./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1132069663 <...> TEX_WAKE_PRIVATE, 1000000 [pid 5793] close(4 [pid 5800] <... futex resumed>) = 1 [pid 5793] <... close resumed>) = 0 [pid 5786] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5805 attached ./strace-static-x86_64: Process 5803 attached [pid 5800] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5793] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5786] exit_group(0 [pid 4999] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 5797] <... mount resumed>) = 0 [pid 4995] <... clone resumed>, child_tidptr=0x555556fb95d0) = 5805 [pid 5805] set_robust_list(0x555556fb95e0, 24 [pid 5803] set_robust_list(0x555556fb95e0, 24 [pid 5800] <... futex resumed>) = ? [pid 5797] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5793] <... futex resumed>) = 1 [pid 5792] <... futex resumed>) = 0 [pid 5789] <... futex resumed>) = ? [pid 5786] <... exit_group resumed>) = ? [pid 4999] umount2("./25/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5805] <... set_robust_list resumed>) = 0 [pid 5803] <... set_robust_list resumed>) = 0 [pid 5800] +++ exited with 0 +++ [pid 5797] <... openat resumed>) = 3 [pid 5793] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5792] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5789] +++ exited with 0 +++ [pid 5797] chdir("./file0" [pid 5793] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5805] chdir("./25" [pid 5797] <... chdir resumed>) = 0 [pid 5793] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5805] <... chdir resumed>) = 0 [pid 5803] chdir("./27" [pid 5797] ioctl(4, LOOP_CLR_FD [pid 5792] <... futex resumed>) = 0 [pid 5786] +++ exited with 0 +++ [pid 4999] lstat("./25/binderfs", [pid 5805] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5803] <... chdir resumed>) = 0 [pid 5797] <... ioctl resumed>) = 0 [pid 5793] <... open resumed>) = 4 [pid 5792] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4994] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5786, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5805] <... prctl resumed>) = 0 [pid 5803] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5797] close(4 [pid 5793] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5792] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5805] setpgid(0, 0 [pid 5803] <... prctl resumed>) = 0 [pid 5797] <... close resumed>) = 0 [pid 5793] <... futex resumed>) = 0 [pid 5792] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] unlink("./25/binderfs" [pid 5805] <... setpgid resumed>) = 0 [pid 5803] setpgid(0, 0 [pid 5797] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5793] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5792] <... futex resumed>) = 0 [pid 5805] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5803] <... setpgid resumed>) = 0 [pid 5797] <... futex resumed>) = 1 [pid 5795] <... futex resumed>) = 0 [pid 4999] <... unlink resumed>) = 0 [pid 5803] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5797] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5795] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5792] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5805] <... openat resumed>) = 3 [pid 5797] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5795] <... futex resumed>) = 0 [pid 5793] <... write resumed>) = 9 [pid 4999] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5803] <... openat resumed>) = 3 [pid 5805] write(3, "1000", 4 [pid 5797] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5795] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 116.955443][ T5789] EXT4-fs (loop0): Block reservation details [ 116.966763][ T5789] EXT4-fs (loop0): i_reserved_data_blocks=1 [pid 5793] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] umount2("./26", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5793] <... futex resumed>) = 1 [pid 5792] <... futex resumed>) = 0 [pid 5792] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5793] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5792] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4994] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5793] <... openat resumed>) = 5 [pid 4994] <... openat resumed>) = 3 [pid 5805] <... write resumed>) = 4 [pid 5803] write(3, "1000", 4 [pid 5797] <... open resumed>) = 4 [pid 5803] <... write resumed>) = 4 [pid 5805] close(3 [pid 5803] close(3 [pid 5797] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5793] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5805] <... close resumed>) = 0 [pid 4994] fstat(3, [pid 5805] symlink("/dev/binderfs", "./binderfs" [pid 5803] <... close resumed>) = 0 [pid 5797] <... futex resumed>) = 1 [pid 5795] <... futex resumed>) = 0 [pid 5793] <... futex resumed>) = 1 [pid 5792] <... futex resumed>) = 0 [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5805] <... symlink resumed>) = 0 [pid 5803] symlink("/dev/binderfs", "./binderfs" [pid 5795] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5792] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] getdents64(3, [pid 5797] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5793] open("./bus", O_RDWR [pid 5805] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5803] <... symlink resumed>) = 0 [pid 5795] <... futex resumed>) = 0 [pid 5792] <... futex resumed>) = 0 [pid 4994] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 5805] <... futex resumed>) = 0 [pid 5803] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5797] <... write resumed>) = 9 [pid 5795] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5793] <... open resumed>) = 6 [pid 5792] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4994] umount2("./26/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5805] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5803] <... futex resumed>) = 0 [pid 5797] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5795] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5793] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5792] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5805] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 5803] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5797] <... futex resumed>) = 0 [pid 5795] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5793] <... futex resumed>) = 0 [pid 5792] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] lstat("./26/binderfs", [pid 5803] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 5797] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5793] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5792] <... futex resumed>) = 0 [pid 5795] <... futex resumed>) = 0 [pid 4994] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5797] <... openat resumed>) = 5 [pid 5792] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5793] <... mmap resumed>) = 0x20000000 [pid 5795] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5803] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 4994] unlink("./26/binderfs" [pid 5803] <... mprotect resumed>) = 0 [pid 5797] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] <... unlink resumed>) = 0 [pid 5803] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5797] <... futex resumed>) = 1 [pid 5795] <... futex resumed>) = 0 [pid 4994] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5797] open("./bus", O_RDWR [pid 5795] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5803] <... clone resumed>, parent_tid=[5807], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 5807 [pid 5797] <... open resumed>) = 6 [pid 5795] <... futex resumed>) = 0 [pid 5805] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 5803] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5797] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5795] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5793] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5805] <... mprotect resumed>) = 0 [pid 5803] <... futex resumed>) = 0 [pid 5797] <... futex resumed>) = 0 [pid 5795] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5793] <... futex resumed>) = 1 [pid 5792] <... futex resumed>) = 0 [pid 5795] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5792] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5795] <... futex resumed>) = 0 [ 117.008780][ T5076] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 117.038477][ T5076] EXT4-fs (loop5): This should not happen!! Data will be lost [ 117.038477][ T5076] [pid 5805] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5803] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5797] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5795] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5793] sendfile(4, 5, NULL, 2147483713 [pid 5792] <... futex resumed>) = 0 [pid 4999] <... umount2 resumed>) = 0 [pid 5792] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5797] <... mmap resumed>) = 0x20000000 [pid 5805] <... clone resumed>, parent_tid=[5808], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 5808 ./strace-static-x86_64: Process 5807 attached [pid 5805] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5797] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5807] set_robust_list(0x7f5c2b8109e0, 24 [pid 5805] <... futex resumed>) = 0 [pid 5797] <... futex resumed>) = 1 [pid 5795] <... futex resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5807] <... set_robust_list resumed>) = 0 [pid 5805] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5797] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5795] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] lstat("./25/file0", [pid 5807] memfd_create("syzkaller", 0 [pid 5797] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5795] <... futex resumed>) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5795] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5797] sendfile(4, 5, NULL, 2147483713 [pid 4999] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5807] <... memfd_create resumed>) = 3 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 117.085150][ T11] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 117.103545][ T11] EXT4-fs (loop0): This should not happen!! Data will be lost [ 117.103545][ T11] [ 117.107206][ T5793] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 4999] openat(AT_FDCWD, "./25/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5807] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4999] <... openat resumed>) = 4 ./strace-static-x86_64: Process 5808 attached [pid 5808] set_robust_list(0x7f5c2b8109e0, 24) = 0 [pid 5808] memfd_create("syzkaller", 0) = 3 [pid 5808] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5792] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5808] <... mmap resumed>) = 0x7f5c233f0000 [pid 5792] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5792] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4999] fstat(4, [pid 5807] <... mmap resumed>) = 0x7f5c233f0000 [pid 5792] <... mmap resumed>) = 0x7f5c234cf000 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5792] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4999] getdents64(4, 0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, [pid 5792] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4999] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 5808] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4999] close(4) = 0 [pid 5792] <... clone resumed>, parent_tid=[5809], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 5809 [pid 4999] rmdir("./25/file0") = 0 [pid 5792] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] getdents64(3, [pid 5792] <... futex resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 5809 attached [pid 5792] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5809] set_robust_list(0x7f5c234ef9e0, 24) = 0 [pid 4999] close(3 [pid 5809] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 4999] <... close resumed>) = 0 [pid 4999] rmdir("./25") = 0 [pid 4999] mkdir("./26", 0777) = 0 [pid 5795] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4999] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5795] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... openat resumed>) = 3 [pid 5795] <... futex resumed>) = 0 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5795] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5795] <... mmap resumed>) = 0x7f5c234cf000 [pid 4999] close(3 [pid 5795] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 4999] <... close resumed>) = 0 [ 117.136883][ T5797] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 5807] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5795] <... mprotect resumed>) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4994] <... umount2 resumed>) = 0 [pid 5808] <... write resumed>) = 1048576 [pid 5807] <... write resumed>) = 1048576 [pid 5797] <... sendfile resumed>) = 63 [pid 5795] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5792] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4994] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5808] munmap(0x7f5c233f0000, 1048576 [pid 5807] munmap(0x7f5c233f0000, 1048576 [ 117.178401][ T5793] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 117.190915][ T5797] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 117.215278][ T5797] EXT4-fs (loop4): This should not happen!! Data will be lost [ 117.215278][ T5797] [ 117.215310][ T5797] EXT4-fs (loop4): Total free blocks count 0 [ 117.215343][ T5797] EXT4-fs (loop4): Free/Dirty block details [pid 5797] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... clone resumed>, child_tidptr=0x555556fb95d0) = 5810 [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5808] <... munmap resumed>) = 0 [pid 5807] <... munmap resumed>) = 0 [pid 5797] <... futex resumed>) = 0 [pid 5795] <... clone resumed>, parent_tid=[5811], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 5811 [pid 4994] lstat("./26/file0", [pid 5808] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5807] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5797] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5795] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5808] <... openat resumed>) = 4 [pid 5807] <... openat resumed>) = 4 [pid 5795] <... futex resumed>) = 0 [pid 4994] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5808] ioctl(4, LOOP_SET_FD, 3 [pid 5807] ioctl(4, LOOP_SET_FD, 3 [pid 5795] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5811 attached ./strace-static-x86_64: Process 5810 attached [pid 4994] openat(AT_FDCWD, "./26/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4994] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5811] set_robust_list(0x7f5c234ef9e0, 24 [pid 5810] set_robust_list(0x555556fb95e0, 24 [pid 4994] getdents64(4, [pid 5811] <... set_robust_list resumed>) = 0 [pid 5810] <... set_robust_list resumed>) = 0 [pid 4994] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [ 117.215363][ T5797] EXT4-fs (loop4): free_blocks=2415919104 [ 117.215386][ T5797] EXT4-fs (loop4): dirty_blocks=16 [ 117.215405][ T5797] EXT4-fs (loop4): Block reservation details [ 117.215423][ T5797] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 117.251598][ T5808] loop1: detected capacity change from 0 to 2048 [ 117.263374][ T5793] EXT4-fs (loop3): This should not happen!! Data will be lost [ 117.263374][ T5793] [ 117.268545][ T5807] loop2: detected capacity change from 0 to 2048 [ 117.277473][ T5793] EXT4-fs (loop3): Total free blocks count 0 [pid 5807] <... ioctl resumed>) = 0 [pid 4994] getdents64(4, [pid 5807] close(3 [pid 4994] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 5807] <... close resumed>) = 0 [pid 4994] close(4 [pid 5811] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5807] mkdir("./file0", 0777 [pid 4994] <... close resumed>) = 0 [pid 5811] <... ioctl resumed>) = 0 [pid 5810] chdir("./26" [pid 5807] <... mkdir resumed>) = 0 [pid 4994] rmdir("./26/file0" [pid 5807] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 4994] <... rmdir resumed>) = 0 [pid 4994] getdents64(3, [pid 5811] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5810] <... chdir resumed>) = 0 [pid 4994] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 5811] <... futex resumed>) = 1 [pid 5810] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5795] <... futex resumed>) = 0 [pid 4994] close(3) = 0 [pid 4994] rmdir("./26") = 0 [pid 4994] mkdir("./27", 0777 [pid 5811] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5810] <... prctl resumed>) = 0 [pid 5808] <... ioctl resumed>) = 0 [pid 5795] exit_group(0 [pid 4994] <... mkdir resumed>) = 0 [pid 5808] close(3 [pid 4994] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5808] <... close resumed>) = 0 [pid 4994] <... openat resumed>) = 3 [pid 5810] setpgid(0, 0 [pid 5808] mkdir("./file0", 0777 [pid 5797] <... futex resumed>) = ? [pid 5795] <... exit_group resumed>) = ? [pid 4994] ioctl(3, LOOP_CLR_FD [pid 5811] <... futex resumed>) = ? [pid 5810] <... setpgid resumed>) = 0 [pid 5808] <... mkdir resumed>) = 0 [pid 5797] +++ exited with 0 +++ [pid 4994] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5808] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 4994] close(3 [pid 5811] +++ exited with 0 +++ [pid 5810] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5809] <... ioctl resumed>) = 0 [pid 5795] +++ exited with 0 +++ [pid 5793] <... sendfile resumed>) = 63 [pid 4994] <... close resumed>) = 0 [pid 5810] <... openat resumed>) = 3 [pid 5809] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5810] write(3, "1000", 4 [pid 5809] <... futex resumed>) = 0 [pid 5793] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5810] <... write resumed>) = 4 [pid 5809] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5810] close(3 [pid 5793] <... futex resumed>) = 0 [pid 5810] <... close resumed>) = 0 [pid 5810] symlink("/dev/binderfs", "./binderfs" [pid 5793] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5810] <... symlink resumed>) = 0 [pid 5810] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5810] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c2b7f0000 [pid 5810] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5810] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5814], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 5814 [pid 5810] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5810] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4994] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5807] <... mount resumed>) = 0 [pid 5792] exit_group(0 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5795, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- ./strace-static-x86_64: Process 5814 attached [pid 5814] set_robust_list(0x7f5c2b8109e0, 24) = 0 [pid 5814] memfd_create("syzkaller", 0 [pid 5793] <... futex resumed>) = ? [pid 5792] <... exit_group resumed>) = ? [pid 5809] <... futex resumed>) = ? [pid 5793] +++ exited with 0 +++ [pid 5809] +++ exited with 0 +++ [pid 5814] <... memfd_create resumed>) = 3 [pid 5814] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5c233f0000 [pid 5792] +++ exited with 0 +++ ./strace-static-x86_64: Process 5815 attached [pid 4998] umount2("./25", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5792, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 4994] <... clone resumed>, child_tidptr=0x555556fb95d0) = 5815 [pid 5807] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5815] set_robust_list(0x555556fb95e0, 24) = 0 [pid 5815] chdir("./27" [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5815] <... chdir resumed>) = 0 [pid 5807] <... openat resumed>) = 3 [pid 5815] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5807] chdir("./file0" [pid 4998] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5807] <... chdir resumed>) = 0 [pid 4997] umount2("./26", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5807] ioctl(4, LOOP_CLR_FD [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... openat resumed>) = 3 [pid 5807] <... ioctl resumed>) = 0 [pid 4997] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] fstat(3, [pid 4997] <... openat resumed>) = 3 [pid 5807] close(4 [pid 4997] fstat(3, [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5807] <... close resumed>) = 0 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5807] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] getdents64(3, [pid 4997] getdents64(3, [pid 5807] <... futex resumed>) = 1 [pid 5803] <... futex resumed>) = 0 [pid 5803] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4997] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 5803] <... futex resumed>) = 0 [pid 4997] umount2("./26/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5807] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5803] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] umount2("./25/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./26/binderfs", [pid 5815] <... prctl resumed>) = 0 [pid 5807] <... open resumed>) = 4 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5815] setpgid(0, 0 [pid 5814] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5815] <... setpgid resumed>) = 0 [pid 5815] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4998] lstat("./25/binderfs", [pid 5807] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] unlink("./26/binderfs" [pid 5815] <... openat resumed>) = 3 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5815] write(3, "1000", 4) = 4 [pid 5815] close(3) = 0 [pid 5815] symlink("/dev/binderfs", "./binderfs" [pid 4997] <... unlink resumed>) = 0 [pid 5815] <... symlink resumed>) = 0 [pid 5807] <... futex resumed>) = 1 [pid 5803] <... futex resumed>) = 0 [pid 4998] unlink("./25/binderfs" [pid 4997] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5815] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5807] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5803] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5815] <... futex resumed>) = 0 [pid 5803] <... futex resumed>) = 0 [pid 4998] <... unlink resumed>) = 0 [pid 5815] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c2b7f0000 [pid 5807] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5803] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5815] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 5807] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5815] <... mprotect resumed>) = 0 [pid 5815] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5807] <... write resumed>) = 9 [ 117.290600][ T5793] EXT4-fs (loop3): Free/Dirty block details [ 117.298249][ T5793] EXT4-fs (loop3): free_blocks=2415919104 [ 117.305966][ T5793] EXT4-fs (loop3): dirty_blocks=16 [ 117.311795][ T5793] EXT4-fs (loop3): Block reservation details [ 117.319417][ T5793] EXT4-fs (loop3): i_reserved_data_blocks=1 [pid 5815] <... clone resumed>, parent_tid=[5818], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 5818 [pid 5807] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5815] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5814] <... write resumed>) = 1048576 [pid 5815] <... futex resumed>) = 0 [pid 5815] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5814] munmap(0x7f5c233f0000, 1048576) = 0 [pid 5814] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5814] ioctl(4, LOOP_SET_FD, 3 [pid 5807] <... futex resumed>) = 1 [pid 5803] <... futex resumed>) = 0 [pid 5807] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5814] <... ioctl resumed>) = 0 [pid 5814] close(3) = 0 [pid 5814] mkdir("./file0", 0777) = 0 [pid 5814] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5803] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5807] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5807] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5803] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5818 attached [pid 5818] set_robust_list(0x7f5c2b8109e0, 24) = 0 [pid 5807] <... openat resumed>) = 5 [pid 5803] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5807] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5818] memfd_create("syzkaller", 0) = 3 [pid 5818] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5c233f0000 [pid 5808] <... mount resumed>) = 0 [pid 5803] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5807] <... futex resumed>) = 0 [pid 5807] open("./bus", O_RDWR [pid 5808] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5803] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5803] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5807] <... open resumed>) = 6 [pid 5807] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5808] <... openat resumed>) = 3 [pid 5807] <... futex resumed>) = 1 [pid 5803] <... futex resumed>) = 0 [pid 5808] chdir("./file0" [pid 5803] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5807] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5803] <... futex resumed>) = 0 [pid 5808] <... chdir resumed>) = 0 [pid 5807] <... mmap resumed>) = 0x20000000 [pid 5803] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5808] ioctl(4, LOOP_CLR_FD [pid 5807] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5803] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5803] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5803] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5808] <... ioctl resumed>) = 0 [pid 5807] <... futex resumed>) = 1 [pid 5803] <... futex resumed>) = 0 [pid 5808] close(4 [pid 5807] sendfile(4, 5, NULL, 2147483713 [pid 5803] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=48000000} [pid 5808] <... close resumed>) = 0 [pid 5808] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5805] <... futex resumed>) = 0 [pid 5805] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5805] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5808] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000) = 4 [ 117.372252][ T5457] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 117.379642][ T5814] loop5: detected capacity change from 0 to 2048 [ 117.391601][ T5076] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5818] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5808] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5818] <... write resumed>) = 1048576 [pid 5818] munmap(0x7f5c233f0000, 1048576) = 0 [pid 5818] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5818] ioctl(4, LOOP_SET_FD, 3 [pid 5808] <... futex resumed>) = 1 [pid 5805] <... futex resumed>) = 0 [pid 5805] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5808] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5805] <... futex resumed>) = 0 [pid 5805] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5818] <... ioctl resumed>) = 0 [pid 5818] close(3) = 0 [pid 5808] <... write resumed>) = 9 [pid 5818] mkdir("./file0", 0777 [pid 5808] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5805] <... futex resumed>) = 0 [pid 5808] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5805] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5808] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5805] <... futex resumed>) = 0 [pid 5808] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5805] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5808] <... openat resumed>) = 5 [pid 5808] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5805] <... futex resumed>) = 0 [pid 5808] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5805] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5808] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5805] <... futex resumed>) = 0 [pid 5808] open("./bus", O_RDWR [pid 5805] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5818] <... mkdir resumed>) = 0 [pid 5808] <... open resumed>) = 6 [pid 5808] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5805] <... futex resumed>) = 0 [pid 5808] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5805] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5808] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5805] <... futex resumed>) = 0 [pid 5808] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5805] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 117.428757][ T5807] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 117.440805][ T5818] loop0: detected capacity change from 0 to 2048 [ 117.460282][ T5457] EXT4-fs (loop3): This should not happen!! Data will be lost [ 117.460282][ T5457] [ 117.470335][ T5076] EXT4-fs (loop4): This should not happen!! Data will be lost [pid 5818] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5808] <... mmap resumed>) = 0x20000000 [pid 5803] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5808] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5803] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5808] <... futex resumed>) = 1 [pid 5805] <... futex resumed>) = 0 [pid 5803] <... futex resumed>) = 0 [pid 5808] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5805] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5803] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5808] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5805] <... futex resumed>) = 0 [pid 5803] <... mmap resumed>) = 0x7f5c234cf000 [pid 5808] sendfile(4, 5, NULL, 2147483713 [pid 5805] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5803] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5803] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5821], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 5821 [ 117.470335][ T5076] [ 117.470888][ T5807] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 117.494226][ T5807] EXT4-fs (loop2): This should not happen!! Data will be lost [ 117.494226][ T5807] [ 117.504302][ T5807] EXT4-fs (loop2): Total free blocks count 0 [ 117.509934][ T5808] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 5803] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5803] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5805] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5805] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5805] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c234cf000 [ 117.511046][ T5807] EXT4-fs (loop2): Free/Dirty block details [ 117.531341][ T5807] EXT4-fs (loop2): free_blocks=2415919104 [ 117.537759][ T5807] EXT4-fs (loop2): dirty_blocks=16 [ 117.543466][ T5807] EXT4-fs (loop2): Block reservation details [ 117.550191][ T5807] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 117.559835][ T5808] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 117.572230][ T5808] EXT4-fs (loop1): This should not happen!! Data will be lost [pid 5805] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 5821 attached [pid 5818] <... mount resumed>) = 0 [pid 5814] <... mount resumed>) = 0 [pid 5807] <... sendfile resumed>) = 63 [pid 5805] <... mprotect resumed>) = 0 [pid 5818] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5814] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5805] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5803] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5821] set_robust_list(0x7f5c234ef9e0, 24 [pid 5818] <... openat resumed>) = 3 [pid 5814] <... openat resumed>) = 3 [pid 5807] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5821] <... set_robust_list resumed>) = 0 [pid 5818] chdir("./file0" [pid 5814] chdir("./file0" [pid 5805] <... clone resumed>, parent_tid=[5825], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 5825 [pid 4997] <... umount2 resumed>) = 0 [pid 5818] <... chdir resumed>) = 0 [pid 5814] <... chdir resumed>) = 0 [pid 5805] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5825 attached [pid 5821] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5818] ioctl(4, LOOP_CLR_FD [pid 5814] ioctl(4, LOOP_CLR_FD [pid 5807] <... futex resumed>) = 0 [pid 5805] <... futex resumed>) = 0 [pid 5818] <... ioctl resumed>) = 0 [pid 5814] <... ioctl resumed>) = 0 [pid 5805] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5818] close(4 [pid 5814] close(4 [pid 5825] set_robust_list(0x7f5c234ef9e0, 24 [pid 5821] <... ioctl resumed>) = 0 [pid 5818] <... close resumed>) = 0 [pid 5814] <... close resumed>) = 0 [pid 5807] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4997] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5818] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5814] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5818] <... futex resumed>) = 1 [pid 5815] <... futex resumed>) = 0 [pid 5814] <... futex resumed>) = 1 [pid 5810] <... futex resumed>) = 0 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... set_robust_list resumed>) = 0 [pid 5821] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5818] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5815] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5814] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5810] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5808] <... sendfile resumed>) = 63 [pid 4997] lstat("./26/file0", [pid 5825] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5821] <... futex resumed>) = 0 [pid 5818] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5815] <... futex resumed>) = 0 [pid 5814] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5810] <... futex resumed>) = 0 [pid 5808] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [ 117.572230][ T5808] [ 117.581982][ T5808] EXT4-fs (loop1): Total free blocks count 0 [ 117.588364][ T5808] EXT4-fs (loop1): Free/Dirty block details [ 117.594777][ T5808] EXT4-fs (loop1): free_blocks=2415919104 [ 117.601042][ T5808] EXT4-fs (loop1): dirty_blocks=16 [ 117.607828][ T5808] EXT4-fs (loop1): Block reservation details [ 117.614316][ T5808] EXT4-fs (loop1): i_reserved_data_blocks=1 [pid 5803] exit_group(0 [pid 4998] <... umount2 resumed>) = 0 [pid 4997] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5825] <... ioctl resumed>) = 0 [pid 5818] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5815] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5814] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5810] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5808] <... futex resumed>) = 0 [pid 5807] <... futex resumed>) = ? [pid 5805] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5803] <... exit_group resumed>) = ? [pid 4997] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5825] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5821] +++ exited with 0 +++ [pid 5818] <... open resumed>) = 4 [pid 5814] <... open resumed>) = 4 [pid 5808] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5807] +++ exited with 0 +++ [pid 5805] exit_group(0 [pid 5803] +++ exited with 0 +++ [pid 4998] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5818] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5814] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5805] <... exit_group resumed>) = ? [pid 4997] openat(AT_FDCWD, "./26/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4996] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5803, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5825] <... futex resumed>) = ? [pid 5818] <... futex resumed>) = 1 [pid 5815] <... futex resumed>) = 0 [pid 5814] <... futex resumed>) = 1 [pid 5810] <... futex resumed>) = 0 [pid 5808] <... futex resumed>) = ? [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] <... openat resumed>) = 4 [pid 5825] +++ exited with 0 +++ [pid 5818] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5815] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5814] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5810] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] fstat(4, [pid 5818] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5815] <... futex resumed>) = 0 [pid 5814] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5810] <... futex resumed>) = 0 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] umount2("./27", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5818] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5815] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5814] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5810] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5808] +++ exited with 0 +++ [pid 5805] +++ exited with 0 +++ [pid 4998] lstat("./25/file0", [pid 4997] getdents64(4, [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5818] <... write resumed>) = 9 [pid 5814] <... write resumed>) = 9 [pid 4997] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4996] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4995] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5805, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5818] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5814] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(4, [pid 4996] <... openat resumed>) = 3 [pid 5818] <... futex resumed>) = 1 [pid 5815] <... futex resumed>) = 0 [pid 5814] <... futex resumed>) = 1 [pid 5810] <... futex resumed>) = 0 [pid 4998] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4996] fstat(3, [pid 5818] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5815] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5814] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5810] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] close(4 [pid 4996] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] umount2("./25", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5818] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5815] <... futex resumed>) = 0 [pid 5814] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5810] <... futex resumed>) = 0 [pid 4998] openat(AT_FDCWD, "./25/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] <... close resumed>) = 0 [pid 4996] getdents64(3, [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5818] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5815] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5814] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5810] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] <... openat resumed>) = 4 [pid 4997] rmdir("./26/file0" [pid 4996] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4995] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5818] <... openat resumed>) = 5 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, [pid 5818] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5814] <... openat resumed>) = 5 [pid 4998] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4997] <... rmdir resumed>) = 0 [pid 4996] umount2("./27/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] <... openat resumed>) = 3 [pid 5818] <... futex resumed>) = 1 [pid 5815] <... futex resumed>) = 0 [pid 5814] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] close(4 [pid 4997] getdents64(3, [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] fstat(3, [pid 5818] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5815] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5814] <... futex resumed>) = 1 [pid 5810] <... futex resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 4997] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4996] lstat("./27/binderfs", [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5818] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5815] <... futex resumed>) = 0 [pid 5814] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5810] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] rmdir("./25/file0" [pid 4997] close(3 [pid 4996] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4995] getdents64(3, [pid 5818] open("./bus", O_RDWR [pid 5815] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5814] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5810] <... futex resumed>) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 4997] <... close resumed>) = 0 [pid 4996] unlink("./27/binderfs" [pid 4995] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 5818] <... open resumed>) = 6 [pid 5814] open("./bus", O_RDWR [pid 5810] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] getdents64(3, [pid 4997] rmdir("./26" [pid 4996] <... unlink resumed>) = 0 [pid 4995] umount2("./25/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5818] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5814] <... open resumed>) = 6 [pid 4998] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4997] <... rmdir resumed>) = 0 [pid 4996] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5818] <... futex resumed>) = 1 [pid 5815] <... futex resumed>) = 0 [pid 5814] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] close(3 [pid 4997] mkdir("./27", 0777 [pid 4995] lstat("./25/binderfs", [pid 5818] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5815] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5814] <... futex resumed>) = 1 [pid 5810] <... futex resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 4997] <... mkdir resumed>) = 0 [pid 4995] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5818] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5815] <... futex resumed>) = 0 [pid 5814] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5810] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] rmdir("./25" [pid 4997] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4995] unlink("./25/binderfs" [ 117.722762][ T26] kauditd_printk_skb: 96 callbacks suppressed [ 117.722777][ T26] audit: type=1804 audit(1687834587.782:744): pid=5818 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor113" name="/root/syzkaller.slA38Q/27/file0/bus" dev="loop0" ino=18 res=1 errno=0 [ 117.754167][ T5076] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5818] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5815] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5814] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5810] <... futex resumed>) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 4997] <... openat resumed>) = 3 [pid 4995] <... unlink resumed>) = 0 [pid 5818] <... mmap resumed>) = 0x20000000 [pid 5814] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5810] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] mkdir("./26", 0777 [pid 4997] ioctl(3, LOOP_CLR_FD [pid 4995] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [ 117.767299][ T26] audit: type=1804 audit(1687834587.792:745): pid=5814 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor113" name="/root/syzkaller.drywye/26/file0/bus" dev="loop5" ino=18 res=1 errno=0 [ 117.768532][ T5076] EXT4-fs (loop2): This should not happen!! Data will be lost [ 117.768532][ T5076] [pid 5818] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5815] <... futex resumed>) = 0 [pid 5814] <... mmap resumed>) = 0x20000000 [pid 4998] <... mkdir resumed>) = 0 [pid 4997] <... ioctl resumed>) = -1 ENXIO (No such device or address) [ 117.797210][ T26] audit: type=1804 audit(1687834587.802:746): pid=5818 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor113" name="/root/syzkaller.slA38Q/27/file0/bus" dev="loop0" ino=18 res=1 errno=0 [ 117.828878][ T5608] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 117.829004][ T26] audit: type=1804 audit(1687834587.812:747): pid=5814 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor113" name="/root/syzkaller.drywye/26/file0/bus" dev="loop5" ino=18 res=1 errno=0 [ 117.841501][ T5608] EXT4-fs (loop1): This should not happen!! Data will be lost [pid 5818] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5815] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5814] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4997] close(3 [pid 5815] <... futex resumed>) = 0 [pid 5814] <... futex resumed>) = 1 [pid 5810] <... futex resumed>) = 0 [pid 4997] <... close resumed>) = 0 [pid 5810] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... openat resumed>) = 3 [pid 5814] sendfile(4, 5, NULL, 2147483713 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5818] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5815] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5810] <... futex resumed>) = 0 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5818] sendfile(4, 5, NULL, 2147483713 [pid 5810] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] close(3 [pid 4997] <... clone resumed>, child_tidptr=0x555556fb95d0) = 5826 [pid 4998] <... close resumed>) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556fb95d0) = 5827 ./strace-static-x86_64: Process 5827 attached ./strace-static-x86_64: Process 5826 attached [pid 5826] set_robust_list(0x555556fb95e0, 24) = 0 [pid 5826] chdir("./27") = 0 [ 117.841501][ T5608] [ 117.876010][ T4996] EXT4-fs unmount: 256 callbacks suppressed [ 117.883331][ T5814] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 117.890385][ T5818] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 5826] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5826] setpgid(0, 0) = 0 [pid 5826] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5815] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5815] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5815] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c234cf000 [pid 5815] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5810] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5815] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5810] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5815] <... clone resumed>, parent_tid=[5828], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 5828 [pid 5810] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5815] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5810] <... mmap resumed>) = 0x7f5c234cf000 [pid 5815] <... futex resumed>) = 0 [pid 5810] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 5815] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5810] <... mprotect resumed>) = 0 [pid 5810] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5829], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 5829 [pid 5810] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5810] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5827] set_robust_list(0x555556fb95e0, 24 [pid 5826] write(3, "1000", 4) = 4 [pid 5826] close(3) = 0 [pid 5826] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5826] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5826] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5827] <... set_robust_list resumed>) = 0 [pid 5827] chdir("./26" [pid 4995] <... umount2 resumed>) = 0 [pid 5826] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 5826] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 4995] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5826] <... mprotect resumed>) = 0 [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4996] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 5828 attached ./strace-static-x86_64: Process 5829 attached [pid 4995] lstat("./25/file0", [pid 4996] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5829] set_robust_list(0x7f5c234ef9e0, 24 [pid 5828] set_robust_list(0x7f5c234ef9e0, 24 [pid 4995] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5827] <... chdir resumed>) = 0 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5828] <... set_robust_list resumed>) = 0 [pid 5829] <... set_robust_list resumed>) = 0 [pid 5828] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5829] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5827] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4996] lstat("./27/file0", [pid 5826] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4996] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... clone resumed>, parent_tid=[5830], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 5830 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] openat(AT_FDCWD, "./25/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] openat(AT_FDCWD, "./27/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4995] <... openat resumed>) = 4 [ 117.919010][ T26] audit: type=1804 audit(1687834587.822:748): pid=5818 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor113" name="/root/syzkaller.slA38Q/27/file0/bus" dev="loop0" ino=18 res=1 errno=0 [ 117.955346][ T5814] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5826] <... futex resumed>) = 0 [pid 4996] <... openat resumed>) = 4 [pid 4995] fstat(4, [pid 5826] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4996] fstat(4, [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] getdents64(4, [pid 4996] getdents64(4, [pid 4995] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4996] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4995] getdents64(4, [pid 4996] getdents64(4, [pid 4995] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4996] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4995] close(4 [pid 5827] <... prctl resumed>) = 0 [pid 4996] close(4 [pid 4995] <... close resumed>) = 0 ./strace-static-x86_64: Process 5830 attached [pid 5827] setpgid(0, 0 [pid 4996] <... close resumed>) = 0 [pid 4995] rmdir("./25/file0" [pid 4996] rmdir("./27/file0" [pid 4995] <... rmdir resumed>) = 0 [pid 5815] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4996] <... rmdir resumed>) = 0 [pid 4995] getdents64(3, [pid 5810] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4996] getdents64(3, [pid 4995] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4996] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4995] close(3 [pid 4996] close(3 [pid 4995] <... close resumed>) = 0 [pid 4996] <... close resumed>) = 0 [pid 4995] rmdir("./25" [pid 4996] rmdir("./27" [pid 4995] <... rmdir resumed>) = 0 [pid 4996] <... rmdir resumed>) = 0 [pid 4995] mkdir("./26", 0777 [pid 4996] mkdir("./28", 0777 [pid 4995] <... mkdir resumed>) = 0 [pid 5830] set_robust_list(0x7f5c2b8109e0, 24 [pid 5827] <... setpgid resumed>) = 0 [pid 4996] <... mkdir resumed>) = 0 [pid 4995] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 4996] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4995] <... openat resumed>) = 3 [pid 5830] <... set_robust_list resumed>) = 0 [pid 5827] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4996] <... openat resumed>) = 3 [pid 4995] ioctl(3, LOOP_CLR_FD [pid 5830] memfd_create("syzkaller", 0 [pid 5827] <... openat resumed>) = 3 [pid 4996] ioctl(3, LOOP_CLR_FD [pid 4995] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4996] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4995] close(3 [pid 4996] close(3 [pid 4995] <... close resumed>) = 0 [ 117.969089][ T5814] EXT4-fs (loop5): This should not happen!! Data will be lost [ 117.969089][ T5814] [ 117.980785][ T26] audit: type=1804 audit(1687834587.822:749): pid=5818 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor113" name="/root/syzkaller.slA38Q/27/file0/bus" dev="loop0" ino=18 res=1 errno=0 [ 118.006537][ T5814] EXT4-fs (loop5): Total free blocks count 0 [ 118.012577][ T5814] EXT4-fs (loop5): Free/Dirty block details [pid 4996] <... close resumed>) = 0 [pid 4995] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4996] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5830] <... memfd_create resumed>) = 3 [pid 5827] write(3, "1000", 4 [pid 4995] <... clone resumed>, child_tidptr=0x555556fb95d0) = 5831 [pid 4996] <... clone resumed>, child_tidptr=0x555556fb95d0) = 5832 ./strace-static-x86_64: Process 5831 attached [pid 5831] set_robust_list(0x555556fb95e0, 24./strace-static-x86_64: Process 5832 attached ) = 0 [pid 5832] set_robust_list(0x555556fb95e0, 24 [pid 5831] chdir("./26" [pid 5830] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5827] <... write resumed>) = 4 [pid 5832] <... set_robust_list resumed>) = 0 [pid 5831] <... chdir resumed>) = 0 [pid 5832] chdir("./28" [pid 5831] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5830] <... mmap resumed>) = 0x7f5c233f0000 [pid 5827] close(3 [pid 5832] <... chdir resumed>) = 0 [pid 5831] <... prctl resumed>) = 0 [pid 5832] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5831] setpgid(0, 0 [pid 5832] <... prctl resumed>) = 0 [pid 5831] <... setpgid resumed>) = 0 [pid 5832] setpgid(0, 0 [pid 5831] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5832] <... setpgid resumed>) = 0 [pid 5831] <... openat resumed>) = 3 [pid 5832] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5831] write(3, "1000", 4 [pid 5832] <... openat resumed>) = 3 [pid 5831] <... write resumed>) = 4 [pid 5832] write(3, "1000", 4 [pid 5831] close(3 [pid 5832] <... write resumed>) = 4 [pid 5831] <... close resumed>) = 0 [pid 5832] close(3 [pid 5831] symlink("/dev/binderfs", "./binderfs" [pid 5832] <... close resumed>) = 0 [pid 5831] <... symlink resumed>) = 0 [pid 5832] symlink("/dev/binderfs", "./binderfs" [pid 5831] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5832] <... symlink resumed>) = 0 [pid 5831] <... futex resumed>) = 0 [pid 5832] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5831] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5832] <... futex resumed>) = 0 [pid 5831] <... mmap resumed>) = 0x7f5c2b7f0000 [ 118.020807][ T5814] EXT4-fs (loop5): free_blocks=2415919104 [ 118.027624][ T5814] EXT4-fs (loop5): dirty_blocks=16 [ 118.033280][ T5814] EXT4-fs (loop5): Block reservation details [ 118.040263][ T26] audit: type=1804 audit(1687834587.852:750): pid=5814 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor113" name="/root/syzkaller.drywye/26/file0/bus" dev="loop5" ino=18 res=1 errno=0 [pid 5832] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5831] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 5832] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 5831] <... mprotect resumed>) = 0 [pid 5830] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5827] <... close resumed>) = 0 [pid 5832] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 5831] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5832] <... mprotect resumed>) = 0 [pid 5832] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5831] <... clone resumed>, parent_tid=[5833], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 5833 [pid 5831] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5832] <... clone resumed>, parent_tid=[5834], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 5834 [pid 5831] <... futex resumed>) = 0 [pid 5827] symlink("/dev/binderfs", "./binderfs" [pid 5832] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5831] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5830] <... write resumed>) = 1048576 [pid 5829] <... ioctl resumed>) = 0 [pid 5814] <... sendfile resumed>) = 63 [pid 5832] <... futex resumed>) = 0 [pid 5829] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5832] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5829] <... futex resumed>) = 0 [pid 5829] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 5834 attached ./strace-static-x86_64: Process 5833 attached [pid 5834] set_robust_list(0x7f5c2b8109e0, 24 [pid 5833] set_robust_list(0x7f5c2b8109e0, 24 [ 118.071843][ T5818] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 118.074811][ T5814] EXT4-fs (loop5): i_reserved_data_blocks=1 [pid 5834] <... set_robust_list resumed>) = 0 [pid 5833] <... set_robust_list resumed>) = 0 [pid 5834] memfd_create("syzkaller", 0 [pid 5833] memfd_create("syzkaller", 0 [pid 5830] munmap(0x7f5c233f0000, 1048576 [pid 5827] <... symlink resumed>) = 0 [pid 5814] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5810] exit_group(0 [pid 5834] <... memfd_create resumed>) = 3 [pid 5833] <... memfd_create resumed>) = 3 [pid 5829] <... futex resumed>) = ? [pid 5810] <... exit_group resumed>) = ? [pid 5834] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5833] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5829] +++ exited with 0 +++ [pid 5834] <... mmap resumed>) = 0x7f5c233f0000 [pid 5833] <... mmap resumed>) = 0x7f5c233f0000 [pid 5834] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5833] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5830] <... munmap resumed>) = 0 [pid 5827] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5814] <... futex resumed>) = ? [pid 5830] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5827] <... futex resumed>) = 0 [pid 5814] +++ exited with 0 +++ [pid 5810] +++ exited with 0 +++ [pid 5830] <... openat resumed>) = 4 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5810, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5827] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5830] ioctl(4, LOOP_SET_FD, 3 [pid 5827] <... mmap resumed>) = 0x7f5c2b7f0000 [ 118.102174][ T26] audit: type=1804 audit(1687834587.852:751): pid=5814 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor113" name="/root/syzkaller.drywye/26/file0/bus" dev="loop5" ino=18 res=1 errno=0 [ 118.127553][ T5818] EXT4-fs (loop0): This should not happen!! Data will be lost [ 118.127553][ T5818] [ 118.140424][ T5818] EXT4-fs (loop0): Total free blocks count 0 [ 118.146693][ T5818] EXT4-fs (loop0): Free/Dirty block details [ 118.152624][ T5818] EXT4-fs (loop0): free_blocks=2415919104 [ 118.161806][ T5818] EXT4-fs (loop0): dirty_blocks=16 [ 118.168057][ T5818] EXT4-fs (loop0): Block reservation details [pid 5827] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 5830] <... ioctl resumed>) = 0 [pid 5830] close(3 [pid 5828] <... ioctl resumed>) = 0 [pid 5827] <... mprotect resumed>) = 0 [pid 5818] <... sendfile resumed>) = 63 [pid 5830] <... close resumed>) = 0 [pid 5828] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5827] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5818] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5834] <... write resumed>) = 1048576 [pid 5833] <... write resumed>) = 1048576 [pid 5830] mkdir("./file0", 0777 [pid 5828] <... futex resumed>) = 0 [pid 5818] <... futex resumed>) = 0 [pid 5834] munmap(0x7f5c233f0000, 1048576 [pid 5833] munmap(0x7f5c233f0000, 1048576 [pid 5830] <... mkdir resumed>) = 0 [pid 5828] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5827] <... clone resumed>, parent_tid=[5835], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 5835 [pid 5818] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5815] exit_group(0 [pid 4999] umount2("./26", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5835 attached [pid 5834] <... munmap resumed>) = 0 [pid 5833] <... munmap resumed>) = 0 [pid 5830] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5828] <... futex resumed>) = ? [pid 5827] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5818] <... futex resumed>) = ? [pid 5815] <... exit_group resumed>) = ? [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5834] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5833] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5828] +++ exited with 0 +++ [pid 5827] <... futex resumed>) = 0 [pid 5818] +++ exited with 0 +++ [pid 4999] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5834] <... openat resumed>) = 4 [pid 5833] <... openat resumed>) = 4 [pid 5827] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4999] <... openat resumed>) = 3 [pid 5834] ioctl(4, LOOP_SET_FD, 3 [pid 5833] ioctl(4, LOOP_SET_FD, 3 [pid 5815] +++ exited with 0 +++ [pid 4999] fstat(3, [pid 5835] set_robust_list(0x7f5c2b8109e0, 24 [pid 5834] <... ioctl resumed>) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5835] <... set_robust_list resumed>) = 0 [pid 5834] close(3 [pid 4994] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5815, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [ 118.174842][ T5830] loop3: detected capacity change from 0 to 2048 [ 118.182126][ T5818] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 118.213875][ T5834] loop2: detected capacity change from 0 to 2048 [pid 5835] memfd_create("syzkaller", 0 [pid 5834] <... close resumed>) = 0 [pid 5835] <... memfd_create resumed>) = 3 [pid 5834] mkdir("./file0", 0777 [pid 5835] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5834] <... mkdir resumed>) = 0 [pid 4999] getdents64(3, [pid 5835] <... mmap resumed>) = 0x7f5c233f0000 [pid 5834] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 4999] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 5835] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5833] <... ioctl resumed>) = 0 [pid 4999] umount2("./26/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5833] close(3) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] mkdir("./file0", 0777 [ 118.222040][ T5833] loop1: detected capacity change from 0 to 2048 [pid 4999] lstat("./26/binderfs", [pid 5833] <... mkdir resumed>) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5833] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 4999] unlink("./26/binderfs" [pid 4994] umount2("./27", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... unlink resumed>) = 0 [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4994] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] getdents64(3, 0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4994] umount2("./27/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] lstat("./27/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4994] unlink("./27/binderfs") = 0 [pid 4994] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5835] <... write resumed>) = 1048576 [pid 5835] munmap(0x7f5c233f0000, 1048576) = 0 [pid 5835] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5835] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5835] close(3) = 0 [pid 5835] mkdir("./file0", 0777) = 0 [ 118.251695][ T5830] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.265185][ T11] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 118.277281][ T5835] loop4: detected capacity change from 0 to 2048 [ 118.277719][ T5608] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5835] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5830] <... mount resumed>) = 0 [pid 5834] <... mount resumed>) = 0 [pid 5830] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5830] chdir("./file0") = 0 [pid 5830] ioctl(4, LOOP_CLR_FD) = 0 [pid 5830] close(4 [pid 5834] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5833] <... mount resumed>) = 0 [pid 5830] <... close resumed>) = 0 [pid 5830] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5826] <... futex