOOP_CLR_FD [pid 4999] rmdir("./36/file0" [pid 6140] mkdir("./file0", 0777 [pid 6136] <... ioctl resumed>) = 0 [pid 6142] <... munmap resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 6142] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6140] <... mkdir resumed>) = 0 [pid 6136] close(4 [pid 4999] getdents64(3, [pid 6143] <... clone resumed>, parent_tid=[6146], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6146 [pid 6142] <... openat resumed>) = 4 [ 129.738869][ T6140] loop4: detected capacity change from 0 to 2048 [ 129.745239][ T6133] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 129.770278][ T6133] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 6142] ioctl(4, LOOP_SET_FD, 3 [pid 6143] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6140] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6136] <... close resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 6143] <... futex resumed>) = 0 [pid 6143] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6136] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] close(3./strace-static-x86_64: Process 6146 attached [pid 6136] <... futex resumed>) = 1 [pid 6135] <... futex resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 6146] set_robust_list(0x7f5c2b8109e0, 24 [pid 6136] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6135] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] rmdir("./36" [pid 6146] <... set_robust_list resumed>) = 0 [pid 6142] <... ioctl resumed>) = 0 [pid 6136] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6135] <... futex resumed>) = 0 [pid 6130] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4999] <... rmdir resumed>) = 0 [pid 6146] memfd_create("syzkaller", 0 [pid 6135] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6130] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6146] <... memfd_create resumed>) = 3 [pid 6142] close(3 [pid 6136] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6130] <... futex resumed>) = 0 [pid 4999] mkdir("./37", 0777 [pid 6146] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6142] <... close resumed>) = 0 [pid 6140] <... mount resumed>) = 0 [ 129.783058][ T6133] EXT4-fs (loop0): This should not happen!! Data will be lost [ 129.783058][ T6133] [ 129.787649][ T6142] loop2: detected capacity change from 0 to 2048 [ 129.814483][ T6133] EXT4-fs (loop0): Total free blocks count 0 [ 129.821167][ T6133] EXT4-fs (loop0): Free/Dirty block details [ 129.827330][ T6133] EXT4-fs (loop0): free_blocks=2415919104 [ 129.833113][ T6133] EXT4-fs (loop0): dirty_blocks=16 [pid 6136] <... open resumed>) = 4 [pid 6130] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4999] <... mkdir resumed>) = 0 [pid 6146] <... mmap resumed>) = 0x7f5c233f0000 [pid 6142] mkdir("./file0", 0777 [pid 6140] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6136] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6130] <... mmap resumed>) = 0x7f5c234cf000 [pid 4999] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6146] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6133] <... sendfile resumed>) = 63 [pid 6142] <... mkdir resumed>) = 0 [pid 6133] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6140] <... openat resumed>) = 3 [pid 6133] <... futex resumed>) = 0 [pid 6133] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4999] <... openat resumed>) = 3 [pid 6142] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6140] chdir("./file0" [pid 6130] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 4999] ioctl(3, LOOP_CLR_FD [pid 6135] <... futex resumed>) = 0 [pid 6135] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6135] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6140] <... chdir resumed>) = 0 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6140] ioctl(4, LOOP_CLR_FD [pid 6136] <... futex resumed>) = 1 [pid 6130] <... mprotect resumed>) = 0 [pid 6140] <... ioctl resumed>) = 0 [pid 4999] close(3 [pid 6140] close(4 [pid 6130] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4999] <... close resumed>) = 0 [pid 6136] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6140] <... close resumed>) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6140] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6137] <... futex resumed>) = 0 [pid 6137] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6137] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6149 attached [pid 6149] set_robust_list(0x7f5c234ef9e0, 24 [pid 6136] <... write resumed>) = 9 [pid 6136] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6135] <... futex resumed>) = 0 [pid 6135] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6136] <... futex resumed>) = 1 [pid 6135] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6136] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6140] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6130] <... clone resumed>, parent_tid=[6149], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6149 [pid 6136] <... openat resumed>) = 5 [pid 6130] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6136] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6130] <... futex resumed>) = 0 [pid 6136] <... futex resumed>) = 1 [pid 6135] <... futex resumed>) = 0 [pid 6136] open("./bus", O_RDWR [pid 6135] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6130] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6140] <... open resumed>) = 4 [pid 6136] <... open resumed>) = 6 [pid 6135] <... futex resumed>) = 0 [pid 4999] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6150 [pid 6136] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6135] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6136] <... futex resumed>) = 0 [pid 6135] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6136] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6140] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6135] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6150 attached [pid 6149] <... set_robust_list resumed>) = 0 [pid 6140] <... futex resumed>) = 1 [pid 6137] <... futex resumed>) = 0 [pid 6136] <... mmap resumed>) = 0x20000000 [pid 6135] <... futex resumed>) = 0 [pid 6150] set_robust_list(0x555556fb95e0, 24 [pid 6149] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6146] <... write resumed>) = 1048576 [pid 6140] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6137] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6136] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6135] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6150] <... set_robust_list resumed>) = 0 [pid 6149] <... ioctl resumed>) = 0 [pid 6140] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6137] <... futex resumed>) = 0 [pid 6136] <... futex resumed>) = 0 [pid 6135] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6150] chdir("./37" [pid 6149] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6140] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6137] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6136] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6135] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6150] <... chdir resumed>) = 0 [pid 6149] <... futex resumed>) = 1 [pid 6140] <... write resumed>) = 9 [pid 6136] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6135] <... futex resumed>) = 0 [pid 6130] <... futex resumed>) = 0 [ 129.838599][ T6133] EXT4-fs (loop0): Block reservation details [ 129.847491][ T6133] EXT4-fs (loop0): i_reserved_data_blocks=1 [pid 6150] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6149] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6140] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6136] sendfile(4, 5, NULL, 2147483713 [pid 6135] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6130] exit_group(0 [pid 6150] <... prctl resumed>) = 0 [pid 6149] <... futex resumed>) = ? [pid 6146] munmap(0x7f5c233f0000, 1048576 [pid 6140] <... futex resumed>) = 1 [pid 6137] <... futex resumed>) = 0 [pid 6133] <... futex resumed>) = ? [pid 6130] <... exit_group resumed>) = ? [pid 6150] setpgid(0, 0 [pid 6149] +++ exited with 0 +++ [pid 6146] <... munmap resumed>) = 0 [pid 6142] <... mount resumed>) = 0 [pid 6140] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6137] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6133] +++ exited with 0 +++ [pid 6130] +++ exited with 0 +++ [pid 6146] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6140] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6137] <... futex resumed>) = 0 [pid 6146] <... openat resumed>) = 4 [pid 6140] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6137] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4994] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6130, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 6146] ioctl(4, LOOP_SET_FD, 3 [pid 6140] <... openat resumed>) = 5 [pid 4994] restart_syscall(<... resuming interrupted clone ...> [pid 6150] <... setpgid resumed>) = 0 [pid 6142] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6140] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] <... restart_syscall resumed>) = 0 [pid 6150] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6142] <... openat resumed>) = 3 [pid 6140] <... futex resumed>) = 1 [pid 6137] <... futex resumed>) = 0 [pid 6150] <... openat resumed>) = 3 [pid 6142] chdir("./file0" [pid 6140] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6137] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6150] write(3, "1000", 4 [pid 6142] <... chdir resumed>) = 0 [pid 6140] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6137] <... futex resumed>) = 0 [pid 4994] umount2("./38", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6150] <... write resumed>) = 4 [pid 6142] ioctl(4, LOOP_CLR_FD [ 129.902454][ T6136] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 129.907137][ T6146] loop1: detected capacity change from 0 to 2048 [ 129.924509][ T6136] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 129.937847][ T6136] EXT4-fs (loop3): This should not happen!! Data will be lost [ 129.937847][ T6136] [pid 6140] open("./bus", O_RDWR [pid 6137] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6150] close(3 [pid 6142] <... ioctl resumed>) = 0 [pid 6140] <... open resumed>) = 6 [pid 6135] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4994] openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6150] <... close resumed>) = 0 [pid 6142] close(4 [pid 6140] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6135] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] <... openat resumed>) = 3 [pid 6150] symlink("/dev/binderfs", "./binderfs" [pid 6142] <... close resumed>) = 0 [pid 6140] <... futex resumed>) = 1 [pid 6137] <... futex resumed>) = 0 [pid 6135] <... futex resumed>) = 0 [pid 4994] fstat(3, [pid 6150] <... symlink resumed>) = 0 [pid 6142] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6140] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6137] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6135] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6150] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6142] <... futex resumed>) = 1 [pid 6140] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6139] <... futex resumed>) = 0 [pid 6137] <... futex resumed>) = 0 [pid 6135] <... mmap resumed>) = 0x7f5c234cf000 [pid 4994] getdents64(3, [pid 6150] <... futex resumed>) = 0 [pid 6142] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6140] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6139] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6137] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6135] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 4994] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 6150] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6146] <... ioctl resumed>) = 0 [pid 6142] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6140] <... mmap resumed>) = 0x20000000 [pid 6139] <... futex resumed>) = 0 [pid 