resumed>) = 0 [pid 5830] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5826] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5833] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5826] <... futex resumed>) = 0 [pid 5834] <... openat resumed>) = 3 [pid 5826] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5833] <... openat resumed>) = 3 [pid 5834] chdir("./file0") = 0 [pid 5833] chdir("./file0") = 0 [pid 5830] <... open resumed>) = 4 [pid 5830] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5834] ioctl(4, LOOP_CLR_FD [pid 5833] ioctl(4, LOOP_CLR_FD [pid 5830] <... futex resumed>) = 1 [pid 5826] <... futex resumed>) = 0 [pid 5830] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5826] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5834] <... ioctl resumed>) = 0 [pid 5833] <... ioctl resumed>) = 0 [pid 5826] <... futex resumed>) = 0 [pid 5826] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5830] <... write resumed>) = 9 [pid 5830] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5834] close(4 [pid 5833] close(4 [pid 5834] <... close resumed>) = 0 [pid 5833] <... close resumed>) = 0 [pid 5830] <... futex resumed>) = 1 [pid 5826] <... futex resumed>) = 0 [pid 5834] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5833] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5826] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5830] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5834] <... futex resumed>) = 1 [pid 5833] <... futex resumed>) = 1 [ 118.296923][ T11] EXT4-fs (loop5): This should not happen!! Data will be lost [ 118.296923][ T11] [ 118.301919][ T5834] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.307102][ T5608] EXT4-fs (loop0): This should not happen!! Data will be lost [ 118.307102][ T5608] [ 118.334322][ T5833] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [pid 5832] <... futex resumed>) = 0 [pid 5831] <... futex resumed>) = 0 [pid 5826] <... futex resumed>) = 0 [pid 5834] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5833] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5832] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5831] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5830] <... openat resumed>) = 5 [pid 5826] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] <... umount2 resumed>) = 0 [pid 5834] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5833] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5832] <... futex resumed>) = 0 [pid 5831] <... futex resumed>) = 0 [pid 5830] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5826] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5834] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5833] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5832] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5831] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5830] <... futex resumed>) = 0 [pid 5826] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5830] open("./bus", O_RDWR [pid 5826] <... futex resumed>) = 0 [pid 5830] <... open resumed>) = 6 [ 118.356577][ T26] audit: type=1804 audit(1687834588.422:752): pid=5830 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor113" name="/root/syzkaller.nAdl82/27/file0/bus" dev="loop3" ino=18 res=1 errno=0 [pid 5826] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5834] <... open resumed>) = 4 [pid 5833] <... open resumed>) = 4 [pid 5830] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] <... umount2 resumed>) = 0 [pid 5834] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5833] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5830] <... futex resumed>) = 1 [pid 5833] <... futex resumed>) = 1 [pid 5831] <... futex resumed>) = 0 [pid 5826] <... futex resumed>) = 0 [pid 5830] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5834] <... futex resumed>) = 1 [pid 5833] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5832] <... futex resumed>) = 0 [pid 5832] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5831] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5826] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5830] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5834] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5833] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5832] <... futex resumed>) = 0 [pid 5832] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5826] <... futex resumed>) = 0 [pid 5831] <... futex resumed>) = 0 [pid 5830] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5826] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5831] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5830] <... mmap resumed>) = 0x20000000 [pid 5833] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9) = 9 [pid 5834] <... write resumed>) = 9 [pid 5830] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5833] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5834] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5833] <... futex resumed>) = 1 [pid 5831] <... futex resumed>) = 0 [pid 5830] <... futex resumed>) = 1 [pid 5826] <... futex resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5834] <... futex resumed>) = 1 [pid 5832] <... futex resumed>) = 0 [pid 5834] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5833] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5832] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5831] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5830] sendfile(4, 5, NULL, 2147483713 [pid 5826] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] lstat("./26/file0", [pid 5834] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5833] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5832] <... futex resumed>) = 0 [pid 5831] <... futex resumed>) = 0 [pid 5826] <... futex resumed>) = 0 [pid 5832] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5831] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5826] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5834] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5833] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5834] <... openat resumed>) = 5 [pid 5833] <... openat resumed>) = 5 [pid 5834] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5833] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5831] <... futex resumed>) = 0 [pid 5834] <... futex resumed>) = 1 [pid 5833] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5832] <... futex resumed>) = 0 [pid 5831] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5832] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5834] open("./bus", O_RDWR [pid 5833] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5832] <... futex resumed>) = 0 [pid 5831] <... futex resumed>) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5831] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5832] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5834] <... open resumed>) = 6 [pid 5833] open("./bus", O_RDWR [pid 4999] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5834] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5833] <... open resumed>) = 6 [pid 5834] <... futex resumed>) = 1 [pid 5832] <... futex resumed>) = 0 [pid 5833] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5834] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5833] <... futex resumed>) = 1 [pid 5832] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5834] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5833] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5832] <... futex resumed>) = 0 [pid 4999] openat(AT_FDCWD, "./26/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5834] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5832] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5831] <... futex resumed>) = 0 [pid 5831] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5831] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5834] <... mmap resumed>) = 0x20000000 [pid 5833] <... futex resumed>) = 0 [pid 4999] <... openat resumed>) = 4 [pid 5834] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5833] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 4999] fstat(4, [pid 4994] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] <... mmap resumed>) = 0x20000000 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5834] <... futex resumed>) = 1 [pid 5833] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5832] <... futex resumed>) = 0 [pid 4999] getdents64(4, [pid 5832] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5834] sendfile(4, 5, NULL, 2147483713 [pid 5833] <... futex resumed>) = 1 [pid 5832] <... futex resumed>) = 0 [pid 5831] <... futex resumed>) = 0 [pid 5826] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4999] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [ 118.386724][ T26] audit: type=1804 audit(1687834588.452:753): pid=5830 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor113" name="/root/syzkaller.nAdl82/27/file0/bus" dev="loop3" ino=18 res=1 errno=0 [ 118.407719][ T5835] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.441591][ T5830] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 4994] lstat("./27/file0", [pid 5833] sendfile(4, 5, NULL, 2147483713 [pid 5832] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5831] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5826] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] getdents64(4, [pid 4994] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5831] <... futex resumed>) = 0 [pid 5826] <... futex resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4994] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5831] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5826] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] openat(AT_FDCWD, "./27/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4994] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] getdents64(4, 0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4994] getdents64(4, 0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4994] close(4) = 0 [pid 4994] rmdir("./27/file0") = 0 [pid 4994] getdents64(3, 0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4994] close(3) = 0 [pid 4994] rmdir("./27") = 0 [pid 4994] mkdir("./28", 0777) = 0 [pid 4994] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5826] <... mmap resumed>) = 0x7f5c234cf000 [pid 4999] close(4 [pid 4994] <... openat resumed>) = 3 [pid 5826] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 4999] <... close resumed>) = 0 [pid 4994] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4994] close(3) = 0 [pid 4994] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556fb95d0) = 5844 [pid 5826] <... mprotect resumed>) = 0 [pid 4999] rmdir("./26/file0"./strace-static-x86_64: Process 5844 attached [pid 5844] set_robust_list(0x555556fb95e0, 24) = 0 [pid 5844] chdir("./28" [pid 5826] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4999] <... rmdir resumed>) = 0 [pid 5832] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5832] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [ 118.493359][ T5833] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 118.511124][ T5834] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 118.527997][ T5833] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 4999] getdents64(3, [pid 5832] <... futex resumed>) = 0 [pid 5844] <... chdir resumed>) = 0 [pid 5831] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5826] <... clone resumed>, parent_tid=[5845], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 5845 [pid 4999] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 5831] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5831] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c234cf000 [pid 5831] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5831] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5845 attached [pid 5832] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5826] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] close(3 [pid 5844] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5831] <... clone resumed>, parent_tid=[5846], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 5846 [pid 5844] <... prctl resumed>) = 0 [pid 5831] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5844] setpgid(0, 0 [pid 5831] <... futex resumed>) = 0 [pid 5844] <... setpgid resumed>) = 0 [pid 5831] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5846 attached [pid 5844] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5835] <... mount resumed>) = 0 [pid 5846] set_robust_list(0x7f5c234ef9e0, 24 [pid 5844] <... openat resumed>) = 3 [pid 5835] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5846] <... set_robust_list resumed>) = 0 [pid 5845] set_robust_list(0x7f5c234ef9e0, 24 [pid 5844] write(3, "1000", 4 [pid 5835] <... openat resumed>) = 3 [pid 5832] <... mmap resumed>) = 0x7f5c234cf000 [pid 5826] <... futex resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 5846] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5844] <... write resumed>) = 4 [pid 5835] chdir("./file0" [pid 5844] close(3 [pid 5835] <... chdir resumed>) = 0 [pid 5844] <... close resumed>) = 0 [ 118.542104][ T5834] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 118.555036][ T5834] EXT4-fs (loop2): This should not happen!! Data will be lost [ 118.555036][ T5834] [ 118.564709][ T5830] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 118.564911][ T5830] EXT4-fs (loop3): This should not happen!! Data will be lost [ 118.564911][ T5830] [ 118.564935][ T5830] EXT4-fs (loop3): Total free blocks count 0 [pid 5835] ioctl(4, LOOP_CLR_FD [pid 5844] symlink("/dev/binderfs", "./binderfs" [pid 5835] <... ioctl resumed>) = 0 [pid 5844] <... symlink resumed>) = 0 [pid 5835] close(4 [pid 5844] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5835] <... close resumed>) = 0 [pid 5844] <... futex resumed>) = 0 [pid 5835] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5844] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5835] <... futex resumed>) = 1 [pid 5827] <... futex resumed>) = 0 [pid 5844] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 5835] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5827] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5844] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 5835] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5827] <... futex resumed>) = 0 [pid 5844] <... mprotect resumed>) = 0 [pid 5835] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5827] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5844] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5831] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5844] <... clone resumed>, parent_tid=[5847], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 5847 [pid 5844] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5844] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5845] <... set_robust_list resumed>) = 0 [pid 5832] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 5826] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] rmdir("./26"./strace-static-x86_64: Process 5847 attached [pid 5847] set_robust_list(0x7f5c2b8109e0, 24) = 0 [pid 5847] memfd_create("syzkaller", 0 [pid 5845] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5832] <... mprotect resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 5847] <... memfd_create resumed>) = 3 [pid 5835] <... open resumed>) = 4 [pid 5832] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5847] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5c233f0000 ./strace-static-x86_64: Process 5848 attached [pid 5835] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] mkdir("./27", 0777 [pid 5848] set_robust_list(0x7f5c234ef9e0, 24 [pid 5835] <... futex resumed>) = 1 [pid 5832] <... clone resumed>, parent_tid=[5848], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 5848 [pid 5827] <... futex resumed>) = 0 [pid 4999] <... mkdir resumed>) = 0 [ 118.564957][ T5830] EXT4-fs (loop3): Free/Dirty block details [ 118.564976][ T5830] EXT4-fs (loop3): free_blocks=2415919104 [ 118.564998][ T5830] EXT4-fs (loop3): dirty_blocks=16 [ 118.579524][ T5833] EXT4-fs (loop1): This should not happen!! Data will be lost [ 118.579524][ T5833] [ 118.625115][ T5833] EXT4-fs (loop1): Total free blocks count 0 [ 118.631659][ T5833] EXT4-fs (loop1): Free/Dirty block details [pid 5848] <... set_robust_list resumed>) = 0 [pid 5835] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5832] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5827] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5827] <... futex resumed>) = 0 [pid 5827] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5848] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5832] <... futex resumed>) = 0 [pid 4999] <... openat resumed>) = 3 [pid 5835] <... write resumed>) = 9 [pid 5832] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5835] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5846] <... ioctl resumed>) = 0 [pid 5833] <... sendfile resumed>) = 63 [pid 5846] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5846] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5847] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5835] <... futex resumed>) = 1 [pid 5833] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5827] <... futex resumed>) = 0 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5827] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5831] exit_group(0 [pid 5827] <... futex resumed>) = 0 [pid 5846] <... futex resumed>) = ? [pid 5835] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5833] <... futex resumed>) = ? [pid 5831] <... exit_group resumed>) = ? [pid 5827] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5826] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4999] close(3 [pid 5846] +++ exited with 0 +++ [pid 5845] <... ioctl resumed>) = 0 [pid 5830] <... sendfile resumed>) = 63 [pid 5835] <... openat resumed>) = 5 [ 118.639341][ T5833] EXT4-fs (loop1): free_blocks=2415919104 [ 118.645675][ T5833] EXT4-fs (loop1): dirty_blocks=16 [ 118.652287][ T5833] EXT4-fs (loop1): Block reservation details [ 118.658974][ T5833] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 118.665353][ T5830] EXT4-fs (loop3): Block reservation details [ 118.671801][ T5830] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 118.678569][ T5834] EXT4-fs (loop2): Total free blocks count 0 [ 118.684616][ T5834] EXT4-fs (loop2): Free/Dirty block details [pid 5833] +++ exited with 0 +++ [pid 5831] +++ exited with 0 +++ [pid 5845] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5835] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5830] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... close resumed>) = 0 [pid 4995] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5831, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5845] <... futex resumed>) = 0 [pid 5835] <... futex resumed>) = 1 [pid 5830] <... futex resumed>) = 0 [pid 5827] <... futex resumed>) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5845] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5835] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5830] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5827] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4999] <... clone resumed>, child_tidptr=0x555556fb95d0) = 5849 [pid 5827] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5835] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) ./strace-static-x86_64: Process 5849 attached [pid 5835] open("./bus", O_RDWR [pid 5826] exit_group(0 [pid 5845] <... futex resumed>) = ? [pid 5849] set_robust_list(0x555556fb95e0, 24 [pid 5835] <... open resumed>) = 6 [pid 5830] <... futex resumed>) = ? [pid 5826] <... exit_group resumed>) = ? [pid 5849] <... set_robust_list resumed>) = 0 [pid 5848] <... ioctl resumed>) = 0 [pid 5845] +++ exited with 0 +++ [pid 5835] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5830] +++ exited with 0 +++ [pid 5849] chdir("./27" [pid 5848] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5835] <... futex resumed>) = 1 [pid 5834] <... sendfile resumed>) = 63 [pid 5832] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5827] <... futex resumed>) = 0 [pid 5826] +++ exited with 0 +++ [pid 5849] <... chdir resumed>) = 0 [pid 5848] <... futex resumed>) = 0 [pid 5835] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5834] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5832] exit_group(0 [pid 5827] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] umount2("./26", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5849] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5835] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5834] <... futex resumed>) = ? [pid 5832] <... exit_group resumed>) = ? [pid 5827] <... futex resumed>) = 0 [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5826, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] <... prctl resumed>) = 0 [pid 5848] +++ exited with 0 +++ [pid 5835] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5834] +++ exited with 0 +++ [pid 5832] +++ exited with 0 +++ [pid 5827] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4997] restart_syscall(<... resuming interrupted clone ...> [pid 4995] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5849] setpgid(0, 0 [pid 5835] <... mmap resumed>) = 0x20000000 [pid 4997] <... restart_syscall resumed>) = 0 [pid 4995] <... openat resumed>) = 3 [pid 5849] <... setpgid resumed>) = 0 [pid 5835] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5832, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 4995] fstat(3, [pid 5849] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5835] <... futex resumed>) = 1 [pid 5827] <... futex resumed>) = 0 [pid 4996] umount2("./28", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5849] <... openat resumed>) = 3 [pid 5835] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5827] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] umount2("./27", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] getdents64(3, [pid 5849] write(3, "1000", 4 [pid 5835] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5827] <... futex resumed>) = 0 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4996] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4995] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 5849] <... write resumed>) = 4 [pid 5847] <... write resumed>) = 1048576 [pid 5835] sendfile(4, 5, NULL, 2147483713 [pid 5827] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4997] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4996] <... openat resumed>) = 3 [pid 4995] umount2("./26/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5849] close(3 [pid 4997] <... openat resumed>) = 3 [pid 4996] fstat(3, [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] <... close resumed>) = 0 [pid 4997] fstat(3, [pid 4996] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] lstat("./26/binderfs", [pid 5849] symlink("/dev/binderfs", "./binderfs" [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 118.693577][ T5834] EXT4-fs (loop2): free_blocks=2415919104 [ 118.699457][ T5834] EXT4-fs (loop2): dirty_blocks=16 [ 118.704966][ T5834] EXT4-fs (loop2): Block reservation details [ 118.711559][ T5834] EXT4-fs (loop2): i_reserved_data_blocks=1 [pid 4996] getdents64(3, [pid 4995] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5849] <... symlink resumed>) = 0 [pid 4997] getdents64(3, [pid 4996] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4995] unlink("./26/binderfs" [pid 5849] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4996] umount2("./28/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] <... unlink resumed>) = 0 [pid 5849] <... futex resumed>) = 0 [pid 4997] umount2("./27/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5849] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4996] lstat("./28/binderfs", [pid 5849] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 4997] lstat("./27/binderfs", [pid 4996] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5849] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 4997] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4996] unlink("./28/binderfs" [pid 5849] <... mprotect resumed>) = 0 [pid 4997] unlink("./27/binderfs" [pid 4996] <... unlink resumed>) = 0 [pid 5849] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4997] <... unlink resumed>) = 0 [pid 4996] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5849] <... clone resumed>, parent_tid=[5850], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 5850 [pid 5849] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5849] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5850 attached [pid 5850] set_robust_list(0x7f5c2b8109e0, 24) = 0 [pid 5847] munmap(0x7f5c233f0000, 1048576 [pid 5850] memfd_create("syzkaller", 0) = 3 [pid 5827] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5827] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 118.744293][ T5835] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 118.762118][ T5076] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 118.764517][ T5835] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 118.787003][ T5835] EXT4-fs (loop4): This should not happen!! Data will be lost [pid 5827] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c234cf000 [pid 5850] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5827] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 5850] <... mmap resumed>) = 0x7f5c233f0000 [pid 5827] <... mprotect resumed>) = 0 [pid 5850] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5847] <... munmap resumed>) = 0 [pid 5827] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5851], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 5851 [pid 5827] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5827] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5851 attached [pid 5851] set_robust_list(0x7f5c234ef9e0, 24) = 0 [pid 5851] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5847] ioctl(4, LOOP_SET_FD, 3) = 0 [ 118.787003][ T5835] [ 118.798565][ T5608] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 118.812119][ T11] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 118.813621][ T5835] EXT4-fs (loop4): Total free blocks count 0 [ 118.832207][ T5847] loop0: detected capacity change from 0 to 2048 [pid 5847] close(3) = 0 [pid 5847] mkdir("./file0", 0777) = 0 [pid 5827] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5847] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5850] <... write resumed>) = 1048576 [pid 4995] <... umount2 resumed>) = 0 [ 118.839330][ T5835] EXT4-fs (loop4): Free/Dirty block details [ 118.846608][ T5835] EXT4-fs (loop4): free_blocks=2415919104 [ 118.854108][ T5835] EXT4-fs (loop4): dirty_blocks=16 [pid 5850] munmap(0x7f5c233f0000, 1048576) = 0 [pid 4996] <... umount2 resumed>) = 0 [pid 4995] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4995] lstat("./26/file0", [pid 5850] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 4995] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5850] ioctl(4, LOOP_SET_FD, 3 [pid 4995] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... umount2 resumed>) = 0 [pid 4996] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] openat(AT_FDCWD, "./26/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] lstat("./27/file0", [pid 4996] lstat("./28/file0", [pid 4995] <... openat resumed>) = 4 [pid 4997] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] fstat(4, [pid 5847] <... mount resumed>) = 0 [pid 4997] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5847] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] getdents64(4, [pid 5851] <... ioctl resumed>) = 0 [pid 5847] <... openat resumed>) = 3 [pid 5835] <... sendfile resumed>) = 63 [pid 4997] openat(AT_FDCWD, "./27/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4996] openat(AT_FDCWD, "./28/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4995] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 5851] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5850] <... ioctl resumed>) = 0 [pid 5847] chdir("./file0" [pid 5835] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] <... openat resumed>) = 4 [pid 4996] <... openat resumed>) = 4 [pid 4995] getdents64(4, [pid 5851] <... futex resumed>) = 0 [pid 5850] close(3 [pid 5847] <... chdir resumed>) = 0 [pid 5835] <... futex resumed>) = 0 [pid 4997] fstat(4, [pid 4996] fstat(4, [pid 4995] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 5851] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5850] <... close resumed>) = 0 [pid 5847] ioctl(4, LOOP_CLR_FD [pid 5835] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5827] exit_group(0 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 118.887380][ T5835] EXT4-fs (loop4): Block reservation details [ 118.893439][ T5835] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 118.908668][ T5847] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.911738][ T5850] loop5: detected capacity change from 0 to 2048 [pid 4996] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] close(4 [pid 5851] <... futex resumed>) = ? [pid 5850] mkdir("./file0", 0777 [pid 5847] <... ioctl resumed>) = 0 [pid 5835] <... futex resumed>) = ? [pid 5827] <... exit_group resumed>) = ? [pid 4997] getdents64(4, [pid 4996] getdents64(4, [pid 4995] <... close resumed>) = 0 [pid 5851] +++ exited with 0 +++ [pid 5850] <... mkdir resumed>) = 0 [pid 5847] close(4 [pid 5835] +++ exited with 0 +++ [pid 5827] +++ exited with 0 +++ [pid 4997] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 5850] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5847] <... close resumed>) = 0 [pid 4997] getdents64(4, [pid 4996] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4995] rmdir("./26/file0" [pid 5847] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4996] getdents64(4, [pid 5847] <... futex resumed>) = 1 [pid 5844] <... futex resumed>) = 0 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5827, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 4997] close(4 [pid 4996] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4995] <... rmdir resumed>) = 0 [pid 5847] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5844] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] restart_syscall(<... resuming interrupted clone ...> [pid 4997] <... close resumed>) = 0 [pid 4996] close(4 [pid 4995] getdents64(3, [pid 5847] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5844] <... futex resumed>) = 0 [pid 4998] <... restart_syscall resumed>) = 0 [pid 4997] rmdir("./27/file0" [pid 4996] <... close resumed>) = 0 [pid 4995] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 5847] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5844] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4997] <... rmdir resumed>) = 0 [pid 4996] rmdir("./28/file0" [pid 4995] close(3 [pid 5847] <... open resumed>) = 4 [pid 4997] getdents64(3, [pid 5847] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] umount2("./26", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4996] <... rmdir resumed>) = 0 [pid 4995] <... close resumed>) = 0 [pid 5847] <... futex resumed>) = 1 [pid 5844] <... futex resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] close(3 [pid 4996] getdents64(3, [pid 4995] rmdir("./26" [pid 5847] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5844] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] <... close resumed>) = 0 [pid 4996] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4995] <... rmdir resumed>) = 0 [pid 5847] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5844] <... futex resumed>) = 0 [pid 4998] <... openat resumed>) = 3 [pid 4997] rmdir("./27" [pid 4996] close(3 [pid 4995] mkdir("./27", 0777 [pid 5847] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5844] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] fstat(3, [pid 4997] <... rmdir resumed>) = 0 [pid 4996] <... close resumed>) = 0 [pid 5847] <... write resumed>) = 9 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] mkdir("./28", 0777 [pid 4996] rmdir("./28" [pid 4995] <... mkdir resumed>) = 0 [pid 5847] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] getdents64(3, [pid 4997] <... mkdir resumed>) = 0 [pid 5847] <... futex resumed>) = 1 [pid 5844] <... futex resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4997] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4996] <... rmdir resumed>) = 0 [pid 4995] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5847] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5844] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] umount2("./26/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... openat resumed>) = 3 [pid 4996] mkdir("./29", 0777 [pid 5847] <... openat resumed>) = 5 [pid 5844] <... futex resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] ioctl(3, LOOP_CLR_FD [pid 4995] <... openat resumed>) = 3 [pid 5847] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5844] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] lstat("./26/binderfs", [pid 4997] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4996] <... mkdir resumed>) = 0 [pid 4995] ioctl(3, LOOP_CLR_FD [pid 5847] <... futex resumed>) = 0 [pid 5844] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] close(3 [pid 4996] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4995] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5847] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5844] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] unlink("./26/binderfs" [pid 4997] <... close resumed>) = 0 [pid 4996] <... openat resumed>) = 3 [pid 4995] close(3 [pid 5847] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5844] <... futex resumed>) = 0 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5844] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4997] <... clone resumed>, child_tidptr=0x555556fb95d0) = 5856 [pid 5847] open("./bus", O_RDWR [pid 4998] <... unlink resumed>) = 0 [pid 4996] ioctl(3, LOOP_CLR_FD [pid 4995] <... close resumed>) = 0 [pid 5847] <... open resumed>) = 6 [pid 4998] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4995] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5856 attached [pid 5847] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5850] <... mount resumed>) = 0 [pid 5850] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5850] chdir("./file0") = 0 [pid 5850] ioctl(4, LOOP_CLR_FD) = 0 [pid 5847] <... futex resumed>) = 1 [pid 5844] <... futex resumed>) = 0 [pid 4996] close(3 [pid 5847] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5844] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... close resumed>) = 0 [pid 5856] set_robust_list(0x555556fb95e0, 24 [pid 5847] <... mmap resumed>) = 0x20000000 [pid 5844] <... futex resumed>) = 0 [pid 4996] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5856] <... set_robust_list resumed>) = 0 [pid 4995] <... clone resumed>, child_tidptr=0x555556fb95d0) = 5857 [pid 5847] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5844] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5856] chdir("./28" [pid 5847] <... futex resumed>) = 0 [pid 5844] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5856] <... chdir resumed>) = 0 [pid 5847] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5844] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... clone resumed>, child_tidptr=0x555556fb95d0) = 5858 [pid 5856] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5850] close(4 [pid 5847] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5844] <... futex resumed>) = 0 [pid 5856] <... prctl resumed>) = 0 [pid 5850] <... close resumed>) = 0 [pid 5847] sendfile(4, 5, NULL, 2147483713 [pid 5844] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5856] setpgid(0, 0 [pid 5850] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5858 attached ./strace-static-x86_64: Process 5857 attached [pid 5856] <... setpgid resumed>) = 0 [ 119.012718][ T5850] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.030602][ T5076] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5850] <... futex resumed>) = 1 [pid 5849] <... futex resumed>) = 0 [pid 5858] set_robust_list(0x555556fb95e0, 24 [pid 5857] set_robust_list(0x555556fb95e0, 24 [pid 5856] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5850] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5849] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5858] <... set_robust_list resumed>) = 0 [pid 5857] <... set_robust_list resumed>) = 0 [pid 5856] <... openat resumed>) = 3 [pid 5850] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5849] <... futex resumed>) = 0 [pid 5858] chdir("./29" [pid 5857] chdir("./27" [pid 5856] write(3, "1000", 4 [pid 5850] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5849] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5858] <... chdir resumed>) = 0 [pid 5857] <... chdir resumed>) = 0 [pid 5856] <... write resumed>) = 4 [pid 5850] <... open resumed>) = 4 [pid 5858] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5857] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5856] close(3 [pid 5850] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5858] <... prctl resumed>) = 0 [pid 5857] <... prctl resumed>) = 0 [pid 5856] <... close resumed>) = 0 [pid 5850] <... futex resumed>) = 1 [pid 5849] <... futex resumed>) = 0 [pid 5858] setpgid(0, 0 [pid 5857] setpgid(0, 0 [pid 5856] symlink("/dev/binderfs", "./binderfs" [pid 5850] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5849] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5858] <... setpgid resumed>) = 0 [pid 5857] <... setpgid resumed>) = 0 [pid 5856] <... symlink resumed>) = 0 [pid 5850] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5849] <... futex resumed>) = 0 [pid 5858] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5857] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5856] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5850] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5849] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5858] <... openat resumed>) = 3 [pid 5857] <... openat resumed>) = 3 [pid 5856] <... futex resumed>) = 0 [pid 5850] <... write resumed>) = 9 [pid 5844] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5858] write(3, "1000", 4 [ 119.057361][ T5847] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 119.072986][ T5847] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 119.085469][ T5847] EXT4-fs (loop0): This should not happen!! Data will be lost [ 119.085469][ T5847] [ 119.095404][ T5847] EXT4-fs (loop0): Total free blocks count 0 [ 119.102043][ T5847] EXT4-fs (loop0): Free/Dirty block details [pid 5857] write(3, "1000", 4 [pid 5856] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5850] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5844] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... umount2 resumed>) = 0 [pid 5858] <... write resumed>) = 4 [pid 5857] <... write resumed>) = 4 [pid 5856] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 5850] <... futex resumed>) = 1 [pid 5849] <... futex resumed>) = 0 [pid 5844] <... futex resumed>) = 0 [pid 4998] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5858] close(3 [pid 5857] close(3 [pid 5856] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 5850] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5849] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5844] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5858] <... close resumed>) = 0 [pid 5857] <... close resumed>) = 0 [pid 5856] <... mprotect resumed>) = 0 [pid 5850] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5849] <... futex resumed>) = 0 [pid 5844] <... mmap resumed>) = 0x7f5c234cf000 [pid 4998] lstat("./26/file0", [pid 5858] symlink("/dev/binderfs", "./binderfs" [pid 5857] symlink("/dev/binderfs", "./binderfs" [pid 5856] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5850] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5849] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5847] <... sendfile resumed>) = 63 [pid 5844] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5858] <... symlink resumed>) = 0 [pid 5857] <... symlink resumed>) = 0 [pid 5850] <... openat resumed>) = 5 [pid 5847] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5844] <... mprotect resumed>) = 0 [pid 4998] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5859 attached [pid 5858] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5857] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5856] <... clone resumed>, parent_tid=[5859], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 5859 [pid 5850] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5847] <... futex resumed>) = 0 [pid 5844] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5859] set_robust_list(0x7f5c2b8109e0, 24 [pid 5858] <... futex resumed>) = 0 [pid 5857] <... futex resumed>) = 0 [pid 5856] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5850] <... futex resumed>) = 1 [pid 5849] <... futex resumed>) = 0 [pid 5847] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4998] openat(AT_FDCWD, "./26/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 5860 attached [pid 5859] <... set_robust_list resumed>) = 0 [pid 5858] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5857] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5856] <... futex resumed>) = 0 [pid 5850] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5849] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5844] <... clone resumed>, parent_tid=[5860], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 5860 [pid 4998] <... openat resumed>) = 4 [pid 5860] set_robust_list(0x7f5c234ef9e0, 24 [pid 5859] memfd_create("syzkaller", 0 [pid 5858] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 5857] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 5856] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5850] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5849] <... futex resumed>) = 0 [pid 5860] <... set_robust_list resumed>) = 0 [ 119.108099][ T5847] EXT4-fs (loop0): free_blocks=2415919104 [ 119.113958][ T5847] EXT4-fs (loop0): dirty_blocks=16 [ 119.119258][ T5847] EXT4-fs (loop0): Block reservation details [ 119.125347][ T5847] EXT4-fs (loop0): i_reserved_data_blocks=1 [pid 5860] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5858] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 5850] open("./bus", O_RDWR [pid 5849] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5857] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 5844] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] fstat(4, [pid 5858] <... mprotect resumed>) = 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5860] <... futex resumed>) = 0 [pid 5844] <... futex resumed>) = 1 [pid 5860] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5850] <... open resumed>) = 6 [pid 5844] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] getdents64(4, [pid 5860] <... ioctl resumed>) = 0 [pid 5858] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5857] <... mprotect resumed>) = 0 [pid 5850] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 5860] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5850] <... futex resumed>) = 1 [pid 5849] <... futex resumed>) = 0 [pid 5860] <... futex resumed>) = 1 [pid 5857] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5844] <... futex resumed>) = 0 [pid 4998] getdents64(4, [pid 5860] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5850] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5849] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5844] exit_group(0 [pid 4998] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 5860] <... futex resumed>) = ? [pid 5849] <... futex resumed>) = 0 [pid 5847] <... futex resumed>) = ? [pid 5844] <... exit_group resumed>) = ? [pid 4998] close(4 [pid 5847] +++ exited with 0 +++ ./strace-static-x86_64: Process 5861 attached [pid 5850] <... mmap resumed>) = 0x20000000 [pid 5860] +++ exited with 0 +++ [pid 5861] set_robust_list(0x7f5c2b8109e0, 24 [pid 5849] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5861] <... set_robust_list resumed>) = 0 [pid 5861] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5859] <... memfd_create resumed>) = 3 [pid 5859] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5c233f0000 [pid 5859] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5857] <... clone resumed>, parent_tid=[5861], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 5861 [pid 5850] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5844] +++ exited with 0 +++ [pid 4998] <... close resumed>) = 0 [pid 5858] <... clone resumed>, parent_tid=[5862], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 5862 [pid 5857] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5850] <... futex resumed>) = 1 [pid 5849] <... futex resumed>) = 0 [pid 4998] rmdir("./26/file0" [pid 5858] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5857] <... futex resumed>) = 1 [pid 5850] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5849] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5861] <... futex resumed>) = 0 [pid 5861] memfd_create("syzkaller", 0 [pid 5858] <... futex resumed>) = 0 [pid 5857] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5850] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5849] <... futex resumed>) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 4994] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5844, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5861] <... memfd_create resumed>) = 3 [pid 5858] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5850] sendfile(4, 5, NULL, 2147483713 [pid 5849] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] getdents64(3, [pid 4994] umount2("./28", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5861] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5c233f0000 [pid 4998] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5861] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4994] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] close(3) = 0 [pid 4994] <... openat resumed>) = 3 [pid 4998] rmdir("./26" [pid 4994] fstat(3, [pid 4998] <... rmdir resumed>) = 0 [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] mkdir("./27", 0777 [pid 4994] getdents64(3, ./strace-static-x86_64: Process 5862 attached [pid 4998] <... mkdir resumed>) = 0 [pid 4994] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 5862] set_robust_list(0x7f5c2b8109e0, 24 [pid 4998] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4994] umount2("./28/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5862] <... set_robust_list resumed>) = 0 [pid 4998] <... openat resumed>) = 3 [pid 5859] <... write resumed>) = 1048576 [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5862] memfd_create("syzkaller", 0 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4994] lstat("./28/binderfs", [pid 5849] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5849] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5862] <... memfd_create resumed>) = 3 [pid 5849] <... futex resumed>) = 0 [pid 4998] close(3 [pid 5859] munmap(0x7f5c233f0000, 1048576 [pid 5849] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5862] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4998] <... close resumed>) = 0 [pid 4994] unlink("./28/binderfs" [pid 5849] <... mmap resumed>) = 0x7f5c234cf000 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5849] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 4994] <... unlink resumed>) = 0 [pid 5849] <... mprotect resumed>) = 0 [pid 5859] <... munmap resumed>) = 0 [ 119.199148][ T5850] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 119.230574][ T5850] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5862] <... mmap resumed>) = 0x7f5c233f0000 [pid 5849] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4998] <... clone resumed>, child_tidptr=0x555556fb95d0) = 5863 [pid 4994] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5864 attached ./strace-static-x86_64: Process 5863 attached [pid 5862] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5861] <... write resumed>) = 1048576 [pid 5859] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5849] <... clone resumed>, parent_tid=[5864], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 5864 [pid 5863] set_robust_list(0x555556fb95e0, 24 [pid 5861] munmap(0x7f5c233f0000, 1048576 [pid 5859] <... openat resumed>) = 4 [pid 5849] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5849] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5863] <... set_robust_list resumed>) = 0 [pid 5861] <... munmap resumed>) = 0 [pid 5859] ioctl(4, LOOP_SET_FD, 3 [pid 5863] chdir("./27" [pid 5859] <... ioctl resumed>) = 0 [pid 5864] set_robust_list(0x7f5c234ef9e0, 24 [pid 5863] <... chdir resumed>) = 0 [pid 5861] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5859] close(3 [pid 5863] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5864] <... set_robust_list resumed>) = 0 [pid 5863] <... prctl resumed>) = 0 [pid 5861] <... openat resumed>) = 4 [pid 5859] <... close resumed>) = 0 [ 119.259073][ T5850] EXT4-fs (loop5): This should not happen!! Data will be lost [ 119.259073][ T5850] [ 119.269491][ T5850] EXT4-fs (loop5): Total free blocks count 0 [ 119.269931][ T5608] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 119.275893][ T5850] EXT4-fs (loop5): Free/Dirty block details [ 119.296128][ T5859] loop3: detected capacity change from 0 to 2048 [ 119.303250][ T5850] EXT4-fs (loop5): free_blocks=2415919104 [pid 5864] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5863] setpgid(0, 0 [pid 5861] ioctl(4, LOOP_SET_FD, 3 [pid 5859] mkdir("./file0", 0777 [pid 5863] <... setpgid resumed>) = 0 [pid 5861] <... ioctl resumed>) = 0 [pid 5859] <... mkdir resumed>) = 0 [pid 5863] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5859] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5863] <... openat resumed>) = 3 [pid 5863] write(3, "1000", 4) = 4 [pid 5863] close(3) = 0 [pid 5862] <... write resumed>) = 1048576 [pid 5861] close(3 [pid 5863] symlink("/dev/binderfs", "./binderfs" [pid 5862] munmap(0x7f5c233f0000, 1048576 [pid 5861] <... close resumed>) = 0 [pid 5863] <... symlink resumed>) = 0 [pid 5862] <... munmap resumed>) = 0 [pid 5861] mkdir("./file0", 0777 [pid 5849] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5864] <... ioctl resumed>) = 0 [pid 5863] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5862] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5861] <... mkdir resumed>) = 0 [pid 5850] <... sendfile resumed>) = 63 [pid 5864] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5863] <... futex resumed>) = 0 [pid 5862] <... openat resumed>) = 4 [pid 5861] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5864] <... futex resumed>) = 0 [pid 5863] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5862] ioctl(4, LOOP_SET_FD, 3 [pid 5864] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5863] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 5863] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 5850] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5863] <... mprotect resumed>) = 0 [pid 5850] <... futex resumed>) = 0 [pid 5863] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5850] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5863] <... clone resumed>, parent_tid=[5867], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 5867 [ 119.309932][ T5850] EXT4-fs (loop5): dirty_blocks=16 [ 119.315853][ T5861] loop1: detected capacity change from 0 to 2048 [ 119.327155][ T5850] EXT4-fs (loop5): Block reservation details [ 119.333361][ T5850] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 119.346505][ T5862] loop2: detected capacity change from 0 to 2048 [pid 5863] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5863] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5862] <... ioctl resumed>) = 0 [pid 5862] close(3 [pid 5849] exit_group(0 [pid 5864] <... futex resumed>) = ? [pid 5850] <... futex resumed>) = ? [pid 5849] <... exit_group resumed>) = ? [pid 5864] +++ exited with 0 +++ [pid 5862] <... close resumed>) = 0 [pid 5850] +++ exited with 0 +++ [pid 5862] mkdir("./file0", 0777) = 0 [pid 5862] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue"./strace-static-x86_64: Process 5867 attached [pid 5867] set_robust_list(0x7f5c2b8109e0, 24) = 0 [pid 5867] memfd_create("syzkaller", 0) = 3 [pid 5867] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5c233f0000 [pid 5849] +++ exited with 0 +++ [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5849, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5867] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5859] <... mount resumed>) = 0 [pid 4999] restart_syscall(<... resuming interrupted clone ...> [pid 4994] <... umount2 resumed>) = 0 [pid 4999] <... restart_syscall resumed>) = 0 [pid 5859] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5859] chdir("./file0" [pid 4999] umount2("./27", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5859] <... chdir resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5859] ioctl(4, LOOP_CLR_FD [pid 4999] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5859] <... ioctl resumed>) = 0 [pid 4999] <... openat resumed>) = 3 [pid 5859] close(4 [pid 4999] fstat(3, [pid 5859] <... close resumed>) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5859] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] getdents64(3, [pid 5859] <... futex resumed>) = 1 [pid 5856] <... futex resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 5859] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5856] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] umount2("./27/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5859] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5856] <... futex resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5859] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5856] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 119.359393][ T5859] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [pid 4999] lstat("./27/binderfs", [pid 5859] <... open resumed>) = 4 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4994] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5867] <... write resumed>) = 1048576 [pid 5859] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5867] munmap(0x7f5c233f0000, 1048576) = 0 [pid 4999] unlink("./27/binderfs" [pid 5867] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5867] ioctl(4, LOOP_SET_FD, 3 [pid 4999] <... unlink resumed>) = 0 [pid 5867] <... ioctl resumed>) = 0 [pid 5867] close(3) = 0 [pid 5867] mkdir("./file0", 0777) = 0 [pid 5867] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 4999] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] lstat("./28/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] openat(AT_FDCWD, "./28/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4994] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] getdents64(4, 0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4994] getdents64(4, 0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4994] close(4) = 0 [pid 4994] rmdir("./28/file0") = 0 [pid 4994] getdents64(3, 0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4994] close(3) = 0 [pid 4994] rmdir("./28") = 0 [pid 4994] mkdir("./29", 0777 [pid 5856] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4994] <... mkdir resumed>) = 0 [pid 5856] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5856] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5859] <... futex resumed>) = 1 [pid 5856] <... futex resumed>) = 0 [pid 4994] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5859] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5856] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=48000000} [pid 4994] <... openat resumed>) = 3 [pid 5859] <... write resumed>) = 9 [pid 5859] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4994] close(3 [pid 5859] <... futex resumed>) = 1 [pid 5856] <... futex resumed>) = 0 [pid 5859] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5856] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5859] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5856] <... futex resumed>) = 0 [pid 5859] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5856] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5859] <... openat resumed>) = 5 [pid 5859] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5856] <... futex resumed>) = 0 [pid 5859] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5856] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5859] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5856] <... futex resumed>) = 0 [pid 5859] open("./bus", O_RDWR [pid 5856] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5862] <... mount resumed>) = 0 [pid 5861] <... mount resumed>) = 0 [pid 5859] <... open resumed>) = 6 [pid 4999] <... umount2 resumed>) = 0 [pid 4994] <... close resumed>) = 0 [pid 4994] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556fb95d0) = 5874 [ 119.423338][ T5861] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.423471][ T5867] loop4: detected capacity change from 0 to 2048 [ 119.438072][ T5862] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.457250][ T11] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5859] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5856] <... futex resumed>) = 0 [pid 5861] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5859] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5856] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5861] <... openat resumed>) = 3 [pid 5856] <... futex resumed>) = 0 [pid 5859] <... mmap resumed>) = 0x20000000 [pid 5856] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5859] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5861] chdir("./file0" [pid 5856] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5859] <... futex resumed>) = 0 [pid 5862] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5861] <... chdir resumed>) = 0 [pid 5859] sendfile(4, 5, NULL, 2147483713 [pid 5856] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] lstat("./27/file0", [pid 5861] ioctl(4, LOOP_CLR_FD [pid 5856] <... futex resumed>) = 0 [pid 5856] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5861] <... ioctl resumed>) = 0 [pid 5861] close(4) = 0 [pid 5861] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5857] <... futex resumed>) = 0 [pid 5861] <... futex resumed>) = 1 [pid 5857] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5861] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5857] <... futex resumed>) = 0 [pid 5857] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5867] <... mount resumed>) = 0 [pid 5867] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5861] <... open resumed>) = 4 [pid 5861] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5857] <... futex resumed>) = 0 [pid 5857] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5857] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5861] <... futex resumed>) = 1 [pid 5861] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9) = 9 [pid 5861] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5857] <... futex resumed>) = 0 [pid 5857] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5857] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5861] <... futex resumed>) = 1 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5861] openat(AT_FDCWD, "./bus", O_RDONLY [pid 4999] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5861] <... openat resumed>) = 5 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5861] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] openat(AT_FDCWD, "./27/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5862] <... openat resumed>) = 3 [pid 5861] <... futex resumed>) = 1 [pid 5857] <... futex resumed>) = 0 [ 119.497593][ T5867] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.526476][ T5859] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 4999] <... openat resumed>) = 4 [pid 5867] chdir("./file0" [pid 5862] chdir("./file0" [pid 5861] open("./bus", O_RDWR [pid 5857] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5857] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5867] <... chdir resumed>) = 0 [pid 5862] <... chdir resumed>) = 0 [pid 5861] <... open resumed>) = 6 [pid 4999] fstat(4, [pid 5867] ioctl(4, LOOP_CLR_FD [pid 5862] ioctl(4, LOOP_CLR_FD [pid 5861] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5867] <... ioctl resumed>) = 0 [pid 5862] <... ioctl resumed>) = 0 [pid 5861] <... futex resumed>) = 1 [pid 5857] <... futex resumed>) = 0 [pid 5856] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4999] getdents64(4, [pid 5867] close(4 [pid 5862] close(4 [pid 5861] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5857] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 5867] <... close resumed>) = 0 [pid 5862] <... close resumed>) = 0 [pid 5861] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5857] <... futex resumed>) = 0 [pid 4999] getdents64(4, ./strace-static-x86_64: Process 5874 attached [pid 5867] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5862] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5861] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5857] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 5874] set_robust_list(0x555556fb95e0, 24 [pid 5867] <... futex resumed>) = 1 [pid 5863] <... futex resumed>) = 0 [pid 5862] <... futex resumed>) = 1 [pid 5861] <... mmap resumed>) = 0x20000000 [pid 5858] <... futex resumed>) = 0 [pid 5856] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] close(4 [pid 5874] <... set_robust_list resumed>) = 0 [pid 5867] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5863] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5862] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5861] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5858] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... close resumed>) = 0 [pid 5874] chdir("./29" [pid 5867] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5863] <... futex resumed>) = 0 [pid 5862] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5861] <... futex resumed>) = 1 [pid 5858] <... futex resumed>) = 0 [pid 5857] <... futex resumed>) = 0 [pid 5856] <... futex resumed>) = 0 [pid 4999] rmdir("./27/file0" [pid 5874] <... chdir resumed>) = 0 [pid 5867] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5863] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5862] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5861] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5858] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5857] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... rmdir resumed>) = 0 [pid 5874] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5867] <... open resumed>) = 4 [pid 5862] <... open resumed>) = 4 [pid 5861] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5857] <... futex resumed>) = 0 [pid 5856] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4999] getdents64(3, [pid 5874] <... prctl resumed>) = 0 [ 119.543463][ T5859] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 119.556580][ T5859] EXT4-fs (loop3): This should not happen!! Data will be lost [ 119.556580][ T5859] [ 119.566895][ T5859] EXT4-fs (loop3): Total free blocks count 0 [ 119.575844][ T5859] EXT4-fs (loop3): Free/Dirty block details [ 119.582748][ T5859] EXT4-fs (loop3): free_blocks=2415919104 [ 119.589319][ T5859] EXT4-fs (loop3): dirty_blocks=16 [pid 5867] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5862] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5861] sendfile(4, 5, NULL, 2147483713 [pid 5857] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5856] <... mmap resumed>) = 0x7f5c234cf000 [pid 4999] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 5874] setpgid(0, 0 [pid 5867] <... futex resumed>) = 1 [pid 5863] <... futex resumed>) = 0 [pid 5862] <... futex resumed>) = 1 [pid 5858] <... futex resumed>) = 0 [pid 4999] close(3 [pid 5874] <... setpgid resumed>) = 0 [pid 5867] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5863] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5862] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5858] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5856] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 4999] <... close resumed>) = 0 [pid 5874] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5867] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 119.607271][ T5861] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 119.623766][ T5859] EXT4-fs (loop3): Block reservation details [ 119.636232][ T5861] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 119.649702][ T5861] EXT4-fs (loop1): This should not happen!! Data will be lost [pid 5863] <... futex resumed>) = 0 [pid 5862] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5858] <... futex resumed>) = 0 [pid 4999] rmdir("./27" [pid 5874] <... openat resumed>) = 3 [pid 5867] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5863] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5862] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5858] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5856] <... mprotect resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 5874] write(3, "1000", 4 [pid 5867] <... write resumed>) = 9 [pid 5862] <... write resumed>) = 9 [pid 4999] mkdir("./28", 0777 [pid 5874] <... write resumed>) = 4 [pid 5867] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5862] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5856] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4999] <... mkdir resumed>) = 0 [pid 5874] close(3 [pid 5867] <... futex resumed>) = 1 [pid 5863] <... futex resumed>) = 0 [pid 5862] <... futex resumed>) = 1 [pid 5858] <... futex resumed>) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5874] <... close resumed>) = 0 [pid 5867] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5863] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5862] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5858] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5857] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4999] <... openat resumed>) = 3 [pid 5874] symlink("/dev/binderfs", "./binderfs" [pid 5867] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5863] <... futex resumed>) = 0 [pid 5862] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5858] <... futex resumed>) = 0 [pid 5857] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5874] <... symlink resumed>) = 0 [pid 5867] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5863] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5862] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5858] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5857] <... futex resumed>) = 0 [pid 5856] <... clone resumed>, parent_tid=[5875], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 5875 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) ./strace-static-x86_64: Process 5875 attached [pid 5874] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5867] <... openat resumed>) = 5 [pid 5862] <... openat resumed>) = 5 [pid 5857] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4999] close(3 [pid 5875] set_robust_list(0x7f5c234ef9e0, 24 [pid 5874] <... futex resumed>) = 0 [pid 5867] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5862] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5857] <... mmap resumed>) = 0x7f5c234cf000 [pid 4999] <... close resumed>) = 0 [pid 5875] <... set_robust_list resumed>) = 0 [pid 5874] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5867] <... futex resumed>) = 1 [pid 5863] <... futex resumed>) = 0 [pid 5862] <... futex resumed>) = 1 [pid 5858] <... futex resumed>) = 0 [pid 5857] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5875] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5874] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 5867] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5863] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5862] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5858] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5857] <... mprotect resumed>) = 0 [pid 5874] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 5867] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5863] <... futex resumed>) = 0 [pid 5862] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5858] <... futex resumed>) = 0 [pid 5857] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5856] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... clone resumed>, child_tidptr=0x555556fb95d0) = 5876 [pid 5875] <... futex resumed>) = 0 [pid 5874] <... mprotect resumed>) = 0 [pid 5867] open("./bus", O_RDWR [pid 5863] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5862] open("./bus", O_RDWR [pid 5858] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5856] <... futex resumed>) = 1 [pid 5875] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5874] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5867] <... open resumed>) = 6 [pid 5862] <... open resumed>) = 6 [pid 5859] <... sendfile resumed>) = 63 [pid 5857] <... clone resumed>, parent_tid=[5877], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 5877 [pid 5856] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5877 attached ./strace-static-x86_64: Process 5876 attached [pid 5875] <... ioctl resumed>) = 0 [pid 5867] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5862] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5859] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [ 119.649702][ T5861] [ 119.660895][ T5861] EXT4-fs (loop1): Total free blocks count 0 [ 119.668140][ T5861] EXT4-fs (loop1): Free/Dirty block details [ 119.677179][ T5859] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 119.684149][ T5861] EXT4-fs (loop1): free_blocks=2415919104 [ 119.690243][ T5861] EXT4-fs (loop1): dirty_blocks=16 [pid 5857] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5877] set_robust_list(0x7f5c234ef9e0, 24 [pid 5876] set_robust_list(0x555556fb95e0, 24 [pid 5875] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5874] <... clone resumed>, parent_tid=[5878], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 5878 [pid 5867] <... futex resumed>) = 1 [pid 5863] <... futex resumed>) = 0 [pid 5862] <... futex resumed>) = 1 [pid 5859] <... futex resumed>) = 0 [pid 5858] <... futex resumed>) = 0 [pid 5857] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5878 attached [pid 5877] <... set_robust_list resumed>) = 0 [pid 5875] <... futex resumed>) = 1 [pid 5874] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5867] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5863] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5862] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5859] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5858] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5857] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5878] set_robust_list(0x7f5c2b8109e0, 24 [pid 5877] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5875] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5874] <... futex resumed>) = 0 [pid 5867] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5863] <... futex resumed>) = 0 [pid 5862] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5858] <... futex resumed>) = 0 [pid 5878] <... set_robust_list resumed>) = 0 [pid 5876] <... set_robust_list resumed>) = 0 [pid 5874] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5867] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5863] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5862] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5858] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5856] <... futex resumed>) = 0 [pid 5878] memfd_create("syzkaller", 0 [pid 5876] chdir("./28" [pid 5867] <... mmap resumed>) = 0x20000000 [pid 5862] <... mmap resumed>) = 0x20000000 [pid 5856] exit_group(0 [pid 5878] <... memfd_create resumed>) = 3 [pid 5876] <... chdir resumed>) = 0 [pid 5875] <... futex resumed>) = ? [pid 5867] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5862] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5859] <... futex resumed>) = ? [pid 5856] <... exit_group resumed>) = ? [pid 5878] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5876] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5875] +++ exited with 0 +++ [pid 5867] <... futex resumed>) = 1 [pid 5863] <... futex resumed>) = 0 [pid 5862] <... futex resumed>) = 1 [pid 5859] +++ exited with 0 +++ [pid 5858] <... futex resumed>) = 0 [pid 5878] <... mmap resumed>) = 0x7f5c233f0000 [pid 5867] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5863] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5862] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5858] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5877] <... ioctl resumed>) = 0 [pid 5876] <... prctl resumed>) = 0 [pid 5867] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5863] <... futex resumed>) = 0 [pid 5862] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5861] <... sendfile resumed>) = 63 [pid 5858] <... futex resumed>) = 0 [pid 5856] +++ exited with 0 +++ [pid 5878] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5877] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5876] setpgid(0, 0 [pid 5867] sendfile(4, 5, NULL, 2147483713 [pid 5863] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5862] sendfile(4, 5, NULL, 2147483713 [pid 5861] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5858] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5856, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5878] <... write resumed>) = 1048576 [pid 5877] <... futex resumed>) = 1 [pid 5876] <... setpgid resumed>) = 0 [pid 5861] <... futex resumed>) = 0 [ 119.715771][ T5861] EXT4-fs (loop1): Block reservation details [ 119.733780][ T5861] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 119.750927][ T5867] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 5857] <... futex resumed>) = 0 [pid 5878] munmap(0x7f5c233f0000, 1048576 [pid 5877] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5876] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5861] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5857] exit_group(0 [pid 5877] <... futex resumed>) = ? [pid 5857] <... exit_group resumed>) = ? [pid 5877] +++ exited with 0 +++ [ 119.766073][ T5867] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 119.770334][ T5862] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 119.779074][ T5867] EXT4-fs (loop4): This should not happen!! Data will be lost [ 119.779074][ T5867] [ 119.796854][ T5862] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5878] <... munmap resumed>) = 0 [pid 5876] <... openat resumed>) = 3 [pid 5861] <... futex resumed>) = ? [pid 5863] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5863] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5858] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5863] <... futex resumed>) = 0 [pid 5858] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5863] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5858] <... futex resumed>) = 0 [pid 5863] <... mmap resumed>) = 0x7f5c234cf000 [pid 5858] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5863] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 5858] <... mmap resumed>) = 0x7f5c234cf000 [pid 5863] <... mprotect resumed>) = 0 [pid 5858] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 5863] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5858] <... mprotect resumed>) = 0 [pid 5858] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5863] <... clone resumed>, parent_tid=[5879], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 5879 [pid 5863] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5858] <... clone resumed>, parent_tid=[5880], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 5880 [pid 5863] <... futex resumed>) = 0 [pid 5858] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5863] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5858] <... futex resumed>) = 0 [pid 5858] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5878] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5876] write(3, "1000", 4./strace-static-x86_64: Process 5879 attached [pid 5879] set_robust_list(0x7f5c234ef9e0, 24) = 0 [pid 5879] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040./strace-static-x86_64: Process 5880 attached [pid 5878] <... openat resumed>) = 4 [pid 5876] <... write resumed>) = 4 [pid 5861] +++ exited with 0 +++ [pid 5857] +++ exited with 0 +++ [pid 5880] set_robust_list(0x7f5c234ef9e0, 24 [pid 5878] ioctl(4, LOOP_SET_FD, 3 [pid 5876] close(3 [pid 4995] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5857, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5880] <... set_robust_list resumed>) = 0 [pid 5876] <... close resumed>) = 0 [pid 4997] umount2("./28", MNT_DETACH|UMOUNT_NOFOLLOW [ 119.806024][ T5867] EXT4-fs (loop4): Total free blocks count 0 [ 119.824554][ T5862] EXT4-fs (loop2): This should not happen!! Data will be lost [ 119.824554][ T5862] [ 119.827181][ T5867] EXT4-fs (loop4): Free/Dirty block details [ 119.836045][ T5862] EXT4-fs (loop2): Total free blocks count 0 [ 119.841477][ T5867] EXT4-fs (loop4): free_blocks=2415919104 [ 119.847742][ T5862] EXT4-fs (loop2): Free/Dirty block details [ 119.852995][ T5878] loop0: detected capacity change from 0 to 2048 [pid 5880] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5878] <... ioctl resumed>) = 0 [pid 5876] symlink("/dev/binderfs", "./binderfs" [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5863] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5858] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5878] close(3 [pid 5876] <... symlink resumed>) = 0 [pid 4997] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4995] umount2("./27", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5878] <... close resumed>) = 0 [pid 5876] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] <... openat resumed>) = 3 [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5878] mkdir("./file0", 0777 [pid 5876] <... futex resumed>) = 0 [pid 5867] <... sendfile resumed>) = 63 [pid 4997] fstat(3, [pid 4995] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5878] <... mkdir resumed>) = 0 [pid 5876] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] <... openat resumed>) = 3 [pid 5878] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5876] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 4997] getdents64(3, [pid 4995] fstat(3, [pid 5880] <... ioctl resumed>) = 0 [pid 5879] <... ioctl resumed>) = 0 [pid 5876] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 5862] <... sendfile resumed>) = 63 [pid 4997] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5880] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5879] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5876] <... mprotect resumed>) = 0 [pid 5867] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5862] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] umount2("./28/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] getdents64(3, [pid 5880] <... futex resumed>) = 0 [pid 5879] <... futex resumed>) = 0 [pid 5876] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5880] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5879] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5867] <... futex resumed>) = 0 [pid 5862] <... futex resumed>) = 0 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5881 attached [pid 4997] lstat("./28/binderfs", [pid 4995] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 5876] <... clone resumed>, parent_tid=[5881], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 5881 [pid 5863] exit_group(0 [pid 5858] exit_group(0 [pid 4997] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4995] umount2("./27/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5881] set_robust_list(0x7f5c2b8109e0, 24 [pid 5879] <... futex resumed>) = ? [pid 5876] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5863] <... exit_group resumed>) = ? [pid 5880] <... futex resumed>) = ? [pid 5858] <... exit_group resumed>) = ? [pid 4997] unlink("./28/binderfs" [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5881] <... set_robust_list resumed>) = 0 [pid 5880] +++ exited with 0 +++ [pid 5879] +++ exited with 0 +++ [pid 5876] <... futex resumed>) = 0 [pid 4997] <... unlink resumed>) = 0 [pid 4995] lstat("./27/binderfs", [pid 5876] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [ 119.865948][ T5862] EXT4-fs (loop2): free_blocks=2415919104 [ 119.866970][ T5867] EXT4-fs (loop4): dirty_blocks=16 [ 119.873742][ T5862] EXT4-fs (loop2): dirty_blocks=16 [ 119.878184][ T5867] EXT4-fs (loop4): Block reservation details [ 119.884687][ T5862] EXT4-fs (loop2): Block reservation details [ 119.889170][ T5867] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 119.896381][ T5862] EXT4-fs (loop2): i_reserved_data_blocks=1 [pid 4997] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5881] memfd_create("syzkaller", 0 [pid 5867] +++ exited with 0 +++ [pid 5863] +++ exited with 0 +++ [pid 5862] +++ exited with 0 +++ [pid 5858] +++ exited with 0 +++ [pid 4995] unlink("./27/binderfs" [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5863, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 4996] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5858, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 4995] <... unlink resumed>) = 0 [pid 4995] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] umount2("./29", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] umount2("./27", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] fstat(3, [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4996] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4996] getdents64(3, [pid 4998] <... openat resumed>) = 3 [pid 4996] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4998] fstat(3, [pid 4996] umount2("./29/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] getdents64(3, [pid 4996] lstat("./29/binderfs", [pid 4998] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4996] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] umount2("./27/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] unlink("./29/binderfs" [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4996] <... unlink resumed>) = 0 [pid 4998] lstat("./27/binderfs", [pid 4996] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./27/binderfs") = 0 [ 119.920659][ T5608] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 119.924491][ T5878] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.945635][ T11] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 4998] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5878] <... mount resumed>) = 0 [pid 5878] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5878] chdir("./file0") = 0 [pid 5878] ioctl(4, LOOP_CLR_FD) = 0 [pid 5878] close(4 [pid 5881] <... memfd_create resumed>) = 3 [pid 5878] <... close resumed>) = 0 [pid 5878] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5874] <... futex resumed>) = 0 [pid 5878] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5874] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5881] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5874] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5881] <... mmap resumed>) = 0x7f5c233f0000 [pid 5878] <... open resumed>) = 4 [pid 5878] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5874] <... futex resumed>) = 0 [pid 5874] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5874] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5878] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9) = 9 [pid 5878] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5874] <... futex resumed>) = 0 [pid 5878] <... futex resumed>) = 1 [pid 5874] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5874] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5878] openat(AT_FDCWD, "./bus", O_RDONLY [pid 4997] <... umount2 resumed>) = 0 [pid 4995] <... umount2 resumed>) = 0 [pid 4995] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5878] <... openat resumed>) = 5 [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] lstat("./27/file0", [pid 5878] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4995] openat(AT_FDCWD, "./27/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5878] <... futex resumed>) = 1 [pid 5874] <... futex resumed>) = 0 [pid 5874] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4995] fstat(4, [pid 5874] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5878] open("./bus", O_RDWR [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] getdents64(4, 0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4995] getdents64(4, 0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 5878] <... open resumed>) = 6 [pid 4995] close(4) = 0 [pid 4995] rmdir("./27/file0" [pid 5878] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] <... rmdir resumed>) = 0 [pid 5878] <... futex resumed>) = 1 [pid 5874] <... futex resumed>) = 0 [pid 5874] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5874] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4995] getdents64(3, 0x555556fba620 /* 0 entries */, 32768) = 0 [ 119.963607][ T5076] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 119.963765][ T5608] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 4995] close(3 [pid 5878] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5881] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4995] <... close resumed>) = 0 [pid 4995] rmdir("./27") = 0 [pid 4995] mkdir("./28", 0777 [pid 5878] <... mmap resumed>) = 0x20000000 [pid 4997] lstat("./28/file0", [pid 4995] <... mkdir resumed>) = 0 [pid 4995] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4995] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4995] close(3 [pid 5878] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] <... close resumed>) = 0 [pid 4995] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556fb95d0) = 5884 ./strace-static-x86_64: Process 5884 attached [pid 5884] set_robust_list(0x555556fb95e0, 24) = 0 [pid 5884] chdir("./28") = 0 [pid 5884] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5884] setpgid(0, 0) = 0 [pid 5884] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5884] write(3, "1000", 4) = 4 [pid 5884] close(3) = 0 [pid 5884] symlink("/dev/binderfs", "./binderfs" [pid 4997] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5878] <... futex resumed>) = 1 [pid 5874] <... futex resumed>) = 0 [pid 5874] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5874] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5884] <... symlink resumed>) = 0 [pid 5884] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5878] sendfile(4, 5, NULL, 2147483713 [pid 4997] openat(AT_FDCWD, "./28/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5884] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c2b7f0000 [pid 5884] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5884] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5885], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 5885 [pid 5884] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5884] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5885 attached [pid 4997] <... openat resumed>) = 4 [pid 5885] set_robust_list(0x7f5c2b8109e0, 24 [pid 4997] fstat(4, [pid 5885] <... set_robust_list resumed>) = 0 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5885] memfd_create("syzkaller", 0) = 3 [pid 5885] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5c233f0000 [pid 4997] getdents64(4, 0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4997] getdents64(4, 0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4997] close(4) = 0 [pid 4997] rmdir("./28/file0") = 0 [pid 5885] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4997] getdents64(3, [pid 5885] <... write resumed>) = 1048576 [pid 5885] munmap(0x7f5c233f0000, 1048576) = 0 [pid 5885] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5885] ioctl(4, LOOP_SET_FD, 3 [pid 5874] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4997] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 5874] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5874] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c234cf000 [pid 5874] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 5885] <... ioctl resumed>) = 0 [pid 5885] close(3 [pid 5874] <... mprotect resumed>) = 0 [pid 5885] <... close resumed>) = 0 [pid 5874] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5885] mkdir("./file0", 0777 [pid 4997] close(3 [pid 5874] <... clone resumed>, parent_tid=[5886], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 5886 [pid 5874] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5874] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5885] <... mkdir resumed>) = 0 [pid 4997] <... close resumed>) = 0 [pid 5885] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 4997] rmdir("./28") = 0 ./strace-static-x86_64: Process 5886 attached [pid 4997] mkdir("./29", 0777 [pid 5886] set_robust_list(0x7f5c234ef9e0, 24) = 0 [pid 5886] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 4997] <... mkdir resumed>) = 0 [pid 4997] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4996] <... umount2 resumed>) = 0 [pid 4997] <... openat resumed>) = 3 [pid 4997] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 120.071382][ T5878] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 120.094118][ T5885] loop1: detected capacity change from 0 to 2048 [pid 5881] <... write resumed>) = 1048576 [pid 4997] close(3 [pid 4996] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... close resumed>) = 0 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556fb95d0) = 5888 [pid 4996] lstat("./29/file0", [pid 5881] munmap(0x7f5c233f0000, 1048576 [pid 4996] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5888 attached [pid 5881] <... munmap resumed>) = 0 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5888] set_robust_list(0x555556fb95e0, 24 [pid 5881] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 4996] openat(AT_FDCWD, "./29/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5888] <... set_robust_list resumed>) = 0 [pid 5881] <... openat resumed>) = 4 [pid 4996] <... openat resumed>) = 4 [pid 5874] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5881] ioctl(4, LOOP_SET_FD, 3 [pid 4996] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 120.120775][ T5878] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 120.156925][ T5881] loop5: detected capacity change from 0 to 2048 [pid 5888] chdir("./29" [pid 4996] getdents64(4, [pid 5888] <... chdir resumed>) = 0 [pid 4998] <... umount2 resumed>) = 0 [pid 4996] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4998] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] getdents64(4, [pid 5888] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4996] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 5888] setpgid(0, 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4996] close(4) = 0 [pid 5888] <... setpgid resumed>) = 0 [pid 4996] rmdir("./29/file0" [pid 4998] lstat("./27/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] <... rmdir resumed>) = 0 [pid 4998] openat(AT_FDCWD, "./27/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4996] getdents64(3, [pid 5888] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4998] fstat(4, [pid 4996] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] close(3 [pid 4998] getdents64(4, [pid 4996] <... close resumed>) = 0 [pid 5888] <... openat resumed>) = 3 [pid 4998] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4996] rmdir("./29" [pid 4998] getdents64(4, 0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./27/file0") = 0 [pid 4996] <... rmdir resumed>) = 0 [pid 5888] write(3, "1000", 4 [pid 4998] getdents64(3, [pid 4996] mkdir("./30", 0777 [pid 5888] <... write resumed>) = 4 [pid 5885] <... mount resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 5885] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 4998] close(3 [pid 5888] close(3 [pid 5885] <... openat resumed>) = 3 [pid 4998] <... close resumed>) = 0 [pid 4996] <... mkdir resumed>) = 0 [pid 5888] <... close resumed>) = 0 [pid 5885] chdir("./file0" [pid 4998] rmdir("./27" [pid 4996] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5888] symlink("/dev/binderfs", "./binderfs" [pid 5885] <... chdir resumed>) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 5885] ioctl(4, LOOP_CLR_FD [pid 4998] mkdir("./28", 0777 [pid 4996] <... openat resumed>) = 3 [pid 5888] <... symlink resumed>) = 0 [pid 5885] <... ioctl resumed>) = 0 [pid 5881] <... ioctl resumed>) = 0 [pid 4996] ioctl(3, LOOP_CLR_FD [pid 5888] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5885] close(4 [pid 5881] close(3 [pid 4998] <... mkdir resumed>) = 0 [pid 4996] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5888] <... futex resumed>) = 0 [pid 5885] <... close resumed>) = 0 [pid 5881] <... close resumed>) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4996] close(3 [pid 5888] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5885] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5881] mkdir("./file0", 0777 [pid 4998] <... openat resumed>) = 3 [pid 4996] <... close resumed>) = 0 [pid 5888] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 5885] <... futex resumed>) = 1 [pid 5881] <... mkdir resumed>) = 0 [pid 4996] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5884] <... futex resumed>) = 0 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5888] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 5885] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5884] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [ 120.161185][ T5885] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.180161][ T5878] EXT4-fs (loop0): This should not happen!! Data will be lost [ 120.180161][ T5878] [pid 5881] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5888] <... mprotect resumed>) = 0 [pid 5885] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5884] <... futex resumed>) = 0 [pid 4996] <... clone resumed>, child_tidptr=0x555556fb95d0) = 5890 ./strace-static-x86_64: Process 5890 attached [pid 5888] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5885] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5884] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] close(3 [pid 5890] set_robust_list(0x555556fb95e0, 24) = 0 [pid 5888] <... clone resumed>, parent_tid=[5891], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 5891 [pid 5890] chdir("./30" [pid 5888] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5885] <... open resumed>) = 4 [pid 4998] <... close resumed>) = 0 [pid 5888] <... futex resumed>) = 0 [pid 5885] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5891 attached [pid 5890] <... chdir resumed>) = 0 [pid 5888] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5885] <... futex resumed>) = 1 [pid 5884] <... futex resumed>) = 0 [pid 5891] set_robust_list(0x7f5c2b8109e0, 24 [pid 5890] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5885] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5884] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5891] <... set_robust_list resumed>) = 0 [pid 5890] <... prctl resumed>) = 0 [ 120.235679][ T5878] EXT4-fs (loop0): Total free blocks count 0 [ 120.246501][ T5878] EXT4-fs (loop0): Free/Dirty block details [ 120.253848][ T5878] EXT4-fs (loop0): free_blocks=2415919104 [ 120.271280][ T5881] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [pid 5885] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5884] <... futex resumed>) = 0 [pid 5891] memfd_create("syzkaller", 0 [pid 5890] setpgid(0, 0 [pid 5885] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5884] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5891] <... memfd_create resumed>) = 3 [pid 5890] <... setpgid resumed>) = 0 [pid 5885] <... write resumed>) = 9 [pid 5891] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5890] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5885] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5891] <... mmap resumed>) = 0x7f5c233f0000 [pid 5890] <... openat resumed>) = 3 [pid 5885] <... futex resumed>) = 1 [pid 5884] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5894 attached [pid 5890] write(3, "1000", 4 [pid 5886] <... ioctl resumed>) = 0 [pid 5885] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5884] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5881] <... mount resumed>) = 0 [pid 5878] <... sendfile resumed>) = 63 [pid 4998] <... clone resumed>, child_tidptr=0x555556fb95d0) = 5894 [pid 5894] set_robust_list(0x555556fb95e0, 24 [pid 5890] <... write resumed>) = 4 [pid 5886] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5885] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5884] <... futex resumed>) = 0 [pid 5881] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5878] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5874] exit_group(0 [pid 5894] <... set_robust_list resumed>) = 0 [pid 5890] close(3 [pid 5886] <... futex resumed>) = ? [pid 5885] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5884] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5881] <... openat resumed>) = 3 [pid 5878] <... futex resumed>) = ? [pid 5874] <... exit_group resumed>) = ? [pid 5894] chdir("./28" [pid 5890] <... close resumed>) = 0 [pid 5886] +++ exited with 0 +++ [pid 5885] <... openat resumed>) = 5 [pid 5881] chdir("./file0" [pid 5878] +++ exited with 0 +++ [pid 5894] <... chdir resumed>) = 0 [pid 5881] <... chdir resumed>) = 0 [pid 5894] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5881] ioctl(4, LOOP_CLR_FD [pid 5894] <... prctl resumed>) = 0 [pid 5881] <... ioctl resumed>) = 0 [pid 5894] setpgid(0, 0 [pid 5881] close(4 [pid 5874] +++ exited with 0 +++ [pid 5890] symlink("/dev/binderfs", "./binderfs" [pid 5885] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5894] <... setpgid resumed>) = 0 [pid 5881] <... close resumed>) = 0 [pid 5894] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5881] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5890] <... symlink resumed>) = 0 [pid 5894] <... openat resumed>) = 3 [pid 5890] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5885] <... futex resumed>) = 1 [pid 5884] <... futex resumed>) = 0 [pid 5881] <... futex resumed>) = 1 [pid 5876] <... futex resumed>) = 0 [pid 4994] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5874, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5894] write(3, "1000", 4 [pid 5890] <... futex resumed>) = 0 [pid 5885] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5884] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5881] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5876] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] umount2("./29", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5894] <... write resumed>) = 4 [pid 5890] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5885] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5884] <... futex resumed>) = 0 [pid 5881] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5876] <... futex resumed>) = 0 [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5894] close(3 [pid 5890] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 5885] open("./bus", O_RDWR [pid 5884] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5881] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5876] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4994] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5894] <... close resumed>) = 0 [pid 5890] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 5885] <... open resumed>) = 6 [pid 5894] symlink("/dev/binderfs", "./binderfs" [pid 4994] <... openat resumed>) = 3 [pid 5894] <... symlink resumed>) = 0 [pid 5885] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5881] <... open resumed>) = 4 [pid 5894] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5890] <... mprotect resumed>) = 0 [pid 5885] <... futex resumed>) = 1 [pid 5884] <... futex resumed>) = 0 [pid 5881] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] fstat(3, [pid 5894] <... futex resumed>) = 0 [pid 5890] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5885] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5884] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5881] <... futex resumed>) = 1 [pid 5876] <... futex resumed>) = 0 [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5894] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5884] <... futex resumed>) = 0 [pid 5876] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5894] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 5894] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5885] <... mmap resumed>) = 0x20000000 [pid 5884] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5876] <... futex resumed>) = 0 [pid 5894] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5890] <... clone resumed>, parent_tid=[5895], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 5895 [pid 5885] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5884] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5881] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5876] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4994] getdents64(3, ./strace-static-x86_64: Process 5895 attached [pid 5890] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5885] <... futex resumed>) = 0 [pid 5884] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5895] set_robust_list(0x7f5c2b8109e0, 24 [pid 5894] <... clone resumed>, parent_tid=[5896], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 5896 [ 120.277545][ T5878] EXT4-fs (loop0): dirty_blocks=16 [ 120.288869][ T5878] EXT4-fs (loop0): Block reservation details [ 120.295371][ T5878] EXT4-fs (loop0): i_reserved_data_blocks=1 [pid 5884] <... futex resumed>) = 0 [pid 5881] <... write resumed>) = 9 [pid 5890] <... futex resumed>) = 0 [pid 5885] sendfile(4, 5, NULL, 2147483713 [pid 4994] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 5895] <... set_robust_list resumed>) = 0 [pid 5894] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5890] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5884] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5881] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5895] memfd_create("syzkaller", 0 [pid 5894] <... futex resumed>) = 0 [pid 5881] <... futex resumed>) = 1 [pid 5876] <... futex resumed>) = 0 [pid 4994] umount2("./29/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5895] <... memfd_create resumed>) = 3 [pid 5894] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5881] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5876] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5895] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5c233f0000 [pid 5881] <... openat resumed>) = 5 [pid 5876] <... futex resumed>) = 0 [pid 4994] lstat("./29/binderfs", [pid 5895] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5881] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5876] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5876] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5876] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4994] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5881] <... futex resumed>) = 1 [pid 5876] <... futex resumed>) = 0 [pid 4994] unlink("./29/binderfs" [pid 5881] open("./bus", O_RDWR [pid 5876] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4994] <... unlink resumed>) = 0 [pid 5881] <... open resumed>) = 6 [pid 5881] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5881] <... futex resumed>) = 1 [pid 5876] <... futex resumed>) = 0 [pid 5881] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5876] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5895] <... write resumed>) = 1048576 [pid 5895] munmap(0x7f5c233f0000, 1048576) = 0 [pid 5876] <... futex resumed>) = 0 [pid 5876] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5896 attached [pid 5896] set_robust_list(0x7f5c2b8109e0, 24) = 0 [pid 5896] memfd_create("syzkaller", 0 [pid 5881] <... mmap resumed>) = 0x20000000 [pid 5881] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5876] <... futex resumed>) = 0 [pid 5881] <... futex resumed>) = 1 [pid 5895] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5881] sendfile(4, 5, NULL, 2147483713 [pid 5876] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5876] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5896] <... memfd_create resumed>) = 3 [pid 5896] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5c233f0000 [pid 5895] <... openat resumed>) = 4 [ 120.338561][ T5885] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 120.358194][ T5457] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5891] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5895] ioctl(4, LOOP_SET_FD, 3 [pid 5896] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5884] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5884] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5884] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c234cf000 [pid 5884] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5884] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5897], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 5897 [pid 5884] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5884] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5896] <... write resumed>) = 1048576 [pid 5896] munmap(0x7f5c233f0000, 1048576) = 0 ./strace-static-x86_64: Process 5897 attached [pid 5896] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5897] set_robust_list(0x7f5c234ef9e0, 24 [pid 5896] ioctl(4, LOOP_SET_FD, 3 [pid 5897] <... set_robust_list resumed>) = 0 [pid 5876] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5876] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5876] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5896] <... ioctl resumed>) = 0 [pid 5876] <... mmap resumed>) = 0x7f5c234cf000 [pid 5896] close(3 [pid 5876] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 5896] <... close resumed>) = 0 [pid 5896] mkdir("./file0", 0777 [pid 5876] <... mprotect resumed>) = 0 [pid 5876] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5898], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 5898 [pid 5876] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5876] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5897] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5896] <... mkdir resumed>) = 0 [pid 5896] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5895] <... ioctl resumed>) = 0 [pid 5895] close(3) = 0 ./strace-static-x86_64: Process 5898 attached [pid 5898] set_robust_list(0x7f5c234ef9e0, 24) = 0 [ 120.382516][ T5881] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 120.401172][ T5895] loop2: detected capacity change from 0 to 2048 [ 120.419856][ T5896] loop4: detected capacity change from 0 to 2048 [pid 5898] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5884] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5895] mkdir("./file0", 0777) = 0 [pid 5895] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5891] <... write resumed>) = 1048576 [ 120.444938][ T5885] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 120.466381][ T5896] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.470730][ T5881] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5891] munmap(0x7f5c233f0000, 1048576 [pid 5876] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5896] <... mount resumed>) = 0 [pid 5896] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5896] chdir("./file0") = 0 [pid 5896] ioctl(4, LOOP_CLR_FD) = 0 [pid 5891] <... munmap resumed>) = 0 [pid 5896] close(4) = 0 [pid 5896] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5894] <... futex resumed>) = 0 [pid 5894] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5894] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5896] <... futex resumed>) = 1 [pid 5896] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5891] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 4994] <... umount2 resumed>) = 0 [ 120.491396][ T5885] EXT4-fs (loop1): This should not happen!! Data will be lost [ 120.491396][ T5885] [ 120.493544][ T5881] EXT4-fs (loop5): This should not happen!! Data will be lost [ 120.493544][ T5881] [ 120.529260][ T5881] EXT4-fs (loop5): Total free blocks count 0 [ 120.537278][ T5881] EXT4-fs (loop5): Free/Dirty block details [pid 5891] ioctl(4, LOOP_SET_FD, 3 [pid 5896] <... open resumed>) = 4 [pid 4994] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] lstat("./29/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5896] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5896] <... futex resumed>) = 0 [pid 5894] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] openat(AT_FDCWD, "./29/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5896] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4994] <... openat resumed>) = 4 [pid 4994] fstat(4, [pid 5894] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] getdents64(4, 0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 5896] <... futex resumed>) = 0 [pid 5894] <... futex resumed>) = 1 [ 120.537715][ T5891] loop3: detected capacity change from 0 to 2048 [ 120.543348][ T5881] EXT4-fs (loop5): free_blocks=2415919104 [ 120.555741][ T5885] EXT4-fs (loop1): Total free blocks count 0 [ 120.562171][ T5885] EXT4-fs (loop1): Free/Dirty block details [ 120.568900][ T5885] EXT4-fs (loop1): free_blocks=2415919104 [ 120.573091][ T5881] EXT4-fs (loop5): dirty_blocks=16 [ 120.575381][ T5885] EXT4-fs (loop1): dirty_blocks=16 [ 120.586282][ T5885] EXT4-fs (loop1): Block reservation details [pid 4994] getdents64(4, [pid 5897] <... ioctl resumed>) = 0 [pid 5896] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5894] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5891] <... ioctl resumed>) = 0 [pid 5885] <... sendfile resumed>) = 63 [pid 4994] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 5897] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5896] <... write resumed>) = 9 [pid 4994] close(4 [pid 5897] <... futex resumed>) = 0 [pid 5896] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] <... close resumed>) = 0 [pid 5898] <... ioctl resumed>) = 0 [pid 5897] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5896] <... futex resumed>) = 1 [pid 5895] <... mount resumed>) = 0 [pid 5894] <... futex resumed>) = 0 [pid 5891] close(3 [pid 5885] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5881] <... sendfile resumed>) = 63 [pid 4994] rmdir("./29/file0" [pid 5898] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5896] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5895] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5894] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5891] <... close resumed>) = 0 [pid 5885] <... futex resumed>) = 0 [pid 5884] exit_group(0 [pid 5898] <... futex resumed>) = 0 [pid 5897] <... futex resumed>) = ? [pid 5896] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5895] <... openat resumed>) = 3 [pid 5894] <... futex resumed>) = 0 [pid 5891] mkdir("./file0", 0777 [pid 5884] <... exit_group resumed>) = ? [pid 4994] <... rmdir resumed>) = 0 [pid 5898] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5897] +++ exited with 0 +++ [pid 5896] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5895] chdir("./file0" [pid 5894] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5891] <... mkdir resumed>) = 0 [pid 5885] +++ exited with 0 +++ [pid 5881] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5895] <... chdir resumed>) = 0 [pid 5891] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5895] ioctl(4, LOOP_CLR_FD [pid 5884] +++ exited with 0 +++ [pid 5895] <... ioctl resumed>) = 0 [pid 5876] exit_group(0 [pid 5895] close(4 [pid 5896] <... openat resumed>) = 5 [pid 5895] <... close resumed>) = 0 [pid 5895] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5895] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5890] <... futex resumed>) = 0 [pid 5890] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4995] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5884, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5898] <... futex resumed>) = ? [pid 5890] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5876] <... exit_group resumed>) = ? [pid 5898] +++ exited with 0 +++ [pid 5896] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5895] <... futex resumed>) = 0 [pid 5881] <... futex resumed>) = ? [pid 4995] restart_syscall(<... resuming interrupted clone ...> [pid 4994] getdents64(3, [pid 5896] <... futex resumed>) = 1 [pid 5895] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5881] +++ exited with 0 +++ [pid 5876] +++ exited with 0 +++ [pid 4995] <... restart_syscall resumed>) = 0 [pid 4994] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 5894] <... futex resumed>) = 0 [pid 5894] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5896] open("./bus", O_RDWR [pid 5894] <... futex resumed>) = 0 [pid 5896] <... open resumed>) = 6 [pid 5894] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5876, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 4994] close(3 [pid 4995] umount2("./28", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] <... close resumed>) = 0 [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] rmdir("./29") = 0 [pid 4995] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5896] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] umount2("./28", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4995] <... openat resumed>) = 3 [pid 4999] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5896] <... futex resumed>) = 1 [pid 5894] <... futex resumed>) = 0 [pid 4995] fstat(3, [pid 5896] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5894] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4999] <... openat resumed>) = 3 [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5896] <... mmap resumed>) = 0x20000000 [pid 5894] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] fstat(3, [pid 4995] getdents64(3, [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 5895] <... open resumed>) = 4 [pid 4999] getdents64(3, [pid 4995] umount2("./28/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] mkdir("./30", 0777 [pid 4999] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] umount2("./28/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] <... mkdir resumed>) = 0 [pid 4995] lstat("./28/binderfs", [pid 5895] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5895] <... futex resumed>) = 1 [pid 5890] <... futex resumed>) = 0 [pid 5890] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] lstat("./28/binderfs", [pid 4995] unlink("./28/binderfs" [pid 4994] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5890] <... futex resumed>) = 0 [pid 5890] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5895] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4995] <... unlink resumed>) = 0 [pid 4999] unlink("./28/binderfs") = 0 [pid 5895] <... write resumed>) = 9 [pid 4994] <... openat resumed>) = 3 [pid 5895] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] ioctl(3, LOOP_CLR_FD [ 120.592690][ T5885] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 120.594962][ T5895] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.599007][ T5881] EXT4-fs (loop5): Block reservation details [ 120.617516][ T5881] EXT4-fs (loop5): i_reserved_data_blocks=1 [pid 5896] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5895] <... futex resumed>) = 1 [pid 5890] <... futex resumed>) = 0 [pid 5896] <... futex resumed>) = 1 [pid 5895] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5894] <... futex resumed>) = 0 [pid 5890] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5896] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5895] <... openat resumed>) = 5 [pid 5895] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5895] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5894] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5894] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5896] <... futex resumed>) = 0 [pid 5896] sendfile(4, 5, NULL, 2147483713 [pid 5890] <... futex resumed>) = 1 [pid 5890] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5890] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5890] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5895] <... futex resumed>) = 0 [pid 5895] open("./bus", O_RDWR) = 6 [pid 5895] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5890] <... futex resumed>) = 0 [pid 5890] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5890] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5895] <... futex resumed>) = 1 [pid 5895] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5890] <... futex resumed>) = 0 [pid 5890] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5890] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5895] <... futex resumed>) = 1 [ 120.669379][ T5457] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 120.682905][ T5608] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 120.698089][ T5891] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [pid 5895] sendfile(4, 5, NULL, 2147483713 [pid 4994] close(3) = 0 [pid 4994] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556fb95d0) = 5905 [pid 4999] <... umount2 resumed>) = 0 [pid 4999] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./28/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5894] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5894] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5894] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4999] openat(AT_FDCWD, "./28/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5894] <... mmap resumed>) = 0x7f5c234cf000 [pid 5894] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 4999] <... openat resumed>) = 4 [pid 5894] <... mprotect resumed>) = 0 [pid 4999] fstat(4, [pid 5894] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, [pid 5894] <... clone resumed>, parent_tid=[5906], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 5906 [pid 4999] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 5894] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5890] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5894] <... futex resumed>) = 0 [pid 5890] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] getdents64(4, [pid 5894] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5890] <... futex resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 5890] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4999] close(4 [pid 5890] <... mmap resumed>) = 0x7f5c234cf000 [pid 4999] <... close resumed>) = 0 [pid 5890] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 4999] rmdir("./28/file0" [pid 5890] <... mprotect resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 5890] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4999] getdents64(3, 0x555556fba620 /* 0 entries */, 32768) = 0 [pid 5890] <... clone resumed>, parent_tid=[5907], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 5907 [pid 4999] close(3 [pid 5890] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... close resumed>) = 0 [pid 5890] <... futex resumed>) = 0 [pid 4999] rmdir("./28" [pid 5890] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] <... rmdir resumed>) = 0 [pid 4999] mkdir("./29", 0777) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556fb95d0) = 5908 ./strace-static-x86_64: Process 5905 attached [pid 5905] set_robust_list(0x555556fb95e0, 24) = 0 [pid 5905] chdir("./30") = 0 [pid 5905] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5905] setpgid(0, 0) = 0 [pid 5905] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5905] write(3, "1000", 4) = 4 [pid 5905] close(3) = 0 [pid 5905] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5905] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5905] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c2b7f0000 [pid 5905] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5905] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5909], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 5909 [pid 5905] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 120.717967][ T5896] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 120.752377][ T5895] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 5905] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5909 attached ./strace-static-x86_64: Process 5908 attached ./strace-static-x86_64: Process 5907 attached ./strace-static-x86_64: Process 5906 attached [pid 5891] <... mount resumed>) = 0 [pid 4995] <... umount2 resumed>) = 0 [pid 5909] set_robust_list(0x7f5c2b8109e0, 24 [pid 5908] set_robust_list(0x555556fb95e0, 24 [pid 5907] set_robust_list(0x7f5c234ef9e0, 24 [pid 5906] set_robust_list(0x7f5c234ef9e0, 24 [pid 5891] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 4995] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5894] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5906] <... set_robust_list resumed>) = 0 [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5891] <... openat resumed>) = 3 [pid 5907] <... set_robust_list resumed>) = 0 [pid 5909] <... set_robust_list resumed>) = 0 [pid 5907] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5906] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5909] memfd_create("syzkaller", 0 [pid 5891] chdir("./file0" [pid 4995] lstat("./28/file0", [pid 5909] <... memfd_create resumed>) = 3 [pid 5908] <... set_robust_list resumed>) = 0 [pid 5891] <... chdir resumed>) = 0 [pid 5890] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4995] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5909] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5908] chdir("./29" [pid 5891] ioctl(4, LOOP_CLR_FD [ 120.780547][ T5896] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 120.797627][ T5895] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 120.807994][ T5896] EXT4-fs (loop4): This should not happen!! Data will be lost [ 120.807994][ T5896] [pid 4995] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5909] <... mmap resumed>) = 0x7f5c233f0000 [pid 5908] <... chdir resumed>) = 0 [pid 5891] <... ioctl resumed>) = 0 [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5908] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5909] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5908] <... prctl resumed>) = 0 [pid 5891] close(4 [pid 4995] openat(AT_FDCWD, "./28/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5908] setpgid(0, 0 [pid 4995] fstat(4, [pid 5908] <... setpgid resumed>) = 0 [pid 5891] <... close resumed>) = 0 [pid 5908] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5891] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5908] <... openat resumed>) = 3 [pid 5891] <... futex resumed>) = 1 [pid 5888] <... futex resumed>) = 0 [pid 4995] getdents64(4, [pid 5908] write(3, "1000", 4 [pid 5891] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5888] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 5891] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5908] <... write resumed>) = 4 [pid 5888] <... futex resumed>) = 0 [pid 5908] close(3 [pid 5891] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 4995] getdents64(4, [pid 5888] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5908] <... close resumed>) = 0 [pid 5891] <... open resumed>) = 4 [pid 4995] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 5908] symlink("/dev/binderfs", "./binderfs" [pid 4995] close(4 [pid 5908] <... symlink resumed>) = 0 [pid 5891] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] <... close resumed>) = 0 [pid 5908] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5891] <... futex resumed>) = 1 [pid 5888] <... futex resumed>) = 0 [pid 4995] rmdir("./28/file0" [pid 5908] <... futex resumed>) = 0 [pid 5891] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5888] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5908] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5891] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5888] <... futex resumed>) = 0 [pid 4995] <... rmdir resumed>) = 0 [ 120.832862][ T5896] EXT4-fs (loop4): Total free blocks count 0 [ 120.842141][ T5896] EXT4-fs (loop4): Free/Dirty block details [ 120.849626][ T5896] EXT4-fs (loop4): free_blocks=2415919104 [ 120.858451][ T5896] EXT4-fs (loop4): dirty_blocks=16 [ 120.865323][ T5896] EXT4-fs (loop4): Block reservation details [ 120.874140][ T5896] EXT4-fs (loop4): i_reserved_data_blocks=1 [pid 5908] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 5891] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5888] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4995] getdents64(3, [pid 5909] <... write resumed>) = 1048576 [pid 5908] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 5906] <... ioctl resumed>) = 0 [pid 5896] <... sendfile resumed>) = 63 [pid 5891] <... write resumed>) = 9 [pid 4995] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 5891] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5888] <... futex resumed>) = 0 [pid 5891] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5888] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5909] munmap(0x7f5c233f0000, 1048576 [pid 5908] <... mprotect resumed>) = 0 [pid 5906] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5896] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5891] <... openat resumed>) = 5 [pid 5888] <... futex resumed>) = 0 [pid 5894] exit_group(0 [pid 5891] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5888] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5896] <... futex resumed>) = 0 [pid 4995] close(3 [pid 5891] <... futex resumed>) = 0 [pid 5888] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5909] <... munmap resumed>) = 0 [pid 5908] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5906] <... futex resumed>) = ? [pid 5894] <... exit_group resumed>) = ? [pid 5891] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5888] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] <... close resumed>) = 0 [pid 5909] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5906] +++ exited with 0 +++ [pid 5896] +++ exited with 0 +++ [pid 5894] +++ exited with 0 +++ [pid 5891] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5888] <... futex resumed>) = 0 [pid 4995] rmdir("./28" [pid 5909] <... openat resumed>) = 4 [pid 5908] <... clone resumed>, parent_tid=[5910], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 5910 [pid 5891] open("./bus", O_RDWR [pid 4995] <... rmdir resumed>) = 0 [pid 5909] ioctl(4, LOOP_SET_FD, 3 [pid 5908] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5894, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 4995] mkdir("./29", 0777./strace-static-x86_64: Process 5910 attached [pid 5908] <... futex resumed>) = 0 [pid 5891] <... open resumed>) = 6 [pid 5888] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] umount2("./28", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] <... mkdir resumed>) = 0 [pid 5908] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5910] set_robust_list(0x7f5c2b8109e0, 24 [pid 5909] <... ioctl resumed>) = 0 [pid 5891] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5888] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 120.881355][ T5895] EXT4-fs (loop2): This should not happen!! Data will be lost [ 120.881355][ T5895] [ 120.894610][ T5895] EXT4-fs (loop2): Total free blocks count 0 [ 120.905547][ T5895] EXT4-fs (loop2): Free/Dirty block details [ 120.919376][ T5909] loop0: detected capacity change from 0 to 2048 [ 120.927008][ T5895] EXT4-fs (loop2): free_blocks=2415919104 [pid 4998] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4995] <... openat resumed>) = 3 [pid 5909] close(3 [pid 4998] <... openat resumed>) = 3 [pid 4995] ioctl(3, LOOP_CLR_FD [pid 5909] <... close resumed>) = 0 [pid 4998] fstat(3, [pid 4995] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5910] <... set_robust_list resumed>) = 0 [pid 5909] mkdir("./file0", 0777 [pid 5891] <... futex resumed>) = 0 [pid 5888] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] close(3 [pid 5910] memfd_create("syzkaller", 0 [pid 5909] <... mkdir resumed>) = 0 [pid 5907] <... ioctl resumed>) = 0 [pid 5895] <... sendfile resumed>) = 63 [pid 5891] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5888] <... futex resumed>) = 0 [pid 4998] getdents64(3, [pid 4995] <... close resumed>) = 0 [pid 5910] <... memfd_create resumed>) = 3 [pid 5909] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5907] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4995] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5910] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5907] <... futex resumed>) = 0 [pid 5895] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5891] <... mmap resumed>) = 0x20000000 [pid 5888] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] umount2("./28/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5907] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] <... clone resumed>, child_tidptr=0x555556fb95d0) = 5911 [pid 4998] lstat("./28/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./28/binderfs") = 0 [pid 4998] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5911 attached [pid 5911] set_robust_list(0x555556fb95e0, 24) = 0 [pid 5910] <... mmap resumed>) = 0x7f5c233f0000 [pid 5895] <... futex resumed>) = 0 [pid 5891] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5910] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5895] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5891] <... futex resumed>) = 1 [pid 5890] exit_group(0 [pid 5888] <... futex resumed>) = 0 [pid 5911] chdir("./29" [pid 5907] <... futex resumed>) = ? [pid 5895] <... futex resumed>) = ? [pid 5891] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5890] <... exit_group resumed>) = ? [pid 5888] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [ 120.933562][ T5895] EXT4-fs (loop2): dirty_blocks=16 [ 120.939608][ T5895] EXT4-fs (loop2): Block reservation details [ 120.947240][ T5895] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 120.966872][ T74] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5911] <... chdir resumed>) = 0 [pid 5907] +++ exited with 0 +++ [pid 5895] +++ exited with 0 +++ [pid 5891] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5890] +++ exited with 0 +++ [pid 5888] <... futex resumed>) = 0 [pid 5911] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5909] <... mount resumed>) = 0 [pid 5891] sendfile(4, 5, NULL, 2147483713 [pid 5888] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] <... umount2 resumed>) = 0 [pid 5911] <... prctl resumed>) = 0 [pid 5910] <... write resumed>) = 1048576 [pid 5909] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 4998] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5890, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5911] setpgid(0, 0 [pid 5910] munmap(0x7f5c233f0000, 1048576 [pid 5909] <... openat resumed>) = 3 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4996] restart_syscall(<... resuming interrupted clone ...