6135] <... mprotect resumed>) = 0 [pid 4994] umount2("./38/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6150] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6146] close(3 [pid 6142] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6140] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6139] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6136] <... sendfile resumed>) = 63 [pid 6135] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6150] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6146] <... close resumed>) = 0 [pid 6142] <... open resumed>) = 4 [pid 6140] <... futex resumed>) = 1 [pid 6137] <... futex resumed>) = 0 [pid 6136] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] lstat("./38/binderfs", [pid 6150] <... mprotect resumed>) = 0 [pid 6140] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6137] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6136] <... futex resumed>) = 0 [pid 6150] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6140] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6136] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6135] <... clone resumed>, parent_tid=[6153], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6153 [pid 6137] <... futex resumed>) = 0 [pid 4994] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [ 129.948890][ T6136] EXT4-fs (loop3): Total free blocks count 0 [ 129.954950][ T6136] EXT4-fs (loop3): Free/Dirty block details [ 129.961946][ T6136] EXT4-fs (loop3): free_blocks=2415919104 [ 129.967785][ T6136] EXT4-fs (loop3): dirty_blocks=16 [ 129.973633][ T6136] EXT4-fs (loop3): Block reservation details [ 129.980245][ T6136] EXT4-fs (loop3): i_reserved_data_blocks=1 [pid 6142] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6146] mkdir("./file0", 0777 [pid 6142] <... futex resumed>) = 1 [pid 6140] sendfile(4, 5, NULL, 2147483713 [pid 6139] <... futex resumed>) = 0 [pid 6137] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6135] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] unlink("./38/binderfs"./strace-static-x86_64: Process 6153 attached [pid 6150] <... clone resumed>, parent_tid=[6154], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6154 [pid 6142] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6139] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6135] <... futex resumed>) = 0 [pid 4994] <... unlink resumed>) = 0 [pid 6135] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6139] <... futex resumed>) = 0 [pid 6150] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6153] set_robust_list(0x7f5c234ef9e0, 24 [pid 6139] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6153] <... set_robust_list resumed>) = 0 [pid 6150] <... futex resumed>) = 0 [pid 6142] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6153] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6150] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6142] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6153] <... ioctl resumed>) = 0 [pid 6153] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6142] <... write resumed>) = 9 [pid 6135] <... futex resumed>) = 0 [pid 6153] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6142] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6135] exit_group(0 [pid 6139] <... futex resumed>) = 0 [pid 6139] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6139] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6142] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6135] <... exit_group resumed>) = ? [pid 6153] <... futex resumed>) = ? [pid 6136] <... futex resumed>) = ? [pid 6142] <... openat resumed>) = 5 [ 130.003813][ T6140] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 130.022493][ T6140] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 130.023511][ T5608] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 ./strace-static-x86_64: Process 6154 attached [pid 6153] +++ exited with 0 +++ [pid 6146] <... mkdir resumed>) = 0 [pid 6142] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6137] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6136] +++ exited with 0 +++ [pid 6135] +++ exited with 0 +++ [pid 6154] set_robust_list(0x7f5c2b8109e0, 24 [pid 6146] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6142] <... futex resumed>) = 1 [pid 6139] <... futex resumed>) = 0 [pid 6137] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6154] <... set_robust_list resumed>) = 0 [pid 6154] memfd_create("syzkaller", 0) = 3 [pid 6154] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5c233f0000 [pid 6142] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6139] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6137] <... futex resumed>) = 0 [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6135, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6142] <... futex resumed>) = 0 [pid 6139] <... futex resumed>) = 1 [pid 6142] open("./bus", O_RDWR [pid 6139] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6137] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4997] restart_syscall(<... resuming interrupted clone ...> [pid 6142] <... open resumed>) = 6 [pid 6137] <... mmap resumed>) = 0x7f5c234cf000 [pid 6142] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6137] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 4997] <... restart_syscall resumed>) = 0 [pid 6142] <... futex resumed>) = 1 [pid 6139] <... futex resumed>) = 0 [pid 6137] <... mprotect resumed>) = 0 [pid 6142] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6139] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6137] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6142] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6139] <... futex resumed>) = 0 [pid 6142] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6139] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6137] <... clone resumed>, parent_tid=[6155], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6155 [pid 4997] umount2("./37", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6155 attached [pid 6154] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6142] <... mmap resumed>) = 0x20000000 [pid 6142] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6139] <... futex resumed>) = 0 [pid 6142] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6139] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6142] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6139] <... futex resumed>) = 0 [pid 6142] sendfile(4, 5, NULL, 2147483713 [pid 6139] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6155] set_robust_list(0x7f5c234ef9e0, 24 [ 130.035464][ T6140] EXT4-fs (loop4): This should not happen!! Data will be lost [ 130.035464][ T6140] [ 130.056981][ T6140] EXT4-fs (loop4): Total free blocks count 0 [ 130.063172][ T5608] EXT4-fs (loop0): This should not happen!! Data will be lost [ 130.063172][ T5608] [ 130.063853][ T6140] EXT4-fs (loop4): Free/Dirty block details [ 130.092294][ T6140] EXT4-fs (loop4): free_blocks=2415919104 [pid 6137] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] <... umount2 resumed>) = 0 [pid 6155] <... set_robust_list resumed>) = 0 [pid 6137] <... futex resumed>) = 0 [pid 6137] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4997] openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6155] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6154] <... write resumed>) = 1048576 [pid 6146] <... mount resumed>) = 0 [pid 4994] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6146] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6146] chdir("./file0") = 0 [pid 6146] ioctl(4, LOOP_CLR_FD) = 0 [ 130.116398][ T6140] EXT4-fs (loop4): dirty_blocks=16 [ 130.122766][ T6140] EXT4-fs (loop4): Block reservation details [ 130.126084][ T6142] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 130.129139][ T6140] EXT4-fs (loop4): i_reserved_data_blocks=1 [pid 6154] munmap(0x7f5c233f0000, 1048576 [pid 6146] close(4 [pid 4997] <... openat resumed>) = 3 [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6155] <... ioctl resumed>) = 0 [pid 6154] <... munmap resumed>) = 0 [pid 6146] <... close resumed>) = 0 [pid 6140] <... sendfile resumed>) = 63 [pid 6139] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6137] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6146] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6139] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6146] <... futex resumed>) = 1 [pid 6143] <... futex resumed>) = 0 [pid 6139] <... futex resumed>) = 0 [pid 6146] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6143] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6139] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6155] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6154] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6146] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6143] <... futex resumed>) = 0 [pid 6140] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6139] <... mmap resumed>) = 0x7f5c234cf000 [pid 6137] exit_group(0 [pid 4997] fstat(3, [pid 4994] lstat("./38/file0", [pid 6146] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6143] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6139] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 6155] <... futex resumed>) = ? [pid 6154] <... openat resumed>) = 4 [pid 6146] <... open resumed>) = 4 [pid 6140] <... futex resumed>) = ? [pid 6139] <... mprotect resumed>) = 0 [pid 6137] <... exit_group resumed>) = ? [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6146] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6139] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6155] +++ exited with 0 +++ [pid 6154] ioctl(4, LOOP_SET_FD, 3 [pid 6146] <... futex resumed>) = 1 [pid 6143] <... futex resumed>) = 0 [pid 6140] +++ exited with 0 +++ [pid 6146] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6143] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6139] <... clone resumed>, parent_tid=[6158], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6158 [pid 6146] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6143] <... futex resumed>) = 0 [pid 6139] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6137] +++ exited with 0 +++ [pid 4997] getdents64(3, [pid 4994] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6146] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6143] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6139] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6158 attached [pid 6146] <... write resumed>) = 9 [pid 6139] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6137, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 4997] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 6154] <... ioctl resumed>) = 0 [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6158] set_robust_list(0x7f5c234ef9e0, 24 [pid 6146] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] umount2("./36", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6158] <... set_robust_list resumed>) = 0 [pid 6146] <... futex resumed>) = 1 [pid 6143] <... futex resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] umount2("./37/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6158] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6154] close(3 [pid 6146] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6143] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4994] openat(AT_FDCWD, "./38/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6146] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 130.156623][ T6142] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 130.168915][ T6142] EXT4-fs (loop2): This should not happen!! Data will be lost [ 130.168915][ T6142] [ 130.178742][ T6142] EXT4-fs (loop2): Total free blocks count 0 [ 130.185290][ T6142] EXT4-fs (loop2): Free/Dirty block details [ 130.192091][ T6142] EXT4-fs (loop2): free_blocks=2415919104 [ 130.201081][ T6154] loop5: detected capacity change from 0 to 2048 [ 130.207943][ T6142] EXT4-fs (loop2): dirty_blocks=16 [pid 6143] <... futex resumed>) = 0 [pid 4998] <... openat resumed>) = 3 [pid 6154] <... close resumed>) = 0 [pid 6146] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6143] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] fstat(3, [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] <... openat resumed>) = 4 [pid 6158] <... ioctl resumed>) = 0 [pid 6154] mkdir("./file0", 0777 [pid 6146] <... openat resumed>) = 5 [pid 6142] <... sendfile resumed>) = 63 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] lstat("./37/binderfs", [pid 4994] fstat(4, [pid 6158] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6154] <... mkdir resumed>) = 0 [pid 6146] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6142] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6158] <... futex resumed>) = 1 [pid 6154] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6146] <... futex resumed>) = 1 [pid 6143] <... futex resumed>) = 0 [pid 6142] <... futex resumed>) = 0 [pid 6139] <... futex resumed>) = 0 [pid 4998] getdents64(3, [pid 4997] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4994] getdents64(4, [pid 6158] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6146] open("./bus", O_RDWR [pid 6143] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6142] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6139] exit_group(0 [pid 4998] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4994] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 6158] <... futex resumed>) = ? [pid 6146] <... open resumed>) = 6 [pid 6143] <... futex resumed>) = 0 [pid 6142] <... futex resumed>) = ? [pid 6139] <... exit_group resumed>) = ? [pid 4998] umount2("./36/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] unlink("./37/binderfs" [pid 4994] getdents64(4, [pid 6158] +++ exited with 0 +++ [pid 6146] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6143] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6142] +++ exited with 0 +++ [pid 4994] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4994] close(4) = 0 [pid 4994] rmdir("./38/file0" [pid 6146] <... futex resumed>) = 0 [pid 6143] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6139] +++ exited with 0 +++ [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] <... unlink resumed>) = 0 [pid 4994] <... rmdir resumed>) = 0 [pid 6146] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6143] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] lstat("./36/binderfs", [pid 4997] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6139, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 4994] getdents64(3, [pid 6146] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6143] <... futex resumed>) = 0 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4994] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4994] close(3) = 0 [pid 4994] rmdir("./38") = 0 [pid 4994] mkdir("./39", 0777) = 0 [pid 4994] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4994] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4994] close(3) = 0 [pid 4994] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556fb95d0) = 6160 [pid 6146] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6143] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] unlink("./36/binderfs" [pid 6146] <... mmap resumed>) = 0x20000000 [pid 4998] <... unlink resumed>) = 0 [pid 4996] umount2("./38", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6146] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4996] openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 6160 attached [ 130.213388][ T6142] EXT4-fs (loop2): Block reservation details [ 130.219937][ T6142] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 130.240626][ T5608] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 130.256942][ T5608] EXT4-fs (loop3): This should not happen!! Data will be lost [ 130.256942][ T5608] [pid 6160] set_robust_list(0x555556fb95e0, 24) = 0 [pid 6160] chdir("./39") = 0 [pid 6160] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6160] setpgid(0, 0) = 0 [pid 6160] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6160] write(3, "1000", 4) = 4 [pid 6160] close(3) = 0 [pid 6160] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6160] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4996] <... openat resumed>) = 3 [pid 4996] fstat(3, [pid 6160] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4996] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6160] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6146] <... futex resumed>) = 1 [pid 6143] <... futex resumed>) = 0 [pid 4996] getdents64(3, [pid 6146] sendfile(4, 5, NULL, 2147483713 [pid 6143] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 6143] <... futex resumed>) = 0 [pid 4996] umount2("./38/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6143] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4996] lstat("./38/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4996] unlink("./38/binderfs" [pid 6160] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 4996] <... unlink resumed>) = 0 [pid 4996] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6160] <... mprotect resumed>) = 0 [pid 6160] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6162], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6162 [pid 6160] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6160] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6162 attached [pid 6162] set_robust_list(0x7f5c2b8109e0, 24) = 0 [pid 6162] memfd_create("syzkaller", 0) = 3 [pid 6162] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5c233f0000 [ 130.268154][ T5076] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 130.291180][ T11] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 6162] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4997] <... umount2 resumed>) = 0 [pid 4997] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./37/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./37/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4997] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(4, 0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 6154] <... mount resumed>) = 0 [pid 6154] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6143] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6154] <... openat resumed>) = 3 [pid 6143] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6154] chdir("./file0" [pid 6143] <... futex resumed>) = 0 [pid 6154] <... chdir resumed>) = 0 [pid 6143] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6154] ioctl(4, LOOP_CLR_FD) = 0 [pid 6143] <... mmap resumed>) = 0x7f5c234cf000 [pid 6154] close(4 [pid 6143] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 4997] getdents64(4, [pid 6162] <... write resumed>) = 1048576 [pid 6154] <... close resumed>) = 0 [pid 6143] <... mprotect resumed>) = 0 [pid 4997] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 6154] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6143] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4997] close(4) = 0 [pid 4997] rmdir("./37/file0") = 0 [pid 4997] getdents64(3, 0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4997] close(3) = 0 [pid 4997] rmdir("./37" [pid 6154] <... futex resumed>) = 1 [pid 6150] <... futex resumed>) = 0 [pid 4997] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 6163 attached [pid 6154] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6150] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6143] <... clone resumed>, parent_tid=[6163], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6163 [pid 6163] set_robust_list(0x7f5c234ef9e0, 24 [pid 6154] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6150] <... futex resumed>) = 0 [pid 6143] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [ 130.315304][ T6146] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 130.349557][ T5076] EXT4-fs (loop4): This should not happen!! Data will be lost [ 130.349557][ T5076] [pid 6154] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6150] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6143] <... futex resumed>) = 0 [pid 6163] <... set_robust_list resumed>) = 0 [pid 6162] munmap(0x7f5c233f0000, 1048576 [pid 6154] <... open resumed>) = 4 [pid 6143] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4997] mkdir("./38", 0777 [pid 6163] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6162] <... munmap resumed>) = 0 [pid 6154] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... umount2 resumed>) = 0 [pid 4997] <... mkdir resumed>) = 0 [pid 6162] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6154] <... futex resumed>) = 1 [pid 6150] <... futex resumed>) = 0 [pid 4998] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6162] <... openat resumed>) = 4 [pid 6154] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6150] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 130.363240][ T11] EXT4-fs (loop2): This should not happen!! Data will be lost [ 130.363240][ T11] [pid 4997] <... openat resumed>) = 3 [pid 6154] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6150] <... futex resumed>) = 0 [pid 4998] lstat("./36/file0", [pid 4997] ioctl(3, LOOP_CLR_FD [pid 6154] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6150] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6162] ioctl(4, LOOP_SET_FD, 3 [pid 6154] <... write resumed>) = 9 [pid 4998] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] close(3 [pid 6154] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] <... close resumed>) = 0 [pid 6154] <... futex resumed>) = 1 [pid 6150] <... futex resumed>) = 0 [pid 4998] openat(AT_FDCWD, "./36/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6154] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6150] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... openat resumed>) = 4 [pid 6154] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6150] <... futex resumed>) = 0 [pid 4998] fstat(4, [pid 4997] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6164 [pid 6154] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6150] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6154] <... openat resumed>) = 5 [pid 4998] getdents64(4, [pid 6154] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 6164 attached [pid 6154] <... futex resumed>) = 1 [pid 6150] <... futex resumed>) = 0 [pid 4998] getdents64(4, [pid 6164] set_robust_list(0x555556fb95e0, 24 [pid 6154] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6150] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 6164] <... set_robust_list resumed>) = 0 [pid 6154] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6150] <... futex resumed>) = 0 [pid 4998] close(4 [pid 6164] chdir("./38" [pid 6162] <... ioctl resumed>) = 0 [pid 6154] open("./bus", O_RDWR [pid 6150] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] <... close resumed>) = 0 [pid 6164] <... chdir resumed>) = 0 [pid 6154] <... open resumed>) = 6 [ 130.391340][ T6146] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 130.404142][ T6146] EXT4-fs (loop1): This should not happen!! Data will be lost [ 130.404142][ T6146] [ 130.414332][ T6162] loop0: detected capacity change from 0 to 2048 [pid 4998] rmdir("./36/file0" [pid 6164] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6162] close(3 [pid 6154] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6143] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4998] <... rmdir resumed>) = 0 [pid 4996] <... umount2 resumed>) = 0 [pid 6164] <... prctl resumed>) = 0 [pid 6154] <... futex resumed>) = 1 [pid 6150] <... futex resumed>) = 0 [pid 4998] getdents64(3, [pid 4996] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6164] setpgid(0, 0 [pid 6154] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6150] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6164] <... setpgid resumed>) = 0 [pid 6162] <... close resumed>) = 0 [pid 6154] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6150] <... futex resumed>) = 0 [pid 4998] close(3 [pid 6164] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6162] mkdir("./file0", 0777 [pid 6154] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6150] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] <... close resumed>) = 0 [pid 4996] lstat("./38/file0", [pid 6164] <... openat resumed>) = 3 [pid 6162] <... mkdir resumed>) = 0 [pid 6154] <... mmap resumed>) = 0x20000000 [pid 4998] rmdir("./36" [pid 4996] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6164] write(3, "1000", 4 [pid 6162] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6154] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... rmdir resumed>) = 0 [pid 4996] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6164] <... write resumed>) = 4 [pid 6154] <... futex resumed>) = 1 [pid 6150] <... futex resumed>) = 0 [pid 4998] mkdir("./37", 0777 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6164] close(3 [pid 6154] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6150] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... mkdir resumed>) = 0 [ 130.450016][ T6146] EXT4-fs (loop1): Total free blocks count 0 [ 130.488325][ T6146] EXT4-fs (loop1): Free/Dirty block details [ 130.494500][ T6146] EXT4-fs (loop1): free_blocks=2415919104 [pid 4996] openat(AT_FDCWD, "./38/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6164] <... close resumed>) = 0 [pid 6154] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6150] <... futex resumed>) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4996] <... openat resumed>) = 4 [pid 6164] symlink("/dev/binderfs", "./binderfs" [pid 6154] sendfile(4, 5, NULL, 2147483713 [pid 6150] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] <... openat resumed>) = 3 [pid 4996] fstat(4, [pid 6164] <... symlink resumed>) = 0 [pid 6163] <... ioctl resumed>) = 0 [pid 6146] <... sendfile resumed>) = 63 [pid 6163] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6146] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6163] <... futex resumed>) = 0 [pid 6146] <... futex resumed>) = 0 [pid 6163] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6146] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6162] <... mount resumed>) = 0 [pid 6162] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6162] chdir("./file0") = 0 [pid 6162] ioctl(4, LOOP_CLR_FD) = 0 [pid 6162] close(4) = 0 [pid 6162] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6162] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6164] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6160] <... futex resumed>) = 0 [pid 6143] exit_group(0 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 4996] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6163] <... futex resumed>) = ? [pid 6160] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6146] <... futex resumed>) = ? [pid 6143] <... exit_group resumed>) = ? [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6163] +++ exited with 0 +++ [pid 6146] +++ exited with 0 +++ [pid 6143] +++ exited with 0 +++ [pid 6162] <... futex resumed>) = 0 [pid 6160] <... futex resumed>) = 1 [pid 4996] getdents64(4, [pid 6164] <... futex resumed>) = 0 [pid 4998] close(3 [pid 4995] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6143, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6164] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6162] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6160] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4996] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4998] <... close resumed>) = 0 [pid 6164] <... mmap resumed>) = 0x7f5c2b7f0000 [ 130.501349][ T6146] EXT4-fs (loop1): dirty_blocks=16 [ 130.507687][ T6146] EXT4-fs (loop1): Block reservation details [ 130.510647][ T6154] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1097: group 0, [ 130.513693][ T6146] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 130.528044][ T6154] block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 6164] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6162] <... open resumed>) = 4 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4996] getdents64(4, ./strace-static-x86_64: Process 6167 attached [pid 6164] <... mprotect resumed>) = 0 [pid 6162] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 6164] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6162] <... futex resumed>) = 1 [pid 4998] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6167 [pid 4996] close(4 [pid 6160] <... futex resumed>) = 0 [pid 6162] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6160] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... close resumed>) = 0 [pid 6160] <... futex resumed>) = 0 [pid 4996] rmdir("./38/file0" [pid 6164] <... clone resumed>, parent_tid=[6168], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6168 [pid 4995] umount2("./37", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6162] <... write resumed>) = 9 [pid 6160] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4996] <... rmdir resumed>) = 0 [pid 6164] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6162] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] getdents64(3, [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6164] <... futex resumed>) = 0 [pid 6162] <... futex resumed>) = 1 [pid 6160] <... futex resumed>) = 0 [pid 4995] openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 6168 attached [pid 6167] set_robust_list(0x555556fb95e0, 24 [pid 6164] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6162] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6160] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 6168] set_robust_list(0x7f5c2b8109e0, 24 [pid 6167] <... set_robust_list resumed>) = 0 [pid 4995] <... openat resumed>) = 3 [pid 6162] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6160] <... futex resumed>) = 0 [pid 4996] close(3 [pid 6168] <... set_robust_list resumed>) = 0 [pid 6167] chdir("./37" [pid 6162] openat(AT_FDCWD, "./bus", O_RDONLY [pid 4996] <... close resumed>) = 0 [pid 6168] memfd_create("syzkaller", 0 [pid 6160] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6162] <... openat resumed>) = 5 [pid 6167] <... chdir resumed>) = 0 [pid 4996] rmdir("./38" [pid 4995] fstat(3, [pid 6168] <... memfd_create resumed>) = 3 [pid 6167] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6162] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... rmdir resumed>) = 0 [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6167] <... prctl resumed>) = 0 [pid 6168] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6162] <... futex resumed>) = 1 [pid 6160] <... futex resumed>) = 0 [pid 4995] getdents64(3, [pid 6167] setpgid(0, 0 [pid 6168] <... mmap resumed>) = 0x7f5c233f0000 [pid 6160] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 6162] open("./bus", O_RDWR [pid 6167] <... setpgid resumed>) = 0 [pid 4996] mkdir("./39", 0777 [pid 6167] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6162] <... open resumed>) = 6 [pid 6160] <... futex resumed>) = 0 [pid 4995] umount2("./37/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6160] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6150] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4996] <... mkdir resumed>) = 0 [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6167] <... openat resumed>) = 3 [pid 6162] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6160] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6167] write(3, "1000", 4 [pid 6150] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4995] lstat("./37/binderfs", [pid 6167] <... write resumed>) = 4 [pid 6162] <... futex resumed>) = 0 [pid 6160] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6150] <... futex resumed>) = 0 [pid 4996] <... openat resumed>) = 3 [pid 6167] close(3 [pid 6162] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6160] <... futex resumed>) = 0 [pid 6150] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4996] ioctl(3, LOOP_CLR_FD [pid 4995] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6167] <... close resumed>) = 0 [ 130.541833][ T6154] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 130.558756][ T6154] EXT4-fs (loop5): This should not happen!! Data will be lost [ 130.558756][ T6154] [ 130.573126][ T6154] EXT4-fs (loop5): Total free blocks count 0 [ 130.584349][ T6154] EXT4-fs (loop5): Free/Dirty block details [ 130.590648][ T6154] EXT4-fs (loop5): free_blocks=2415919104 [pid 6168] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6167] symlink("/dev/binderfs", "./binderfs" [pid 6162] <... mmap resumed>) = 0x20000000 [pid 6160] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6150] <... mmap resumed>) = 0x7f5c234cf000 [pid 4996] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4995] unlink("./37/binderfs" [pid 6167] <... symlink resumed>) = 0 [pid 6162] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6150] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 4996] close(3 [pid 4995] <... unlink resumed>) = 0 [pid 6167] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6162] <... futex resumed>) = 1 [pid 6160] <... futex resumed>) = 0 [pid 6167] <... futex resumed>) = 0 [pid 6162] sendfile(4, 5, NULL, 2147483713 [pid 6160] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6150] <... mprotect resumed>) = 0 [pid 4996] <... close resumed>) = 0 [pid 4995] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6167] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6160] <... futex resumed>) = 0 [pid 4996] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6167] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6160] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6154] <... sendfile resumed>) = 63 [pid 6154] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6154] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6167] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6167] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6170], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6170 [pid 6167] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4996] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6169 [pid 6150] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6167] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6150] <... clone resumed>, parent_tid=[6171], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6171 [pid 6168] <... write resumed>) = 1048576 [pid 6168] munmap(0x7f5c233f0000, 1048576) = 0 [ 130.601057][ T6154] EXT4-fs (loop5): dirty_blocks=16 [ 130.607987][ T6154] EXT4-fs (loop5): Block reservation details [ 130.615332][ T6154] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 130.624870][ T5076] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 6168] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6168] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 6171 attached ./strace-static-x86_64: Process 6170 attached ./strace-static-x86_64: Process 6169 attached [pid 6150] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6171] set_robust_list(0x7f5c234ef9e0, 24 [pid 6170] set_robust_list(0x7f5c2b8109e0, 24 [pid 6150] <... futex resumed>) = 0 [pid 6171] <... set_robust_list resumed>) = 0 [pid 6150] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6170] <... set_robust_list resumed>) = 0 [pid 6171] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6169] set_robust_list(0x555556fb95e0, 24 [pid 6171] <... ioctl resumed>) = 0 [pid 6170] memfd_create("syzkaller", 0 [pid 6169] <... set_robust_list resumed>) = 0 [pid 6171] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6150] <... futex resumed>) = 0 [pid 6171] <... futex resumed>) = 1 [pid 6150] exit_group(0 [pid 6170] <... memfd_create resumed>) = 3 [pid 6169] chdir("./39" [pid 6154] <... futex resumed>) = ? [pid 6150] <... exit_group resumed>) = ? [pid 6171] +++ exited with 0 +++ [pid 6170] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6169] <... chdir resumed>) = 0 [pid 6154] +++ exited with 0 +++ [pid 6168] <... ioctl resumed>) = 0 [pid 