> [pid 5911] <... setpgid resumed>) = 0 [pid 5910] <... munmap resumed>) = 0 [pid 5909] chdir("./file0") = 0 [pid 5909] ioctl(4, LOOP_CLR_FD) = 0 [pid 5909] close(4) = 0 [pid 4998] lstat("./28/file0", [pid 4996] <... restart_syscall resumed>) = 0 [pid 5911] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5910] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5910] <... openat resumed>) = 4 [pid 5910] ioctl(4, LOOP_SET_FD, 3 [pid 5909] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5911] <... openat resumed>) = 3 [pid 5909] <... futex resumed>) = 1 [pid 5905] <... futex resumed>) = 0 [pid 5909] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [ 121.004551][ T5909] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.022943][ T5891] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 121.038640][ T5891] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5905] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5909] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5905] <... futex resumed>) = 0 [pid 5909] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5905] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5909] <... open resumed>) = 4 [pid 5909] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5905] <... futex resumed>) = 0 [pid 5909] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5905] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5909] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5905] <... futex resumed>) = 0 [pid 5909] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5905] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5909] <... write resumed>) = 9 [pid 5909] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5905] <... futex resumed>) = 0 [pid 5909] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5905] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5911] write(3, "1000", 4 [pid 5909] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5905] <... futex resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4996] umount2("./30", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5911] <... write resumed>) = 4 [pid 5909] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5905] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] openat(AT_FDCWD, "./28/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5911] close(3 [pid 5910] <... ioctl resumed>) = 0 [pid 5909] <... openat resumed>) = 5 [pid 5888] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4998] <... openat resumed>) = 4 [pid 4996] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5911] <... close resumed>) = 0 [pid 5909] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5888] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] fstat(4, [pid 4996] <... openat resumed>) = 3 [ 121.053119][ T5891] EXT4-fs (loop3): This should not happen!! Data will be lost [ 121.053119][ T5891] [ 121.063393][ T5910] loop5: detected capacity change from 0 to 2048 [ 121.070110][ T5891] EXT4-fs (loop3): Total free blocks count 0 [ 121.076205][ T5891] EXT4-fs (loop3): Free/Dirty block details [ 121.082146][ T5891] EXT4-fs (loop3): free_blocks=2415919104 [ 121.088103][ T5891] EXT4-fs (loop3): dirty_blocks=16 [ 121.093268][ T5891] EXT4-fs (loop3): Block reservation details [ 121.099330][ T5891] EXT4-fs (loop3): i_reserved_data_blocks=1 [pid 5911] symlink("/dev/binderfs", "./binderfs" [pid 5910] close(3 [pid 5909] <... futex resumed>) = 1 [pid 5905] <... futex resumed>) = 0 [pid 5891] <... sendfile resumed>) = 63 [pid 5888] <... futex resumed>) = 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] fstat(3, [pid 5911] <... symlink resumed>) = 0 [pid 5910] <... close resumed>) = 0 [pid 5909] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5905] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5891] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5888] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4998] getdents64(4, [pid 4996] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5911] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5910] mkdir("./file0", 0777 [pid 5909] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5905] <... futex resumed>) = 0 [pid 5891] <... futex resumed>) = 0 [pid 5911] <... futex resumed>) = 0 [pid 5909] open("./bus", O_RDWR [pid 5905] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5891] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5888] <... mmap resumed>) = 0x7f5c234cf000 [pid 4996] getdents64(3, [pid 5911] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5909] <... open resumed>) = 6 [pid 5911] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 5909] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5888] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 5911] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 5909] <... futex resumed>) = 1 [pid 5905] <... futex resumed>) = 0 [pid 5905] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5888] <... mprotect resumed>) = 0 [pid 5911] <... mprotect resumed>) = 0 [pid 5905] <... futex resumed>) = 0 [pid 5905] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5888] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5911] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5909] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5911] <... clone resumed>, parent_tid=[5915], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 5915 [pid 5911] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5909] <... mmap resumed>) = 0x20000000 ./strace-static-x86_64: Process 5914 attached [pid 5911] <... futex resumed>) = 0 [pid 5888] <... clone resumed>, parent_tid=[5914], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 5914 [pid 5911] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5909] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5888] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5909] <... futex resumed>) = 1 [pid 5905] <... futex resumed>) = 0 [pid 5888] <... futex resumed>) = 0 [pid 5905] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5909] sendfile(4, 5, NULL, 2147483713 [pid 5905] <... futex resumed>) = 0 [pid 5888] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5915 attached [pid 5915] set_robust_list(0x7f5c2b8109e0, 24 [pid 5905] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5915] <... set_robust_list resumed>) = 0 [pid 5915] memfd_create("syzkaller", 0) = 3 [pid 5915] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5c233f0000 [pid 5915] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5910] <... mkdir resumed>) = 0 [pid 5910] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 4996] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4998] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4996] umount2("./30/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] getdents64(4, [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4996] lstat("./30/binderfs", [pid 4998] close(4 [pid 4996] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] <... close resumed>) = 0 [pid 4996] unlink("./30/binderfs" [pid 4998] rmdir("./28/file0" [pid 4996] <... unlink resumed>) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 4998] getdents64(3, [pid 4996] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4998] close(3 [pid 5915] <... write resumed>) = 1048576 [pid 5915] munmap(0x7f5c233f0000, 1048576) = 0 [pid 5915] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5915] ioctl(4, LOOP_SET_FD, 3 [pid 5914] set_robust_list(0x7f5c234ef9e0, 24 [pid 4998] <... close resumed>) = 0 [pid 5915] <... ioctl resumed>) = 0 [pid 5915] close(3) = 0 [pid 5915] mkdir("./file0", 0777 [pid 5914] <... set_robust_list resumed>) = 0 [pid 4998] rmdir("./28") = 0 [pid 5888] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5905] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5914] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5905] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5915] <... mkdir resumed>) = 0 [ 121.126758][ T5909] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 121.148797][ T5457] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 121.151073][ T5915] loop1: detected capacity change from 0 to 2048 [pid 5915] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5905] <... futex resumed>) = 0 [pid 5914] <... ioctl resumed>) = 0 [pid 5905] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5914] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] mkdir("./29", 0777 [pid 5905] <... mmap resumed>) = 0x7f5c234cf000 [pid 5914] <... futex resumed>) = 0 [pid 5905] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 5914] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5905] <... mprotect resumed>) = 0 [pid 4998] <... mkdir resumed>) = 0 [pid 5905] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5888] exit_group(0 [pid 4998] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5914] <... futex resumed>) = ? [pid 5891] <... futex resumed>) = ? [pid 5888] <... exit_group resumed>) = ? [pid 4998] <... openat resumed>) = 3 [pid 5891] +++ exited with 0 +++ [pid 5914] +++ exited with 0 +++ [pid 5888] +++ exited with 0 +++ [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5888, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=14 /* 0.14 s */} --- [pid 5905] <... clone resumed>, parent_tid=[5919], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 5919 [pid 5905] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 4997] umount2("./29", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5905] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 121.174902][ T5909] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 121.178316][ T5910] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.199397][ T5909] EXT4-fs (loop0): This should not happen!! Data will be lost [ 121.199397][ T5909] [ 121.210250][ T5909] EXT4-fs (loop0): Total free blocks count 0 [ 121.216339][ T5909] EXT4-fs (loop0): Free/Dirty block details [pid 4998] close(3 [pid 4997] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4997] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(3, 0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4997] umount2("./29/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] <... close resumed>) = 0 [pid 4997] lstat("./29/binderfs", [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4997] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] unlink("./29/binderfs") = 0 [pid 4998] <... clone resumed>, child_tidptr=0x555556fb95d0) = 5920 [pid 4997] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5919 attached [pid 5909] <... sendfile resumed>) = 63 [pid 5910] <... mount resumed>) = 0 ./strace-static-x86_64: Process 5920 attached [pid 5919] set_robust_list(0x7f5c234ef9e0, 24 [pid 5920] set_robust_list(0x555556fb95e0, 24 [pid 5919] <... set_robust_list resumed>) = 0 [pid 5920] <... set_robust_list resumed>) = 0 [pid 5919] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [ 121.222348][ T5909] EXT4-fs (loop0): free_blocks=2415919104 [ 121.228204][ T5909] EXT4-fs (loop0): dirty_blocks=16 [ 121.233356][ T5909] EXT4-fs (loop0): Block reservation details [ 121.239642][ T5909] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 121.247071][ T74] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5920] chdir("./29" [pid 5919] <... ioctl resumed>) = 0 [pid 5910] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5909] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5910] <... openat resumed>) = 3 [pid 5909] <... futex resumed>) = 0 [pid 5910] chdir("./file0" [pid 5909] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5910] <... chdir resumed>) = 0 [pid 5910] ioctl(4, LOOP_CLR_FD [pid 5905] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5910] <... ioctl resumed>) = 0 [pid 5910] close(4) = 0 [pid 5910] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5908] <... futex resumed>) = 0 [pid 5910] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5908] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5920] <... chdir resumed>) = 0 [pid 5919] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5915] <... mount resumed>) = 0 [pid 5910] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5908] <... futex resumed>) = 0 [pid 5920] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5919] <... futex resumed>) = 0 [pid 5915] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5910] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5908] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5920] <... prctl resumed>) = 0 [pid 5919] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5915] <... openat resumed>) = 3 [pid 5910] <... open resumed>) = 4 [pid 5905] exit_group(0 [pid 5920] setpgid(0, 0 [pid 5919] <... futex resumed>) = ? [pid 5915] chdir("./file0" [pid 5909] <... futex resumed>) = ? [pid 5905] <... exit_group resumed>) = ? [pid 5920] <... setpgid resumed>) = 0 [pid 5919] +++ exited with 0 +++ [pid 5915] <... chdir resumed>) = 0 [pid 5910] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5909] +++ exited with 0 +++ [pid 5905] +++ exited with 0 +++ [pid 4997] <... umount2 resumed>) = 0 [pid 5920] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5915] ioctl(4, LOOP_CLR_FD [pid 5910] <... futex resumed>) = 1 [pid 5908] <... futex resumed>) = 0 [pid 4994] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5905, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5920] <... openat resumed>) = 3 [pid 5915] <... ioctl resumed>) = 0 [pid 5910] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5908] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] restart_syscall(<... resuming interrupted clone ...> [pid 5920] write(3, "1000", 4 [pid 5915] close(4 [pid 5910] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5908] <... futex resumed>) = 0 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] <... restart_syscall resumed>) = 0 [pid 5920] <... write resumed>) = 4 [pid 5915] <... close resumed>) = 0 [pid 5920] close(3 [pid 5915] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5920] <... close resumed>) = 0 [pid 5915] <... futex resumed>) = 1 [pid 5911] <... futex resumed>) = 0 [pid 4994] umount2("./30", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5920] symlink("/dev/binderfs", "./binderfs" [pid 5915] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5911] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5920] <... symlink resumed>) = 0 [pid 5915] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5911] <... futex resumed>) = 0 [pid 5910] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5908] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 121.276102][ T5915] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [pid 4994] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] lstat("./29/file0", [pid 5920] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5915] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5911] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5910] <... write resumed>) = 9 [pid 4994] <... openat resumed>) = 3 [pid 5920] <... futex resumed>) = 0 [pid 5910] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] <... umount2 resumed>) = 0 [pid 4994] fstat(3, [pid 5920] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5915] <... open resumed>) = 4 [pid 5910] <... futex resumed>) = 1 [pid 5908] <... futex resumed>) = 0 [pid 4997] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5920] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 5915] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5910] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5908] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4996] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] getdents64(3, [pid 5920] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 5915] <... futex resumed>) = 1 [pid 5911] <... futex resumed>) = 0 [pid 5910] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5908] <... futex resumed>) = 0 [pid 4997] openat(AT_FDCWD, "./29/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4994] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 5920] <... mprotect resumed>) = 0 [pid 5915] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5911] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5910] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5908] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4997] <... openat resumed>) = 4 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] umount2("./30/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5920] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5915] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5911] <... futex resumed>) = 0 [pid 5910] <... openat resumed>) = 5 [pid 4997] fstat(4, [pid 4996] lstat("./30/file0", [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5915] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5911] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5910] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] lstat("./30/binderfs", [pid 5920] <... clone resumed>, parent_tid=[5922], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 5922 [pid 5915] <... write resumed>) = 9 [pid 5910] <... futex resumed>) = 1 [pid 5908] <... futex resumed>) = 0 [pid 4997] getdents64(4, [pid 4996] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5920] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5915] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5910] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5908] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] unlink("./30/binderfs" [pid 5920] <... futex resumed>) = 0 [pid 4994] <... unlink resumed>) = 0 [pid 5920] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4994] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5922 attached [pid 5922] set_robust_list(0x7f5c2b8109e0, 24) = 0 [pid 5922] memfd_create("syzkaller", 0) = 3 [pid 5915] <... futex resumed>) = 1 [pid 5911] <... futex resumed>) = 0 [pid 5910] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5908] <... futex resumed>) = 0 [pid 4997] getdents64(4, [pid 4996] openat(AT_FDCWD, "./30/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5922] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5c233f0000 [pid 5922] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5915] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5911] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5910] open("./bus", O_RDWR [pid 5908] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4997] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4996] <... openat resumed>) = 4 [pid 5915] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5911] <... futex resumed>) = 0 [pid 5910] <... open resumed>) = 6 [pid 4997] close(4 [pid 5915] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5911] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4997] <... close resumed>) = 0 [pid 4996] fstat(4, [pid 5915] <... openat resumed>) = 5 [pid 5910] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] rmdir("./29/file0" [pid 4996] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5915] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5910] <... futex resumed>) = 1 [pid 5908] <... futex resumed>) = 0 [pid 5915] <... futex resumed>) = 1 [pid 5911] <... futex resumed>) = 0 [pid 5910] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5908] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] <... rmdir resumed>) = 0 [pid 4996] getdents64(4, [pid 5915] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5911] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5910] <... mmap resumed>) = 0x20000000 [pid 5908] <... futex resumed>) = 0 [pid 5915] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5911] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5910] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5908] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4997] getdents64(3, [pid 4996] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 5915] open("./bus", O_RDWR [pid 5910] <... futex resumed>) = 0 [pid 5908] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4997] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4996] getdents64(4, [pid 5915] <... open resumed>) = 6 [pid 5910] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5908] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] close(3 [pid 4996] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 5915] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5910] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5908] <... futex resumed>) = 0 [pid 4997] <... close resumed>) = 0 [pid 4996] close(4 [pid 4994] <... umount2 resumed>) = 0 [pid 5915] <... futex resumed>) = 1 [pid 5911] <... futex resumed>) = 0 [pid 5910] sendfile(4, 5, NULL, 2147483713 [ 121.366850][ T74] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5908] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4997] rmdir("./29" [pid 4996] <... close resumed>) = 0 [pid 5915] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5911] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] lstat("./30/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] openat(AT_FDCWD, "./30/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5911] <... futex resumed>) = 0 [pid 4997] <... rmdir resumed>) = 0 [pid 5915] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5911] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4997] mkdir("./30", 0777 [pid 4996] rmdir("./30/file0" [pid 4994] <... openat resumed>) = 4 [pid 5915] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 4997] <... mkdir resumed>) = 0 [pid 4994] fstat(4, [pid 4996] <... rmdir resumed>) = 0 [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] getdents64(4, [pid 5915] <... mmap resumed>) = 0x20000000 [pid 4997] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4996] getdents64(3, [pid 4994] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 5915] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] <... openat resumed>) = 3 [pid 4996] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4994] getdents64(4, [pid 5915] <... futex resumed>) = 1 [pid 5911] <... futex resumed>) = 0 [pid 4997] ioctl(3, LOOP_CLR_FD [pid 4996] close(3 [pid 4994] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 5915] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5911] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4996] <... close resumed>) = 0 [pid 4994] close(4 [pid 5915] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5911] <... futex resumed>) = 0 [pid 4997] close(3 [pid 4996] rmdir("./30" [pid 4994] <... close resumed>) = 0 [pid 5922] <... write resumed>) = 1048576 [pid 5915] sendfile(4, 5, NULL, 2147483713 [pid 5911] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4994] rmdir("./30/file0" [pid 5922] munmap(0x7f5c233f0000, 1048576 [pid 4994] <... rmdir resumed>) = 0 [pid 5922] <... munmap resumed>) = 0 [pid 4994] getdents64(3, 0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4994] close(3) = 0 [ 121.420958][ T5910] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 4994] rmdir("./30" [pid 5922] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4997] <... close resumed>) = 0 [pid 4994] <... rmdir resumed>) = 0 [pid 5922] <... openat resumed>) = 4 [pid 5908] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4996] <... rmdir resumed>) = 0 [pid 4994] mkdir("./31", 0777 [pid 5922] ioctl(4, LOOP_SET_FD, 3 [pid 5908] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] <... mkdir resumed>) = 0 [pid 5922] <... ioctl resumed>) = 0 [pid 5908] <... futex resumed>) = 0 [pid 4994] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5908] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4994] <... openat resumed>) = 3 [pid 4996] mkdir("./31", 0777 [pid 5908] <... mmap resumed>) = 0x7f5c234cf000 [pid 4994] ioctl(3, LOOP_CLR_FD [pid 5908] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 4994] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5908] <... mprotect resumed>) = 0 [pid 4994] close(3 [pid 5908] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4994] <... close resumed>) = 0 [pid 4994] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5908] <... clone resumed>, parent_tid=[5923], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 5923 [pid 5908] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] <... clone resumed>, child_tidptr=0x555556fb95d0) = 5924 [pid 5908] <... futex resumed>) = 0 [ 121.460053][ T5910] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 121.477353][ T5922] loop4: detected capacity change from 0 to 2048 [ 121.489478][ T5915] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 121.502423][ T5910] EXT4-fs (loop5): This should not happen!! Data will be lost [ 121.502423][ T5910] [pid 5908] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5925 attached ./strace-static-x86_64: Process 5923 attached [pid 4996] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 5924 attached [pid 5924] set_robust_list(0x555556fb95e0, 24) = 0 [pid 5925] set_robust_list(0x555556fb95e0, 24 [pid 5924] chdir("./31" [pid 5923] set_robust_list(0x7f5c234ef9e0, 24 [pid 5911] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5922] close(3 [pid 4997] <... clone resumed>, child_tidptr=0x555556fb95d0) = 5925 [pid 4996] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5924] <... chdir resumed>) = 0 [pid 5924] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5924] setpgid(0, 0) = 0 [pid 5924] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5925] <... set_robust_list resumed>) = 0 [pid 5924] <... openat resumed>) = 3 [pid 5923] <... set_robust_list resumed>) = 0 [pid 5911] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... openat resumed>) = 3 [pid 5925] chdir("./30" [pid 5924] write(3, "1000", 4 [pid 5923] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5922] <... close resumed>) = 0 [pid 5911] <... futex resumed>) = 0 [pid 5924] <... write resumed>) = 4 [pid 5924] close(3) = 0 [pid 5925] <... chdir resumed>) = 0 [pid 5924] symlink("/dev/binderfs", "./binderfs" [pid 5922] mkdir("./file0", 0777 [pid 5911] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4996] ioctl(3, LOOP_CLR_FD [pid 5925] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5924] <... symlink resumed>) = 0 [pid 5925] <... prctl resumed>) = 0 [pid 5924] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5922] <... mkdir resumed>) = 0 [pid 5911] <... mmap resumed>) = 0x7f5c234cf000 [pid 4996] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5925] setpgid(0, 0 [pid 5924] <... futex resumed>) = 0 [pid 5922] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5911] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 4996] close(3 [pid 5925] <... setpgid resumed>) = 0 [pid 5924] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5908] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5924] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 5924] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE) = 0 [ 121.517266][ T5910] EXT4-fs (loop5): Total free blocks count 0 [ 121.523308][ T5910] EXT4-fs (loop5): Free/Dirty block details [ 121.530843][ T5910] EXT4-fs (loop5): free_blocks=2415919104 [ 121.538523][ T5910] EXT4-fs (loop5): dirty_blocks=16 [ 121.551236][ T5915] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 121.554936][ T5910] EXT4-fs (loop5): Block reservation details [pid 5924] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5925] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5911] <... mprotect resumed>) = 0 [pid 4996] <... close resumed>) = 0 [pid 5924] <... clone resumed>, parent_tid=[5926], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 5926 [pid 5925] <... openat resumed>) = 3 [pid 5924] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5923] <... ioctl resumed>) = 0 [pid 5911] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5910] <... sendfile resumed>) = 63 [pid 4996] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5924] <... futex resumed>) = 0 [pid 5924] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5926 attached [pid 5923] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5926] set_robust_list(0x7f5c2b8109e0, 24 [pid 5923] <... futex resumed>) = 0 [pid 5926] <... set_robust_list resumed>) = 0 [pid 5923] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5926] memfd_create("syzkaller", 0) = 3 [pid 5925] write(3, "1000", 4 [pid 5910] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5927 attached [pid 5926] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5c233f0000 [ 121.571999][ T5910] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 121.579662][ T5915] EXT4-fs (loop1): This should not happen!! Data will be lost [ 121.579662][ T5915] [ 121.591987][ T5915] EXT4-fs (loop1): Total free blocks count 0 [ 121.599116][ T5915] EXT4-fs (loop1): Free/Dirty block details [ 121.605810][ T5915] EXT4-fs (loop1): free_blocks=2415919104 [pid 5927] set_robust_list(0x7f5c234ef9e0, 24 [pid 5925] <... write resumed>) = 4 [pid 5911] <... clone resumed>, parent_tid=[5927], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 5927 [pid 5910] <... futex resumed>) = 0 [pid 5908] exit_group(0 [pid 4996] <... clone resumed>, child_tidptr=0x555556fb95d0) = 5928 ./strace-static-x86_64: Process 5928 attached [pid 5923] <... futex resumed>) = ? [pid 5908] <... exit_group resumed>) = ? [pid 5928] set_robust_list(0x555556fb95e0, 24 [pid 5927] <... set_robust_list resumed>) = 0 [pid 5925] close(3 [pid 5923] +++ exited with 0 +++ [pid 5911] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5928] <... set_robust_list resumed>) = 0 [pid 5928] chdir("./31") = 0 [pid 5928] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5928] setpgid(0, 0) = 0 [pid 5928] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5928] write(3, "1000", 4) = 4 [pid 5927] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5925] <... close resumed>) = 0 [pid 5911] <... futex resumed>) = 0 [pid 5928] close(3) = 0 [pid 5928] symlink("/dev/binderfs", "./binderfs" [pid 5910] +++ exited with 0 +++ [pid 5908] +++ exited with 0 +++ [pid 5928] <... symlink resumed>) = 0 [pid 5926] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5925] symlink("/dev/binderfs", "./binderfs" [pid 5911] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5908, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5928] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5927] <... ioctl resumed>) = 0 [pid 5925] <... symlink resumed>) = 0 [pid 5922] <... mount resumed>) = 0 [pid 5915] <... sendfile resumed>) = 63 [pid 5928] <... futex resumed>) = 0 [pid 5927] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5925] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5922] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5915] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5928] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5927] <... futex resumed>) = 1 [pid 5925] <... futex resumed>) = 0 [pid 5922] <... openat resumed>) = 3 [pid 5915] <... futex resumed>) = 0 [pid 5911] <... futex resumed>) = 0 [pid 5927] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5925] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5922] chdir("./file0" [pid 5915] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5911] exit_group(0 [pid 5928] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 5927] <... futex resumed>) = ? [pid 5925] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 5922] <... chdir resumed>) = 0 [pid 5915] <... futex resumed>) = ? [pid 5911] <... exit_group resumed>) = ? [pid 5928] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 5927] +++ exited with 0 +++ [pid 5925] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 5915] +++ exited with 0 +++ [pid 5928] <... mprotect resumed>) = 0 [pid 5911] +++ exited with 0 +++ [pid 5928] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5925] <... mprotect resumed>) = 0 [pid 5922] ioctl(4, LOOP_CLR_FD [pid 4999] umount2("./29", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5911, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5925] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5922] <... ioctl resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5928] <... clone resumed>, parent_tid=[5931], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 5931 [pid 5922] close(4 [pid 4999] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5928] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5925] <... clone resumed>, parent_tid=[5932], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 5932 [pid 5922] <... close resumed>) = 0 [pid 4999] <... openat resumed>) = 3 [pid 4995] umount2("./29", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5928] <... futex resumed>) = 0 [pid 4999] fstat(3, [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5928] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] getdents64(3, [pid 4995] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5932 attached [pid 5925] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5922] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4995] fstat(3, [pid 5932] set_robust_list(0x7f5c2b8109e0, 24 [pid 5925] <... futex resumed>) = 0 [pid 5922] <... futex resumed>) = 1 [pid 5920] <... futex resumed>) = 0 [pid 4999] umount2("./29/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 5931 attached [pid 5932] <... set_robust_list resumed>) = 0 [pid 5926] <... write resumed>) = 1048576 [pid 5925] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5922] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5920] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] getdents64(3, [pid 5932] memfd_create("syzkaller", 0 [pid 5931] set_robust_list(0x7f5c2b8109e0, 24 [pid 5926] munmap(0x7f5c233f0000, 1048576 [pid 5922] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5920] <... futex resumed>) = 0 [pid 4999] lstat("./29/binderfs", [pid 4995] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 5932] <... memfd_create resumed>) = 3 [pid 5931] <... set_robust_list resumed>) = 0 [pid 5926] <... munmap resumed>) = 0 [pid 5922] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5920] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4995] umount2("./29/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5932] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4999] unlink("./29/binderfs" [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5932] <... mmap resumed>) = 0x7f5c233f0000 [pid 5931] memfd_create("syzkaller", 0 [pid 5926] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5922] <... open resumed>) = 4 [pid 4999] <... unlink resumed>) = 0 [pid 4995] lstat("./29/binderfs", [pid 5931] <... memfd_create resumed>) = 3 [pid 5926] <... openat resumed>) = 4 [pid 5922] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5932] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5931] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5926] ioctl(4, LOOP_SET_FD, 3 [pid 5922] <... futex resumed>) = 1 [pid 5920] <... futex resumed>) = 0 [ 121.607590][ T5922] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.611565][ T5915] EXT4-fs (loop1): dirty_blocks=16 [ 121.629435][ T5915] EXT4-fs (loop1): Block reservation details [ 121.647011][ T5915] EXT4-fs (loop1): i_reserved_data_blocks=1 [pid 4995] unlink("./29/binderfs" [pid 5931] <... mmap resumed>) = 0x7f5c233f0000 [pid 5922] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5920] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] <... unlink resumed>) = 0 [pid 5920] <... futex resumed>) = 0 [pid 4995] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5920] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5922] <... write resumed>) = 9 [pid 5922] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5932] <... write resumed>) = 1048576 [pid 5931] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5926] <... ioctl resumed>) = 0 [pid 5922] <... futex resumed>) = 1 [pid 5920] <... futex resumed>) = 0 [pid 5931] <... write resumed>) = 1048576 [pid 5926] close(3 [pid 5922] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5926] <... close resumed>) = 0 [pid 5920] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5926] mkdir("./file0", 0777 [pid 5932] munmap(0x7f5c233f0000, 1048576 [pid 5926] <... mkdir resumed>) = 0 [pid 5922] <... futex resumed>) = 0 [pid 5920] <... futex resumed>) = 1 [pid 5926] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5932] <... munmap resumed>) = 0 [pid 5922] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5920] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5932] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5922] <... openat resumed>) = 5 [pid 5932] <... openat resumed>) = 4 [pid 5922] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5932] ioctl(4, LOOP_SET_FD, 3 [pid 5922] <... futex resumed>) = 1 [pid 5920] <... futex resumed>) = 0 [pid 5922] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [ 121.702874][ T5926] loop0: detected capacity change from 0 to 2048 [ 121.717232][ T5457] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 121.730484][ T74] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5920] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5922] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5920] <... futex resumed>) = 0 [pid 5922] open("./bus", O_RDWR [pid 5920] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5922] <... open resumed>) = 6 [pid 5922] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5931] munmap(0x7f5c233f0000, 1048576 [pid 5922] <... futex resumed>) = 1 [pid 5920] <... futex resumed>) = 0 [pid 5922] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5920] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5922] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5920] <... futex resumed>) = 0 [pid 5922] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5920] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5931] <... munmap resumed>) = 0 [pid 5922] <... mmap resumed>) = 0x20000000 [pid 5922] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] <... umount2 resumed>) = 0 [pid 5931] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5931] ioctl(4, LOOP_SET_FD, 3 [pid 5922] <... futex resumed>) = 1 [pid 5920] <... futex resumed>) = 0 [pid 5922] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [ 121.753755][ T5932] loop3: detected capacity change from 0 to 2048 [ 121.777426][ T5931] loop2: detected capacity change from 0 to 2048 [pid 5920] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5922] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5920] <... futex resumed>) = 0 [pid 5922] sendfile(4, 5, NULL, 2147483713 [pid 5920] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5932] <... ioctl resumed>) = 0 [pid 5932] close(3) = 0 [pid 5932] mkdir("./file0", 0777) = 0 [pid 5932] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 4999] <... umount2 resumed>) = 0 [pid 5931] <... ioctl resumed>) = 0 [ 121.802385][ T5922] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 121.825104][ T5922] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 121.826990][ T5926] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [pid 4995] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5931] close(3 [pid 5920] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4999] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5931] <... close resumed>) = 0 [pid 5920] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5931] mkdir("./file0", 0777) = 0 [pid 5920] <... futex resumed>) = 0 [pid 4999] lstat("./29/file0", [pid 4995] lstat("./29/file0", [pid 5931] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5920] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5920] <... mmap resumed>) = 0x7f5c234cf000 [pid 4999] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5920] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 4999] openat(AT_FDCWD, "./29/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4995] openat(AT_FDCWD, "./29/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5920] <... mprotect resumed>) = 0 [pid 4995] <... openat resumed>) = 4 [pid 4999] <... openat resumed>) = 4 [pid 5920] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4999] fstat(4, [pid 4995] fstat(4, [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5920] <... clone resumed>, parent_tid=[5937], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 5937 [pid 4999] getdents64(4, ./strace-static-x86_64: Process 5937 attached [pid 5937] set_robust_list(0x7f5c234ef9e0, 24) = 0 [pid 5937] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5926] <... mount resumed>) = 0 [pid 5926] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5926] chdir("./file0") = 0 [pid 5926] ioctl(4, LOOP_CLR_FD) = 0 [pid 5926] close(4 [pid 5920] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [ 121.850023][ T5922] EXT4-fs (loop4): This should not happen!! Data will be lost [ 121.850023][ T5922] [ 121.865025][ T5922] EXT4-fs (loop4): Total free blocks count 0 [ 121.876960][ T5922] EXT4-fs (loop4): Free/Dirty block details [ 121.884620][ T5922] EXT4-fs (loop4): free_blocks=2415919104 [pid 4995] getdents64(4, [pid 5920] <... futex resumed>) = 1 [pid 4999] getdents64(4, [pid 4995] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 5937] <... futex resumed>) = 0 [pid 5920] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 5937] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 4999] close(4) = 0 [pid 4995] getdents64(4, [pid 4999] rmdir("./29/file0" [pid 4995] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 4995] close(4 [pid 5931] <... mount resumed>) = 0 [pid 4995] <... close resumed>) = 0 [pid 4999] getdents64(3, [pid 4995] rmdir("./29/file0" [pid 4999] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4995] <... rmdir resumed>) = 0 [pid 4999] close(3 [pid 4995] getdents64(3, [pid 4999] <... close resumed>) = 0 [pid 4995] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4999] rmdir("./29" [pid 4995] close(3 [pid 4999] <... rmdir resumed>) = 0 [pid 4995] <... close resumed>) = 0 [pid 4995] rmdir("./29" [pid 5931] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5932] <... mount resumed>) = 0 [pid 5926] <... close resumed>) = 0 [pid 4999] mkdir("./30", 0777 [pid 4995] <... rmdir resumed>) = 0 [pid 4999] <... mkdir resumed>) = 0 [pid 4995] mkdir("./30", 0777 [pid 5932] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5931] <... openat resumed>) = 3 [pid 5926] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 4995] <... mkdir resumed>) = 0 [pid 4999] <... openat resumed>) = 3 [pid 4995] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 4999] ioctl(3, LOOP_CLR_FD [pid 4995] <... openat resumed>) = 3 [pid 5932] <... openat resumed>) = 3 [pid 5931] chdir("./file0" [pid 5926] <... futex resumed>) = 1 [pid 5924] <... futex resumed>) = 0 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4995] ioctl(3, LOOP_CLR_FD [pid 5932] chdir("./file0" [pid 5931] <... chdir resumed>) = 0 [pid 5926] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5924] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] close(3 [pid 4995] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5937] <... ioctl resumed>) = 0 [pid 5932] <... chdir resumed>) = 0 [pid 5931] ioctl(4, LOOP_CLR_FD [pid 5926] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5924] <... futex resumed>) = 0 [pid 5922] <... sendfile resumed>) = 63 [pid 4999] <... close resumed>) = 0 [pid 5937] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5932] ioctl(4, LOOP_CLR_FD [pid 5931] <... ioctl resumed>) = 0 [pid 5926] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5924] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5937] <... futex resumed>) = 1 [pid 5932] <... ioctl resumed>) = 0 [pid 5931] close(4 [pid 5922] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5920] <... futex resumed>) = 0 [pid 4995] close(3 [pid 5937] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5922] <... futex resumed>) = 0 [pid 5920] exit_group(0 [pid 5937] <... futex resumed>) = ? [pid 5920] <... exit_group resumed>) = ? [pid 5937] +++ exited with 0 +++ [pid 5932] close(4 [pid 5931] <... close resumed>) = 0 [pid 5926] <... open resumed>) = 4 [pid 5922] +++ exited with 0 +++ [pid 5920] +++ exited with 0 +++ [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4995] <... close resumed>) = 0 [pid 5932] <... close resumed>) = 0 [pid 5931] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5926] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5940 attached [pid 5932] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5931] <... futex resumed>) = 1 [pid 5928] <... futex resumed>) = 0 [pid 5926] <... futex resumed>) = 1 [pid 5924] <... futex resumed>) = 0 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5920, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 4995] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5940] set_robust_list(0x555556fb95e0, 24 [pid 5932] <... futex resumed>) = 1 [pid 5931] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5928] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5926] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5925] <... futex resumed>) = 0 [pid 5924] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... clone resumed>, child_tidptr=0x555556fb95d0) = 5940 [pid 5940] <... set_robust_list resumed>) = 0 [pid 5932] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5931] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5928] <... futex resumed>) = 0 [pid 5926] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5925] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5924] <... futex resumed>) = 0 [pid 4995] <... clone resumed>, child_tidptr=0x555556fb95d0) = 5941 [pid 5940] chdir("./30" [pid 5932] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5931] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5928] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5926] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5925] <... futex resumed>) = 0 [pid 5924] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5940] <... chdir resumed>) = 0 [pid 5932] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5931] <... open resumed>) = 4 [pid 5926] <... write resumed>) = 9 [pid 5925] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5941 attached [pid 5940] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5932] <... open resumed>) = 4 [pid 5931] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5926] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5941] set_robust_list(0x555556fb95e0, 24 [pid 5940] <... prctl resumed>) = 0 [pid 5932] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5931] <... futex resumed>) = 1 [pid 5928] <... futex resumed>) = 0 [pid 5926] <... futex resumed>) = 1 [pid 5924] <... futex resumed>) = 0 [pid 4998] umount2("./29", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5940] setpgid(0, 0 [pid 5932] <... futex resumed>) = 1 [pid 5931] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5928] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5926] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5925] <... futex resumed>) = 0 [pid 5924] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5940] <... setpgid resumed>) = 0 [pid 5932] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5931] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5928] <... futex resumed>) = 0 [pid 5926] <... openat resumed>) = 5 [pid 5925] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5924] <... futex resumed>) = 0 [pid 5932] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5931] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5928] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5925] <... futex resumed>) = 0 [pid 5924] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5926] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5932] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5925] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5924] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5941] <... set_robust_list resumed>) = 0 [pid 5940] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5932] <... write resumed>) = 9 [pid 5931] <... write resumed>) = 9 [pid 5926] <... futex resumed>) = 0 [ 121.893456][ T5932] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.909549][ T5931] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.935073][ T5922] EXT4-fs (loop4): dirty_blocks=16 [ 121.940561][ T5922] EXT4-fs (loop4): Block reservation details [ 121.946783][ T5922] EXT4-fs (loop4): i_reserved_data_blocks=1 [pid 5924] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... openat resumed>) = 3 [pid 5941] chdir("./30" [pid 5940] <... openat resumed>) = 3 [pid 5932] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5931] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5926] open("./bus", O_RDWR [pid 5924] <... futex resumed>) = 0 [pid 4998] fstat(3, [pid 5941] <... chdir resumed>) = 0 [pid 5940] write(3, "1000", 4 [pid 5932] <... futex resumed>) = 1 [pid 5931] <... futex resumed>) = 1 [pid 5928] <... futex resumed>) = 0 [pid 5926] <... open resumed>) = 6 [pid 5925] <... futex resumed>) = 0 [pid 5924] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5941] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5940] <... write resumed>) = 4 [pid 5932] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5931] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5928] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5926] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5925] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5924] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4998] getdents64(3, [pid 5941] <... prctl resumed>) = 0 [pid 5940] close(3 [pid 5932] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5931] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5928] <... futex resumed>) = 0 [pid 5926] <... futex resumed>) = 0 [pid 5925] <... futex resumed>) = 0 [pid 5924] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 5941] setpgid(0, 0 [pid 5940] <... close resumed>) = 0 [pid 5932] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5931] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5928] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5926] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5925] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5924] <... futex resumed>) = 0 [pid 4998] umount2("./29/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5941] <... setpgid resumed>) = 0 [pid 5940] symlink("/dev/binderfs", "./binderfs" [pid 5932] <... openat resumed>) = 5 [pid 5931] <... openat resumed>) = 5 [pid 5926] <... mmap resumed>) = 0x20000000 [pid 5924] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5941] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5940] <... symlink resumed>) = 0 [pid 5932] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5931] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5926] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5924] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4998] lstat("./29/binderfs", [pid 5941] <... openat resumed>) = 3 [pid 5940] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5932] <... futex resumed>) = 1 [pid 5931] <... futex resumed>) = 1 [pid 5928] <... futex resumed>) = 0 [pid 5926] <... futex resumed>) = 0 [pid 5925] <... futex resumed>) = 0 [pid 5924] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5941] write(3, "1000", 4 [pid 5940] <... futex resumed>) = 0 [pid 5932] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5931] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5928] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5926] sendfile(4, 5, NULL, 2147483713 [pid 5925] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5924] <... futex resumed>) = 0 [pid 4998] unlink("./29/binderfs" [pid 5941] <... write resumed>) = 4 [pid 5940] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5932] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5931] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5928] <... futex resumed>) = 0 [pid 5925] <... futex resumed>) = 0 [pid 5924] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5941] close(3 [pid 4998] <... unlink resumed>) = 0 [pid 5940] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 5932] open("./bus", O_RDWR [pid 5931] open("./bus", O_RDWR [pid 5928] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5941] <... close resumed>) = 0 [pid 5925] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5932] <... open resumed>) = 6 [pid 5931] <... open resumed>) = 6 [pid 5941] symlink("/dev/binderfs", "./binderfs" [pid 5940] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 4998] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5932] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5931] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5941] <... symlink resumed>) = 0 [pid 5940] <... mprotect resumed>) = 0 [pid 5941] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5932] <... futex resumed>) = 1 [pid 5931] <... futex resumed>) = 1 [pid 5928] <... futex resumed>) = 0 [pid 5925] <... futex resumed>) = 0 [pid 5940] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5928] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5932] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5931] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5928] <... futex resumed>) = 0 [pid 5925] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5941] <... futex resumed>) = 0 [pid 5941] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5932] <... mmap resumed>) = 0x20000000 [pid 5931] <... mmap resumed>) = 0x20000000 [pid 5928] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5925] <... futex resumed>) = 0 [ 122.023073][ T5926] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 122.046404][ T5926] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 122.048441][ T74] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5941] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 5932] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5931] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5925] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5941] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 5940] <... clone resumed>, parent_tid=[5942], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 5942 [pid 5932] <... futex resumed>) = 0 [pid 5931] <... futex resumed>) = 1 [pid 5928] <... futex resumed>) = 0 [pid 5925] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5941] <... mprotect resumed>) = 0 [pid 5928] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5940] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5925] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5941] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5940] <... futex resumed>) = 0 [pid 5932] sendfile(4, 5, NULL, 2147483713 [pid 5931] sendfile(4, 5, NULL, 2147483713 [pid 5928] <... futex resumed>) = 0 [pid 5925] <... futex resumed>) = 0 [pid 5928] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5925] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5940] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5941] <... clone resumed>, parent_tid=[5943], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 5943 [pid 5941] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5941] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5942 attached [pid 5942] set_robust_list(0x7f5c2b8109e0, 24) = 0 [pid 5942] memfd_create("syzkaller", 0 [pid 5924] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5924] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5924] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5942] <... memfd_create resumed>) = 3 [pid 5924] <... mmap resumed>) = 0x7f5c234cf000 [pid 5924] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 5942] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5924] <... mprotect resumed>) = 0 [pid 5924] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5942] <... mmap resumed>) = 0x7f5c233f0000 [pid 5924] <... clone resumed>, parent_tid=[5944], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 5944 ./strace-static-x86_64: Process 5944 attached [pid 5944] set_robust_list(0x7f5c234ef9e0, 24) = 0 [pid 5944] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5924] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [ 122.059854][ T5926] EXT4-fs (loop0): This should not happen!! Data will be lost [ 122.059854][ T5926] [ 122.100357][ T5932] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 122.107728][ T5926] EXT4-fs (loop0): Total free blocks count 0 [pid 5942] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5942] munmap(0x7f5c233f0000, 1048576) = 0 [pid 5942] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5928] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5925] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5928] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5925] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5928] <... futex resumed>) = 0 [pid 5925] <... futex resumed>) = 0 [pid 5924] <... futex resumed>) = 1 [pid 5944] <... futex resumed>) = 0 [pid 5928] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5925] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5924] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5944] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5928] <... mmap resumed>) = 0x7f5c234cf000 [pid 5928] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 5925] <... mmap resumed>) = 0x7f5c234cf000 [pid 5928] <... mprotect resumed>) = 0 [pid 5925] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 5928] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5925] <... mprotect resumed>) = 0 [pid 5925] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5928] <... clone resumed>, parent_tid=[5945], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 5945 [pid 5928] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5925] <... clone resumed>, parent_tid=[5946], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 5946 [pid 5928] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5925] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5925] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5942] <... openat resumed>) = 4 ./strace-static-x86_64: Process 5943 attached [pid 5943] set_robust_list(0x7f5c2b8109e0, 24) = 0 [pid 5942] ioctl(4, LOOP_SET_FD, 3 [pid 5943] memfd_create("syzkaller", 0 [pid 5942] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 5945 attached ./strace-static-x86_64: Process 5946 attached [pid 5945] set_robust_list(0x7f5c234ef9e0, 24 [pid 5946] set_robust_list(0x7f5c234ef9e0, 24 [pid 5945] <... set_robust_list resumed>) = 0 [pid 5946] <... set_robust_list resumed>) = 0 [pid 5945] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5946] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5942] close(3) = 0 [pid 5942] mkdir("./file0", 0777) = 0 [pid 5942] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5943] <... memfd_create resumed>) = 3 [pid 5943] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5c233f0000 [ 122.118017][ T5931] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 122.147929][ T5942] loop5: detected capacity change from 0 to 2048 [ 122.154525][ T5931] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 122.154568][ T5926] EXT4-fs (loop0): Free/Dirty block details [pid 5943] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5924] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5928] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5925] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 122.176214][ T5932] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 122.190538][ T5926] EXT4-fs (loop0): free_blocks=2415919104 [ 122.203878][ T5926] EXT4-fs (loop0): dirty_blocks=16 [ 122.210595][ T5932] EXT4-fs (loop3): This should not happen!! Data will be lost [ 122.210595][ T5932] [pid 5943] <... write resumed>) = 1048576 [pid 5943] munmap(0x7f5c233f0000, 1048576) = 0 [pid 5942] <... mount resumed>) = 0 [pid 4998] <... umount2 resumed>) = 0 [pid 5944] <... ioctl resumed>) = 0 [pid 5943] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5942] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5926] <... sendfile resumed>) = 63 [pid 5944] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5943] <... openat resumed>) = 4 [ 122.221785][ T5926] EXT4-fs (loop0): Block reservation details [ 122.230608][ T5926] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 122.232354][ T5942] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.243184][ T5932] EXT4-fs (loop3): Total free blocks count 0 [ 122.265281][ T5931] EXT4-fs (loop2): This should not happen!! Data will be lost [ 122.265281][ T5931] [pid 5942] <... openat resumed>) = 3 [pid 5926] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5944] <... futex resumed>) = 0 [pid 5943] ioctl(4, LOOP_SET_FD, 3 [pid 5926] <... futex resumed>) = 0 [pid 5944] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5942] chdir("./file0" [pid 5926] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./29/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./29/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, [pid 5942] <... chdir resumed>) = 0 [pid 5924] exit_group(0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./29/file0") = 0 [pid 5944] <... futex resumed>) = ? [pid 5942] ioctl(4, LOOP_CLR_FD [pid 5926] <... futex resumed>) = ? [pid 5924] <... exit_group resumed>) = ? [pid 4998] getdents64(3, [pid 5944] +++ exited with 0 +++ [pid 5926] +++ exited with 0 +++ [pid 4998] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./29") = 0 [pid 5942] <... ioctl resumed>) = 0 [pid 5924] +++ exited with 0 +++ [pid 4998] mkdir("./30", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5943] <... ioctl resumed>) = 0 [pid 4998] <... openat resumed>) = 3 [pid 5943] close(3 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5943] <... close resumed>) = 0 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [ 122.286095][ T5932] EXT4-fs (loop3): Free/Dirty block details [ 122.289792][ T5943] loop1: detected capacity change from 0 to 2048 [ 122.292603][ T5932] EXT4-fs (loop3): free_blocks=2415919104 [ 122.307168][ T5932] EXT4-fs (loop3): dirty_blocks=16 [ 122.313125][ T5932] EXT4-fs (loop3): Block reservation details [ 122.318727][ T5931] EXT4-fs (loop2): Total free blocks count 0 [ 122.322711][ T5932] EXT4-fs (loop3): i_reserved_data_blocks=1 [pid 5943] mkdir("./file0", 0777 [pid 4998] close(3 [pid 5946] <... ioctl resumed>) = 0 [pid 5943] <... mkdir resumed>) = 0 [pid 5942] close(4 [pid 5932] <... sendfile resumed>) = 63 [pid 4998] <... close resumed>) = 0 [pid 4994] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5924, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=19 /* 0.19 s */} --- [pid 5946] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5943] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5942] <... close resumed>) = 0 [pid 5932] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5925] exit_group(0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5946] <... futex resumed>) = ? [pid 5942] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5932] <... futex resumed>) = ? [pid 5925] <... exit_group resumed>) = ? [pid 5946] +++ exited with 0 +++ [pid 4998] <... clone resumed>, child_tidptr=0x555556fb95d0) = 5949 [pid 5942] <... futex resumed>) = 1 [pid 5932] +++ exited with 0 +++ [pid 5925] +++ exited with 0 +++ [pid 5940] <... futex resumed>) = 0 [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5925, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5940] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5942] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5940] <... futex resumed>) = 0 [pid 4994] umount2("./31", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5940] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5942] <... open resumed>) = 4 [pid 4994] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5949 attached [pid 5945] <... ioctl resumed>) = 0 [pid 5942] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5931] <... sendfile resumed>) = 63 [pid 4997] umount2("./30", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] fstat(3, [pid 5949] set_robust_list(0x555556fb95e0, 24 [pid 5945] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5942] <... futex resumed>) = 1 [pid 5940] <... futex resumed>) = 0 [pid 5931] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5949] <... set_robust_list resumed>) = 0 [pid 5945] <... futex resumed>) = 0 [pid 5942] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5940] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5931] <... futex resumed>) = 0 [pid 4997] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4994] getdents64(3, [pid 5949] chdir("./30" [pid 5945] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5942] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5940] <... futex resumed>) = 0 [pid 5931] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5928] exit_group(0 [pid 4997] <... openat resumed>) = 3 [pid 5945] <... futex resumed>) = ? [pid 5928] <... exit_group resumed>) = ? [pid 5949] <... chdir resumed>) = 0 [pid 5945] +++ exited with 0 +++ [pid 5942] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5940] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5931] <... futex resumed>) = ? [pid 4997] fstat(3, [pid 4994] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 5949] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5942] <... write resumed>) = 9 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] umount2("./31/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5949] <... prctl resumed>) = 0 [pid 5942] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] getdents64(3, [pid 5942] <... futex resumed>) = 1 [pid 5940] <... futex resumed>) = 0 [pid 5942] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5940] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5949] setpgid(0, 0 [pid 5942] <... openat resumed>) = 5 [pid 5940] <... futex resumed>) = 0 [pid 4997] umount2("./30/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] lstat("./31/binderfs", [pid 5949] <... setpgid resumed>) = 0 [pid 5942] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5940] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5931] +++ exited with 0 +++ [pid 5928] +++ exited with 0 +++ [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5949] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5942] <... futex resumed>) = 0 [pid 5940] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4997] lstat("./30/binderfs", [pid 4996] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5928, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 4994] unlink("./31/binderfs" [pid 5949] <... openat resumed>) = 3 [pid 5942] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5940] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4994] <... unlink resumed>) = 0 [pid 5949] write(3, "1000", 4 [pid 5942] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5940] <... futex resumed>) = 0 [ 122.332246][ T5931] EXT4-fs (loop2): Free/Dirty block details [ 122.338489][ T5931] EXT4-fs (loop2): free_blocks=2415919104 [ 122.345060][ T5931] EXT4-fs (loop2): dirty_blocks=16 [ 122.350963][ T5931] EXT4-fs (loop2): Block reservation details [ 122.358099][ T5931] EXT4-fs (loop2): i_reserved_data_blocks=1 [pid 4997] unlink("./30/binderfs" [pid 4994] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5949] <... write resumed>) = 4 [pid 5942] open("./bus", O_RDWR [pid 5940] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4997] <... unlink resumed>) = 0 [pid 5949] close(3) = 0 [pid 5949] symlink("/dev/binderfs", "./binderfs" [pid 5943] <... mount resumed>) = 0 [pid 5942] <... open resumed>) = 6 [pid 4997] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5949] <... symlink resumed>) = 0 [pid 5943] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5942] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5949] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5943] <... openat resumed>) = 3 [pid 5942] <... futex resumed>) = 1 [pid 5949] <... futex resumed>) = 0 [pid 5943] chdir("./file0" [pid 5942] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5949] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5943] <... chdir resumed>) = 0 [pid 5949] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 5943] ioctl(4, LOOP_CLR_FD [pid 5949] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 5943] <... ioctl resumed>) = 0 [pid 5949] <... mprotect resumed>) = 0 [pid 5943] close(4 [pid 5949] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5943] <... close resumed>) = 0 [pid 5940] <... futex resumed>) = 0 [pid 5943] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5940] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5952 attached [pid 5949] <... clone resumed>, parent_tid=[5952], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 5952 [pid 5943] <... futex resumed>) = 1 [pid 5942] <... futex resumed>) = 0 [pid 5941] <... futex resumed>) = 0 [pid 5940] <... futex resumed>) = 1 [pid 4996] umount2("./31", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5952] set_robust_list(0x7f5c2b8109e0, 24 [pid 5949] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5943] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5952] <... set_robust_list resumed>) = 0 [pid 5949] <... futex resumed>) = 0 [pid 5952] memfd_create("syzkaller", 0 [pid 5949] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5952] <... memfd_create resumed>) = 3 [ 122.395250][ T5943] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.408491][ T11] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5952] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5c233f0000 [pid 5952] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5942] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5941] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5940] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5943] <... futex resumed>) = 0 [pid 5942] <... mmap resumed>) = 0x20000000 [pid 5941] <... futex resumed>) = 1 [pid 5943] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 4996] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5941] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5942] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... openat resumed>) = 3 [pid 5942] <... futex resumed>) = 1 [pid 5940] <... futex resumed>) = 0 [pid 4996] fstat(3, [pid 5943] <... open resumed>) = 4 [pid 5942] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5940] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5943] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5942] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5940] <... futex resumed>) = 0 [pid 4996] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5943] <... futex resumed>) = 1 [pid 5942] sendfile(4, 5, NULL, 2147483713 [pid 5941] <... futex resumed>) = 0 [pid 5940] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5943] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4996] getdents64(3, [pid 5943] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5941] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4996] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 5943] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5941] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4996] umount2("./31/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] lstat("./31/binderfs", [pid 5943] <... write resumed>) = 9 [pid 4996] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5943] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [ 122.439799][ T74] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 4996] unlink("./31/binderfs" [pid 5952] <... write resumed>) = 1048576 [pid 5943] <... futex resumed>) = 1 [pid 5941] <... futex resumed>) = 0 [pid 4996] <... unlink resumed>) = 0 [pid 5943] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5941] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5943] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5941] <... futex resumed>) = 0 [pid 4996] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5943] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5941] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5952] munmap(0x7f5c233f0000, 1048576) = 0 [pid 5952] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5943] <... openat resumed>) = 5 [pid 5952] ioctl(4, LOOP_SET_FD, 3 [pid 5943] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5940] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5940] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5940] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c234cf000 [pid 5940] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5943] <... futex resumed>) = 1 [pid 5941] <... futex resumed>) = 0 [pid 5940] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5943] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5941] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5943] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5941] <... futex resumed>) = 0 [pid 5940] <... clone resumed>, parent_tid=[5953], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 5953 [pid 5943] open("./bus", O_RDWR [pid 5941] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5940] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5943] <... open resumed>) = 6 [pid 5940] <... futex resumed>) = 0 [pid 5943] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5940] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5943] <... futex resumed>) = 1 [pid 5941] <... futex resumed>) = 0 [pid 5943] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5941] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5943] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5941] <... futex resumed>) = 0 [pid 5943] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5941] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5952] <... ioctl resumed>) = 0 [pid 5952] close(3 [pid 5943] <... mmap resumed>) = 0x20000000 [pid 5952] <... close resumed>) = 0 [pid 5952] mkdir("./file0", 0777) = 0 [ 122.483287][ T5942] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 122.510555][ T5952] loop4: detected capacity change from 0 to 2048 [ 122.531675][ T74] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5952] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5943] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5953 attached ) = 1 [pid 5941] <... futex resumed>) = 0 [pid 5953] set_robust_list(0x7f5c234ef9e0, 24 [pid 5943] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5941] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5953] <... set_robust_list resumed>) = 0 [pid 5943] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5941] <... futex resumed>) = 0 [pid 5953] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5943] sendfile(4, 5, NULL, 2147483713 [pid 5941] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5940] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4997] <... umount2 resumed>) = 0 [pid 4994] <... umount2 resumed>) = 0 [pid 4994] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] lstat("./31/file0", [pid 4997] lstat("./30/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] openat(AT_FDCWD, "./30/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4994] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... openat resumed>) = 4 [ 122.538029][ T5942] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 122.564943][ T5943] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 5941] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4997] fstat(4, [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5941] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5941] <... futex resumed>) = 0 [pid 4994] openat(AT_FDCWD, "./31/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5941] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4997] getdents64(4, [pid 5941] <... mmap resumed>) = 0x7f5c234cf000 [pid 4997] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4994] <... openat resumed>) = 4 [pid 4996] <... umount2 resumed>) = 0 [pid 4996] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 122.608288][ T5943] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 122.640832][ T5952] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [pid 4996] lstat("./31/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] openat(AT_FDCWD, "./31/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4996] fstat(4, [pid 5952] <... mount resumed>) = 0 [pid 5943] <... sendfile resumed>) = 63 [pid 5941] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 4997] getdents64(4, [pid 4996] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] fstat(4, [pid 5952] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5943] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5941] <... mprotect resumed>) = 0 [pid 4997] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5952] <... openat resumed>) = 3 [pid 5943] <... futex resumed>) = 0 [pid 5941] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4997] close(4 [pid 4994] getdents64(4, [pid 5952] chdir("./file0" [pid 5943] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4997] <... close resumed>) = 0 [pid 4994] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 5952] <... chdir resumed>) = 0 [pid 5941] <... clone resumed>, parent_tid=[5956], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 5956 [pid 4997] rmdir("./30/file0" [pid 4994] getdents64(4, [pid 5952] ioctl(4, LOOP_CLR_FD [pid 5941] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] <... rmdir resumed>) = 0 [pid 4994] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 5952] <... ioctl resumed>) = 0 [pid 5941] <... futex resumed>) = 0 [pid 4997] getdents64(3, [pid 4994] close(4 [pid 5952] close(4 [pid 5941] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4997] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4994] <... close resumed>) = 0 [pid 5952] <... close resumed>) = 0 [pid 4997] close(3 [pid 4994] rmdir("./31/file0" [pid 5952] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] <... close resumed>) = 0 [pid 4994] <... rmdir resumed>) = 0 [pid 5952] <... futex resumed>) = 1 [pid 4997] rmdir("./30" [pid 4994] getdents64(3, [pid 5952] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4997] <... rmdir resumed>) = 0 [pid 4994] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4997] mkdir("./31", 0777 [pid 4994] close(3 [pid 4997] <... mkdir resumed>) = 0 [pid 4994] <... close resumed>) = 0 [pid 4997] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4994] rmdir("./31" [pid 4997] <... openat resumed>) = 3 [pid 4994] <... rmdir resumed>) = 0 [pid 4997] ioctl(3, LOOP_CLR_FD [pid 4994] mkdir("./32", 0777 [pid 4997] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4994] <... mkdir resumed>) = 0 [pid 4997] close(3 [pid 4994] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 4997] <... close resumed>) = 0 [pid 4994] <... openat resumed>) = 3 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4994] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 5957 attached ./strace-static-x86_64: Process 5956 attached [pid 5949] <... futex resumed>) = 0 [pid 4996] getdents64(4, [pid 4994] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5957] set_robust_list(0x555556fb95e0, 24 [pid 5956] set_robust_list(0x7f5c234ef9e0, 24 [pid 5949] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] <... clone resumed>, child_tidptr=0x555556fb95d0) = 5957 [pid 4996] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4994] close(3 [pid 5957] <... set_robust_list resumed>) = 0 [pid 5956] <... set_robust_list resumed>) = 0 [pid 5952] <... futex resumed>) = 0 [pid 5949] <... futex resumed>) = 1 [pid 4996] getdents64(4, [pid 4994] <... close resumed>) = 0 [pid 5957] chdir("./31" [pid 5956] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5952] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 4994] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5957] <... chdir resumed>) = 0 [pid 5956] <... ioctl resumed>) = 0 [pid 5949] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4996] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 5957] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5956] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5952] <... open resumed>) = 4 [pid 4996] close(4 [pid 4994] <... clone resumed>, child_tidptr=0x555556fb95d0) = 5958 [pid 5957] <... prctl resumed>) = 0 [pid 5956] <... futex resumed>) = 1 [pid 5952] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5941] <... futex resumed>) = 0 [pid 4996] <... close resumed>) = 0 [pid 5957] setpgid(0, 0 [pid 5956] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5952] <... futex resumed>) = 1 [pid 5949] <... futex resumed>) = 0 [ 122.641963][ T5943] EXT4-fs (loop1): This should not happen!! Data will be lost [ 122.641963][ T5943] [ 122.663198][ T5942] EXT4-fs (loop5): This should not happen!! Data will be lost [ 122.663198][ T5942] [ 122.672850][ T5943] EXT4-fs (loop1): Total free blocks count 0 [ 122.672877][ T5943] EXT4-fs (loop1): Free/Dirty block details [ 122.672899][ T5943] EXT4-fs (loop1): free_blocks=2415919104 [ 122.672921][ T5943] EXT4-fs (loop1): dirty_blocks=16 [ 122.672941][ T5943] EXT4-fs (loop1): Block reservation details [ 122.672960][ T5943] EXT4-fs (loop1): i_reserved_data_blocks=1 [pid 5941] exit_group(0 [pid 4996] rmdir("./31/file0" [pid 5957] <... setpgid resumed>) = 0 [pid 5956] <... futex resumed>) = ? [pid 5952] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5949] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5943] <... futex resumed>) = ? [pid 5941] <... exit_group resumed>) = ? [pid 5956] +++ exited with 0 +++ [pid 5949] <... futex resumed>) = 0 [pid 5943] +++ exited with 0 +++ [pid 4996] <... rmdir resumed>) = 0 [pid 5957] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5952] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5949] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5941] +++ exited with 0 +++ [pid 4996] getdents64(3, [pid 5957] <... openat resumed>) = 3 [pid 5952] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 4996] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4995] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5941, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5957] write(3, "1000", 4) = 4 [pid 4996] close(3 [pid 5957] close(3 [pid 4996] <... close resumed>) = 0 [ 122.734016][ T5942] EXT4-fs (loop5): Total free blocks count 0 [ 122.745237][ T5942] EXT4-fs (loop5): Free/Dirty block details [ 122.749031][ T26] kauditd_printk_skb: 98 callbacks suppressed [pid 5957] <... close resumed>) = 0 [pid 4996] rmdir("./31" [pid 5957] symlink("/dev/binderfs", "./binderfs" [pid 4996] <... rmdir resumed>) = 0 [pid 5952] <... write resumed>) = 9 [pid 4995] umount2("./30", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5958 attached [pid 5957] <... symlink resumed>) = 0 [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5952] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5957] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] mkdir("./32", 0777 [pid 4995] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5957] <... futex resumed>) = 0 [pid 5952] <... futex resumed>) = 1 [pid 5949] <... futex resumed>) = 0 [pid 5949] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... mkdir resumed>) = 0 [pid 4995] <... openat resumed>) = 3 [pid 5949] <... futex resumed>) = 0 [pid 5952] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5949] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4995] fstat(3, [pid 5957] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4996] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5952] <... openat resumed>) = 5 [pid 5958] set_robust_list(0x555556fb95e0, 24) = 0 [pid 5958] chdir("./32") = 0 [pid 5958] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5958] setpgid(0, 0) = 0 [pid 5958] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5958] write(3, "1000", 4) = 4 [pid 5958] close(3) = 0 [pid 5958] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5958] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5958] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c2b7f0000 [pid 5958] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5958] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5959], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 5959 [pid 5958] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5958] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5959 attached [pid 5959] set_robust_list(0x7f5c2b8109e0, 24) = 0 [pid 5959] memfd_create("syzkaller", 0) = 3 [pid 5959] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5c233f0000 [pid 5959] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5952] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5957] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 5957] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 5952] <... futex resumed>) = 1 [pid 5949] <... futex resumed>) = 0 [pid 4995] getdents64(3, [pid 5952] open("./bus", O_RDWR [pid 5949] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... openat resumed>) = 3 [pid 5949] <... futex resumed>) = 0 [pid 4995] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 5952] <... open resumed>) = 6 [pid 5949] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4995] umount2("./30/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5957] <... mprotect resumed>) = 0 [pid 5957] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5952] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] ioctl(3, LOOP_CLR_FD [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5952] <... futex resumed>) = 1 [pid 5949] <... futex resumed>) = 0 [pid 4996] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4995] lstat("./30/binderfs", [pid 5957] <... clone resumed>, parent_tid=[5960], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 5960 [pid 5952] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5949] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] close(3 [pid 5957] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5952] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5949] <... futex resumed>) = 0 [pid 4996] <... close resumed>) = 0 [pid 4995] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5957] <... futex resumed>) = 0 [pid 5952] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5949] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4996] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4995] unlink("./30/binderfs" [pid 5957] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5952] <... mmap resumed>) = 0x20000000 [pid 4995] <... unlink resumed>) = 0 [pid 5952] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5952] <... futex resumed>) = 1 [pid 5949] <... futex resumed>) = 0 [pid 4996] <... clone resumed>, child_tidptr=0x555556fb95d0) = 5961 [pid 5952] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5949] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5960 attached [pid 5952] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5949] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5961 attached [pid 5960] set_robust_list(0x7f5c2b8109e0, 24 [pid 5961] set_robust_list(0x555556fb95e0, 24 [pid 5960] <... set_robust_list resumed>) = 0 [pid 5961] <... set_robust_list resumed>) = 0 [pid 5960] memfd_create("syzkaller", 0 [pid 5961] chdir("./32" [pid 5960] <... memfd_create resumed>) = 3 [pid 5961] <... chdir resumed>) = 0 [pid 5960] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5961] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5960] <... mmap resumed>) = 0x7f5c233f0000 [pid 5952] sendfile(4, 5, NULL, 2147483713 [pid 5949] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5961] <... prctl resumed>) = 0 [pid 5960] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5961] setpgid(0, 0) = 0 [pid 5961] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5961] write(3, "1000", 4) = 4 [pid 5961] close(3) = 0 [ 122.749050][ T26] audit: type=1804 audit(1687834592.812:852): pid=5952 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor113" name="/root/syzkaller.qSu2w6/30/file0/bus" dev="loop4" ino=18 res=1 errno=0 [ 122.797853][ T5942] EXT4-fs (loop5): free_blocks=2415919104 [ 122.803733][ T5942] EXT4-fs (loop5): dirty_blocks=16 [ 122.810723][ T11] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5961] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5961] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5961] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c2b7f0000 [pid 5961] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5961] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5962], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 5962 [pid 5961] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5961] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5962 attached [pid 5959] <... write resumed>) = 1048576 [pid 5962] set_robust_list(0x7f5c2b8109e0, 24) = 0 [pid 5959] munmap(0x7f5c233f0000, 1048576 [pid 5962] memfd_create("syzkaller", 0) = 3 [pid 5960] <... write resumed>) = 1048576 [pid 5959] <... munmap resumed>) = 0 [pid 5962] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5959] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5962] <... mmap resumed>) = 0x7f5c233f0000 [pid 5959] <... openat resumed>) = 4 [pid 5959] ioctl(4, LOOP_SET_FD, 3 [pid 5949] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5953] <... ioctl resumed>) = 0 [pid 5949] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5942] <... sendfile resumed>) = 63 [pid 5962] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5953] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5949] <... futex resumed>) = 0 [pid 5942] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] <... umount2 resumed>) = 0 [pid 5953] <... futex resumed>) = 0 [pid 5949] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5942] <... futex resumed>) = 0 [pid 5953] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5949] <... mmap resumed>) = 0x7f5c234cf000 [pid 5942] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5940] exit_group(0 [pid 5953] <... futex resumed>) = ? [pid 5949] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 5940] <... exit_group resumed>) = ? [pid 5953] +++ exited with 0 +++ [pid 4995] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5949] <... mprotect resumed>) = 0 [pid 5949] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5949] <... clone resumed>, parent_tid=[5963], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 5963 [pid 4995] lstat("./30/file0", [pid 5949] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5942] <... futex resumed>) = ? [pid 4995] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5959] <... ioctl resumed>) = 0 [pid 5949] <... futex resumed>) = 0 [pid 4995] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5959] close(3 [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5959] <... close resumed>) = 0 [ 122.827436][ T5952] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 122.842696][ T5942] EXT4-fs (loop5): Block reservation details [ 122.854618][ T5942] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 122.867596][ T5959] loop0: detected capacity change from 0 to 2048 [pid 5949] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4995] openat(AT_FDCWD, "./30/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5959] mkdir("./file0", 0777 [pid 5942] +++ exited with 0 +++ [pid 5940] +++ exited with 0 +++ [pid 4995] <... openat resumed>) = 4 [pid 5959] <... mkdir resumed>) = 0 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5940, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 4995] fstat(4, ./strace-static-x86_64: Process 5963 attached [pid 5960] munmap(0x7f5c233f0000, 1048576 [pid 5959] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 4999] restart_syscall(<... resuming interrupted clone ...> [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5963] set_robust_list(0x7f5c234ef9e0, 24 [pid 5960] <... munmap resumed>) = 0 [pid 4999] <... restart_syscall resumed>) = 0 [pid 4995] getdents64(4, [pid 5963] <... set_robust_list resumed>) = 0 [pid 5960] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4995] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 5963] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5960] <... openat resumed>) = 4 [pid 4995] getdents64(4, [pid 5960] ioctl(4, LOOP_SET_FD, 3 [ 122.918933][ T5952] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 122.925988][ T26] audit: type=1804 audit(1687834592.852:853): pid=5952 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor113" name="/root/syzkaller.qSu2w6/30/file0/bus" dev="loop4" ino=18 res=1 errno=0 [pid 4999] umount2("./30", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 5962] <... write resumed>) = 1048576 [pid 5949] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] close(4 [pid 4999] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4995] <... close resumed>) = 0 [pid 4999] <... openat resumed>) = 3 [pid 4995] rmdir("./30/file0" [pid 5962] munmap(0x7f5c233f0000, 1048576 [pid 4999] fstat(3, [pid 4995] <... rmdir resumed>) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] getdents64(3, [pid 4999] getdents64(3, [pid 4995] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 5962] <... munmap resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4995] close(3 [pid 5962] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4999] umount2("./30/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] <... close resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] rmdir("./30" [pid 5962] <... openat resumed>) = 4 [pid 4999] lstat("./30/binderfs", [pid 4995] <... rmdir resumed>) = 0 [pid 5962] ioctl(4, LOOP_SET_FD, 3 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4995] mkdir("./31", 0777 [pid 4999] unlink("./30/binderfs" [pid 4995] <... mkdir resumed>) = 0 [pid 4999] <... unlink resumed>) = 0 [pid 4995] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5960] <... ioctl resumed>) = 0 [pid 4999] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] <... openat resumed>) = 3 [pid 5960] close(3 [pid 4995] ioctl(3, LOOP_CLR_FD [pid 5960] <... close resumed>) = 0 [pid 4995] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5960] mkdir("./file0", 0777 [pid 4995] close(3 [pid 5960] <... mkdir resumed>) = 0 [pid 4995] <... close resumed>) = 0 [pid 5960] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 4995] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556fb95d0) = 5966 ./strace-static-x86_64: Process 5966 attached [pid 5966] set_robust_list(0x555556fb95e0, 24) = 0 [ 122.963516][ T5960] loop3: detected capacity change from 0 to 2048 [ 122.987088][ T5962] loop2: detected capacity change from 0 to 2048 [ 122.994686][ T74] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 123.013228][ T26] audit: type=1804 audit(1687834592.852:854): pid=5952 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor113" name="/root/syzkaller.qSu2w6/30/file0/bus" dev="loop4" ino=18 res=1 errno=0 [ 123.013633][ T5959] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [pid 5966] chdir("./31") = 0 [pid 5962] <... ioctl resumed>) = 0 [pid 5959] <... mount resumed>) = 0 [pid 5962] close(3 [pid 5959] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5966] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5962] <... close resumed>) = 0 [pid 5962] mkdir("./file0", 0777 [pid 5959] <... openat resumed>) = 3 [pid 5962] <... mkdir resumed>) = 0 [pid 5959] chdir("./file0" [pid 5962] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5959] <... chdir resumed>) = 0 [pid 5966] <... prctl resumed>) = 0 [pid 5959] ioctl(4, LOOP_CLR_FD [pid 5966] setpgid(0, 0) = 0 [pid 5959] <... ioctl resumed>) = 0 [pid 5966] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5966] write(3, "1000", 4) = 4 [pid 5966] close(3) = 0 [pid 5966] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5959] close(4 [pid 5966] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5966] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c2b7f0000 [pid 4999] <... umount2 resumed>) = 0 [ 123.037036][ T26] audit: type=1804 audit(1687834592.852:855): pid=5952 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor113" name="/root/syzkaller.qSu2w6/30/file0/bus" dev="loop4" ino=18 res=1 errno=0 [ 123.052314][ T5952] EXT4-fs (loop4): This should not happen!! Data will be lost [ 123.052314][ T5952] [ 123.095653][ T5952] EXT4-fs (loop4): Total free blocks count 0 [ 123.101933][ T5952] EXT4-fs (loop4): Free/Dirty block details [ 123.108507][ T5952] EXT4-fs (loop4): free_blocks=2415919104 [ 123.114719][ T5952] EXT4-fs (loop4): dirty_blocks=16 [pid 5966] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5959] <... close resumed>) = 0 [pid 5966] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4999] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5966] <... clone resumed>, parent_tid=[5969], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 5969 [pid 5966] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5966] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5969 attached [pid 5963] <... ioctl resumed>) = 0 [pid 5959] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5952] <... sendfile resumed>) = 63 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5969] set_robust_list(0x7f5c2b8109e0, 24 [pid 5963] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5959] <... futex resumed>) = 1 [pid 5958] <... futex resumed>) = 0 [pid 5952] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5949] exit_group(0 [pid 4999] lstat("./30/file0", [pid 5969] <... set_robust_list resumed>) = 0 [pid 5963] <... futex resumed>) = ? [pid 5959] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5958] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5952] <... futex resumed>) = ? [pid 5949] <... exit_group resumed>) = ? [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5969] memfd_create("syzkaller", 0 [pid 5963] +++ exited with 0 +++ [pid 5959] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5958] <... futex resumed>) = 0 [pid 5952] +++ exited with 0 +++ [pid 5949] +++ exited with 0 +++ [pid 4999] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5969] <... memfd_create resumed>) = 3 [pid 5959] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5958] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5969] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5959] <... open resumed>) = 4 [pid 4999] openat(AT_FDCWD, "./30/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5949, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5969] <... mmap resumed>) = 0x7f5c233f0000 [pid 5959] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... openat resumed>) = 4 [pid 4998] restart_syscall(<... resuming interrupted clone ...> [pid 5969] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4998] <... restart_syscall resumed>) = 0 [pid 4998] umount2("./30", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./30/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./30/binderfs", [pid 5959] <... futex resumed>) = 1 [pid 5958] <... futex resumed>) = 0 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./30/binderfs" [pid 5959] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5958] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] fstat(4, [pid 4998] <... unlink resumed>) = 0 [ 123.122606][ T5952] EXT4-fs (loop4): Block reservation details [ 123.129196][ T5952] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 123.159411][ T5960] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [pid 5960] <... mount resumed>) = 0 [pid 5959] <... write resumed>) = 9 [pid 5958] <... futex resumed>) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5969] <... write resumed>) = 1048576 [pid 5962] <... mount resumed>) = 0 [pid 5960] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5959] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5958] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] getdents64(4, [pid 5969] munmap(0x7f5c233f0000, 1048576 [pid 5962] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5960] <... openat resumed>) = 3 [pid 5959] <... futex resumed>) = 0 [pid 5958] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4999] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 5969] <... munmap resumed>) = 0 [pid 5962] <... openat resumed>) = 3 [pid 5960] chdir("./file0" [pid 5959] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5958] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] getdents64(4, [pid 5969] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5962] chdir("./file0" [pid 5960] <... chdir resumed>) = 0 [pid 5959] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5958] <... futex resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 5969] <... openat resumed>) = 4 [pid 5962] <... chdir resumed>) = 0 [pid 5960] ioctl(4, LOOP_CLR_FD [ 123.177740][ T5962] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.191898][ T74] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5959] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5958] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] close(4 [pid 5969] ioctl(4, LOOP_SET_FD, 3 [pid 5962] ioctl(4, LOOP_CLR_FD [pid 5960] <... ioctl resumed>) = 0 [pid 5959] <... openat resumed>) = 5 [pid 4999] <... close resumed>) = 0 [pid 5962] <... ioctl resumed>) = 0 [pid 5960] close(4 [pid 5959] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] rmdir("./30/file0" [pid 5969] <... ioctl resumed>) = 0 [pid 5962] close(4 [pid 5960] <... close resumed>) = 0 [pid 4998] <... umount2 resumed>) = 0 [pid 4998] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./30/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5962] <... close resumed>) = 0 [pid 5960] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5959] <... futex resumed>) = 1 [pid 5958] <... futex resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 5962] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5960] <... futex resumed>) = 1 [pid 5959] open("./bus", O_RDWR [pid 5958] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5957] <... futex resumed>) = 0 [pid 4999] getdents64(3, [pid 5962] <... futex resumed>) = 1 [pid 5961] <... futex resumed>) = 0 [pid 5960] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5959] <... open resumed>) = 6 [pid 5958] <... futex resumed>) = 0 [pid 5957] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5962] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5961] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5959] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5958] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5957] <... futex resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 5962] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5961] <... futex resumed>) = 0 [pid 5960] <... open resumed>) = 4 [pid 5959] <... futex resumed>) = 0 [pid 5958] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 123.210252][ T26] audit: type=1804 audit(1687834593.272:856): pid=5959 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor113" name="/root/syzkaller.slA38Q/32/file0/bus" dev="loop0" ino=18 res=1 errno=0 [ 123.211067][ T5969] loop1: detected capacity change from 0 to 2048 [pid 5957] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 123.268302][ T26] audit: type=1804 audit(1687834593.322:857): pid=5959 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor113" name="/root/syzkaller.slA38Q/32/file0/bus" dev="loop0" ino=18 res=1 errno=0 [pid 4999] close(3 [pid 5962] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5961] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5960] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5959] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5958] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5957] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4999] <... close resumed>) = 0 [pid 5969] close(3 [pid 5962] <... open resumed>) = 4 [pid 5960] <... futex resumed>) = 0 [pid 5959] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5958] <... futex resumed>) = 0 [pid 5957] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] openat(AT_FDCWD, "./30/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] rmdir("./30" [pid 5969] <... close resumed>) = 0 [pid 5962] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5960] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5959] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5958] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5957] <... futex resumed>) = 0 [pid 4998] <... openat resumed>) = 4 [pid 5969] mkdir("./file0", 0777 [pid 4999] <... rmdir resumed>) = 0 [pid 4998] fstat(4, [pid 5969] <... mkdir resumed>) = 0 [pid 5962] <... futex resumed>) = 1 [pid 5961] <... futex resumed>) = 0 [pid 5960] <... write resumed>) = 9 [pid 5959] <... mmap resumed>) = 0x20000000 [pid 5957] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] mkdir("./31", 0777 [pid 5962] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5961] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5960] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5959] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5957] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4999] <... mkdir resumed>) = 0 [pid 5969] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5962] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5961] <... futex resumed>) = 0 [pid 5960] <... futex resumed>) = 0 [pid 5959] <... futex resumed>) = 1 [pid 5958] <... futex resumed>) = 0 [pid 5957] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5962] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5961] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5960] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5959] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5958] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5957] <... futex resumed>) = 0 [pid 4999] <... openat resumed>) = 3 [pid 5962] <... write resumed>) = 9 [pid 5960] <... openat resumed>) = 5 [pid 5959] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5958] <... futex resumed>) = 0 [pid 5957] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5962] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5960] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5959] sendfile(4, 5, NULL, 2147483713 [pid 5958] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5957] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [ 123.304360][ T26] audit: type=1804 audit(1687834593.362:858): pid=5959 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor113" name="/root/syzkaller.slA38Q/32/file0/bus" dev="loop0" ino=18 res=1 errno=0 [ 123.328721][ T26] audit: type=1804 audit(1687834593.362:859): pid=5959 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor113" name="/root/syzkaller.slA38Q/32/file0/bus" dev="loop0" ino=18 res=1 errno=0 [ 123.348105][ T5959] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 5962] <... futex resumed>) = 1 [pid 5961] <... futex resumed>) = 0 [pid 5960] <... futex resumed>) = 0 [pid 5957] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] close(3 [pid 4998] getdents64(4, [pid 5962] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5961] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5960] open("./bus", O_RDWR [pid 5957] <... futex resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 5962] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5961] <... futex resumed>) = 0 [pid 5960] <... open resumed>) = 6 [pid 5957] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5962] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5961] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5960] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5957] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5962] <... openat resumed>) = 5 [pid 5960] <... futex resumed>) = 0 [pid 5957] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... clone resumed>, child_tidptr=0x555556fb95d0) = 5973 [pid 5962] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5960] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5957] <... futex resumed>) = 0 [pid 5962] <... futex resumed>) = 1 [pid 5961] <... futex resumed>) = 0 [pid 5960] <... mmap resumed>) = 0x20000000 [pid 5957] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5973 attached [pid 5962] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5961] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5960] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5957] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5973] set_robust_list(0x555556fb95e0, 24 [pid 5962] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5961] <... futex resumed>) = 0 [pid 5960] <... futex resumed>) = 0 [pid 5957] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5973] <... set_robust_list resumed>) = 0 [pid 5962] open("./bus", O_RDWR [pid 5961] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5960] sendfile(4, 5, NULL, 2147483713 [pid 5957] <... futex resumed>) = 0 [pid 5973] chdir("./31" [pid 5962] <... open resumed>) = 6 [pid 5957] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5973] <... chdir resumed>) = 0 [pid 5962] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5973] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5962] <... futex resumed>) = 1 [pid 5961] <... futex resumed>) = 0 [pid 5973] <... prctl resumed>) = 0 [ 123.368225][ T26] audit: type=1804 audit(1687834593.392:860): pid=5960 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor113" name="/root/syzkaller.nAdl82/31/file0/bus" dev="loop3" ino=18 res=1 errno=0 [ 123.394339][ T5959] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5962] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5961] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5958] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5973] setpgid(0, 0 [pid 5962] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5961] <... futex resumed>) = 0 [pid 5958] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5973] <... setpgid resumed>) = 0 [pid 5962] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5961] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5958] <... futex resumed>) = 0 [pid 5973] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5962] <... mmap resumed>) = 0x20000000 [pid 5958] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5973] <... openat resumed>) = 3 [pid 5962] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5958] <... mmap resumed>) = 0x7f5c234cf000 [pid 5973] write(3, "1000", 4 [pid 5962] <... futex resumed>) = 1 [pid 5961] <... futex resumed>) = 0 [pid 5958] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 5973] <... write resumed>) = 4 [pid 5962] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5961] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5958] <... mprotect resumed>) = 0 [pid 5973] close(3 [pid 5962] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5961] <... futex resumed>) = 0 [pid 5958] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4998] getdents64(4, [pid 5973] <... close resumed>) = 0 [pid 5962] sendfile(4, 5, NULL, 2147483713 [pid 5961] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5973] symlink("/dev/binderfs", "./binderfs" [pid 5958] <... clone resumed>, parent_tid=[5975], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 5975 [pid 5973] <... symlink resumed>) = 0 [pid 5958] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5973] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5958] <... futex resumed>) = 0 [pid 5973] <... futex resumed>) = 0 [pid 5958] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5973] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c2b7f0000 [pid 4998] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 5973] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 4998] close(4 [pid 5973] <... mprotect resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 5973] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5976], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 5976 [pid 5973] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 123.408112][ T26] audit: type=1804 audit(1687834593.452:861): pid=5960 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor113" name="/root/syzkaller.nAdl82/31/file0/bus" dev="loop3" ino=18 res=1 errno=0 [ 123.434862][ T5959] EXT4-fs (loop0): This should not happen!! Data will be lost [ 123.434862][ T5959] [ 123.448683][ T5960] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 5973] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4998] rmdir("./30/file0" [pid 5957] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5957] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5957] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c234cf000 [pid 5957] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5957] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5977], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 5977 [pid 5957] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5957] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] <... rmdir resumed>) = 0 [pid 4998] getdents64(3, 0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4998] close(3./strace-static-x86_64: Process 5975 attached [pid 5961] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5958] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4998] <... close resumed>) = 0 [pid 4998] rmdir("./30" [pid 5975] set_robust_list(0x7f5c234ef9e0, 24 [pid 5961] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... rmdir resumed>) = 0 [pid 5975] <... set_robust_list resumed>) = 0 [pid 5961] <... futex resumed>) = 0 [pid 4998] mkdir("./31", 0777 [pid 5975] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [ 123.457602][ T5959] EXT4-fs (loop0): Total free blocks count 0 [ 123.466331][ T5969] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.485783][ T5960] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 123.486354][ T5962] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 5961] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4998] <... mkdir resumed>) = 0 [pid 5961] <... mmap resumed>) = 0x7f5c234cf000 [pid 4998] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5961] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 4998] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5977 attached [pid 5961] <... mprotect resumed>) = 0 [pid 4998] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 5976 attached [pid 5977] set_robust_list(0x7f5c234ef9e0, 24 [pid 5961] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] close(3./strace-static-x86_64: Process 5978 attached [pid 5977] <... set_robust_list resumed>) = 0 [pid 5976] set_robust_list(0x7f5c2b8109e0, 24 [pid 5961] <... clone resumed>, parent_tid=[5978], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 5978 [pid 5957] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4998] <... close resumed>) = 0 [pid 5978] set_robust_list(0x7f5c234ef9e0, 24 [pid 5977] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5976] <... set_robust_list resumed>) = 0 [pid 5961] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5978] <... set_robust_list resumed>) = 0 [pid 5977] <... ioctl resumed>) = 0 [pid 5976] memfd_create("syzkaller", 0 [pid 5969] <... mount resumed>) = 0 [pid 5961] <... futex resumed>) = 0 [pid 5960] <... sendfile resumed>) = 63 [pid 5978] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5977] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5976] <... memfd_create resumed>) = 3 [pid 5961] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] <... clone resumed>, child_tidptr=0x555556fb95d0) = 5979 ./strace-static-x86_64: Process 5979 attached [pid 5977] <... futex resumed>) = 0 [pid 5976] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5969] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [ 123.498203][ T5960] EXT4-fs (loop3): This should not happen!! Data will be lost [ 123.498203][ T5960] [ 123.522895][ T5960] EXT4-fs (loop3): Total free blocks count 0 [ 123.529086][ T5960] EXT4-fs (loop3): Free/Dirty block details [ 123.535300][ T5960] EXT4-fs (loop3): free_blocks=2415919104 [ 123.541316][ T5960] EXT4-fs (loop3): dirty_blocks=16 [ 123.546550][ T5960] EXT4-fs (loop3): Block reservation details [ 123.552797][ T5960] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 123.559351][ T5959] EXT4-fs (loop0): Free/Dirty block details [pid 5960] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5977] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5976] <... mmap resumed>) = 0x7f5c233f0000 [pid 5979] set_robust_list(0x555556fb95e0, 24 [pid 5976] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5975] <... ioctl resumed>) = 0 [pid 5969] <... openat resumed>) = 3 [pid 5960] <... futex resumed>) = 0 [pid 5959] <... sendfile resumed>) = 63 [pid 5975] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5979] <... set_robust_list resumed>) = 0 [pid 5975] <... futex resumed>) = 0 [pid 5969] chdir("./file0" [pid 5960] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5959] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5957] exit_group(0 [pid 5975] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5958] exit_group(0 [pid 5979] chdir("./31" [pid 5977] <... futex resumed>) = ? [pid 5975] <... futex resumed>) = ? [pid 5969] <... chdir resumed>) = 0 [pid 5959] <... futex resumed>) = ? [pid 5958] <... exit_group resumed>) = ? [pid 5957] <... exit_group resumed>) = ? [pid 5960] <... futex resumed>) = ? [pid 5977] +++ exited with 0 +++ [pid 5975] +++ exited with 0 +++ [pid 5961] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5979] <... chdir resumed>) = 0 [pid 5969] ioctl(4, LOOP_CLR_FD [pid 5959] +++ exited with 0 +++ [pid 5958] +++ exited with 0 +++ [pid 5960] +++ exited with 0 +++ [pid 5957] +++ exited with 0 +++ [pid 4994] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5958, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [ 123.565663][ T5959] EXT4-fs (loop0): free_blocks=2415919104 [ 123.572176][ T5959] EXT4-fs (loop0): dirty_blocks=16 [ 123.577420][ T5959] EXT4-fs (loop0): Block reservation details [ 123.583649][ T5959] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 123.590127][ T5962] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 123.602677][ T5962] EXT4-fs (loop2): This should not happen!! Data will be lost [ 123.602677][ T5962] [ 123.613369][ T5962] EXT4-fs (loop2): Total free blocks count 0 [pid 5979] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5969] <... ioctl resumed>) = 0 [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5957, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 4994] restart_syscall(<... resuming interrupted clone ...> [pid 5979] <... prctl resumed>) = 0 [pid 5976] <... write resumed>) = 1048576 [pid 5969] close(4 [pid 4997] restart_syscall(<... resuming interrupted clone ...> [pid 4994] <... restart_syscall resumed>) = 0 [pid 4997] <... restart_syscall resumed>) = 0 [pid 5979] setpgid(0, 0 [pid 5969] <... close resumed>) = 0 [pid 4994] umount2("./32", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] umount2("./31", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5979] <... setpgid resumed>) = 0 [pid 5969] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5979] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5978] <... ioctl resumed>) = 0 [pid 5976] munmap(0x7f5c233f0000, 1048576 [pid 5969] <... futex resumed>) = 1 [pid 5966] <... futex resumed>) = 0 [pid 5962] <... sendfile resumed>) = 63 [pid 4997] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4994] <... openat resumed>) = 3 [pid 5979] <... openat resumed>) = 3 [pid 5978] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5976] <... munmap resumed>) = 0 [pid 5969] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5966] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5962] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] <... openat resumed>) = 3 [pid 4994] fstat(3, [pid 5979] write(3, "1000", 4 [pid 5976] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5969] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5962] <... futex resumed>) = 0 [pid 5979] <... write resumed>) = 4 [pid 5976] <... openat resumed>) = 4 [pid 5969] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5962] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5979] close(3 [pid 5978] <... futex resumed>) = 0 [pid 5976] ioctl(4, LOOP_SET_FD, 3 [pid 5966] <... futex resumed>) = 0 [pid 5979] <... close resumed>) = 0 [pid 5978] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5969] <... open resumed>) = 4 [pid 5966] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5961] exit_group(0 [pid 4997] fstat(3, [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5979] symlink("/dev/binderfs", "./binderfs" [pid 5969] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5966] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5962] <... futex resumed>) = ? [pid 5961] <... exit_group resumed>) = ? [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5978] <... futex resumed>) = ? [pid 4994] getdents64(3, [pid 5979] <... symlink resumed>) = 0 [pid 5976] <... ioctl resumed>) = 0 [pid 5969] <... futex resumed>) = 0 [pid 5966] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5962] +++ exited with 0 +++ [pid 5979] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5976] close(3 [pid 5969] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5979] <... futex resumed>) = 0 [pid 5976] <... close resumed>) = 0 [pid 5979] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c2b7f0000 [pid 5976] mkdir("./file0", 0777 [pid 5979] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5978] +++ exited with 0 +++ [pid 5976] <... mkdir resumed>) = 0 [pid 5969] <... write resumed>) = 9 [pid 5966] <... futex resumed>) = 0 [pid 5961] +++ exited with 0 +++ [pid 4997] getdents64(3, [pid 4994] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 5979] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5976] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5969] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5966] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5969] <... futex resumed>) = 0 [pid 5966] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4997] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4996] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5961, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 4994] umount2("./32/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5979] <... clone resumed>, parent_tid=[5980], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 5980 [pid 5969] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5966] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] umount2("./31/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4996] restart_syscall(<... resuming interrupted clone ...> [pid 5979] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5969] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5966] <... futex resumed>) = 0 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4996] <... restart_syscall resumed>) = 0 [pid 4994] lstat("./32/binderfs", [pid 5979] <... futex resumed>) = 0 [pid 5969] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5966] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4997] lstat("./31/binderfs", [pid 5979] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5969] <... openat resumed>) = 5 [pid 4994] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5969] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4994] unlink("./32/binderfs" [pid 5969] <... futex resumed>) = 1 [pid 5966] <... futex resumed>) = 0 [pid 4997] unlink("./31/binderfs" [pid 4996] umount2("./32", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5969] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4994] <... unlink resumed>) = 0 [pid 5966] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] <... unlink resumed>) = 0 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5969] <... futex resumed>) = 0 [pid 5966] <... futex resumed>) = 1 [pid 4997] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5969] open("./bus", O_RDWR [pid 4996] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5969] <... open resumed>) = 6 [pid 5966] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5969] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... openat resumed>) = 3 [pid 5969] <... futex resumed>) = 0 [ 123.626374][ T5962] EXT4-fs (loop2): Free/Dirty block details [ 123.632425][ T5962] EXT4-fs (loop2): free_blocks=2415919104 [ 123.638718][ T5962] EXT4-fs (loop2): dirty_blocks=16 [ 123.643890][ T5962] EXT4-fs (loop2): Block reservation details [ 123.650245][ T5962] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 123.664946][ T5976] loop5: detected capacity change from 0 to 2048 [pid 5966] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5969] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4996] fstat(3, [pid 5966] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5969] <... futex resumed>) = 0 [pid 5966] <... futex resumed>) = 1 [pid 5969] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5966] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4996] getdents64(3, [pid 5969] <... mmap resumed>) = 0x20000000 [pid 4996] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4996] umount2("./32/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] lstat("./32/binderfs", [pid 5969] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5966] <... futex resumed>) = 0 [pid 5969] sendfile(4, 5, NULL, 2147483713 [pid 5966] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5966] <... futex resumed>) = 0 [pid 4996] unlink("./32/binderfs" [pid 5966] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4996] <... unlink resumed>) = 0 [ 123.691238][ T11] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 123.691544][ T74] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 123.726354][ T5076] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 4996] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5980 attached [pid 4997] <... umount2 resumed>) = 0 [pid 5980] set_robust_list(0x7f5c2b8109e0, 24 [pid 4997] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5980] <... set_robust_list resumed>) = 0 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5966] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5966] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5980] memfd_create("syzkaller", 0 [pid 4997] lstat("./31/file0", [pid 5966] <... futex resumed>) = 0 [pid 5966] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c234cf000 [pid 5966] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5966] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5983], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 5983 [pid 5966] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4997] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5966] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5980] <... memfd_create resumed>) = 3 [pid 4997] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5980] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5c233f0000 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./31/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4997] fstat(4, [ 123.742447][ T5976] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.755019][ T5969] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 5980] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5976] <... mount resumed>) = 0 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 5983 attached [pid 5983] set_robust_list(0x7f5c234ef9e0, 24) = 0 [pid 5983] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5976] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 4997] getdents64(4, [pid 5976] <... openat resumed>) = 3 [pid 4997] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 5976] chdir("./file0" [pid 4997] getdents64(4, [pid 5976] <... chdir resumed>) = 0 [pid 4997] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 5976] ioctl(4, LOOP_CLR_FD [pid 4997] close(4 [pid 5976] <... ioctl resumed>) = 0 [pid 4997] <... close resumed>) = 0 [pid 5976] close(4 [pid 4997] rmdir("./31/file0" [pid 5976] <... close resumed>) = 0 [pid 4997] <... rmdir resumed>) = 0 [pid 5976] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] getdents64(3, [pid 5980] <... write resumed>) = 1048576 [pid 5976] <... futex resumed>) = 1 [pid 5973] <... futex resumed>) = 0 [pid 5966] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4997] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 5980] munmap(0x7f5c233f0000, 1048576 [pid 5976] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5973] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] close(3 [pid 4996] <... umount2 resumed>) = 0 [pid 4994] <... umount2 resumed>) = 0 [pid 5976] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5973] <... futex resumed>) = 0 [pid 4997] <... close resumed>) = 0 [ 123.797447][ T5969] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 123.834937][ T5969] EXT4-fs (loop1): This should not happen!! Data will be lost [ 123.834937][ T5969] [pid 5976] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5973] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4997] rmdir("./31" [pid 5980] <... munmap resumed>) = 0 [pid 5976] <... open resumed>) = 4 [pid 4997] <... rmdir resumed>) = 0 [pid 4996] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5980] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5976] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] mkdir("./32", 0777 [pid 5980] <... openat resumed>) = 4 [pid 5976] <... futex resumed>) = 1 [pid 5973] <... futex resumed>) = 0 [pid 4997] <... mkdir resumed>) = 0 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5980] ioctl(4, LOOP_SET_FD, 3 [pid 5976] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5973] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4996] lstat("./32/file0", [pid 4994] lstat("./32/file0", [pid 5980] <... ioctl resumed>) = 0 [pid 5976] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5973] <... futex resumed>) = 0 [pid 4997] <... openat resumed>) = 3 [pid 4996] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5980] close(3 [pid 5976] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5973] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4997] ioctl(3, LOOP_CLR_FD [pid 4996] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5980] <... close resumed>) = 0 [pid 5976] <... write resumed>) = 9 [pid 4997] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5980] mkdir("./file0", 0777 [pid 5976] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] close(3 [pid 4996] openat(AT_FDCWD, "./32/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4994] openat(AT_FDCWD, "./32/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5983] <... ioctl resumed>) = 0 [pid 5980] <... mkdir resumed>) = 0 [pid 5976] <... futex resumed>) = 1 [pid 5973] <... futex resumed>) = 0 [pid 5969] <... sendfile resumed>) = 63 [pid 4997] <... close resumed>) = 0 [pid 4996] <... openat resumed>) = 4 [pid 4994] <... openat resumed>) = 4 [pid 5983] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5980] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5976] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5973] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5969] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4996] fstat(4, [pid 4994] fstat(4, [pid 5983] <... futex resumed>) = 0 [pid 5976] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5973] <... futex resumed>) = 0 [pid 5969] <... futex resumed>) = 0 [pid 4996] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 5984 attached [pid 5983] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5976] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5973] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5969] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5966] exit_group(0 [pid 4997] <... clone resumed>, child_tidptr=0x555556fb95d0) = 5984 [pid 4996] getdents64(4, [pid 4994] getdents64(4, [pid 5983] <... futex resumed>) = ? [pid 5976] <... openat resumed>) = 5 [pid 5969] <... futex resumed>) = ? [pid 5966] <... exit_group resumed>) = ? [pid 4996] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4994] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 5984] set_robust_list(0x555556fb95e0, 24 [pid 5983] +++ exited with 0 +++ [pid 5976] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5969] +++ exited with 0 +++ [pid 5984] <... set_robust_list resumed>) = 0 [pid 5984] chdir("./32") = 0 [pid 5976] <... futex resumed>) = 1 [pid 5973] <... futex resumed>) = 0 [pid 5966] +++ exited with 0 +++ [pid 4996] getdents64(4, [pid 4994] getdents64(4, [pid 5984] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5976] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5973] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 5984] <... prctl resumed>) = 0 [ 123.845076][ T5969] EXT4-fs (loop1): Total free blocks count 0 [ 123.853272][ T5969] EXT4-fs (loop1): Free/Dirty block details [ 123.860079][ T5969] EXT4-fs (loop1): free_blocks=2415919104 [ 123.860752][ T5980] loop4: detected capacity change from 0 to 2048 [ 123.866678][ T5969] EXT4-fs (loop1): dirty_blocks=16 [ 123.878461][ T5969] EXT4-fs (loop1): Block reservation details [ 123.885399][ T5969] EXT4-fs (loop1): i_reserved_data_blocks=1 [pid 5976] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5973] <... futex resumed>) = 0 [pid 4996] close(4 [pid 4994] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 5984] setpgid(0, 0 [pid 5976] open("./bus", O_RDWR [pid 5973] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4996] <... close resumed>) = 0 [pid 4995] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5966, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- [pid 4994] close(4 [pid 5984] <... setpgid resumed>) = 0 [pid 5984] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5976] <... open resumed>) = 6 [pid 4996] rmdir("./32/file0" [pid 5984] <... openat resumed>) = 3 [pid 4995] umount2("./31", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] <... close resumed>) = 0 [pid 5984] write(3, "1000", 4 [pid 5976] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... rmdir resumed>) = 0 [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] rmdir("./32/file0" [pid 5984] <... write resumed>) = 4 [pid 5984] close(3) = 0 [pid 5980] <... mount resumed>) = 0 [pid 5984] symlink("/dev/binderfs", "./binderfs" [pid 5980] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5976] <... futex resumed>) = 1 [pid 5973] <... futex resumed>) = 0 [pid 4996] getdents64(3, [pid 4995] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4994] <... rmdir resumed>) = 0 [pid 5984] <... symlink resumed>) = 0 [pid 5980] <... openat resumed>) = 3 [pid 5976] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5973] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 5984] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5980] chdir("./file0" [pid 5976] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5973] <... futex resumed>) = 0 [pid 4996] close(3 [pid 4995] <... openat resumed>) = 3 [pid 4994] getdents64(3, [pid 5984] <... futex resumed>) = 0 [pid 5980] <... chdir resumed>) = 0 [pid 5976] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5973] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4996] <... close resumed>) = 0 [pid 4995] fstat(3, [pid 4994] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 5984] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5980] ioctl(4, LOOP_CLR_FD [pid 5984] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 5984] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5976] <... mmap resumed>) = 0x20000000 [pid 5984] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5980] <... ioctl resumed>) = 0 [pid 5976] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] rmdir("./32" [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] close(3 [pid 5980] close(4 [pid 5976] <... futex resumed>) = 1 [pid 5973] <... futex resumed>) = 0 [pid 5984] <... clone resumed>, parent_tid=[5987], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 5987 [pid 5984] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4996] <... rmdir resumed>) = 0 [pid 5984] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4995] getdents64(3, [pid 4994] <... close resumed>) = 0 [pid 5980] <... close resumed>) = 0 [pid 5973] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5987 attached [pid 5987] set_robust_list(0x7f5c2b8109e0, 24) = 0 [pid 5987] memfd_create("syzkaller", 0) = 3 [pid 5987] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5c233f0000 [pid 5987] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4995] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 5980] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5973] <... futex resumed>) = 0 [pid 4995] umount2("./31/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] rmdir("./32" [pid 4996] mkdir("./33", 0777 [pid 5980] <... futex resumed>) = 1 [pid 5979] <... futex resumed>) = 0 [pid 5976] sendfile(4, 5, NULL, 2147483713 [pid 5973] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] <... rmdir resumed>) = 0 [pid 5979] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5980] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 4995] lstat("./31/binderfs", [pid 4996] <... mkdir resumed>) = 0 [pid 5979] <... futex resumed>) = 0 [pid 5979] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4995] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4995] unlink("./31/binderfs" [pid 4994] mkdir("./33", 0777 [pid 4995] <... unlink resumed>) = 0 [pid 4994] <... mkdir resumed>) = 0 [pid 4995] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 4994] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4996] ioctl(3, LOOP_CLR_FD [pid 4994] ioctl(3, LOOP_CLR_FD [pid 4996] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4994] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4996] close(3) = 0 [pid 4994] close(3) = 0 [pid 4996] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4994] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5987] <... write resumed>) = 1048576 ./strace-static-x86_64: Process 5988 attached [pid 5988] set_robust_list(0x555556fb95e0, 24) = 0 [pid 5988] chdir("./33" [pid 5987] munmap(0x7f5c233f0000, 1048576) = 0 [pid 5988] <... chdir resumed>) = 0 [pid 5988] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5988] setpgid(0, 0) = 0 [pid 5988] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5988] write(3, "1000", 4) = 4 [pid 5988] close(3) = 0 [pid 5988] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5987] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5987] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5987] close(3) = 0 [pid 5987] mkdir("./file0", 0777) = 0 [pid 5987] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5973] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5973] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5973] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c234cf000 [pid 5973] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5973] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4996] <... clone resumed>, child_tidptr=0x555556fb95d0) = 5988 [pid 5979] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5973] <... clone resumed>, parent_tid=[5990], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 5990 [pid 5979] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5973] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] <... clone resumed>, child_tidptr=0x555556fb95d0) = 5989 [pid 5979] <... futex resumed>) = 0 [pid 5979] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c234cf000 [pid 5979] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 5973] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5989 attached [pid 5988] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5980] <... open resumed>) = 4 [pid 5979] <... mprotect resumed>) = 0 [pid 5973] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5988] <... futex resumed>) = 0 [pid 5980] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5979] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5989] set_robust_list(0x555556fb95e0, 24 [pid 5988] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5980] <... futex resumed>) = 0 [pid 5988] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 5980] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5989] <... set_robust_list resumed>) = 0 [pid 5988] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 5979] <... clone resumed>, parent_tid=[5992], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 5992 ./strace-static-x86_64: Process 5990 attached [pid 5990] set_robust_list(0x7f5c234ef9e0, 24) = 0 [pid 5990] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5979] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5979] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5988] <... mprotect resumed>) = 0 [pid 5989] chdir("./33" [pid 5988] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5989] <... chdir resumed>) = 0 [pid 5989] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5989] setpgid(0, 0 [pid 5988] <... clone resumed>, parent_tid=[5993], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 5993 [pid 5989] <... setpgid resumed>) = 0 [pid 5988] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5989] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5988] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5993 attached ./strace-static-x86_64: Process 5992 attached [pid 5989] <... openat resumed>) = 3 [pid 5988] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4995] <... umount2 resumed>) = 0 [pid 5987] <... mount resumed>) = 0 [pid 5989] write(3, "1000", 4) = 4 [pid 5987] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5989] close(3) = 0 [pid 5987] <... openat resumed>) = 3 [pid 5989] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5989] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5987] chdir("./file0" [pid 5989] <... futex resumed>) = 0 [pid 5992] set_robust_list(0x7f5c234ef9e0, 24 [pid 5987] <... chdir resumed>) = 0 [ 123.972349][ T74] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 123.978350][ T5987] loop3: detected capacity change from 0 to 2048 [ 123.986906][ T5976] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 5993] set_robust_list(0x7f5c2b8109e0, 24 [pid 5989] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5987] ioctl(4, LOOP_CLR_FD [pid 5992] <... set_robust_list resumed>) = 0 [pid 5989] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 5989] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 5987] <... ioctl resumed>) = 0 [pid 5989] <... mprotect resumed>) = 0 [pid 5993] <... set_robust_list resumed>) = 0 [pid 5992] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5989] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5987] close(4 [pid 4995] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5993] memfd_create("syzkaller", 0) = 3 [pid 5992] <... write resumed>) = 9 [pid 5987] <... close resumed>) = 0 [pid 5973] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5979] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5995 attached [pid 5993] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5992] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5989] <... clone resumed>, parent_tid=[5995], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 5995 [pid 5987] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5979] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] lstat("./31/file0", [pid 5993] <... mmap resumed>) = 0x7f5c233f0000 [pid 5992] <... futex resumed>) = 0 [pid 5989] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5987] <... futex resumed>) = 1 [pid 5979] <... futex resumed>) = 1 [pid 4995] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5992] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5984] <... futex resumed>) = 0 [pid 5980] <... futex resumed>) = 0 [pid 5989] <... futex resumed>) = 0 [pid 5987] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5984] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5979] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4995] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5980] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5984] <... futex resumed>) = 0 [pid 5989] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5980] <... openat resumed>) = 5 [pid 5987] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5984] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5987] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5980] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5979] <... futex resumed>) = 0 [pid 4995] openat(AT_FDCWD, "./31/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5979] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4995] <... openat resumed>) = 4 [pid 5980] open("./bus", O_RDWR [pid 5979] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4995] fstat(4, [pid 5995] set_robust_list(0x7f5c2b8109e0, 24 [pid 5987] <... open resumed>) = 4 [pid 5980] <... open resumed>) = 6 [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5987] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5984] <... futex resumed>) = 0 [pid 4995] getdents64(4, [pid 5984] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5980] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5995] <... set_robust_list resumed>) = 0 [pid 5984] <... futex resumed>) = 0 [pid 5980] <... futex resumed>) = 1 [pid 4995] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 5979] <... futex resumed>) = 0 [pid 5984] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5987] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [ 124.054347][ T5976] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 124.067606][ T5976] EXT4-fs (loop5): This should not happen!! Data will be lost [ 124.067606][ T5976] [pid 5995] memfd_create("syzkaller", 0 [pid 5987] <... write resumed>) = 9 [pid 5980] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5979] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] getdents64(4, [pid 5987] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5987] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5995] <... memfd_create resumed>) = 3 [pid 5993] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5984] <... futex resumed>) = 0 [pid 5980] <... mmap resumed>) = 0x20000000 [pid 5979] <... futex resumed>) = 0 [pid 4995] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 5995] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5c233f0000 [pid 5984] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5980] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5979] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4995] close(4 [pid 5984] <... futex resumed>) = 1 [pid 5980] <... futex resumed>) = 0 [pid 5987] <... futex resumed>) = 0 [pid 5987] openat(AT_FDCWD, "./bus", O_RDONLY) = 5 [pid 5987] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5987] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5984] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5980] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5979] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4995] <... close resumed>) = 0 [pid 5979] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5980] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5984] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5980] sendfile(4, 5, NULL, 2147483713 [pid 5979] <... futex resumed>) = 0 [pid 4995] rmdir("./31/file0" [pid 5984] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5979] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4995] <... rmdir resumed>) = 0 [pid 5984] <... futex resumed>) = 1 [pid 4995] getdents64(3, [pid 5984] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4995] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4995] close(3) = 0 [ 124.106721][ T5976] EXT4-fs (loop5): Total free blocks count 0 [ 124.127916][ T5976] EXT4-fs (loop5): Free/Dirty block details [ 124.133887][ T5976] EXT4-fs (loop5): free_blocks=2415919104 [ 124.142572][ T5976] EXT4-fs (loop5): dirty_blocks=16 [pid 4995] rmdir("./31" [pid 5995] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5993] <... write resumed>) = 1048576 [pid 5987] <... futex resumed>) = 0 [pid 4995] <... rmdir resumed>) = 0 [pid 5987] open("./bus", O_RDWR) = 6 [pid 5987] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5984] <... futex resumed>) = 0 [pid 5987] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5984] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5987] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5984] <... futex resumed>) = 0 [pid 5987] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5984] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5987] <... mmap resumed>) = 0x20000000 [pid 5987] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5984] <... futex resumed>) = 0 [pid 5987] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5984] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5987] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5984] <... futex resumed>) = 0 [pid 5987] sendfile(4, 5, NULL, 2147483713 [pid 5984] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5995] <... write resumed>) = 1048576 [pid 5993] munmap(0x7f5c233f0000, 1048576 [ 124.156175][ T5980] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 124.160054][ T5976] EXT4-fs (loop5): Block reservation details [ 124.179824][ T5987] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 124.188478][ T5976] EXT4-fs (loop5): i_reserved_data_blocks=1 [pid 4995] mkdir("./32", 0777 [pid 5995] munmap(0x7f5c233f0000, 1048576 [pid 5993] <... munmap resumed>) = 0 [pid 5979] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5976] <... sendfile resumed>) = 63 [pid 4995] <... mkdir resumed>) = 0 [pid 5990] <... ioctl resumed>) = 0 [pid 5990] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5990] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5995] <... munmap resumed>) = 0 [pid 5993] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5979] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5976] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5995] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5993] <... openat resumed>) = 4 [pid 5979] <... futex resumed>) = 1 [pid 5995] <... openat resumed>) = 4 [pid 5993] ioctl(4, LOOP_SET_FD, 3 [ 124.198679][ T5980] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 124.208264][ T5987] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 124.214702][ T5980] EXT4-fs (loop4): This should not happen!! Data will be lost [ 124.214702][ T5980] [ 124.227259][ T5987] EXT4-fs (loop3): This should not happen!! Data will be lost [ 124.227259][ T5987] [ 124.238058][ T5993] loop2: detected capacity change from 0 to 2048 [ 124.245246][ T5987] EXT4-fs (loop3): Total free blocks count 0 [pid 5979] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5995] ioctl(4, LOOP_SET_FD, 3 [pid 5992] <... futex resumed>) = 0 [pid 5984] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5976] <... futex resumed>) = 0 [pid 4995] <... openat resumed>) = 3 [pid 5992] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5984] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5976] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5973] exit_group(0 [pid 4995] ioctl(3, LOOP_CLR_FD [pid 5984] <... futex resumed>) = 0 [pid 5984] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c234cf000 [pid 5984] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5984] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5996], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 5996 [pid 5984] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5984] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5973] <... exit_group resumed>) = ? [pid 5990] <... futex resumed>) = ? [pid 5976] <... futex resumed>) = ? [pid 4995] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5990] +++ exited with 0 +++ [pid 5976] +++ exited with 0 +++ ./strace-static-x86_64: Process 5996 attached [pid 5996] set_robust_list(0x7f5c234ef9e0, 24) = 0 [pid 5973] +++ exited with 0 +++ [pid 4995] close(3 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5973, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 4995] <... close resumed>) = 0 [pid 5996] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5995] <... ioctl resumed>) = 0 [pid 5995] close(3) = 0 [pid 5995] mkdir("./file0", 0777) = 0 [pid 5995] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5993] <... ioctl resumed>) = 0 [pid 4999] restart_syscall(<... resuming interrupted clone ...> [pid 4995] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] <... restart_syscall resumed>) = 0 [pid 5993] close(3) = 0 [pid 4995] <... clone resumed>, child_tidptr=0x555556fb95d0) = 5997 [pid 4999] umount2("./31", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5979] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, ./strace-static-x86_64: Process 5997 attached [pid 5993] mkdir("./file0", 0777) = 0 [pid 5993] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x555556fba620 /* 4 entries */, 32768) = 112 [pid 5997] set_robust_list(0x555556fb95e0, 24) = 0 [pid 4999] umount2("./31/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./31/binderfs", [pid 5997] chdir("./32" [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./31/binderfs" [pid 5997] <... chdir resumed>) = 0 [pid 5997] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4999] <... unlink resumed>) = 0 [ 124.257213][ T5987] EXT4-fs (loop3): Free/Dirty block details [ 124.258228][ T5995] loop0: detected capacity change from 0 to 2048 [ 124.263525][ T5987] EXT4-fs (loop3): free_blocks=2415919104 [ 124.290676][ T5987] EXT4-fs (loop3): dirty_blocks=16 [pid 5997] <... prctl resumed>) = 0 [pid 4999] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5997] setpgid(0, 0) = 0 [pid 5984] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5997] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5987] <... sendfile resumed>) = 63 [pid 5997] write(3, "1000", 4) = 4 [pid 5996] <... ioctl resumed>) = 0 [ 124.304190][ T5980] EXT4-fs (loop4): Total free blocks count 0 [ 124.312672][ T74] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 124.313036][ T5987] EXT4-fs (loop3): Block reservation details [ 124.327264][ T5980] EXT4-fs (loop4): Free/Dirty block details [ 124.333725][ T5987] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 124.340337][ T5980] EXT4-fs (loop4): free_blocks=2415919104 [ 124.350057][ T5980] EXT4-fs (loop4): dirty_blocks=16 [pid 5996] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5997] close(3 [pid 5996] <... futex resumed>) = 0 [pid 5997] <... close resumed>) = 0 [pid 5997] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5997] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5997] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c2b7f0000 [pid 5997] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5996] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5997] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4999] <... umount2 resumed>) = 0 [pid 4999] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5997] <... clone resumed>, parent_tid=[6002], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6002 [pid 5997] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5987] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5997] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5987] <... futex resumed>) = 0 [pid 5993] <... mount resumed>) = 0 [pid 5987] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5993] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5984] exit_group(0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6002 attached [pid 5996] <... futex resumed>) = ? [pid 5993] chdir("./file0" [pid 5987] <... futex resumed>) = ? [pid 5984] <... exit_group resumed>) = ? [pid 6002] set_robust_list(0x7f5c2b8109e0, 24 [pid 5996] +++ exited with 0 +++ [pid 5995] <... mount resumed>) = 0 [pid 5993] <... chdir resumed>) = 0 [pid 5992] <... ioctl resumed>) = 0 [pid 5987] +++ exited with 0 +++ [pid 5984] +++ exited with 0 +++ [pid 5980] <... sendfile resumed>) = 63 [pid 4999] lstat("./31/file0", [pid 6002] <... set_robust_list resumed>) = 0 [pid 5992] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5984, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 6002] memfd_create("syzkaller", 0 [pid 5992] <... futex resumed>) = 0 [pid 4997] restart_syscall(<... resuming interrupted clone ...> [pid 6002] <... memfd_create resumed>) = 3 [pid 5992] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4997] <... restart_syscall resumed>) = 0 [pid 5995] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6002] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5993] ioctl(4, LOOP_CLR_FD [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6002] <... mmap resumed>) = 0x7f5c233f0000 [pid 5995] <... openat resumed>) = 3 [pid 5993] <... ioctl resumed>) = 0 [pid 4999] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5980] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5995] chdir("./file0" [pid 5993] close(4 [pid 5980] <... futex resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] umount2("./32", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5995] <... chdir resumed>) = 0 [pid 5993] <... close resumed>) = 0 [pid 5980] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5979] exit_group(0 [pid 4999] openat(AT_FDCWD, "./31/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5995] ioctl(4, LOOP_CLR_FD [pid 5993] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5992] <... futex resumed>) = ? [pid 5980] <... futex resumed>) = ? [pid 5979] <... exit_group resumed>) = ? [pid 4999] <... openat resumed>) = 4 [pid 4997] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5995] <... ioctl resumed>) = 0 [pid 5993] <... futex resumed>) = 1 [pid 5992] +++ exited with 0 +++ [pid 5988] <... futex resumed>) = 0 [pid 5980] +++ exited with 0 +++ [pid 4999] fstat(4, [pid 5995] close(4 [pid 5993] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5979] +++ exited with 0 +++ [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5995] <... close resumed>) = 0 [pid 5993] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5988] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] getdents64(4, [pid 4997] <... openat resumed>) = 3 [pid 6002] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5995] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5993] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5988] <... futex resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5979, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 4997] fstat(3, [pid 5995] <... futex resumed>) = 1 [pid 5993] <... open resumed>) = 4 [ 124.356893][ T5980] EXT4-fs (loop4): Block reservation details [ 124.370958][ T5980] EXT4-fs (loop4): i_reserved_data_blocks=1 [pid 5989] <... futex resumed>) = 0 [pid 5988] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] getdents64(4, [pid 4998] restart_syscall(<... resuming interrupted clone ...> [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5995] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5993] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5989] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5988] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4999] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4998] <... restart_syscall resumed>) = 0 [pid 4997] getdents64(3, [pid 5995] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5993] <... futex resumed>) = 0 [pid 5989] <... futex resumed>) = 0 [pid 5988] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] close(4 [pid 4997] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 5995] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5993] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5989] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5988] <... futex resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 5995] <... open resumed>) = 4 [pid 5993] <... write resumed>) = 9 [pid 5988] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] rmdir("./31/file0" [pid 4998] umount2("./31", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] umount2("./32/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5995] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5993] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5988] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4999] <... rmdir resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5995] <... futex resumed>) = 1 [pid 5993] <... futex resumed>) = 0 [pid 5989] <... futex resumed>) = 0 [pid 5988] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] getdents64(3, [pid 4998] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] lstat("./32/binderfs", [pid 5995] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5993] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5989] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5988] <... futex resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4998] <... openat resumed>) = 3 [pid 5995] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5993] <... openat resumed>) = 5 [pid 5989] <... futex resumed>) = 0 [pid 5988] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] close(3 [pid 4998] fstat(3, [pid 4997] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5995] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5993] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5989] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5988] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4999] <... close resumed>) = 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] unlink("./32/binderfs" [pid 5995] <... write resumed>) = 9 [pid 5993] <... futex resumed>) = 0 [pid 5988] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] rmdir("./31" [pid 4998] getdents64(3, [pid 5995] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5993] open("./bus", O_RDWR [pid 5988] <... futex resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 4997] <... unlink resumed>) = 0 [pid 5995] <... futex resumed>) = 1 [pid 5993] <... open resumed>) = 6 [pid 5989] <... futex resumed>) = 0 [pid 5988] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] mkdir("./32", 0777 [pid 4998] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4997] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5995] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5993] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5989] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5988] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4999] <... mkdir resumed>) = 0 [pid 4998] umount2("./31/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5995] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5993] <... futex resumed>) = 0 [pid 5989] <... futex resumed>) = 0 [pid 5988] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5995] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5993] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5989] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5988] <... futex resumed>) = 0 [pid 4999] <... openat resumed>) = 3 [pid 4998] lstat("./31/binderfs", [pid 5995] <... openat resumed>) = 5 [pid 5993] <... mmap resumed>) = 0x20000000 [pid 5988] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5995] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5993] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5988] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5995] <... futex resumed>) = 1 [pid 5993] <... futex resumed>) = 0 [pid 5989] <... futex resumed>) = 0 [ 124.436391][ T11] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 124.461912][ T5993] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 5988] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] close(3 [pid 4998] unlink("./31/binderfs" [pid 5995] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5993] sendfile(4, 5, NULL, 2147483713 [pid 5989] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5988] <... futex resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 5995] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5989] <... futex resumed>) = 0 [pid 5988] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] <... unlink resumed>) = 0 [pid 5995] open("./bus", O_RDWR [pid 5989] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5995] <... open resumed>) = 6 [pid 4999] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6003 [pid 5995] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5995] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5989] <... futex resumed>) = 0 [pid 5989] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5995] <... futex resumed>) = 0 [pid 5989] <... futex resumed>) = 1 [pid 5995] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5995] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5989] <... futex resumed>) = 0 [pid 5995] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5989] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5995] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5989] <... futex resumed>) = 0 [pid 5989] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5995] sendfile(4, 5, NULL, 2147483713 [pid 5988] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5988] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5988] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6002] <... write resumed>) = 1048576 [pid 6002] munmap(0x7f5c233f0000, 1048576) = 0 [pid 6002] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6002] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 6003 attached [pid 6003] set_robust_list(0x555556fb95e0, 24) = 0 [pid 5988] <... mmap resumed>) = 0x7f5c234cf000 [pid 5988] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 6003] chdir("./32" [pid 5988] <... mprotect resumed>) = 0 [pid 5988] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6004], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6004 [pid 5988] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 124.488034][ T11] EXT4-fs (loop3): This should not happen!! Data will be lost [ 124.488034][ T11] [ 124.491305][ T5995] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 124.514943][ T5457] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5988] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5989] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5989] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5989] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c234cf000 [pid 5989] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE) = 0 ./strace-static-x86_64: Process 6004 attached [pid 5989] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6005 attached [pid 6004] set_robust_list(0x7f5c234ef9e0, 24 [pid 5989] <... clone resumed>, parent_tid=[6005], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6005 [pid 6003] <... chdir resumed>) = 0 [pid 6003] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6003] setpgid(0, 0) = 0 [pid 6003] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6003] write(3, "1000", 4) = 4 [pid 6003] close(3) = 0 [pid 6003] symlink("/dev/binderfs", "./binderfs" [pid 6004] <... set_robust_list resumed>) = 0 [pid 6003] <... symlink resumed>) = 0 [pid 5989] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6004] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6005] set_robust_list(0x7f5c234ef9e0, 24 [pid 5989] <... futex resumed>) = 0 [pid 6003] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6003] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6005] <... set_robust_list resumed>) = 0 [pid 6003] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 5989] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6002] <... ioctl resumed>) = 0 [pid 6002] close(3) = 0 [pid 6003] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6002] mkdir("./file0", 0777 [pid 6003] <... mprotect resumed>) = 0 [pid 6002] <... mkdir resumed>) = 0 [pid 6003] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6006], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6006 [pid 6002] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6003] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6003] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6006 attached [pid 5988] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 124.532818][ T6002] loop1: detected capacity change from 0 to 2048 [ 124.550128][ T5457] EXT4-fs (loop4): This should not happen!! Data will be lost [ 124.550128][ T5457] [ 124.561159][ T5993] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 6005] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6006] set_robust_list(0x7f5c2b8109e0, 24) = 0 [pid 6006] memfd_create("syzkaller", 0) = 3 [pid 6006] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5c233f0000 [pid 4997] <... umount2 resumed>) = 0 [pid 4997] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] <... umount2 resumed>) = 0 [pid 4997] lstat("./32/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./32/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4997] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(4, 0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4997] getdents64(4, 0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 6006] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5989] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4998] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] close(4 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./31/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] <... close resumed>) = 0 [pid 4998] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] rmdir("./32/file0" [pid 4998] openat(AT_FDCWD, "./31/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] <... rmdir resumed>) = 0 [pid 4998] <... openat resumed>) = 4 [ 124.592328][ T5995] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 124.625765][ T5993] EXT4-fs (loop2): This should not happen!! Data will be lost [ 124.625765][ T5993] [pid 4997] getdents64(3, 0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4997] close(3) = 0 [pid 4997] rmdir("./32") = 0 [pid 4997] mkdir("./33", 0777) = 0 [pid 4997] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4998] fstat(4, [pid 4997] <... openat resumed>) = 3 [pid 4997] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4997] close(3 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] <... close resumed>) = 0 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556fb95d0) = 6009 [pid 4998] getdents64(4, 0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, ./strace-static-x86_64: Process 6009 attached 0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 6002] <... mount resumed>) = 0 [pid 6002] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6002] chdir("./file0") = 0 [pid 6002] ioctl(4, LOOP_CLR_FD) = 0 [pid 6009] set_robust_list(0x555556fb95e0, 24 [pid 6002] close(4 [pid 4998] close(4 [pid 6002] <... close resumed>) = 0 [ 124.645746][ T5995] EXT4-fs (loop0): This should not happen!! Data will be lost [ 124.645746][ T5995] [ 124.658580][ T5995] EXT4-fs (loop0): Total free blocks count 0 [ 124.664910][ T5993] EXT4-fs (loop2): Total free blocks count 0 [ 124.672347][ T5995] EXT4-fs (loop0): Free/Dirty block details [ 124.679405][ T5993] EXT4-fs (loop2): Free/Dirty block details [pid 6009] <... set_robust_list resumed>) = 0 [pid 6002] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... close resumed>) = 0 [pid 6009] chdir("./33" [pid 6002] <... futex resumed>) = 1 [pid 5997] <... futex resumed>) = 0 [pid 6009] <... chdir resumed>) = 0 [pid 6002] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4998] rmdir("./31/file0" [pid 5997] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6009] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4998] <... rmdir resumed>) = 0 [pid 6009] <... prctl resumed>) = 0 [pid 6002] <... futex resumed>) = 0 [pid 5997] <... futex resumed>) = 1 [pid 4998] getdents64(3, [pid 6002] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000) = 4 [pid 6002] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6002] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6009] setpgid(0, 0) = 0 [pid 5997] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 6006] <... write resumed>) = 1048576 [pid 6006] munmap(0x7f5c233f0000, 1048576) = 0 [pid 6009] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5997] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6009] <... openat resumed>) = 3 [pid 5997] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] close(3 [pid 6006] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6006] ioctl(4, LOOP_SET_FD, 3 [pid 6009] write(3, "1000", 4 [pid 6002] <... futex resumed>) = 0 [ 124.691586][ T5995] EXT4-fs (loop0): free_blocks=2415919104 [ 124.698738][ T5993] EXT4-fs (loop2): free_blocks=2415919104 [ 124.704768][ T5993] EXT4-fs (loop2): dirty_blocks=16 [ 124.711520][ T5995] EXT4-fs (loop0): dirty_blocks=16 [ 124.718252][ T5993] EXT4-fs (loop2): Block reservation details [ 124.725267][ T5995] EXT4-fs (loop0): Block reservation details [ 124.728951][ T6006] loop5: detected capacity change from 0 to 2048 [ 124.732179][ T5993] EXT4-fs (loop2): i_reserved_data_blocks=1 [pid 5997] <... futex resumed>) = 1 [pid 4998] <... close resumed>) = 0 [pid 6009] <... write resumed>) = 4 [pid 6004] <... ioctl resumed>) = 0 [pid 6002] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5997] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5993] <... sendfile resumed>) = 63 [pid 4998] rmdir("./31" [pid 6009] close(3 [pid 6006] <... ioctl resumed>) = 0 [pid 6004] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6002] <... write resumed>) = 9 [pid 6004] <... futex resumed>) = 0 [pid 6002] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5993] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6009] <... close resumed>) = 0 [pid 6004] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6002] <... futex resumed>) = 1 [pid 5997] <... futex resumed>) = 0 [pid 5993] <... futex resumed>) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 6009] symlink("/dev/binderfs", "./binderfs" [pid 6002] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5997] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5993] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5988] exit_group(0 [pid 4998] mkdir("./32", 0777 [pid 6009] <... symlink resumed>) = 0 [pid 6004] <... futex resumed>) = ? [pid 6002] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5997] <... futex resumed>) = 0 [pid 5993] <... futex resumed>) = ? [pid 5988] <... exit_group resumed>) = ? [pid 6009] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6004] +++ exited with 0 +++ [pid 6002] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5997] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5993] +++ exited with 0 +++ [pid 4998] <... mkdir resumed>) = 0 [pid 6009] <... futex resumed>) = 0 [pid 6006] close(3 [pid 6005] <... ioctl resumed>) = 0 [pid 6002] <... openat resumed>) = 5 [pid 5995] <... sendfile resumed>) = 63 [pid 5988] +++ exited with 0 +++ [pid 4998] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6009] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6006] <... close resumed>) = 0 [pid 6005] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6002] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5995] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... openat resumed>) = 3 [pid 4996] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5988, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 6009] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6006] mkdir("./file0", 0777 [pid 6005] <... futex resumed>) = 0 [pid 6002] <... futex resumed>) = 1 [pid 5997] <... futex resumed>) = 0 [pid 5995] <... futex resumed>) = 0 [pid 5989] exit_group(0 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 6009] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6006] <... mkdir resumed>) = 0 [pid 6002] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5997] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5989] <... exit_group resumed>) = ? [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6009] <... mprotect resumed>) = 0 [pid 6006] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6005] +++ exited with 0 +++ [pid 6002] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5997] <... futex resumed>) = 0 [pid 5995] +++ exited with 0 +++ [pid 5989] +++ exited with 0 +++ [pid 4998] close(3 [pid 6009] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6002] open("./bus", O_RDWR [pid 5997] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] <... close resumed>) = 0 [pid 6002] <... open resumed>) = 6 [pid 4994] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5989, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 6002] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5997] <... futex resumed>) = 0 [pid 6002] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5997] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6009] <... clone resumed>, parent_tid=[6010], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6010 [pid 6002] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5997] <... futex resumed>) = 0 [ 124.738805][ T5995] EXT4-fs (loop0): i_reserved_data_blocks=1 [pid 6002] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5997] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6009] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6002] <... mmap resumed>) = 0x20000000 [pid 4998] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6011 [pid 4996] umount2("./33", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6011 attached ./strace-static-x86_64: Process 6010 attached [pid 6009] <... futex resumed>) = 0 [pid 6002] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] umount2("./33", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6011] set_robust_list(0x555556fb95e0, 24 [pid 6010] set_robust_list(0x7f5c2b8109e0, 24 [pid 6009] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6002] <... futex resumed>) = 1 [pid 5997] <... futex resumed>) = 0 [pid 4996] openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6011] <... set_robust_list resumed>) = 0 [pid 6010] <... set_robust_list resumed>) = 0 [pid 6002] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5997] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... openat