6168] close(3) = 0 [pid 6168] mkdir("./file0", 0777) = 0 [pid 6168] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6170] <... mmap resumed>) = 0x7f5c233f0000 [pid 6169] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6160] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6150] +++ exited with 0 +++ [pid 6170] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6169] <... prctl resumed>) = 0 [pid 6160] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6169] setpgid(0, 0 [pid 6160] <... futex resumed>) = 0 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6150, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 6169] <... setpgid resumed>) = 0 [pid 6160] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4999] umount2("./37", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6169] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6160] <... mmap resumed>) = 0x7f5c234cf000 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6169] <... openat resumed>) = 3 [pid 6160] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 4999] openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6169] write(3, "1000", 4 [pid 6160] <... mprotect resumed>) = 0 [pid 4999] <... openat resumed>) = 3 [pid 6169] <... write resumed>) = 4 [pid 6160] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4999] fstat(3, [pid 6169] close(3 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6169] <... close resumed>) = 0 [pid 6160] <... clone resumed>, parent_tid=[6173], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6173 [pid 4999] getdents64(3, [pid 6169] symlink("/dev/binderfs", "./binderfs" [pid 6160] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 6169] <... symlink resumed>) = 0 [pid 6160] <... futex resumed>) = 0 [pid 4999] umount2("./37/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6169] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6160] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6169] <... futex resumed>) = 0 [pid 4999] lstat("./37/binderfs", [pid 6169] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6169] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 4999] unlink("./37/binderfs" [pid 6169] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 4999] <... unlink resumed>) = 0 [pid 6169] <... mprotect resumed>) = 0 [ 130.645101][ T6162] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 130.655448][ T6168] loop3: detected capacity change from 0 to 2048 [ 130.672208][ T5076] EXT4-fs (loop1): This should not happen!! Data will be lost [ 130.672208][ T5076] [ 130.684622][ T6162] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 4999] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6169] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6174], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6174 [pid 6169] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6169] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6173 attached [pid 6173] set_robust_list(0x7f5c234ef9e0, 24) = 0 [pid 6173] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040./strace-static-x86_64: Process 6174 attached [pid 6174] set_robust_list(0x7f5c2b8109e0, 24) = 0 [pid 6174] memfd_create("syzkaller", 0) = 3 [pid 6174] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5c233f0000 [pid 6168] <... mount resumed>) = 0 [pid 6168] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6168] chdir("./file0") = 0 [pid 6168] ioctl(4, LOOP_CLR_FD) = 0 [pid 6168] close(4) = 0 [pid 6168] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6164] <... futex resumed>) = 0 [pid 6168] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6164] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6170] <... write resumed>) = 1048576 [pid 6168] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6164] <... futex resumed>) = 0 [pid 6170] munmap(0x7f5c233f0000, 1048576 [pid 6168] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6164] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6170] <... munmap resumed>) = 0 [pid 6168] <... open resumed>) = 4 [pid 6168] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6164] <... futex resumed>) = 0 [pid 6168] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6164] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6168] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6164] <... futex resumed>) = 0 [pid 6168] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6164] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6168] <... write resumed>) = 9 [pid 6168] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6164] <... futex resumed>) = 0 [pid 6168] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6164] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6168] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6164] <... futex resumed>) = 0 [pid 6168] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6164] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6168] <... openat resumed>) = 5 [pid 6168] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6164] <... futex resumed>) = 0 [pid 4995] <... umount2 resumed>) = 0 [pid 6168] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6164] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6168] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6164] <... futex resumed>) = 0 [pid 6168] open("./bus", O_RDWR [pid 6164] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6170] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6168] <... open resumed>) = 6 [pid 6168] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6164] <... futex resumed>) = 0 [pid 6168] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6164] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6168] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6164] <... futex resumed>) = 0 [pid 6168] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6164] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6170] <... openat resumed>) = 4 [pid 6168] <... mmap resumed>) = 0x20000000 [pid 6160] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4995] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6170] ioctl(4, LOOP_SET_FD, 3 [pid 6168] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6164] <... futex resumed>) = 0 [ 130.720582][ T11] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 6168] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6164] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6168] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6164] <... futex resumed>) = 0 [pid 6168] sendfile(4, 5, NULL, 2147483713 [pid 6164] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6174] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 130.769775][ T6170] loop4: detected capacity change from 0 to 2048 [ 130.774113][ T6168] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 130.780745][ T11] EXT4-fs (loop5): This should not happen!! Data will be lost [ 130.780745][ T11] [ 130.791482][ T6168] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 4995] lstat("./37/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4995] openat(AT_FDCWD, "./37/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4995] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] getdents64(4, 0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4995] getdents64(4, 0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4995] close(4) = 0 [pid 4995] rmdir("./37/file0" [pid 6170] <... ioctl resumed>) = 0 [pid 6168] <... sendfile resumed>) = 63 [pid 6164] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4995] <... rmdir resumed>) = 0 [pid 6164] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] getdents64(3, [pid 6164] <... futex resumed>) = 0 [ 130.813556][ T6168] EXT4-fs (loop3): This should not happen!! Data will be lost [ 130.813556][ T6168] [ 130.823346][ T6168] EXT4-fs (loop3): Total free blocks count 0 [ 130.829640][ T6168] EXT4-fs (loop3): Free/Dirty block details [ 130.835638][ T6168] EXT4-fs (loop3): free_blocks=2415919104 [ 130.841540][ T6168] EXT4-fs (loop3): dirty_blocks=16 [ 130.846815][ T6168] EXT4-fs (loop3): Block reservation details [ 130.853010][ T6168] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 130.855603][ T6162] EXT4-fs (loop0): This should not happen!! Data will be lost [ 130.855603][ T6162] [pid 4995] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 6174] <... write resumed>) = 1048576 [pid 6170] close(3 [pid 6168] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6164] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4995] close(3 [pid 6174] munmap(0x7f5c233f0000, 1048576 [pid 6170] <... close resumed>) = 0 [pid 6168] <... futex resumed>) = 0 [pid 6164] <... mmap resumed>) = 0x7f5c234cf000 [pid 4999] <... umount2 resumed>) = 0 [pid 4995] <... close resumed>) = 0 [pid 6164] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 4999] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] rmdir("./37" [pid 6174] <... munmap resumed>) = 0 [pid 6170] mkdir("./file0", 0777 [pid 6168] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6164] <... mprotect resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] <... rmdir resumed>) = 0 [pid 6174] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6170] <... mkdir resumed>) = 0 [pid 6164] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4999] lstat("./37/file0", [pid 4995] mkdir("./38", 0777 [pid 6174] <... openat resumed>) = 4 [pid 6170] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] <... mkdir resumed>) = 0 [pid 6174] ioctl(4, LOOP_SET_FD, 3 [pid 6173] <... ioctl resumed>) = 0 [pid 6164] <... clone resumed>, parent_tid=[6176], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6176 [pid 6162] <... sendfile resumed>) = 63 [pid 4999] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] openat(AT_FDCWD, "/dev/loop1", O_RDWR./strace-static-x86_64: Process 6176 attached [pid 6173] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6162] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6176] set_robust_list(0x7f5c234ef9e0, 24 [pid 6173] <... futex resumed>) = 0 [pid 6162] <... futex resumed>) = 0 [pid 6176] <... set_robust_list resumed>) = 0 [pid 6173] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6162] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6176] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6164] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6160] exit_group(0 [pid 4995] <... openat resumed>) = 3 [pid 6164] <... futex resumed>) = 0 [pid 6164] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6176] <... ioctl resumed>) = 0 [pid 6173] <... futex resumed>) = ? [pid 6162] <... futex resumed>) = ? [pid 6160] <... exit_group resumed>) = ? [pid 4995] ioctl(3, LOOP_CLR_FD [pid 6176] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6173] +++ exited with 0 +++ [pid 6164] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6162] +++ exited with 0 +++ [pid 6176] <... futex resumed>) = 0 [pid 6176] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6174] <... ioctl resumed>) = 0 [pid 6174] close(3) = 0 [pid 6174] mkdir("./file0", 0777 [pid 6160] +++ exited with 0 +++ [pid 6164] exit_group(0) = ? [pid 6168] <... futex resumed>) = ? [pid 4995] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6176] <... futex resumed>) = ? [pid 6170] <... mount resumed>) = 0 [pid 6168] +++ exited with 0 +++ [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] close(3 [pid 4994] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6160, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6176] +++ exited with 0 +++ [pid 6174] <... mkdir resumed>) = 0 [pid 6170] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6164] +++ exited with 0 +++ [pid 4999] openat(AT_FDCWD, "./37/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4995] <... close resumed>) = 0 [pid 4994] umount2("./39", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... openat resumed>) = 4 [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6164, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] fstat(4, [pid 4995] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6170] <... openat resumed>) = 3 [pid 6174] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue"./strace-static-x86_64: Process 6179 attached [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./38", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6179 [pid 4994] openat(AT_FDCWD, "./39", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6170] chdir("./file0" [pid 4999] getdents64(4, [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] <... openat resumed>) = 3 [pid 4999] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4994] fstat(3, [pid 4999] getdents64(4, [pid 4997] openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6170] <... chdir resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6170] ioctl(4, LOOP_CLR_FD [pid 4999] close(4 [pid 4997] <... openat resumed>) = 3 [pid 4999] <... close resumed>) = 0 [pid 4997] fstat(3, [pid 4994] getdents64(3, [pid 6170] <... ioctl resumed>) = 0 [pid 4999] rmdir("./37/file0" [pid 4994] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6179] set_robust_list(0x555556fb95e0, 24 [pid 4999] <... rmdir resumed>) = 0 [pid 6179] <... set_robust_list resumed>) = 0 [pid 6170] close(4 [pid 4997] getdents64(3, [pid 4994] umount2("./39/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6179] chdir("./38" [pid 6170] <... close resumed>) = 0 [pid 4999] getdents64(3, [pid 4997] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 6179] <... chdir resumed>) = 0 [pid 6170] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6179] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4997] umount2("./38/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6170] <... futex resumed>) = 1 [pid 6167] <... futex resumed>) = 0 [pid 4999] close(3 [pid 4994] lstat("./39/binderfs", [pid 6179] <... prctl resumed>) = 0 [pid 6170] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6167] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... close resumed>) = 0 [pid 6179] setpgid(0, 0 [pid 6167] <... futex resumed>) = 0 [ 130.879297][ T6162] EXT4-fs (loop0): Total free blocks count 0 [ 130.885762][ T6162] EXT4-fs (loop0): Free/Dirty block details [ 130.891711][ T6162] EXT4-fs (loop0): free_blocks=2415919104 [ 130.899009][ T6162] EXT4-fs (loop0): dirty_blocks=16 [ 130.904190][ T6162] EXT4-fs (loop0): Block reservation details [ 130.910321][ T6162] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 130.920139][ T6174] loop2: detected capacity change from 0 to 2048 [pid 4997] lstat("./38/binderfs", [pid 4994] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6179] <... setpgid resumed>) = 0 [pid 6167] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] rmdir("./37" [pid 6179] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6170] <... open resumed>) = 4 [pid 4997] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4994] unlink("./39/binderfs" [pid 6179] <... openat resumed>) = 3 [pid 6170] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... rmdir resumed>) = 0 [pid 4997] unlink("./38/binderfs" [pid 6179] write(3, "1000", 4 [pid 6170] <... futex resumed>) = 1 [pid 6167] <... futex resumed>) = 0 [pid 4994] <... unlink resumed>) = 0 [pid 6179] <... write resumed>) = 4 [pid 6170] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6167] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] mkdir("./38", 0777 [pid 4997] <... unlink resumed>) = 0 [pid 6179] close(3 [pid 6167] <... futex resumed>) = 0 [pid 4994] umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6179] <... close resumed>) = 0 [pid 6167] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6179] symlink("/dev/binderfs", "./binderfs" [pid 4999] <... mkdir resumed>) = 0 [pid 4997] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6179] <... symlink resumed>) = 0 [pid 6179] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6179] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c2b7f0000 [pid 6179] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6179] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6182], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6182 [pid 6179] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6179] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6182 attached [pid 6174] <... mount resumed>) = 0 [pid 6170] <... write resumed>) = 9 [pid 4999] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6182] set_robust_list(0x7f5c2b8109e0, 24 [pid 6174] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6170] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... openat resumed>) = 3 [pid 6170] <... futex resumed>) = 1 [pid 6167] <... futex resumed>) = 0 [pid 6174] <... openat resumed>) = 3 [pid 6170] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6167] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6167] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6170] <... openat resumed>) = 5 [pid 6174] chdir("./file0" [pid 4999] ioctl(3, LOOP_CLR_FD [pid 6174] <... chdir resumed>) = 0 [pid 6170] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6174] ioctl(4, LOOP_CLR_FD [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6170] <... futex resumed>) = 1 [pid 6167] <... futex resumed>) = 0 [pid 6174] <... ioctl resumed>) = 0 [pid 4999] close(3 [pid 6167] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... close resumed>) = 0 [pid 6182] <... set_robust_list resumed>) = 0 [pid 6182] memfd_create("syzkaller", 0) = 3 [pid 6182] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5c233f0000 [pid 6167] <... futex resumed>) = 0 [pid 6174] close(4 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6167] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6174] <... close resumed>) = 0 [pid 6182] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6174] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [ 130.970290][ T5076] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 130.987033][ T5076] EXT4-fs (loop0): This should not happen!! Data will be lost [ 130.987033][ T5076] [ 130.997908][ T5457] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 6170] open("./bus", O_RDWR [pid 6174] <... futex resumed>) = 1 [pid 6170] <... open resumed>) = 6 [pid 6169] <... futex resumed>) = 0 [pid 4999] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6183 [pid 6174] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6169] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6174] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6169] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6174] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6170] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6174] <... open resumed>) = 4 [pid 6170] <... futex resumed>) = 1 [pid 6167] <... futex resumed>) = 0 [pid 6167] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6170] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6167] <... futex resumed>) = 0 [pid 6170] <... mmap resumed>) = 0x20000000 [pid 6167] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6174] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6169] <... futex resumed>) = 0 [pid 6169] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6174] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6169] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6174] <... write resumed>) = 9 [pid 6170] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6174] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6169] <... futex resumed>) = 0 [pid 6174] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6170] <... futex resumed>) = 1 [pid 6169] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6167] <... futex resumed>) = 0 [pid 6169] <... futex resumed>) = 0 [pid 6167] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6169] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6167] <... futex resumed>) = 0 [pid 6167] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6174] <... openat resumed>) = 5 [pid 6170] sendfile(4, 5, NULL, 2147483713 [pid 6174] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6169] <... futex resumed>) = 0 [pid 6174] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6169] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6174] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6169] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 131.029697][ T5457] EXT4-fs (loop3): This should not happen!! Data will be lost [ 131.029697][ T5457] [pid 6174] open("./bus", O_RDWR) = 6 [pid 4997] <... umount2 resumed>) = 0 [pid 6174] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6169] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6183 attached [pid 6182] <... write resumed>) = 1048576 [pid 6174] <... futex resumed>) = 1 [pid 4997] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] <... umount2 resumed>) = 0 [pid 6169] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6183] set_robust_list(0x555556fb95e0, 24 [pid 6182] munmap(0x7f5c233f0000, 1048576 [pid 6174] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6169] <... futex resumed>) = 0 [pid 6174] <... mmap resumed>) = 0x20000000 [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6183] <... set_robust_list resumed>) = 0 [pid 6182] <... munmap resumed>) = 0 [pid 6174] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6169] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6167] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4997] lstat("./38/file0", [pid 4994] lstat("./39/file0", [pid 6183] chdir("./38" [pid 6182] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6174] <... futex resumed>) = 0 [pid 6169] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6167] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6174] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4994] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6182] <... openat resumed>) = 4 [pid 6169] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6174] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6169] <... futex resumed>) = 0 [pid 6167] <... futex resumed>) = 0 [pid 6182] ioctl(4, LOOP_SET_FD, 3 [pid 4997] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6183] <... chdir resumed>) = 0 [pid 6174] sendfile(4, 5, NULL, 2147483713 [pid 6169] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 131.068945][ T6170] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 131.094550][ T6170] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 131.113140][ T6170] EXT4-fs (loop4): This should not happen!! Data will be lost [ 131.113140][ T6170] [pid 6167] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6183] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6167] <... mmap resumed>) = 0x7f5c234cf000 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6183] <... prctl resumed>) = 0 [pid 6183] setpgid(0, 0 [pid 6167] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 4997] openat(AT_FDCWD, "./38/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4994] openat(AT_FDCWD, "./39/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6183] <... setpgid resumed>) = 0 [pid 6167] <... mprotect resumed>) = 0 [pid 4997] <... openat resumed>) = 4 [pid 4994] <... openat resumed>) = 4 [pid 6183] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4994] fstat(4, [pid 6183] <... openat resumed>) = 3 [pid 4997] fstat(4, [pid 6167] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6183] write(3, "1000", 4 [pid 4997] getdents64(4, [pid 6183] <... write resumed>) = 4 [pid 4994] getdents64(4, ./strace-static-x86_64: Process 6184 attached [pid 6182] <... ioctl resumed>) = 0 [pid 6167] <... clone resumed>, parent_tid=[6184], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6184 [pid 4997] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4997] getdents64(4, 0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4997] close(4) = 0 [pid 4997] rmdir("./38/file0" [pid 6183] close(3 [pid 6167] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6184] set_robust_list(0x7f5c234ef9e0, 24 [pid 6183] <... close resumed>) = 0 [pid 6182] close(3 [pid 6167] <... futex resumed>) = 0 [pid 6184] <... set_robust_list resumed>) = 0 [pid 6183] symlink("/dev/binderfs", "./binderfs" [pid 6167] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6182] <... close resumed>) = 0 [pid 6184] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [ 131.124576][ T6170] EXT4-fs (loop4): Total free blocks count 0 [ 131.131305][ T6182] loop1: detected capacity change from 0 to 2048 [ 131.153652][ T6174] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 6182] mkdir("./file0", 0777 [pid 4997] <... rmdir resumed>) = 0 [pid 4997] getdents64(3, 0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4997] close(3) = 0 [pid 4997] rmdir("./38") = 0 [pid 4997] mkdir("./39", 0777) = 0 [pid 4997] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 6169] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4994] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 6182] <... mkdir resumed>) = 0 [pid 6183] <... symlink resumed>) = 0 [pid 4997] ioctl(3, LOOP_CLR_FD [pid 6169] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] getdents64(4, [pid 6183] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6182] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6169] <... futex resumed>) = 0 [pid 6183] <... futex resumed>) = 0 [pid 4997] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4994] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4997] close(3 [pid 6183] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6169] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4997] <... close resumed>) = 0 [pid 4994] close(4 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556fb95d0) = 6185 [pid 6183] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6169] <... mmap resumed>) = 0x7f5c234cf000 [pid 4994] <... close resumed>) = 0 [pid 6184] <... ioctl resumed>) = 0 [pid 6183] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6170] <... sendfile resumed>) = 63 [pid 6169] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 6167] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4994] rmdir("./39/file0"./strace-static-x86_64: Process 6185 attached [pid 6185] set_robust_list(0x555556fb95e0, 24) = 0 [ 131.178307][ T6170] EXT4-fs (loop4): Free/Dirty block details [ 131.184205][ T6174] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 131.184486][ T6170] EXT4-fs (loop4): free_blocks=2415919104 [ 131.205748][ T6170] EXT4-fs (loop4): dirty_blocks=16 [ 131.211335][ T6170] EXT4-fs (loop4): Block reservation details [ 131.217966][ T6170] EXT4-fs (loop4): i_reserved_data_blocks=1 [pid 6185] chdir("./39") = 0 [pid 6185] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6185] setpgid(0, 0 [pid 6184] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6183] <... mprotect resumed>) = 0 [pid 6170] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6169] <... mprotect resumed>) = 0 [pid 6167] exit_group(0 [pid 4994] <... rmdir resumed>) = 0 [pid 6170] <... futex resumed>) = ? [pid 6184] <... futex resumed>) = ? [pid 6167] <... exit_group resumed>) = ? [pid 6169] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6185] <... setpgid resumed>) = 0 [pid 6184] +++ exited with 0 +++ [pid 6183] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6170] +++ exited with 0 +++ ./strace-static-x86_64: Process 6187 attached [pid 6185] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6167] +++ exited with 0 +++ [pid 4994] getdents64(3, [pid 6185] <... openat resumed>) = 3 [pid 6185] write(3, "1000", 4) = 4 [pid 6185] close(3) = 0 [pid 6187] set_robust_list(0x7f5c2b8109e0, 24 [pid 6185] symlink("/dev/binderfs", "./binderfs" [pid 6183] <... clone resumed>, parent_tid=[6187], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6187 [pid 6169] <... clone resumed>, parent_tid=[6186], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6186 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6167, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 4994] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 6185] <... symlink resumed>) = 0 [pid 6185] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 6186 attached [pid 6185] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6186] set_robust_list(0x7f5c234ef9e0, 24 [pid 6185] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6186] <... set_robust_list resumed>) = 0 [pid 6185] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6186] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6185] <... mprotect resumed>) = 0 [pid 6187] <... set_robust_list resumed>) = 0 [pid 6186] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6185] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6183] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6169] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] close(3 [pid 6186] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6185] <... clone resumed>, parent_tid=[6190], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6190 [pid 6185] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6185] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6190 attached [pid 6190] set_robust_list(0x7f5c2b8109e0, 24 [pid 6187] memfd_create("syzkaller", 0 [pid 6183] <... futex resumed>) = 0 [pid 6169] <... futex resumed>) = 0 [pid 6187] <... memfd_create resumed>) = 3 [pid 6183] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6182] <... mount resumed>) = 0 [pid 6169] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4994] <... close resumed>) = 0 [pid 6190] <... set_robust_list resumed>) = 0 [pid 6182] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6190] memfd_create("syzkaller", 0 [pid 6182] <... openat resumed>) = 3 [pid 6190] <... memfd_create resumed>) = 3 [pid 6182] chdir("./file0" [pid 6190] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6182] <... chdir resumed>) = 0 [pid 6190] <... mmap resumed>) = 0x7f5c233f0000 [pid 6187] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [ 131.226448][ T6174] EXT4-fs (loop2): This should not happen!! Data will be lost [ 131.226448][ T6174] [ 131.242508][ T6174] EXT4-fs (loop2): Total free blocks count 0 [ 131.248759][ T6174] EXT4-fs (loop2): Free/Dirty block details [ 131.256043][ T6174] EXT4-fs (loop2): free_blocks=2415919104 [ 131.263360][ T6174] EXT4-fs (loop2): dirty_blocks=16 [ 131.270504][ T6174] EXT4-fs (loop2): Block reservation details [pid 6182] ioctl(4, LOOP_CLR_FD [pid 4998] umount2("./37", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] rmdir("./39" [pid 6187] <... mmap resumed>) = 0x7f5c233f0000 [pid 6186] <... ioctl resumed>) = 0 [pid 6182] <... ioctl resumed>) = 0 [pid 6174] <... sendfile resumed>) = 63 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] <... rmdir resumed>) = 0 [pid 6190] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6186] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6182] close(4 [pid 4998] openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4994] mkdir("./40", 0777 [pid 6190] <... write resumed>) = 1048576 [pid 6187] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6186] <... futex resumed>) = 1 [pid 6182] <... close resumed>) = 0 [pid 6174] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6169] <... futex resumed>) = 0 [pid 4998] <... openat resumed>) = 3 [pid 4994] <... mkdir resumed>) = 0 [pid 6190] munmap(0x7f5c233f0000, 1048576 [pid 6174] <... futex resumed>) = 0 [pid 4998] fstat(3, [pid 6186] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6182] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6169] exit_group(0 [pid 4994] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6190] <... munmap resumed>) = 0 [ 131.277823][ T6174] EXT4-fs (loop2): i_reserved_data_blocks=1 [pid 6187] <... write resumed>) = 1048576 [pid 6186] <... futex resumed>) = ? [pid 6182] <... futex resumed>) = 1 [pid 6179] <... futex resumed>) = 0 [pid 6169] <... exit_group resumed>) = ? [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] <... openat resumed>) = 3 [pid 6190] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6186] +++ exited with 0 +++ [pid 6182] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6179] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6174] +++ exited with 0 +++ [pid 4998] getdents64(3, [pid 4994] ioctl(3, LOOP_CLR_FD [pid 6190] <... openat resumed>) = 4 [pid 4998] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4994] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6190] ioctl(4, LOOP_SET_FD, 3 [pid 6182] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6179] <... futex resumed>) = 0 [pid 6169] +++ exited with 0 +++ [pid 4998] umount2("./37/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] close(3 [pid 6187] munmap(0x7f5c233f0000, 1048576 [pid 6182] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6179] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] <... close resumed>) = 0 [pid 6187] <... munmap resumed>) = 0 [pid 4998] lstat("./37/binderfs", [pid 4996] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6169, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 4994] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6191 attached [pid 6187] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6182] <... open resumed>) = 4 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4996] restart_syscall(<... resuming interrupted clone ...> [pid 6187] <... openat resumed>) = 4 [pid 6182] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] unlink("./37/binderfs" [pid 6191] set_robust_list(0x555556fb95e0, 24 [pid 6187] ioctl(4, LOOP_SET_FD, 3 [pid 6182] <... futex resumed>) = 1 [pid 6179] <... futex resumed>) = 0 [pid 4996] <... restart_syscall resumed>) = 0 [pid 4994] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6191 [pid 6191] <... set_robust_list resumed>) = 0 [pid 6182] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6179] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... unlink resumed>) = 0 [pid 6190] <... ioctl resumed>) = 0 [pid 6182] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6179] <... futex resumed>) = 0 [pid 6190] close(3 [pid 6182] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6179] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6190] <... close resumed>) = 0 [pid 6182] <... write resumed>) = 9 [pid 6190] mkdir("./file0", 0777 [pid 6182] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6191] chdir("./40" [pid 6190] <... mkdir resumed>) = 0 [pid 6182] <... futex resumed>) = 1 [pid 6179] <... futex resumed>) = 0 [pid 6191] <... chdir resumed>) = 0 [pid 6187] <... ioctl resumed>) = 0 [pid 6191] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6190] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6187] close(3 [pid 6182] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6179] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] umount2("./39", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6191] <... prctl resumed>) = 0 [pid 6187] <... close resumed>) = 0 [pid 6182] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6179] <... futex resumed>) = 0 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6191] setpgid(0, 0 [ 131.324402][ T6190] loop3: detected capacity change from 0 to 2048 [ 131.344355][ T6187] loop5: detected capacity change from 0 to 2048 [ 131.353687][ T5076] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 6187] mkdir("./file0", 0777 [pid 6182] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6179] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4996] openat(AT_FDCWD, "./39", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6191] <... setpgid resumed>) = 0 [pid 6187] <... mkdir resumed>) = 0 [pid 4996] <... openat resumed>) = 3 [pid 6191] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6187] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 4996] fstat(3, [pid 6191] <... openat resumed>) = 3 [pid 4996] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6191] write(3, "1000", 4 [pid 4996] getdents64(3, [pid 6191] <... write resumed>) = 4 [pid 4996] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 6191] close(3 [pid 4996] umount2("./39/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6191] <... close resumed>) = 0 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6191] symlink("/dev/binderfs", "./binderfs" [pid 4996] lstat("./39/binderfs", [pid 6191] <... symlink resumed>) = 0 [pid 4996] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6191] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] unlink("./39/binderfs" [pid 6191] <... futex resumed>) = 0 [pid 4996] <... unlink resumed>) = 0 [pid 6191] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4996] umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6191] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6191] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6182] <... openat resumed>) = 5 [pid 6191] <... mprotect resumed>) = 0 [pid 6191] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6192], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6192 [pid 6191] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6191] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6182] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6179] <... futex resumed>) = 0 [pid 6182] open("./bus", O_RDWR [pid 6179] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 6192 attached [pid 6182] <... open resumed>) = 6 [pid 6179] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6182] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6179] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6182] <... futex resumed>) = 0 [pid 6179] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6182] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6179] <... futex resumed>) = 0 [pid 6192] set_robust_list(0x7f5c2b8109e0, 24 [pid 6179] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6192] <... set_robust_list resumed>) = 0 [pid 6192] memfd_create("syzkaller", 0 [pid 6182] <... mmap resumed>) = 0x20000000 [pid 4998] <... umount2 resumed>) = 0 [pid 6182] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6179] <... futex resumed>) = 0 [pid 6179] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6179] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6182] sendfile(4, 5, NULL, 2147483713 [pid 6192] <... memfd_create resumed>) = 3 [pid 6192] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5c233f0000 [pid 6190] <... mount resumed>) = 0 [pid 6190] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6190] chdir("./file0") = 0 [pid 4998] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 131.370144][ T5076] EXT4-fs (loop4): This should not happen!! Data will be lost [ 131.370144][ T5076] [ 131.381149][ T74] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 131.398383][ T74] EXT4-fs (loop2): This should not happen!! Data will be lost [ 131.398383][ T74] [pid 6190] ioctl(4, LOOP_CLR_FD [pid 4998] lstat("./37/file0", [pid 6192] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6190] <... ioctl resumed>) = 0 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./37/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 6190] close(4 [pid 4998] close(4) = 0 [pid 4998] rmdir("./37/file0" [pid 6190] <... close resumed>) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 6190] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] getdents64(3, [pid 6190] <... futex resumed>) = 1 [pid 6185] <... futex resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 6190] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6185] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] close(3 [pid 6190] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6185] <... futex resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 6190] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6185] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] rmdir("./37" [pid 6190] <... open resumed>) = 4 [pid 4998] <... rmdir resumed>) = 0 [pid 6192] <... write resumed>) = 1048576 [pid 6190] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6187] <... mount resumed>) = 0 [pid 6179] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4998] mkdir("./38", 0777 [pid 4996] <... umount2 resumed>) = 0 [pid 6190] <... futex resumed>) = 1 [pid 6187] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6185] <... futex resumed>) = 0 [pid 6179] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... mkdir resumed>) = 0 [pid 6190] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6187] <... openat resumed>) = 3 [pid 6185] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6179] <... futex resumed>) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4996] umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6192] munmap(0x7f5c233f0000, 1048576 [pid 6190] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6187] chdir("./file0" [pid 6185] <... futex resumed>) = 0 [pid 6179] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4998] <... openat resumed>) = 3 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6192] <... munmap resumed>) = 0 [pid 6190] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6187] <... chdir resumed>) = 0 [ 131.443774][ T6182] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 6185] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6179] <... mmap resumed>) = 0x7f5c234cf000 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 4996] lstat("./39/file0", [pid 6192] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6190] <... write resumed>) = 9 [pid 6187] ioctl(4, LOOP_CLR_FD [pid 6179] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4996] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6192] <... openat resumed>) = 4 [pid 6190] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6187] <... ioctl resumed>) = 0 [pid 6179] <... mprotect resumed>) = 0 [pid 4998] close(3 [pid 4996] umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6192] ioctl(4, LOOP_SET_FD, 3 [pid 6190] <... futex resumed>) = 1 [pid 6187] close(4 [pid 6185] <... futex resumed>) = 0 [pid 6179] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4998] <... close resumed>) = 0 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6190] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6187] <... close resumed>) = 0 [pid 6185] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4996] openat(AT_FDCWD, "./39/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6192] <... ioctl resumed>) = 0 [pid 6190] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6187] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6185] <... futex resumed>) = 0 [pid 6179] <... clone resumed>, parent_tid=[6197], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6197 [pid 4996] <... openat resumed>) = 4 [pid 6192] close(3 [pid 6190] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6187] <... futex resumed>) = 1 [pid 6185] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6183] <... futex resumed>) = 0 [pid 6179] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] fstat(4, [pid 6192] <... close resumed>) = 0 [pid 6190] <... openat resumed>) = 5 [pid 6187] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6183] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6179] <... futex resumed>) = 0 [pid 4998] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6198 [pid 4996] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 6198 attached [pid 6192] mkdir("./file0", 0777 [pid 6190] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6187] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6183] <... futex resumed>) = 0 [pid 6179] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4996] getdents64(4, [pid 6198] set_robust_list(0x555556fb95e0, 24 [pid 6192] <... mkdir resumed>) = 0 [pid 6190] <... futex resumed>) = 1 [pid 6187] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6185] <... futex resumed>) = 0 [pid 6183] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4996] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 6198] <... set_robust_list resumed>) = 0 [pid 6192] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6190] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6187] <... open resumed>) = 4 [pid 6185] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] getdents64(4, ./strace-static-x86_64: Process 6197 attached [pid 6197] set_robust_list(0x7f5c234ef9e0, 24) = 0 [pid 6197] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6198] chdir("./38" [pid 6190] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6187] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6185] <... futex resumed>) = 0 [pid 4996] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 6198] <... chdir resumed>) = 0 [pid 6190] open("./bus", O_RDWR [pid 6187] <... futex resumed>) = 1 [pid 6183] <... futex resumed>) = 0 [pid 6183] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6198] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6190] <... open resumed>) = 6 [pid 6187] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6185] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6183] <... futex resumed>) = 0 [ 131.509447][ T6192] loop0: detected capacity change from 0 to 2048 [ 131.526574][ T6182] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 131.539003][ T6182] EXT4-fs (loop1): This should not happen!! Data will be lost [ 131.539003][ T6182] [ 131.550940][ T6182] EXT4-fs (loop1): Total free blocks count 0 [pid 4996] close(4 [pid 6198] <... prctl resumed>) = 0 [pid 6190] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6187] <... write resumed>) = 9 [pid 6185] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6183] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4996] <... close resumed>) = 0 [pid 6198] setpgid(0, 0 [pid 6190] <... futex resumed>) = 0 [pid 6187] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6185] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6183] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4996] rmdir("./39/file0" [pid 6198] <... setpgid resumed>) = 0 [pid 6190] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6187] <... futex resumed>) = 0 [pid 6185] <... futex resumed>) = 0 [pid 6183] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6179] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4996] <... rmdir resumed>) = 0 [pid 6198] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6197] <... ioctl resumed>) = 0 [pid 6190] <... mmap resumed>) = 0x20000000 [pid 6187] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6185] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6183] <... futex resumed>) = 0 [pid 6182] <... sendfile resumed>) = 63 [pid 4996] getdents64(3, [pid 6198] <... openat resumed>) = 3 [pid 6197] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6190] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6187] <... openat resumed>) = 5 [pid 6185] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6183] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6182] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 6198] write(3, "1000", 4 [pid 6197] <... futex resumed>) = 0 [pid 6190] <... futex resumed>) = 0 [pid 6182] <... futex resumed>) = 0 [pid 6179] exit_group(0) = ? [pid 6182] +++ exited with 0 +++ [pid 6187] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6185] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6187] <... futex resumed>) = 0 [pid 6183] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4996] close(3 [pid 6190] sendfile(4, 5, NULL, 2147483713 [pid 6187] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6185] <... futex resumed>) = 0 [pid 6183] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... close resumed>) = 0 [pid 6187] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6187] open("./bus", O_RDWR) = 6 [pid 6187] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6197] +++ exited with 0 +++ [pid 6187] <... futex resumed>) = 0 [pid 6179] +++ exited with 0 +++ [pid 6187] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6185] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6198] <... write resumed>) = 4 [pid