resumed>) = 3 [pid 6011] chdir("./32" [pid 6010] memfd_create("syzkaller", 0 [pid 6002] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5997] <... futex resumed>) = 0 [pid 4996] fstat(3, [pid 4994] openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6010] <... memfd_create resumed>) = 3 [pid 6006] <... mount resumed>) = 0 [pid 6002] sendfile(4, 5, NULL, 2147483713 [pid 5997] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6011] <... chdir resumed>) = 0 [pid 6010] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6006] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 4996] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] <... openat resumed>) = 3 [pid 6011] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6006] <... openat resumed>) = 3 [pid 4996] getdents64(3, [pid 4994] fstat(3, [pid 6011] <... prctl resumed>) = 0 [pid 6006] chdir("./file0" [pid 4996] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6011] setpgid(0, 0 [pid 6006] <... chdir resumed>) = 0 [pid 4996] umount2("./33/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] getdents64(3, [pid 6011] <... setpgid resumed>) = 0 [pid 6006] ioctl(4, LOOP_CLR_FD [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 6011] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6006] <... ioctl resumed>) = 0 [pid 4996] lstat("./33/binderfs", [pid 4994] umount2("./33/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6011] <... openat resumed>) = 3 [pid 6006] close(4 [pid 4996] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6011] write(3, "1000", 4 [pid 6010] <... mmap resumed>) = 0x7f5c233f0000 [pid 6006] <... close resumed>) = 0 [pid 4996] unlink("./33/binderfs" [pid 4994] lstat("./33/binderfs", [pid 6011] <... write resumed>) = 4 [pid 6006] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... unlink resumed>) = 0 [pid 4994] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6011] close(3 [pid 6006] <... futex resumed>) = 1 [pid 6003] <... futex resumed>) = 0 [pid 4996] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] unlink("./33/binderfs" [pid 6011] <... close resumed>) = 0 [pid 6006] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6003] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] <... unlink resumed>) = 0 [pid 6011] symlink("/dev/binderfs", "./binderfs" [pid 6006] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6003] <... futex resumed>) = 0 [pid 4994] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6011] <... symlink resumed>) = 0 [pid 6006] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6011] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6011] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c2b7f0000 [pid 6011] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE) = 0 [ 124.803464][ T6002] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 124.828910][ T5457] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 6011] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6014 attached , parent_tid=[6014], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6014 [pid 6010] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6006] <... open resumed>) = 4 [pid 6003] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6011] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6006] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6011] <... futex resumed>) = 0 [pid 6006] <... futex resumed>) = 0 [pid 6011] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6006] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6014] set_robust_list(0x7f5c2b8109e0, 24) = 0 [pid 6003] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5997] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6003] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5997] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6014] memfd_create("syzkaller", 0 [pid 6006] <... futex resumed>) = 0 [pid 6003] <... futex resumed>) = 1 [pid 5997] <... futex resumed>) = 0 [pid 6014] <... memfd_create resumed>) = 3 [pid 6006] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6003] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 124.841982][ T11] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 124.844704][ T5457] EXT4-fs (loop2): This should not happen!! Data will be lost [ 124.844704][ T5457] [ 124.864258][ T6002] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 124.890658][ T11] EXT4-fs (loop0): This should not happen!! Data will be lost [ 124.890658][ T11] [pid 5997] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6014] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6010] <... write resumed>) = 1048576 [pid 6006] <... write resumed>) = 9 [pid 5997] <... mmap resumed>) = 0x7f5c234cf000 [pid 6014] <... mmap resumed>) = 0x7f5c233f0000 [pid 6010] munmap(0x7f5c233f0000, 1048576 [pid 6006] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5997] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 6014] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6010] <... munmap resumed>) = 0 [pid 6006] <... futex resumed>) = 1 [pid 6003] <... futex resumed>) = 0 [pid 5997] <... mprotect resumed>) = 0 [ 124.893868][ T6002] EXT4-fs (loop1): This should not happen!! Data will be lost [ 124.893868][ T6002] [ 124.911140][ T6002] EXT4-fs (loop1): Total free blocks count 0 [ 124.927795][ T6002] EXT4-fs (loop1): Free/Dirty block details [ 124.944246][ T6002] EXT4-fs (loop1): free_blocks=2415919104 [pid 6014] <... write resumed>) = 1048576 [pid 6010] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6006] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6003] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5997] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6014] munmap(0x7f5c233f0000, 1048576 [pid 6010] <... openat resumed>) = 4 [pid 6006] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6003] <... futex resumed>) = 0 [pid 4996] <... umount2 resumed>) = 0 [pid 6010] ioctl(4, LOOP_SET_FD, 3 [pid 6006] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6003] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5997] <... clone resumed>, parent_tid=[6015], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6015 [pid 4996] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] lstat("./33/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] openat(AT_FDCWD, "./33/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6010] <... ioctl resumed>) = 0 [pid 5997] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... openat resumed>) = 4 [pid 6006] <... openat resumed>) = 5 [pid 4996] fstat(4, [pid 6006] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5997] <... futex resumed>) = 0 [pid 6006] <... futex resumed>) = 1 [pid 6003] <... futex resumed>) = 0 [pid 5997] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4996] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6006] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6003] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] getdents64(4, [pid 4994] <... umount2 resumed>) = 0 [pid 6014] <... munmap resumed>) = 0 [pid 6006] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6003] <... futex resumed>) = 0 [pid 4996] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 6006] open("./bus", O_RDWR [pid 6003] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4996] getdents64(4, [pid 4994] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6006] <... open resumed>) = 6 [pid 4996] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 6006] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] close(4 [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6006] <... futex resumed>) = 1 [pid 6003] <... futex resumed>) = 0 [pid 4996] <... close resumed>) = 0 [pid 4994] lstat("./33/file0", [pid 6006] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6003] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] rmdir("./33/file0" [pid 4994] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6014] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6006] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6003] <... futex resumed>) = 0 [pid 4996] <... rmdir resumed>) = 0 [pid 4994] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6014] <... openat resumed>) = 4 [pid 6006] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6003] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4996] getdents64(3, [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4996] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4994] openat(AT_FDCWD, "./33/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4996] close(3 [pid 4994] <... openat resumed>) = 4 [pid 6006] <... mmap resumed>) = 0x20000000 [pid 4996] <... close resumed>) = 0 [pid 4994] fstat(4, ./strace-static-x86_64: Process 6015 attached [pid 6014] ioctl(4, LOOP_SET_FD, 3 [pid 6006] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] rmdir("./33" [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] <... rmdir resumed>) = 0 [pid 4994] getdents64(4, [pid 4996] mkdir("./34", 0777 [pid 4994] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4996] <... mkdir resumed>) = 0 [pid 4994] getdents64(4, [pid 4996] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4994] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4996] <... openat resumed>) = 3 [pid 4994] close(4 [pid 4996] ioctl(3, LOOP_CLR_FD [pid 4994] <... close resumed>) = 0 [pid 4996] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4994] rmdir("./33/file0" [pid 4996] close(3 [pid 4994] <... rmdir resumed>) = 0 [pid 6006] <... futex resumed>) = 1 [pid 6003] <... futex resumed>) = 0 [pid 4996] <... close resumed>) = 0 [pid 4994] getdents64(3, [pid 6006] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6003] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4994] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 6015] set_robust_list(0x7f5c234ef9e0, 24 [pid 6006] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6003] <... futex resumed>) = 0 [pid 4994] close(3 [pid 6006] sendfile(4, 5, NULL, 2147483713 [ 124.950164][ T6002] EXT4-fs (loop1): dirty_blocks=16 [ 124.956553][ T6002] EXT4-fs (loop1): Block reservation details [ 124.967812][ T6010] loop3: detected capacity change from 0 to 2048 [ 124.985012][ T6014] loop4: detected capacity change from 0 to 2048 [pid 6003] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4996] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6016 [pid 4994] <... close resumed>) = 0 [pid 6015] <... set_robust_list resumed>) = 0 [pid 6014] <... ioctl resumed>) = 0 [pid 6010] close(3 [pid 4994] rmdir("./33") = 0 [pid 4994] mkdir("./34", 0777) = 0 ./strace-static-x86_64: Process 6016 attached [pid 4994] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6016] set_robust_list(0x555556fb95e0, 24 [pid 6015] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6010] <... close resumed>) = 0 [pid 4994] <... openat resumed>) = 3 [pid 6014] close(3 [pid 6016] <... set_robust_list resumed>) = 0 [pid 6010] mkdir("./file0", 0777 [pid 4994] ioctl(3, LOOP_CLR_FD [pid 6016] chdir("./34" [pid 4994] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6016] <... chdir resumed>) = 0 [pid 6010] <... mkdir resumed>) = 0 [pid 4994] close(3 [pid 6016] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6015] <... ioctl resumed>) = 0 [pid 6014] <... close resumed>) = 0 [pid 6010] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6002] <... sendfile resumed>) = 63 [pid 5997] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4994] <... close resumed>) = 0 [pid 6016] <... prctl resumed>) = 0 [pid 4994] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6016] setpgid(0, 0) = 0 [pid 4994] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6017 [pid 6016] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6016] write(3, "1000", 4) = 4 [pid 6016] close(3) = 0 [pid 6016] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6016] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 6017 attached [pid 6016] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6017] set_robust_list(0x555556fb95e0, 24 [pid 6016] <... mmap resumed>) = 0x7f5c2b7f0000 [ 124.999370][ T6006] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 125.005828][ T6002] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 125.033003][ T6006] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 6015] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6014] mkdir("./file0", 0777 [pid 6017] <... set_robust_list resumed>) = 0 [pid 6016] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6003] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6002] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5997] exit_group(0 [pid 6017] chdir("./34" [pid 6016] <... mprotect resumed>) = 0 [pid 6017] <... chdir resumed>) = 0 [pid 6016] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6017] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6016] <... clone resumed>, parent_tid=[6018], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6018 [pid 6017] setpgid(0, 0 [pid 6016] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6017] <... setpgid resumed>) = 0 [pid 6016] <... futex resumed>) = 0 [pid 6017] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6016] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6017] <... openat resumed>) = 3 [pid 6017] write(3, "1000", 4 [pid 6015] <... futex resumed>) = 0 [pid 6017] <... write resumed>) = 4 [pid 6017] close(3 [pid 6014] <... mkdir resumed>) = 0 [pid 6017] <... close resumed>) = 0 ./strace-static-x86_64: Process 6018 attached [pid 6017] symlink("/dev/binderfs", "./binderfs" [pid 6018] set_robust_list(0x7f5c2b8109e0, 24 [pid 6017] <... symlink resumed>) = 0 [pid 6018] <... set_robust_list resumed>) = 0 [pid 6017] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6018] memfd_create("syzkaller", 0 [pid 6017] <... futex resumed>) = 0 [pid 6018] <... memfd_create resumed>) = 3 [pid 6017] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6018] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6017] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6018] <... mmap resumed>) = 0x7f5c233f0000 [pid 6017] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6003] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5997] <... exit_group resumed>) = ? [pid 6017] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6002] <... futex resumed>) = ? [pid 6017] <... clone resumed>, parent_tid=[6020], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6020 [pid 6015] +++ exited with 0 +++ [pid 6003] <... futex resumed>) = 0 [pid 6017] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6014] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6003] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6002] +++ exited with 0 +++ [pid 5997] +++ exited with 0 +++ [pid 6017] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6003] <... mmap resumed>) = 0x7f5c234cf000 [pid 4995] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5997, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- ./strace-static-x86_64: Process 6020 attached [pid 6003] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 6020] set_robust_list(0x7f5c2b8109e0, 24 [pid 6003] <... mprotect resumed>) = 0 [pid 6020] <... set_robust_list resumed>) = 0 [pid 6003] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4995] umount2("./32", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6020] memfd_create("syzkaller", 0 [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6020] <... memfd_create resumed>) = 3 [pid 6003] <... clone resumed>, parent_tid=[6022], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6022 [pid 4995] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6020] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6018] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6003] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] <... openat resumed>) = 3 [pid 6020] <... mmap resumed>) = 0x7f5c233f0000 [ 125.047648][ T6006] EXT4-fs (loop5): This should not happen!! Data will be lost [ 125.047648][ T6006] [pid 6003] <... futex resumed>) = 0 [pid 4995] fstat(3, ./strace-static-x86_64: Process 6022 attached [pid 6020] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6010] <... mount resumed>) = 0 [pid 6003] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6022] set_robust_list(0x7f5c234ef9e0, 24 [pid 6010] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 4995] getdents64(3, [pid 6010] <... openat resumed>) = 3 [pid 4995] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 6010] chdir("./file0" [pid 4995] umount2("./32/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6010] <... chdir resumed>) = 0 [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6010] ioctl(4, LOOP_CLR_FD [pid 4995] lstat("./32/binderfs", [pid 6010] <... ioctl resumed>) = 0 [pid 4995] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6010] close(4 [pid 4995] unlink("./32/binderfs" [pid 6022] <... set_robust_list resumed>) = 0 [pid 6010] <... close resumed>) = 0 [pid 4995] <... unlink resumed>) = 0 [pid 6010] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [ 125.091873][ T6006] EXT4-fs (loop5): Total free blocks count 0 [ 125.098035][ T6006] EXT4-fs (loop5): Free/Dirty block details [ 125.104982][ T6006] EXT4-fs (loop5): free_blocks=2415919104 [ 125.111567][ T6006] EXT4-fs (loop5): dirty_blocks=16 [ 125.117468][ T6006] EXT4-fs (loop5): Block reservation details [ 125.123505][ T6006] EXT4-fs (loop5): i_reserved_data_blocks=1 [pid 4995] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6022] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6020] <... write resumed>) = 1048576 [pid 6014] <... mount resumed>) = 0 [pid 6010] <... futex resumed>) = 1 [pid 6009] <... futex resumed>) = 0 [pid 6006] <... sendfile resumed>) = 63 [pid 6014] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6010] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6009] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6014] <... openat resumed>) = 3 [pid 6010] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6009] <... futex resumed>) = 0 [pid 6014] chdir("./file0" [pid 6010] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6009] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6022] <... ioctl resumed>) = 0 [pid 6020] munmap(0x7f5c233f0000, 1048576 [pid 6014] <... chdir resumed>) = 0 [pid 6010] <... open resumed>) = 4 [pid 6006] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6022] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6014] ioctl(4, LOOP_CLR_FD [pid 6010] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6014] <... ioctl resumed>) = 0 [pid 6010] <... futex resumed>) = 1 [pid 6009] <... futex resumed>) = 0 [pid 6020] <... munmap resumed>) = 0 [pid 6022] <... futex resumed>) = 1 [ 125.131746][ T5457] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 6014] close(4 [pid 6010] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6009] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6006] <... futex resumed>) = 0 [pid 6003] <... futex resumed>) = 0 [pid 6022] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6020] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6018] <... write resumed>) = 1048576 [pid 6014] <... close resumed>) = 0 [pid 6010] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6009] <... futex resumed>) = 0 [pid 6020] <... openat resumed>) = 4 [pid 6014] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6010] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6009] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6006] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6003] exit_group(0 [pid 6020] ioctl(4, LOOP_SET_FD, 3 [pid 6018] munmap(0x7f5c233f0000, 1048576 [pid 6014] <... futex resumed>) = 1 [pid 6006] <... futex resumed>) = ? [pid 6003] <... exit_group resumed>) = ? [pid 6022] <... futex resumed>) = ? [pid 6018] <... munmap resumed>) = 0 [pid 6011] <... futex resumed>) = 0 [pid 6006] +++ exited with 0 +++ [pid 6018] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6018] ioctl(4, LOOP_SET_FD, 3 [pid 6022] +++ exited with 0 +++ [pid 6020] <... ioctl resumed>) = 0 [pid 6018] <... ioctl resumed>) = 0 [pid 6014] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6011] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6010] <... write resumed>) = 9 [pid 6003] +++ exited with 0 +++ [pid 6018] close(3 [pid 6011] <... futex resumed>) = 0 [pid 6010] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6014] <... open resumed>) = 4 [pid 6011] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6010] <... futex resumed>) = 1 [pid 6009] <... futex resumed>) = 0 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6003, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 6014] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6011] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6010] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6009] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] restart_syscall(<... resuming interrupted clone ...> [pid 6014] <... futex resumed>) = 0 [pid 6011] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6010] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6009] <... futex resumed>) = 0 [pid 4999] <... restart_syscall resumed>) = 0 [pid 6014] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6011] <... futex resumed>) = 0 [pid 6010] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6009] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6018] <... close resumed>) = 0 [pid 6011] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] umount2("./32", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6020] close(3 [pid 6018] mkdir("./file0", 0777 [pid 6010] <... openat resumed>) = 5 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6014] <... write resumed>) = 9 [pid 6010] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6014] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6010] <... futex resumed>) = 1 [pid 6009] <... futex resumed>) = 0 [pid 6014] <... futex resumed>) = 1 [pid 6010] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6009] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... openat resumed>) = 3 [pid 6011] <... futex resumed>) = 0 [pid 6014] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6011] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6010] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6009] <... futex resumed>) = 0 [pid 4999] fstat(3, [pid 6014] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6011] <... futex resumed>) = 0 [pid 6010] open("./bus", O_RDWR [pid 6009] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6014] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6011] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6020] <... close resumed>) = 0 [pid 6018] <... mkdir resumed>) = 0 [pid 6014] <... openat resumed>) = 5 [pid 6010] <... open resumed>) = 6 [pid 4999] getdents64(3, [pid 6020] mkdir("./file0", 0777 [pid 6018] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6020] <... mkdir resumed>) = 0 [pid 6020] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6014] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6010] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 6014] <... futex resumed>) = 1 [pid 6011] <... futex resumed>) = 0 [pid 6010] <... futex resumed>) = 1 [pid 6009] <... futex resumed>) = 0 [pid 6011] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6009] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] umount2("./32/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6014] open("./bus", O_RDWR [pid 6011] <... futex resumed>) = 0 [pid 6010] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6009] <... futex resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6009] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6011] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6014] <... open resumed>) = 6 [pid 4999] lstat("./32/binderfs", [pid 6010] <... mmap resumed>) = 0x20000000 [pid 6014] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6010] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6014] <... futex resumed>) = 1 [pid 6011] <... futex resumed>) = 0 [pid 6010] <... futex resumed>) = 1 [pid 6009] <... futex resumed>) = 0 [pid 4999] unlink("./32/binderfs" [pid 6014] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6011] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6010] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6009] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... unlink resumed>) = 0 [pid 6009] <... futex resumed>) = 0 [pid 6011] <... futex resumed>) = 0 [pid 6014] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6011] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6010] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6009] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6014] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6010] sendfile(4, 5, NULL, 2147483713 [pid 6014] <... mmap resumed>) = 0x20000000 [pid 4995] <... umount2 resumed>) = 0 [pid 4995] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 125.163128][ T5457] EXT4-fs (loop1): This should not happen!! Data will be lost [ 125.163128][ T5457] [ 125.182548][ T6020] loop0: detected capacity change from 0 to 2048 [ 125.185334][ T6018] loop2: detected capacity change from 0 to 2048 [pid 4995] lstat("./32/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4995] openat(AT_FDCWD, "./32/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4995] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] getdents64(4, 0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4995] getdents64(4, 0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4995] close(4) = 0 [pid 4995] rmdir("./32/file0") = 0 [pid 4995] getdents64(3, 0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4995] close(3 [pid 6014] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] <... close resumed>) = 0 [pid 4995] rmdir("./32" [pid 6011] <... futex resumed>) = 0 [pid 6014] <... futex resumed>) = 1 [pid 6014] sendfile(4, 5, NULL, 2147483713 [pid 6011] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6011] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4995] <... rmdir resumed>) = 0 [pid 4995] mkdir("./33", 0777) = 0 [pid 4995] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4995] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4995] close(3) = 0 [pid 4995] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556fb95d0) = 6029 ./strace-static-x86_64: Process 6029 attached [pid 6029] set_robust_list(0x555556fb95e0, 24) = 0 [pid 6029] chdir("./33") = 0 [pid 6029] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6029] setpgid(0, 0) = 0 [pid 6029] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6029] write(3, "1000", 4) = 4 [pid 6029] close(3) = 0 [pid 6029] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6029] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6029] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c2b7f0000 [pid 6029] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6029] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6030], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6030 [pid 6029] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 125.239058][ T11] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 125.259817][ T6014] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 6029] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6030 attached [pid 6009] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6009] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6009] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c234cf000 [pid 6009] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6009] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6031], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6031 [pid 6009] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6009] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6030] set_robust_list(0x7f5c2b8109e0, 24) = 0 [pid 6030] memfd_create("syzkaller", 0 [pid 6020] <... mount resumed>) = 0 [pid 6030] <... memfd_create resumed>) = 3 [pid 6030] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6018] <... mount resumed>) = 0 [pid 6020] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6018] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6011] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6020] <... openat resumed>) = 3 [pid 6030] <... mmap resumed>) = 0x7f5c233f0000 [pid 6020] chdir("./file0" [pid 6018] <... openat resumed>) = 3 [pid 6011] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6031 attached [pid 6020] <... chdir resumed>) = 0 [pid 6018] chdir("./file0" [pid 6011] <... futex resumed>) = 0 [pid 6031] set_robust_list(0x7f5c234ef9e0, 24) = 0 [pid 6031] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6020] ioctl(4, LOOP_CLR_FD [pid 6018] <... chdir resumed>) = 0 [pid 6011] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6020] <... ioctl resumed>) = 0 [pid 6018] ioctl(4, LOOP_CLR_FD [pid 6011] <... mmap resumed>) = 0x7f5c234cf000 [pid 6020] close(4 [pid 6018] <... ioctl resumed>) = 0 [pid 6011] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 6020] <... close resumed>) = 0 [ 125.276592][ T6010] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 6020] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6018] close(4 [pid 6011] <... mprotect resumed>) = 0 [pid 6020] <... futex resumed>) = 1 [pid 6018] <... close resumed>) = 0 [pid 6017] <... futex resumed>) = 0 [pid 6011] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6030] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6020] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6018] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6017] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6032 attached [pid 6032] set_robust_list(0x7f5c234ef9e0, 24) = 0 [pid 6032] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6020] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6018] <... futex resumed>) = 1 [pid 6017] <... futex resumed>) = 0 [pid 6011] <... clone resumed>, parent_tid=[6032], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6032 [pid 6020] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6018] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6017] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6016] <... futex resumed>) = 0 [pid 6011] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6030] <... write resumed>) = 1048576 [pid 6020] <... open resumed>) = 4 [pid 6018] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6016] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6011] <... futex resumed>) = 1 [pid 6009] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6020] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6018] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6016] <... futex resumed>) = 0 [pid 6011] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6020] <... futex resumed>) = 1 [pid 6017] <... futex resumed>) = 0 [pid 6020] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6017] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6020] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6017] <... futex resumed>) = 0 [pid 6020] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6017] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6020] <... write resumed>) = 9 [pid 6020] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6017] <... futex resumed>) = 0 [pid 6020] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6017] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6032] <... futex resumed>) = 0 [pid 6030] munmap(0x7f5c233f0000, 1048576 [pid 6020] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6017] <... futex resumed>) = 0 [pid 4999] <... umount2 resumed>) = 0 [pid 6020] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6017] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6032] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6030] <... munmap resumed>) = 0 [pid 6020] <... openat resumed>) = 5 [pid 6018] <... open resumed>) = 4 [pid 6016] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 125.325075][ T11] EXT4-fs (loop5): This should not happen!! Data will be lost [ 125.325075][ T11] [ 125.358537][ T6010] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 6020] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6018] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6020] <... futex resumed>) = 1 [pid 6018] <... futex resumed>) = 0 [pid 6017] <... futex resumed>) = 0 [pid 6020] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6018] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6017] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6030] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6020] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6017] <... futex resumed>) = 0 [pid 6016] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6011] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6020] open("./bus", O_RDWR [pid 6017] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6030] <... openat resumed>) = 4 [pid 6020] <... open resumed>) = 6 [ 125.371509][ T6010] EXT4-fs (loop3): This should not happen!! Data will be lost [ 125.371509][ T6010] [ 125.378510][ T6014] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 125.382001][ T6010] EXT4-fs (loop3): Total free blocks count 0 [ 125.399655][ T6010] EXT4-fs (loop3): Free/Dirty block details [ 125.405729][ T6010] EXT4-fs (loop3): free_blocks=2415919104 [ 125.411634][ T6010] EXT4-fs (loop3): dirty_blocks=16 [ 125.416930][ T6010] EXT4-fs (loop3): Block reservation details [pid 6030] ioctl(4, LOOP_SET_FD, 3 [pid 6020] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6017] <... futex resumed>) = 0 [pid 6016] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6020] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6017] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6020] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6017] <... futex resumed>) = 0 [pid 6020] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6017] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6031] <... ioctl resumed>) = 0 [pid 6020] <... mmap resumed>) = 0x20000000 [pid 6018] <... futex resumed>) = 0 [pid 6016] <... futex resumed>) = 1 [pid 6010] <... sendfile resumed>) = 63 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6031] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6020] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6018] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 4999] lstat("./32/file0", [pid 6031] <... futex resumed>) = 0 [pid 6020] <... futex resumed>) = 1 [pid 6018] <... write resumed>) = 9 [pid 6017] <... futex resumed>) = 0 [pid 6016] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6010] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6031] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6030] <... ioctl resumed>) = 0 [pid 6020] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6018] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6017] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6009] exit_group(0 [pid 4999] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6031] <... futex resumed>) = ? [pid 6030] close(3 [pid 6020] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6018] <... futex resumed>) = 0 [pid 6017] <... futex resumed>) = 0 [pid 6016] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6009] <... exit_group resumed>) = ? [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6031] +++ exited with 0 +++ [pid 6030] <... close resumed>) = 0 [pid 6020] sendfile(4, 5, NULL, 2147483713 [pid 6018] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6017] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 125.423064][ T6030] loop1: detected capacity change from 0 to 2048 [ 125.423196][ T6010] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 125.436478][ T6014] EXT4-fs (loop4): This should not happen!! Data will be lost [ 125.436478][ T6014] [ 125.446436][ T6014] EXT4-fs (loop4): Total free blocks count 0 [ 125.452483][ T6014] EXT4-fs (loop4): Free/Dirty block details [ 125.458622][ T6014] EXT4-fs (loop4): free_blocks=2415919104 [ 125.464395][ T6014] EXT4-fs (loop4): dirty_blocks=16 [ 125.469846][ T6014] EXT4-fs (loop4): Block reservation details [pid 4999] openat(AT_FDCWD, "./32/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6030] mkdir("./file0", 0777 [pid 6018] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6016] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6010] <... futex resumed>) = ? [pid 4999] <... openat resumed>) = 4 [pid 6030] <... mkdir resumed>) = 0 [pid 6018] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6016] <... futex resumed>) = 0 [pid 6010] +++ exited with 0 +++ [pid 6009] +++ exited with 0 +++ [pid 4999] fstat(4, [pid 6030] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6018] <... openat resumed>) = 5 [pid 6016] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6018] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] getdents64(4, [pid 6018] <... futex resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 6018] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4999] getdents64(4, 0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 6016] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4999] close(4) = 0 [pid 4999] rmdir("./32/file0") = 0 [pid 4999] getdents64(3, 0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./32") = 0 [pid 4999] mkdir("./33", 0777) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6032] <... ioctl resumed>) = 0 [pid 6016] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6014] <... sendfile resumed>) = 63 [pid 4999] <... openat resumed>) = 3 [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6009, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 6032] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 6032] <... futex resumed>) = 0 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [ 125.476124][ T6014] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 125.488446][ T6020] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 6032] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4999] close(3 [pid 6018] <... futex resumed>) = 0 [pid 6017] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6016] <... futex resumed>) = 1 [pid 6014] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... close resumed>) = 0 [pid 4997] umount2("./33", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6018] open("./bus", O_RDWR [pid 6017] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6018] <... open resumed>) = 6 [pid 6017] <... futex resumed>) = 0 [pid 6011] exit_group(0 [pid 6032] <... futex resumed>) = ? [pid 6018] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6017] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6011] <... exit_group resumed>) = ? [pid 4999] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6035 ./strace-static-x86_64: Process 6035 attached [pid 6032] +++ exited with 0 +++ [pid 6030] <... mount resumed>) = 0 [pid 6018] <... futex resumed>) = 0 [pid 6017] <... mmap resumed>) = 0x7f5c234cf000 [pid 6016] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6014] <... futex resumed>) = ? [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6035] set_robust_list(0x555556fb95e0, 24 [pid 6030] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6018] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6017] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 6030] <... openat resumed>) = 3 [pid 6017] <... mprotect resumed>) = 0 [pid 6030] chdir("./file0" [pid 6017] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6030] <... chdir resumed>) = 0 [pid 6016] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6030] ioctl(4, LOOP_CLR_FD [pid 6017] <... clone resumed>, parent_tid=[6036], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6036 [pid 6035] <... set_robust_list resumed>) = 0 [pid 6030] <... ioctl resumed>) = 0 [pid 6017] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6016] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6020] <... sendfile resumed>) = 63 [pid 6014] +++ exited with 0 +++ [pid 6011] +++ exited with 0 +++ [pid 4997] openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 6036 attached [pid 6035] chdir("./33" [pid 6030] close(4 [pid 6020] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6018] <... futex resumed>) = 0 [pid 6017] <... futex resumed>) = 0 [pid 6016] <... futex resumed>) = 1 [pid 4997] <... openat resumed>) = 3 [pid 6036] set_robust_list(0x7f5c234ef9e0, 24 [pid 6035] <... chdir resumed>) = 0 [pid 6030] <... close resumed>) = 0 [pid 6020] <... futex resumed>) = 0 [pid 6018] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6017] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6016] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6011, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 4997] fstat(3, [pid 6036] <... set_robust_list resumed>) = 0 [pid 6035] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6030] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6020] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6018] <... mmap resumed>) = 0x20000000 [pid 4998] restart_syscall(<... resuming interrupted clone ...> [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6036] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6035] <... prctl resumed>) = 0 [pid 6030] <... futex resumed>) = 1 [pid 6029] <... futex resumed>) = 0 [pid 6018] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... restart_syscall resumed>) = 0 [pid 4997] getdents64(3, [pid 6036] <... ioctl resumed>) = 0 [pid 6035] setpgid(0, 0 [pid 6030] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6029] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6018] <... futex resumed>) = 1 [pid 6016] <... futex resumed>) = 0 [ 125.516430][ T6020] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 125.529291][ T6020] EXT4-fs (loop0): This should not happen!! Data will be lost [ 125.529291][ T6020] [ 125.539418][ T6020] EXT4-fs (loop0): Total free blocks count 0 [ 125.545837][ T6020] EXT4-fs (loop0): Free/Dirty block details [ 125.552102][ T6020] EXT4-fs (loop0): free_blocks=2415919104 [ 125.557995][ T6020] EXT4-fs (loop0): dirty_blocks=16 [ 125.563150][ T6020] EXT4-fs (loop0): Block reservation details [ 125.569273][ T6020] EXT4-fs (loop0): i_reserved_data_blocks=1 [pid 4997] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 6036] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6035] <... setpgid resumed>) = 0 [pid 6030] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6029] <... futex resumed>) = 0 [pid 6018] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6016] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] umount2("./33/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6036] <... futex resumed>) = 1 [pid 6035] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6017] <... futex resumed>) = 0 [pid 4998] umount2("./32", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6035] <... openat resumed>) = 3 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./33/binderfs", [pid 6036] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6035] write(3, "1000", 4 [pid 6030] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6029] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6018] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6017] exit_group(0 [pid 6016] <... futex resumed>) = 0 [pid 4998] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6035] <... write resumed>) = 4 [pid 6020] <... futex resumed>) = ? [pid 6018] sendfile(4, 5, NULL, 2147483713 [pid 6017] <... exit_group resumed>) = ? [pid 6016] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] <... openat resumed>) = 3 [pid 4997] unlink("./33/binderfs" [pid 6035] close(3 [pid 6020] +++ exited with 0 +++ [pid 4998] fstat(3, [pid 4997] <... unlink resumed>) = 0 [pid 6035] <... close resumed>) = 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6036] <... futex resumed>) = ? [pid 6035] symlink("/dev/binderfs", "./binderfs" [pid 6030] <... open resumed>) = 4 [pid 4998] getdents64(3, [pid 6035] <... symlink resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 6035] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] umount2("./32/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6035] <... futex resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6035] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4998] lstat("./32/binderfs", [pid 6035] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6035] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 4998] unlink("./32/binderfs" [pid 6035] <... mprotect resumed>) = 0 [pid 4998] <... unlink resumed>) = 0 [pid 6035] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4998] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6035] <... clone resumed>, parent_tid=[6037], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6037 [pid 6035] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6035] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6037 attached [pid 6037] set_robust_list(0x7f5c2b8109e0, 24) = 0 [pid 6037] memfd_create("syzkaller", 0) = 3 [pid 6037] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5c233f0000 [pid 6036] +++ exited with 0 +++ [pid 6030] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6029] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6017] +++ exited with 0 +++ [pid 6016] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6030] <... futex resumed>) = 0 [pid 6029] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6016] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6030] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6016] <... futex resumed>) = 0 [pid 4994] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6017, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6029] <... futex resumed>) = 0 [pid 6029] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6016] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6030] <... write resumed>) = 9 [pid 6016] <... mmap resumed>) = 0x7f5c234cf000 [pid 6030] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6016] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 6030] <... futex resumed>) = 1 [pid 6029] <... futex resumed>) = 0 [pid 6016] <... mprotect resumed>) = 0 [pid 6030] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6029] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6030] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 125.613171][ T5457] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 125.615044][ T6018] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 125.636295][ T5457] EXT4-fs (loop3): This should not happen!! Data will be lost [ 125.636295][ T5457] [ 125.650709][ T74] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 6030] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6029] <... futex resumed>) = 0 [pid 6016] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6030] <... openat resumed>) = 5 [pid 6029] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4994] umount2("./34", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6037] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576./strace-static-x86_64: Process 6038 attached [pid 6038] set_robust_list(0x7f5c234ef9e0, 24) = 0 [pid 6038] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6030] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6029] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6016] <... clone resumed>, parent_tid=[6038], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6038 [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6016] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6030] <... futex resumed>) = 0 [pid 6029] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6030] open("./bus", O_RDWR [pid 6016] <... futex resumed>) = 1 [pid 4994] openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6038] <... futex resumed>) = 0 [pid 6038] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6029] <... futex resumed>) = 0 [pid 6030] <... open resumed>) = 6 [pid 6029] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6016] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4994] <... openat resumed>) = 3 [pid 6030] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] fstat(3, [pid 6030] <... futex resumed>) = 1 [pid 6029] <... futex resumed>) = 0 [pid 6030] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6029] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6037] <... write resumed>) = 1048576 [pid 6037] munmap(0x7f5c233f0000, 1048576 [pid 6030] <... mmap resumed>) = 0x20000000 [pid 6029] <... futex resumed>) = 0 [ 125.671577][ T6018] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 125.677295][ T74] EXT4-fs (loop4): This should not happen!! Data will be lost [ 125.677295][ T74] [ 125.685191][ T6018] EXT4-fs (loop2): This should not happen!! Data will be lost [ 125.685191][ T6018] [ 125.710725][ T6018] EXT4-fs (loop2): Total free blocks count 0 [pid 4994] getdents64(3, [pid 6030] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6029] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4994] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 6030] <... futex resumed>) = 0 [pid 6029] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4994] umount2("./34/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6030] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6029] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6030] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6029] <... futex resumed>) = 0 [pid 6030] sendfile(4, 5, NULL, 2147483713 [pid 4994] lstat("./34/binderfs", [pid 6029] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4994] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6037] <... munmap resumed>) = 0 [pid 6037] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [ 125.721919][ T6018] EXT4-fs (loop2): Free/Dirty block details [ 125.736084][ T6018] EXT4-fs (loop2): free_blocks=2415919104 [ 125.741859][ T6018] EXT4-fs (loop2): dirty_blocks=16 [ 125.750717][ T6030] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 125.761244][ T6037] loop5: detected capacity change from 0 to 2048 [pid 6037] ioctl(4, LOOP_SET_FD, 3 [pid 6016] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4994] unlink("./34/binderfs" [pid 4997] <... umount2 resumed>) = 0 [pid 4994] <... unlink resumed>) = 0 [pid 4997] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] lstat("./33/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./33/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [ 125.768731][ T6018] EXT4-fs (loop2): Block reservation details [ 125.780578][ T6018] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 125.789183][ T6030] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 125.789221][ T5457] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 125.801644][ T6030] EXT4-fs (loop1): This should not happen!! Data will be lost [pid 4997] fstat(4, [pid 6038] <... ioctl resumed>) = 0 [pid 6037] <... ioctl resumed>) = 0 [pid 6018] <... sendfile resumed>) = 63 [pid 6038] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6038] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(4, 0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4997] getdents64(4, 0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4997] close(4) = 0 [pid 4997] rmdir("./33/file0" [pid 6037] close(3) = 0 [pid 6037] mkdir("./file0", 0777 [pid 4997] <... rmdir resumed>) = 0 [pid 6037] <... mkdir resumed>) = 0 [pid 4997] getdents64(3, 0x555556fba620 /* 0 entries */, 32768) = 0 [pid 6018] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6016] exit_group(0 [pid 6029] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6038] <... futex resumed>) = ? [pid 6029] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6018] <... futex resumed>) = ? [pid 6016] <... exit_group resumed>) = ? [pid 4998] <... umount2 resumed>) = 0 [pid 4997] close(3 [pid 6037] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 4997] <... close resumed>) = 0 [pid 4997] rmdir("./33" [pid 6038] +++ exited with 0 +++ [pid 6029] <... futex resumed>) = 0 [pid 6018] +++ exited with 0 +++ [pid 4997] <... rmdir resumed>) = 0 [pid 6016] +++ exited with 0 +++ [pid 4998] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6016, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 4996] umount2("./34", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6029] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4996] openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4996] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] getdents64(3, 0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4996] umount2("./34/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] lstat("./34/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] mkdir("./34", 0777 [pid 4996] unlink("./34/binderfs" [pid 6029] <... mmap resumed>) = 0x7f5c234cf000 [pid 4998] lstat("./32/file0", [pid 4997] <... mkdir resumed>) = 0 [pid 4996] <... unlink resumed>) = 0 [pid 4997] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4996] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... openat resumed>) = 3 [pid 4997] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4997] close(3) = 0 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556fb95d0) = 6039 [ 125.801644][ T6030] [ 125.833173][ T6030] EXT4-fs (loop1): Total free blocks count 0 [ 125.848240][ T6030] EXT4-fs (loop1): Free/Dirty block details [ 125.854244][ T6030] EXT4-fs (loop1): free_blocks=2415919104 ./strace-static-x86_64: Process 6039 attached [pid 6029] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6039] set_robust_list(0x555556fb95e0, 24 [pid 6029] <... mprotect resumed>) = 0 [pid 4998] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6039] <... set_robust_list resumed>) = 0 [pid 6029] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4998] openat(AT_FDCWD, "./32/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6039] chdir("./34" [pid 4998] <... openat resumed>) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6039] <... chdir resumed>) = 0 [pid 6029] <... clone resumed>, parent_tid=[6042], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6042 [pid 4998] getdents64(4, [pid 6039] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6029] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6042 attached [pid 6039] <... prctl resumed>) = 0 [pid 6029] <... futex resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 6042] set_robust_list(0x7f5c234ef9e0, 24 [pid 6039] setpgid(0, 0 [pid 6029] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] getdents64(4, 0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 6042] <... set_robust_list resumed>) = 0 [pid 6042] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 4998] close(4 [pid 6039] <... setpgid resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 6037] <... mount resumed>) = 0 [pid 4998] rmdir("./32/file0" [pid 6039] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4998] <... rmdir resumed>) = 0 [pid 4998] getdents64(3, 0x555556fba620 /* 0 entries */, 32768) = 0 [pid 6039] write(3, "1000", 4) = 4 [pid 4998] close(3 [pid 6039] close(3 [pid 4998] <... close resumed>) = 0 [pid 6039] <... close resumed>) = 0 [pid 4998] rmdir("./32" [pid 6039] symlink("/dev/binderfs", "./binderfs" [pid 6037] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 4998] <... rmdir resumed>) = 0 [pid 6039] <... symlink resumed>) = 0 [pid 6037] <... openat resumed>) = 3 [ 125.860998][ T5608] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 125.861409][ T6030] EXT4-fs (loop1): dirty_blocks=16 [ 125.882113][ T6030] EXT4-fs (loop1): Block reservation details [ 125.893939][ T5608] EXT4-fs (loop2): This should not happen!! Data will be lost [ 125.893939][ T5608] [ 125.894136][ T6030] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 125.914356][ T5457] EXT4-fs (loop0): This should not happen!! Data will be lost [pid 4998] mkdir("./33", 0777 [pid 6042] <... ioctl resumed>) = 0 [pid 6039] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6037] chdir("./file0" [pid 6030] <... sendfile resumed>) = 63 [pid 4998] <... mkdir resumed>) = 0 [pid 6030] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6030] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6042] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6039] <... futex resumed>) = 0 [pid 6037] <... chdir resumed>) = 0 [pid 6042] <... futex resumed>) = 1 [pid 6039] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6037] ioctl(4, LOOP_CLR_FD [pid 6029] <... futex resumed>) = 0 [pid 6042] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6029] exit_group(0 [pid 6039] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6042] <... futex resumed>) = ? [pid 6029] <... exit_group resumed>) = ? [pid 6037] <... ioctl resumed>) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6042] +++ exited with 0 +++ [pid 4998] <... openat resumed>) = 3 [pid 6039] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6037] close(4 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556fb95d0) = 6043 [pid 6039] <... mprotect resumed>) = 0 [pid 6037] <... close resumed>) = 0 [pid 6037] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6030] <... futex resumed>) = ? [pid 6039] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6037] <... futex resumed>) = 1 [pid 6035] <... futex resumed>) = 0 [pid 6030] +++ exited with 0 +++ [pid 6029] +++ exited with 0 +++ [pid 6035] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6029, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 6037] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6035] <... futex resumed>) = 0 [pid 6035] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6043 attached [pid 6039] <... clone resumed>, parent_tid=[6044], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6044 [pid 6039] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6043] set_robust_list(0x555556fb95e0, 24 [pid 4995] umount2("./33", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6039] <... futex resumed>) = 0 [pid 6037] <... open resumed>) = 4 [pid 6037] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6039] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4995] openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4995] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] getdents64(3, 0x555556fba620 /* 4 entries */, 32768) = 112 [pid 6037] <... futex resumed>) = 1 [pid 6035] <... futex resumed>) = 0 [pid 4995] umount2("./33/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6037] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6035] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6043] <... set_robust_list resumed>) = 0 [pid 6037] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6035] <... futex resumed>) = 0 [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6043] chdir("./33" [pid 6037] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6035] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4995] lstat("./33/binderfs", [pid 6043] <... chdir resumed>) = 0 [pid 6037] <... write resumed>) = 9 [pid 6043] prctl(PR_SET_PDEATHSIG, SIGKILL [ 125.914356][ T5457] [pid 6037] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6043] <... prctl resumed>) = 0 [pid 6037] <... futex resumed>) = 1 [pid 6035] <... futex resumed>) = 0 [pid 4995] unlink("./33/binderfs" [pid 6043] setpgid(0, 0 [pid 6037] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6035] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6043] <... setpgid resumed>) = 0 [pid 6035] <... futex resumed>) = 0 [pid 4995] <... unlink resumed>) = 0 [pid 6037] <... openat resumed>) = 5 ./strace-static-x86_64: Process 6044 attached [pid 6043] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6037] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6035] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4995] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6044] set_robust_list(0x7f5c2b8109e0, 24 [pid 6043] <... openat resumed>) = 3 [pid 6037] <... futex resumed>) = 0 [pid 6035] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6043] write(3, "1000", 4 [pid 6035] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6043] <... write resumed>) = 4 [pid 6037] open("./bus", O_RDWR [pid 6035] <... futex resumed>) = 0 [pid 6043] close(3 [pid 6035] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6043] <... close resumed>) = 0 [pid 6043] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6043] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6043] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c2b7f0000 [pid 6043] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6043] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6045], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6045 [pid 6043] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6043] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6044] <... set_robust_list resumed>) = 0 [pid 6037] <... open resumed>) = 6 [pid 6037] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6035] <... futex resumed>) = 0 [pid 6044] memfd_create("syzkaller", 0 [pid 6037] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6035] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6045 attached [pid 6044] <... memfd_create resumed>) = 3 [pid 6037] <... mmap resumed>) = 0x20000000 [pid 6035] <... futex resumed>) = 0 [pid 4996] <... umount2 resumed>) = 0 [pid 4994] <... umount2 resumed>) = 0 [pid 6045] set_robust_list(0x7f5c2b8109e0, 24 [pid 6044] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6037] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6035] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4996] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6045] <... set_robust_list resumed>) = 0 [pid 6044] <... mmap resumed>) = 0x7f5c233f0000 [pid 6037] <... futex resumed>) = 0 [pid 6035] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6045] memfd_create("syzkaller", 0 [pid 6044] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [ 125.971577][ T5608] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 125.992396][ T5608] EXT4-fs (loop1): This should not happen!! Data will be lost [ 125.992396][ T5608] [pid 6037] sendfile(4, 5, NULL, 2147483713 [pid 6035] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] lstat("./34/file0", [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6045] <... memfd_create resumed>) = 3 [pid 6044] <... write resumed>) = 1048576 [pid 6035] <... futex resumed>) = 0 [pid 4996] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] <... umount2 resumed>) = 0 [pid 4994] lstat("./34/file0", [pid 6045] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4996] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6045] <... mmap resumed>) = 0x7f5c233f0000 [ 126.026163][ T6037] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 126.047674][ T6037] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 126.061239][ T6037] EXT4-fs (loop5): This should not happen!! Data will be lost [ 126.061239][ T6037] [pid 6044] munmap(0x7f5c233f0000, 1048576 [pid 6035] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] openat(AT_FDCWD, "./34/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4995] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4996] <... openat resumed>) = 4 [pid 4994] openat(AT_FDCWD, "./34/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4996] fstat(4, [pid 4994] <... openat resumed>) = 4 [pid 6044] <... munmap resumed>) = 0 [pid 4996] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] fstat(4, [pid 4996] getdents64(4, [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4994] getdents64(4, [pid 4996] getdents64(4, [pid 4994] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4996] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4994] getdents64(4, [pid 6045] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6044] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4996] close(4 [pid 4995] lstat("./33/file0", [pid 4994] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4996] <... close resumed>) = 0 [pid 4994] close(4 [pid 4996] rmdir("./34/file0" [pid 4994] <... close resumed>) = 0 [pid 6044] <... openat resumed>) = 4 [pid 4996] <... rmdir resumed>) = 0 [pid 4995] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] rmdir("./34/file0" [pid 6044] ioctl(4, LOOP_SET_FD, 3 [pid 4996] getdents64(3, [pid 4995] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6044] <... ioctl resumed>) = 0 [pid 6037] <... sendfile resumed>) = 63 [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6044] close(3 [pid 6037] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] openat(AT_FDCWD, "./33/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6044] <... close resumed>) = 0 [pid 6037] <... futex resumed>) = 1 [pid 4995] <... openat resumed>) = 4 [pid 6035] <... futex resumed>) = 0 [pid 6044] mkdir("./file0", 0777 [pid 6037] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6035] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4995] fstat(4, [pid 4994] <... rmdir resumed>) = 0 [pid 4996] close(3 [pid 4994] getdents64(3, [pid 4996] <... close resumed>) = 0 [pid 4994] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 6044] <... mkdir resumed>) = 0 [pid 6037] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6035] <... futex resumed>) = 0 [pid 4996] rmdir("./34" [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] close(3 [pid 6044] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6037] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6035] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4996] <... rmdir resumed>) = 0 [pid 4994] <... close resumed>) = 0 [pid 6037] <... ioctl resumed>) = 0 [pid 4996] mkdir("./35", 0777 [pid 4995] getdents64(4, [pid 4994] rmdir("./34" [pid 6045] <... write resumed>) = 1048576 [pid 6037] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... mkdir resumed>) = 0 [pid 4995] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4994] <... rmdir resumed>) = 0 [pid 6045] munmap(0x7f5c233f0000, 1048576 [pid 6037] <... futex resumed>) = 1 [pid 6035] <... futex resumed>) = 0 [pid 4996] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4994] mkdir("./35", 0777 [pid 6045] <... munmap resumed>) = 0 [pid 6037] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6035] exit_group(0 [pid 4996] <... openat resumed>) = 3 [pid 4995] getdents64(4, [pid 4994] <... mkdir resumed>) = 0 [pid 6045] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6037] <... futex resumed>) = ? [pid 6035] <... exit_group resumed>) = ? [pid 4996] ioctl(3, LOOP_CLR_FD [pid 4995] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4994] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6045] <... openat resumed>) = 4 [pid 6037] +++ exited with 0 +++ [pid 4996] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4994] <... openat resumed>) = 3 [pid 4996] close(3 [ 126.071099][ T6037] EXT4-fs (loop5): Total free blocks count 0 [ 126.077759][ T6037] EXT4-fs (loop5): Free/Dirty block details [ 126.083707][ T6037] EXT4-fs (loop5): free_blocks=2415919104 [ 126.091550][ T6037] EXT4-fs (loop5): dirty_blocks=16 [ 126.098016][ T6037] EXT4-fs (loop5): Block reservation details [ 126.104860][ T6037] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 126.111622][ T6044] loop3: detected capacity change from 0 to 2048 [pid 4994] ioctl(3, LOOP_CLR_FD [pid 6045] ioctl(4, LOOP_SET_FD, 3 [pid 6035] +++ exited with 0 +++ [pid 4996] <... close resumed>) = 0 [pid 4995] close(4 [pid 6044] <... mount resumed>) = 0 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6035, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 4996] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4995] <... close resumed>) = 0 [pid 4994] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6045] <... ioctl resumed>) = 0 [pid 6044] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 4995] rmdir("./33/file0" [pid 6045] close(3 [pid 6044] <... openat resumed>) = 3 [pid 4995] <... rmdir resumed>) = 0 [pid 4994] close(3 [pid 6045] <... close resumed>) = 0 [pid 6044] chdir("./file0" [pid 4999] umount2("./33", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6048 [pid 4995] getdents64(3, ./strace-static-x86_64: Process 6048 attached [pid 6045] mkdir("./file0", 0777 [pid 6044] <... chdir resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4994] <... close resumed>) = 0 [pid 6048] set_robust_list(0x555556fb95e0, 24 [pid 6045] <... mkdir resumed>) = 0 [pid 6044] ioctl(4, LOOP_CLR_FD [pid 4999] openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4995] close(3 [pid 4994] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6048] <... set_robust_list resumed>) = 0 [pid 6045] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6044] <... ioctl resumed>) = 0 [pid 4999] <... openat resumed>) = 3 [pid 4995] <... close resumed>) = 0 [pid 4995] rmdir("./33" [pid 6048] chdir("./35" [pid 6044] close(4 [pid 4999] fstat(3, [pid 4995] <... rmdir resumed>) = 0 [pid 4994] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6049 [pid 6048] <... chdir resumed>) = 0 [pid 6044] <... close resumed>) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] mkdir("./34", 0777 [pid 6048] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6044] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] getdents64(3, [pid 4995] <... mkdir resumed>) = 0 [pid 6048] <... prctl resumed>) = 0 [pid 6044] <... futex resumed>) = 1 [pid 6039] <... futex resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4995] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6048] setpgid(0, 0 [pid 6044] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6039] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] umount2("./33/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] <... openat resumed>) = 3 [pid 6048] <... setpgid resumed>) = 0 [pid 6039] <... futex resumed>) = 0 [pid 4995] ioctl(3, LOOP_CLR_FD [pid 6039] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4995] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] close(3 [pid 6048] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4999] lstat("./33/binderfs", [pid 4995] <... close resumed>) = 0 [pid 4995] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6048] <... openat resumed>) = 3 [pid 6044] <... open resumed>) = 4 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [ 126.159685][ T6045] loop4: detected capacity change from 0 to 2048 [pid 6048] write(3, "1000", 4 [pid 6044] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] unlink("./33/binderfs" [pid 4995] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6051 ./strace-static-x86_64: Process 6049 attached [pid 6048] <... write resumed>) = 4 [pid 6044] <... futex resumed>) = 1 [pid 6039] <... futex resumed>) = 0 [pid 4999] <... unlink resumed>) = 0 [pid 6049] set_robust_list(0x555556fb95e0, 24 [pid 6048] close(3 [pid 6044] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6039] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6049] <... set_robust_list resumed>) = 0 [pid 6048] <... close resumed>) = 0 [pid 6044] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6039] <... futex resumed>) = 0 [pid 6049] chdir("./35" [pid 6048] symlink("/dev/binderfs", "./binderfs" [pid 6044] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6039] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6049] <... chdir resumed>) = 0 [pid 6049] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6049] setpgid(0, 0) = 0 [pid 6049] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6049] write(3, "1000", 4) = 4 [pid 6049] close(3) = 0 [pid 6049] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6049] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6049] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c2b7f0000 [pid 6049] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6049] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6053], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6053 [pid 6049] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6049] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6048] <... symlink resumed>) = 0 [pid 6044] <... write resumed>) = 9 [pid 6048] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6044] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6048] <... futex resumed>) = 0 [pid 6044] <... futex resumed>) = 1 [pid 6039] <... futex resumed>) = 0 [pid 6048] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6044] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6039] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6048] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6044] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6039] <... futex resumed>) = 0 [pid 6048] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6044] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6039] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6048] <... mprotect resumed>) = 0 [pid 6044] <... openat resumed>) = 5 [pid 6048] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6044] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6045] <... mount resumed>) = 0 [pid 6045] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6044] <... futex resumed>) = 1 [pid 6039] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6054 attached ./strace-static-x86_64: Process 6051 attached [pid 6048] <... clone resumed>, parent_tid=[6054], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6054 [pid 6045] <... openat resumed>) = 3 [pid 6044] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6039] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6054] set_robust_list(0x7f5c2b8109e0, 24 [pid 6051] set_robust_list(0x555556fb95e0, 24 [pid 6048] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6045] chdir("./file0" [pid 6044] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6039] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6053 attached [pid 6054] <... set_robust_list resumed>) = 0 [pid 6051] <... set_robust_list resumed>) = 0 [pid 6048] <... futex resumed>) = 0 [pid 6045] <... chdir resumed>) = 0 [pid 6044] open("./bus", O_RDWR [pid 6039] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6054] memfd_create("syzkaller", 0 [pid 6053] set_robust_list(0x7f5c2b8109e0, 24 [pid 6051] chdir("./34" [pid 6048] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6045] ioctl(4, LOOP_CLR_FD [pid 6044] <... open resumed>) = 6 [pid 6054] <... memfd_create resumed>) = 3 [pid 6053] <... set_robust_list resumed>) = 0 [pid 6051] <... chdir resumed>) = 0 [ 126.202170][ T11] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 6045] <... ioctl resumed>) = 0 [pid 6044] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6054] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6053] memfd_create("syzkaller", 0 [pid 6051] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6045] close(4 [pid 6044] <... futex resumed>) = 1 [pid 6039] <... futex resumed>) = 0 [pid 6054] <... mmap resumed>) = 0x7f5c233f0000 [pid 6053] <... memfd_create resumed>) = 3 [pid 6051] <... prctl resumed>) = 0 [pid 6045] <... close resumed>) = 0 [pid 6044] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6039] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6053] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6051] setpgid(0, 0 [pid 6045] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6044] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6039] <... futex resumed>) = 0 [pid 6053] <... mmap resumed>) = 0x7f5c233f0000 [pid 6051] <... setpgid resumed>) = 0 [pid 6045] <... futex resumed>) = 1 [pid 6044] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6043] <... futex resumed>) = 0 [pid 6039] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6054] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6053] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6051] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6045] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6044] <... mmap resumed>) = 0x20000000 [pid 6043] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6051] <... openat resumed>) = 3 [pid 6045] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6044] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6043] <... futex resumed>) = 0 [pid 6051] write(3, "1000", 4 [pid 6045] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6044] <... futex resumed>) = 1 [pid 6043] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6039] <... futex resumed>) = 0 [pid 6051] <... write resumed>) = 4 [pid 6045] <... open resumed>) = 4 [pid 6044] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6039] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6051] close(3 [pid 6045] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6044] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6039] <... futex resumed>) = 0 [pid 6051] <... close resumed>) = 0 [pid 6045] <... futex resumed>) = 1 [pid 6044] sendfile(4, 5, NULL, 2147483713 [pid 6043] <... futex resumed>) = 0 [pid 6039] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 126.245942][ T11] EXT4-fs (loop5): This should not happen!! Data will be lost [ 126.245942][ T11] [pid 6043] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6054] <... write resumed>) = 1048576 [pid 6051] symlink("/dev/binderfs", "./binderfs" [pid 6045] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6043] <... futex resumed>) = 0 [pid 6053] <... write resumed>) = 1048576 [pid 6043] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6054] munmap(0x7f5c233f0000, 1048576 [pid 6053] munmap(0x7f5c233f0000, 1048576 [pid 6054] <... munmap resumed>) = 0 [pid 6051] <... symlink resumed>) = 0 [pid 6045] <... write resumed>) = 9 [pid 6054] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6053] <... munmap resumed>) = 0 [pid 6054] ioctl(4, LOOP_SET_FD, 3 [pid 6051] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6045] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6053] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6051] <... futex resumed>) = 0 [pid 6045] <... futex resumed>) = 1 [pid 6043] <... futex resumed>) = 0 [pid 6053] <... openat resumed>) = 4 [pid 6051] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6045] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6043] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6053] ioctl(4, LOOP_SET_FD, 3 [pid 6051] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6045] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6043] <... futex resumed>) = 0 [pid 6054] <... ioctl resumed>) = 0 [pid 6051] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6045] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6043] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6054] close(3) = 0 [pid 6054] mkdir("./file0", 0777 [pid 6051] <... mprotect resumed>) = 0 [pid 6045] <... openat resumed>) = 5 [pid 6054] <... mkdir resumed>) = 0 [pid 6051] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6054] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6045] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6039] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6039] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6039] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c234cf000 [pid 6039] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6039] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6056], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6056 [pid 6039] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6039] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6053] <... ioctl resumed>) = 0 [pid 6053] close(3) = 0 [pid 6053] mkdir("./file0", 0777) = 0 [ 126.299981][ T6044] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 126.321503][ T6054] loop2: detected capacity change from 0 to 2048 [ 126.332508][ T6053] loop0: detected capacity change from 0 to 2048 [pid 6053] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6051] <... clone resumed>, parent_tid=[6055], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6055 [pid 6045] <... futex resumed>) = 1 [pid 6043] <... futex resumed>) = 0 [pid 4999] <... umount2 resumed>) = 0 [pid 6051] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6045] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6043] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6051] <... futex resumed>) = 0 [pid 6045] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6043] <... futex resumed>) = 0 [pid 6051] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6045] open("./bus", O_RDWR [pid 6043] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6045] <... open resumed>) = 6 [pid 6045] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6043] <... futex resumed>) = 0 [pid 6045] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6043] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6045] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6043] <... futex resumed>) = 0 [pid 6045] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6043] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6045] <... mmap resumed>) = 0x20000000 ./strace-static-x86_64: Process 6055 attached [pid 6045] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6043] <... futex resumed>) = 0 [pid 6045] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6043] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6045] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6043] <... futex resumed>) = 0 [pid 6045] sendfile(4, 5, NULL, 2147483713 [pid 6043] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6055] set_robust_list(0x7f5c2b8109e0, 24 [ 126.357865][ T6044] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 126.373097][ T6044] EXT4-fs (loop3): This should not happen!! Data will be lost [ 126.373097][ T6044] [ 126.392668][ T6045] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 4999] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6055] <... set_robust_list resumed>) = 0 [pid 6055] memfd_create("syzkaller", 0 [pid 6039] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6055] <... memfd_create resumed>) = 3 [pid 6055] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4999] lstat("./33/file0", [pid 6055] <... mmap resumed>) = 0x7f5c233f0000 [pid 6054] <... mount resumed>) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 6056 attached [pid 4999] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./33/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 6054] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 4999] close(4 [pid 6056] set_robust_list(0x7f5c234ef9e0, 24 [pid 4999] <... close resumed>) = 0 [pid 4999] rmdir("./33/file0" [pid 6056] <... set_robust_list resumed>) = 0 [pid 6054] <... openat resumed>) = 3 [pid 4999] <... rmdir resumed>) = 0 [pid 4999] getdents64(3, 0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./33") = 0 [pid 4999] mkdir("./34", 0777) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6056] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6054] chdir("./file0" [pid 4999] <... openat resumed>) = 3 [pid 6054] <... chdir resumed>) = 0 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 6054] ioctl(4, LOOP_CLR_FD [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6054] <... ioctl resumed>) = 0 [pid 4999] close(3 [pid 6054] close(4 [pid 4999] <... close resumed>) = 0 [pid 6054] <... close resumed>) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6054] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6048] <... futex resumed>) = 0 [pid 4999] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6059 [pid 6054] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6048] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6054] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6048] <... futex resumed>) = 0 [pid 6054] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6048] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6054] <... open resumed>) = 4 [pid 6054] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6048] <... futex resumed>) = 0 [pid 6054] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6048] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6054] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6048] <... futex resumed>) = 0 [pid 6054] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6048] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6053] <... mount resumed>) = 0 [pid 6054] <... write resumed>) = 9 [pid 6053] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6054] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6053] <... openat resumed>) = 3 [pid 6054] <... futex resumed>) = 1 [pid 6053] chdir("./file0" [pid 6048] <... futex resumed>) = 0 [pid 6054] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6053] <... chdir resumed>) = 0 [pid 6048] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6054] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6053] ioctl(4, LOOP_CLR_FD [pid 6048] <... futex resumed>) = 0 [pid 6055] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6054] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6053] <... ioctl resumed>) = 0 [pid 6048] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6043] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6054] <... openat resumed>) = 5 [pid 6053] close(4 [pid 6043] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6054] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6053] <... close resumed>) = 0 [pid 6043] <... futex resumed>) = 0 [pid 6054] <... futex resumed>) = 1 [pid 6053] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6048] <... futex resumed>) = 0 [pid 6043] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6054] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6053] <... futex resumed>) = 1 [pid 6049] <... futex resumed>) = 0 [pid 6048] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6043] <... mmap resumed>) = 0x7f5c234cf000 [ 126.392763][ T6044] EXT4-fs (loop3): Total free blocks count 0 [ 126.418829][ T6044] EXT4-fs (loop3): Free/Dirty block details [ 126.424853][ T6044] EXT4-fs (loop3): free_blocks=2415919104 [ 126.433129][ T6044] EXT4-fs (loop3): dirty_blocks=16 [pid 6055] <... write resumed>) = 1048576 [pid 6054] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6053] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6049] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6048] <... futex resumed>) = 0 [pid 6043] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 6059 attached [pid 6054] open("./bus", O_RDWR [pid 6053] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6049] <... futex resumed>) = 0 [ 126.466014][ T6045] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 126.478006][ T6044] EXT4-fs (loop3): Block reservation details [ 126.479245][ T6045] EXT4-fs (loop4): This should not happen!! Data will be lost [ 126.479245][ T6045] [ 126.484915][ T6044] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 126.494465][ T6045] EXT4-fs (loop4): Total free blocks count 0 [ 126.506149][ T6045] EXT4-fs (loop4): Free/Dirty block details [pid 6048] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6059] set_robust_list(0x555556fb95e0, 24 [pid 6054] <... open resumed>) = 6 [pid 6053] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6049] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6043] <... mprotect resumed>) = 0 [pid 6059] <... set_robust_list resumed>) = 0 [pid 6054] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6053] <... open resumed>) = 4 [pid 6059] chdir("./34" [pid 6054] <... futex resumed>) = 1 [pid 6053] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6048] <... futex resumed>) = 0 [pid 6059] <... chdir resumed>) = 0 [pid 6054] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6053] <... futex resumed>) = 1 [pid 6049] <... futex resumed>) = 0 [pid 6048] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6059] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6054] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6053] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6049] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6048] <... futex resumed>) = 0 [pid 6059] <... prctl resumed>) = 0 [pid 6054] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6053] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6049] <... futex resumed>) = 0 [pid 6048] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6059] setpgid(0, 0 [pid 6054] <... mmap resumed>) = 0x20000000 [pid 6053] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6049] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6059] <... setpgid resumed>) = 0 [pid 6054] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6053] <... write resumed>) = 9 [pid 6043] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6059] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6054] <... futex resumed>) = 1 [pid 6053] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6048] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6062 attached [pid 6059] <... openat resumed>) = 3 [pid 6054] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6053] <... futex resumed>) = 1 [pid 6049] <... futex resumed>) = 0 [pid 6048] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6059] write(3, "1000", 4 [pid 6054] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6053] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6049] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6048] <... futex resumed>) = 0 [pid 6059] <... write resumed>) = 4 [pid 6055] munmap(0x7f5c233f0000, 1048576 [pid 6054] sendfile(4, 5, NULL, 2147483713 [pid 6053] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6049] <... futex resumed>) = 0 [pid 6048] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6059] close(3 [pid 6055] <... munmap resumed>) = 0 [pid 6053] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6049] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6059] <... close resumed>) = 0 [pid 6055] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6053] <... openat resumed>) = 5 [pid 6059] symlink("/dev/binderfs", "./binderfs" [pid 6055] <... openat resumed>) = 4 [pid 6053] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6062] set_robust_list(0x7f5c234ef9e0, 24 [pid 6059] <... symlink resumed>) = 0 [pid 6056] <... ioctl resumed>) = 0 [pid 6045] <... sendfile resumed>) = 63 [pid 6044] <... sendfile resumed>) = 63 [pid 6043] <... clone resumed>, parent_tid=[6062], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6062 [pid 6062] <... set_robust_list resumed>) = 0 [pid 6056] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6045] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6044] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6043] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6039] exit_group(0 [pid 6062] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6059] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6056] <... futex resumed>) = ? [pid 6053] <... futex resumed>) = 1 [pid 6049] <... futex resumed>) = 0 [pid 6045] <... futex resumed>) = 0 [pid 6044] <... futex resumed>) = ? [pid 6043] <... futex resumed>) = 0 [pid 6039] <... exit_group resumed>) = ? [pid 6062] <... ioctl resumed>) = 0 [pid 6059] <... futex resumed>) = 0 [pid 6056] +++ exited with 0 +++ [pid 6053] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6049] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6045] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6044] +++ exited with 0 +++ [pid 6043] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6039] +++ exited with 0 +++ [pid 6062] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6059] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6053] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6049] <... futex resumed>) = 0 [pid 6043] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6055] ioctl(4, LOOP_SET_FD, 3 [pid 6062] <... futex resumed>) = 0 [pid 6059] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6053] open("./bus", O_RDWR [pid 6049] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 126.512096][ T6045] EXT4-fs (loop4): free_blocks=2415919104 [ 126.526220][ T6045] EXT4-fs (loop4): dirty_blocks=16 [ 126.531544][ T6045] EXT4-fs (loop4): Block reservation details [ 126.540305][ T6045] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 126.550855][ T6054] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 6043] exit_group(0 [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6039, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 6045] <... futex resumed>) = ? [pid 6043] <... exit_group resumed>) = ? [pid 6062] +++ exited with 0 +++ [pid 6045] +++ exited with 0 +++ [pid 6043] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6043, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 4998] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 6059] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6053] <... open resumed>) = 6 [pid 4997] restart_syscall(<... resuming interrupted clone ...> [pid 6059] <... mprotect resumed>) = 0 [pid 6053] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6048] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4997] <... restart_syscall resumed>) = 0 [pid 6059] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6053] <... futex resumed>) = 1 [pid 6049] <... futex resumed>) = 0 [pid 6048] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] umount2("./33", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6055] <... ioctl resumed>) = 0 [pid 6053] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6049] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6048] <... futex resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6059] <... clone resumed>, parent_tid=[6063], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6063 [pid 6055] close(3 [pid 6053] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6049] <... futex resumed>) = 0 [pid 6048] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4998] openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 6063 attached [pid 6059] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6055] <... close resumed>) = 0 [pid 6053] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6049] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6048] <... mmap resumed>) = 0x7f5c234cf000 [pid 4998] <... openat resumed>) = 3 [pid 4997] umount2("./34", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6063] set_robust_list(0x7f5c2b8109e0, 24 [pid 6059] <... futex resumed>) = 0 [pid 4998] fstat(3, [pid 6063] <... set_robust_list resumed>) = 0 [pid 6059] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6055] mkdir("./file0", 0777 [pid 6053] <... mmap resumed>) = 0x20000000 [pid 6048] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6063] memfd_create("syzkaller", 0 [pid 6053] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6048] <... mprotect resumed>) = 0 [pid 4998] getdents64(3, [pid 6063] <... memfd_create resumed>) = 3 [pid 6055] <... mkdir resumed>) = 0 [pid 6053] <... futex resumed>) = 1 [pid 6049] <... futex resumed>) = 0 [pid 6048] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4998] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4997] openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6063] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6055] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6053] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6049] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] umount2("./33/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... openat resumed>) = 3 [pid 6063] <... mmap resumed>) = 0x7f5c233f0000 [pid 6053] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6049] <... futex resumed>) = 0 [pid 6048] <... clone resumed>, parent_tid=[6064], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6064 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] fstat(3, ./strace-static-x86_64: Process 6064 attached [pid 6063] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6053] sendfile(4, 5, NULL, 2147483713 [pid 6049] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6048] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] lstat("./33/binderfs", [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6064] set_robust_list(0x7f5c234ef9e0, 24 [pid 6048] <... futex resumed>) = 0 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] getdents64(3, [pid 6064] <... set_robust_list resumed>) = 0 [pid 6048] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] unlink("./33/binderfs" [pid 6064] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 4998] <... unlink resumed>) = 0 [pid 4997] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW [ 126.586069][ T6055] loop1: detected capacity change from 0 to 2048 [pid 4997] umount2("./34/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./34/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] unlink("./34/binderfs") = 0 [pid 6055] <... mount resumed>) = 0 [pid 4997] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6063] <... write resumed>) = 1048576 [pid 6063] munmap(0x7f5c233f0000, 1048576) = 0 [ 126.630478][ T6053] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 126.649933][ T6053] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 126.661044][ T6054] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 6063] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6063] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6055] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6049] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6048] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6055] <... openat resumed>) = 3 [pid 6049] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6055] chdir("./file0" [pid 6049] <... futex resumed>) = 0 [pid 6055] <... chdir resumed>) = 0 [pid 6049] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6055] ioctl(4, LOOP_CLR_FD [pid 6049] <... mmap resumed>) = 0x7f5c234cf000 [pid 6055] <... ioctl resumed>) = 0 [pid 6049] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 6055] close(4 [pid 6049] <... mprotect resumed>) = 0 [ 126.662695][ T74] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 126.686315][ T6063] loop5: detected capacity change from 0 to 2048 [ 126.688352][ T5608] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 126.693010][ T6053] EXT4-fs (loop0): This should not happen!! Data will be lost [ 126.693010][ T6053] [ 126.715978][ T74] EXT4-fs (loop4): This should not happen!! Data will be lost [ 126.715978][ T74] [pid 6063] close(3 [pid 6055] <... close resumed>) = 0 [pid 6049] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6063] <... close resumed>) = 0 [pid 6055] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6063] mkdir("./file0", 0777 [pid 6055] <... futex resumed>) = 1 [pid 6051] <... futex resumed>) = 0 [pid 6049] <... clone resumed>, parent_tid=[6067], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6067 [pid 6063] <... mkdir resumed>) = 0 [pid 6055] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6051] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6049] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6063] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6055] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6051] <... futex resumed>) = 0 [pid 6049] <... futex resumed>) = 0 [pid 6055] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6051] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6049] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6067 attached [pid 6055] <... open resumed>) = 4 [pid 6067] set_robust_list(0x7f5c234ef9e0, 24 [pid 6055] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6067] <... set_robust_list resumed>) = 0 [pid 6055] <... futex resumed>) = 1 [pid 6051] <... futex resumed>) = 0 [pid 6067] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6055] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6051] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6055] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6051] <... futex resumed>) = 0 [pid 6055] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6051] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6055] <... write resumed>) = 9 [pid 6055] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6051] <... futex resumed>) = 0 [pid 6055] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6051] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6055] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6051] <... futex resumed>) = 0 [pid 6055] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6051] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6055] <... openat resumed>) = 5 [pid 6055] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6051] <... futex resumed>) = 0 [pid 6055] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6051] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6055] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 126.727317][ T6054] EXT4-fs (loop2): This should not happen!! Data will be lost [ 126.727317][ T6054] [ 126.738034][ T6054] EXT4-fs (loop2): Total free blocks count 0 [ 126.744078][ T6054] EXT4-fs (loop2): Free/Dirty block details [ 126.750269][ T6054] EXT4-fs (loop2): free_blocks=2415919104 [ 126.756292][ T6054] EXT4-fs (loop2): dirty_blocks=16 [ 126.761552][ T6054] EXT4-fs (loop2): Block reservation details [ 126.770178][ T6054] EXT4-fs (loop2): i_reserved_data_blocks=1 [pid 6051] <... futex resumed>) = 0 [pid 6064] <... ioctl resumed>) = 0 [pid 6063] <... mount resumed>) = 0 [pid 6055] open("./bus", O_RDWR [pid 6054] <... sendfile resumed>) = 63 [pid 6051] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6063] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6055] <... open resumed>) = 6 [pid 6063] <... openat resumed>) = 3 [pid 6055] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6063] chdir("./file0" [pid 6055] <... futex resumed>) = 1 [pid 6051] <... futex resumed>) = 0 [pid 6063] <... chdir resumed>) = 0 [pid 6055] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6051] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6064] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6063] ioctl(4, LOOP_CLR_FD [pid 6055] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6051] <... futex resumed>) = 0 [pid 6049] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6064] <... futex resumed>) = 0 [pid 6063] <... ioctl resumed>) = 0 [pid 6055] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6054] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6051] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6064] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6063] close(4 [pid 6055] <... mmap resumed>) = 0x20000000 [pid 6048] exit_group(0 [pid 4998] <... umount2 resumed>) = 0 [pid 6064] <... futex resumed>) = ? [pid 6063] <... close resumed>) = 0 [pid 6055] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6048] <... exit_group resumed>) = ? [pid 6064] +++ exited with 0 +++ [pid 6063] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6055] <... futex resumed>) = 1 [pid 6051] <... futex resumed>) = 0 [pid 4998] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6063] <... futex resumed>) = 1 [pid 6059] <... futex resumed>) = 0 [pid 6055] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6054] <... futex resumed>) = ? [pid 6051] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] <... umount2 resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6063] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6059] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6055] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6051] <... futex resumed>) = 0 [pid 6063] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6059] <... futex resumed>) = 0 [ 126.776898][ T5608] EXT4-fs (loop3): This should not happen!! Data will be lost [ 126.776898][ T5608] [ 126.795711][ T6053] EXT4-fs (loop0): Total free blocks count 0 [ 126.804089][ T6053] EXT4-fs (loop0): Free/Dirty block details [pid 6055] sendfile(4, 5, NULL, 2147483713 [pid 6054] +++ exited with 0 +++ [pid 6051] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6048] +++ exited with 0 +++ [pid 4998] lstat("./33/file0", [pid 6067] <... ioctl resumed>) = 0 [pid 6063] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6059] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6053] <... sendfile resumed>) = 63 [pid 4997] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6067] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6063] <... open resumed>) = 4 [pid 6053] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6049] exit_group(0 [pid 4998] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6048, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6067] <... futex resumed>) = ? [pid 6063] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6053] <... futex resumed>) = ? [pid 6049] <... exit_group resumed>) = ? [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./34/file0", [pid 4996] restart_syscall(<... resuming interrupted clone ...> [pid 6067] +++ exited with 0 +++ [pid 6063] <... futex resumed>) = 1 [pid 6059] <... futex resumed>) = 0 [pid 6053] +++ exited with 0 +++ [pid 4996] <... restart_syscall resumed>) = 0 [pid 4996] umount2("./35", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6063] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6059] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6049] +++ exited with 0 +++ [pid 4998] openat(AT_FDCWD, "./33/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6063] <... write resumed>) = 9 [pid 6059] <... futex resumed>) = 0 [pid 4998] <... openat resumed>) = 4 [pid 4996] openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4994] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6049, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 6063] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6059] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] fstat(4, [pid 4997] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] <... openat resumed>) = 3 [pid 4994] restart_syscall(<... resuming interrupted clone ...> [pid 6063] <... futex resumed>) = 0 [pid 6059] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4996] fstat(3, [pid 4994] <... restart_syscall resumed>) = 0 [pid 6063] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6059] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] getdents64(4, [pid 4997] openat(AT_FDCWD, "./34/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4996] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6063] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6059] <... futex resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4997] <... openat resumed>) = 4 [pid 4996] getdents64(3, [pid 6063] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6059] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] getdents64(4, [pid 4997] fstat(4, [pid 4996] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4994] umount2("./35", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6063] <... openat resumed>) = 5 [pid 4998] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] umount2("./35/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6063] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] close(4 [pid 4997] getdents64(4, [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6063] <... futex resumed>) = 1 [pid 6059] <... futex resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 4997] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4996] lstat("./35/binderfs", [pid 4994] <... openat resumed>) = 3 [pid 6063] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6059] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] rmdir("./33/file0" [pid 4997] getdents64(4, [pid 4996] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4994] fstat(3, [pid 6063] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6059] <... futex resumed>) = 0 [ 126.828887][ T6053] EXT4-fs (loop0): free_blocks=2415919104 [ 126.834749][ T6053] EXT4-fs (loop0): dirty_blocks=16 [ 126.840904][ T6053] EXT4-fs (loop0): Block reservation details [ 126.843769][ T6055] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 126.847866][ T6053] EXT4-fs (loop0): i_reserved_data_blocks=1 [pid 4996] unlink("./35/binderfs" [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6063] open("./bus", O_RDWR [pid 6059] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] <... rmdir resumed>) = 0 [pid 4997] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4996] <... unlink resumed>) = 0 [pid 4994] getdents64(3, [pid 6063] <... open resumed>) = 6 [pid 4998] getdents64(3, [pid 4997] close(4 [pid 4996] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 6063] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4997] <... close resumed>) = 0 [pid 4994] umount2("./35/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] lstat("./35/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4994] unlink("./35/binderfs") = 0 [pid 4994] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6063] <... futex resumed>) = 1 [pid 6059] <... futex resumed>) = 0 [pid 6051] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4998] close(3 [pid 4997] rmdir("./34/file0" [pid 6063] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6059] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6051] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... close resumed>) = 0 [pid 6063] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6059] <... futex resumed>) = 0 [pid 6051] <... futex resumed>) = 0 [pid 4998] rmdir("./33" [pid 4997] <... rmdir resumed>) = 0 [ 126.904071][ T5608] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 126.907168][ T6055] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 126.930706][ T11] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 126.944114][ T11] EXT4-fs (loop0): This should not happen!! Data will be lost [ 126.944114][ T11] [pid 6063] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6059] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6051] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4998] <... rmdir resumed>) = 0 [pid 4997] getdents64(3, [pid 6063] <... mmap resumed>) = 0x20000000 [pid 6051] <... mmap resumed>) = 0x7f5c234cf000 [pid 4998] mkdir("./34", 0777 [pid 4997] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 6063] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6051] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 4998] <... mkdir resumed>) = 0 [pid 4997] close(3 [pid 6063] <... futex resumed>) = 1 [pid 6059] <... futex resumed>) = 0 [pid 6051] <... mprotect resumed>) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4997] <... close resumed>) = 0 [pid 6059] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6051] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6059] <... futex resumed>) = 0 [pid 6063] sendfile(4, 5, NULL, 2147483713 [pid 4997] rmdir("./34" [pid 4998] <... openat resumed>) = 3 [pid 6059] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6051] <... clone resumed>, parent_tid=[6070], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6070 [pid 6051] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6051] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] ioctl(3, LOOP_CLR_FD [pid 4997] <... rmdir resumed>) = 0 [ 126.945644][ T5608] EXT4-fs (loop2): This should not happen!! Data will be lost [ 126.945644][ T5608] [ 126.956005][ T6055] EXT4-fs (loop1): This should not happen!! Data will be lost [ 126.956005][ T6055] [ 126.979527][ T6055] EXT4-fs (loop1): Total free blocks count 0 [ 126.986357][ T6055] EXT4-fs (loop1): Free/Dirty block details [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4997] mkdir("./35", 0777./strace-static-x86_64: Process 6070 attached [pid 4998] close(3 [pid 4997] <... mkdir resumed>) = 0 [pid 6070] set_robust_list(0x7f5c234ef9e0, 24 [pid 4998] <... close resumed>) = 0 [pid 4997] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6070] <... set_robust_list resumed>) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6071 attached [pid 6070] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6059] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6051] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4997] <... openat resumed>) = 3 [pid 6059] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6059] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c234cf000 [pid 6059] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6059] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6072], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6072 [pid 6059] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6059] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6071] set_robust_list(0x555556fb95e0, 24 [pid 4998] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6071 [ 126.988452][ T6063] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 126.992799][ T6055] EXT4-fs (loop1): free_blocks=2415919104 [ 127.009417][ T6063] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 127.028448][ T6063] EXT4-fs (loop5): This should not happen!! Data will be lost [ 127.028448][ T6063] [ 127.038897][ T6055] EXT4-fs (loop1): dirty_blocks=16 [ 127.039775][ T6063] EXT4-fs (loop5): Total free blocks count 0 [pid 4997] ioctl(3, LOOP_CLR_FD [pid 6071] <... set_robust_list resumed>) = 0 [pid 4997] <... ioctl resumed>) = -1 ENXIO (No such device or address) ./strace-static-x86_64: Process 6072 attached [pid 6072] set_robust_list(0x7f5c234ef9e0, 24) = 0 [pid 6072] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6071] chdir("./34" [pid 4997] close(3 [pid 6071] <... chdir resumed>) = 0 [pid 4997] <... close resumed>) = 0 [pid 6071] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6071] <... prctl resumed>) = 0 [pid 4997] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6073 [pid 6071] setpgid(0, 0./strace-static-x86_64: Process 6073 attached ) = 0 [pid 6073] set_robust_list(0x555556fb95e0, 24 [pid 6071] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6073] <... set_robust_list resumed>) = 0 [pid 6071] <... openat resumed>) = 3 [pid 6059] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6055] <... sendfile resumed>) = 63 [pid 6055] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6055] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6073] chdir("./35" [pid 6071] write(3, "1000", 4 [pid 6070] <... ioctl resumed>) = 0 [ 127.045981][ T6055] EXT4-fs (loop1): Block reservation details [ 127.052283][ T6063] EXT4-fs (loop5): Free/Dirty block details [ 127.063362][ T6063] EXT4-fs (loop5): free_blocks=2415919104 [ 127.078903][ T6063] EXT4-fs (loop5): dirty_blocks=16 [ 127.081850][ T6055] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 127.091815][ T6063] EXT4-fs (loop5): Block reservation details [pid 6073] <... chdir resumed>) = 0 [pid 6072] <... ioctl resumed>) = 0 [pid 6071] <... write resumed>) = 4 [pid 6070] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6063] <... sendfile resumed>) = 63 [pid 6051] exit_group(0 [pid 4994] <... umount2 resumed>) = 0 [pid 6072] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6073] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6071] close(3 [pid 6070] <... futex resumed>) = 0 [pid 6073] <... prctl resumed>) = 0 [pid 6071] <... close resumed>) = 0 [pid 6070] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6063] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6073] setpgid(0, 0 [pid 6071] symlink("/dev/binderfs", "./binderfs" [pid 6063] <... futex resumed>) = 0 [pid 6073] <... setpgid resumed>) = 0 [pid 6072] <... futex resumed>) = 0 [pid 6071] <... symlink resumed>) = 0 [pid 6070] <... futex resumed>) = ? [pid 6063] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6051] <... exit_group resumed>) = ? [pid 6073] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6072] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6071] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6073] <... openat resumed>) = 3 [pid 6071] <... futex resumed>) = 0 [pid 6070] +++ exited with 0 +++ [pid 6059] exit_group(0 [pid 6073] write(3, "1000", 4 [pid 6072] <... futex resumed>) = ? [pid 6071] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6063] <... futex resumed>) = ? [pid 6059] <... exit_group resumed>) = ? [pid 6073] <... write resumed>) = 4 [pid 6072] +++ exited with 0 +++ [pid 6071] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6063] +++ exited with 0 +++ [pid 6055] <... futex resumed>) = ? [pid 4994] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6073] close(3 [pid 6071] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6073] <... close resumed>) = 0 [pid 6071] <... mprotect resumed>) = 0 [pid 6059] +++ exited with 0 +++ [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6073] symlink("/dev/binderfs", "./binderfs" [pid 6071] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6059, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 6073] <... symlink resumed>) = 0 [pid 4996] <... umount2 resumed>) = 0 [pid 4994] lstat("./35/file0", [pid 6073] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6071] <... clone resumed>, parent_tid=[6074], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6074 [pid 4994] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6073] <... futex resumed>) = 0 [pid 6071] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6055] +++ exited with 0 +++ [pid 6051] +++ exited with 0 +++ [pid 4994] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6073] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6071] <... futex resumed>) = 0 [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6073] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6071] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4995] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6051, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 4994] openat(AT_FDCWD, "./35/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6073] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 4999] umount2("./34", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] umount2("./34", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] <... openat resumed>) = 4 ./strace-static-x86_64: Process 6074 attached [pid 6073] <... mprotect resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] fstat(4, [pid 6074] set_robust_list(0x7f5c2b8109e0, 24 [pid 6073] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4999] openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4995] openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6074] <... set_robust_list resumed>) = 0 [pid 4999] <... openat resumed>) = 3 [ 127.100394][ T6063] EXT4-fs (loop5): i_reserved_data_blocks=1 [pid 4995] <... openat resumed>) = 3 [pid 4994] getdents64(4, [pid 6074] memfd_create("syzkaller", 0 [pid 6073] <... clone resumed>, parent_tid=[6075], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6075 [pid 4999] fstat(3, [pid 4995] fstat(3, [pid 4994] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 6074] <... memfd_create resumed>) = 3 [pid 6073] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] getdents64(4, [pid 6074] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6073] <... futex resumed>) = 0 [pid 4999] getdents64(3, [pid 4995] getdents64(3, [pid 4994] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 6074] <... mmap resumed>) = 0x7f5c233f0000 [pid 6073] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4999] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4995] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4994] close(4./strace-static-x86_64: Process 6075 attached [pid 6074] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4999] umount2("./34/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] umount2("./34/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] <... close resumed>) = 0 [pid 6075] set_robust_list(0x7f5c2b8109e0, 24 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] rmdir("./35/file0" [pid 6075] <... set_robust_list resumed>) = 0 [pid 4999] lstat("./34/binderfs", [pid 4996] lstat("./35/file0", [pid 4995] lstat("./34/binderfs", [pid 4994] <... rmdir resumed>) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4995] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4994] getdents64(3, [pid 4999] unlink("./34/binderfs" [pid 4996] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] unlink("./34/binderfs" [pid 4994] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 6075] memfd_create("syzkaller", 0 [pid 4999] <... unlink resumed>) = 0 [pid 4996] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] <... unlink resumed>) = 0 [pid 4994] close(3 [pid 6075] <... memfd_create resumed>) = 3 [pid 4999] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] <... close resumed>) = 0 [pid 6075] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6074] <... write resumed>) = 1048576 [pid 4996] openat(AT_FDCWD, "./35/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4994] rmdir("./35") = 0 [pid 4994] mkdir("./36", 0777) = 0 [pid 4994] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4994] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4994] close(3) = 0 [pid 4994] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556fb95d0) = 6076 ./strace-static-x86_64: Process 6076 attached [pid 6076] set_robust_list(0x555556fb95e0, 24) = 0 [ 127.172972][ T5608] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 127.187108][ T11] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 127.197429][ T5608] EXT4-fs (loop5): This should not happen!! Data will be lost [ 127.197429][ T5608] [ 127.214494][ T11] EXT4-fs (loop1): This should not happen!! Data will be lost [pid 6076] chdir("./36" [pid 6075] <... mmap resumed>) = 0x7f5c233f0000 [pid 6074] munmap(0x7f5c233f0000, 1048576 [pid 4996] <... openat resumed>) = 4 [pid 6076] <... chdir resumed>) = 0 [pid 6076] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6076] setpgid(0, 0) = 0 [pid 6076] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6076] write(3, "1000", 4) = 4 [pid 6074] <... munmap resumed>) = 0 [pid 4996] fstat(4, [pid 6076] close(3 [pid 6074] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6076] <... close resumed>) = 0 [pid 6076] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4996] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6076] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6074] <... openat resumed>) = 4 [pid 6076] <... futex resumed>) = 0 [pid 6076] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4996] getdents64(4, [pid 6074] ioctl(4, LOOP_SET_FD, 3 [pid 6076] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 4996] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 6076] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 4996] getdents64(4, [pid 6076] <... mprotect resumed>) = 0 [pid 6076] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6077], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6077 [pid 6076] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6076] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6074] <... ioctl resumed>) = 0 [pid 4996] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4996] close(4) = 0 [pid 4996] rmdir("./35/file0") = 0 [pid 4996] getdents64(3, 0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4996] close(3 [pid 6075] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6074] close(3 [pid 4996] <... close resumed>) = 0 ./strace-static-x86_64: Process 6077 attached [pid 6077] set_robust_list(0x7f5c2b8109e0, 24) = 0 [pid 6077] memfd_create("syzkaller", 0) = 3 [pid 6077] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6074] <... close resumed>) = 0 [pid 4996] rmdir("./35" [pid 6074] mkdir("./file0", 0777 [pid 4996] <... rmdir resumed>) = 0 [pid 6077] <... mmap resumed>) = 0x7f5c233f0000 [pid 6074] <... mkdir resumed>) = 0 [pid 4996] mkdir("./36", 0777 [pid 6074] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 4996] <... mkdir resumed>) = 0 [pid 4995] <... umount2 resumed>) = 0 [pid 4996] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 4995] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4995] lstat("./34/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] ioctl(3, LOOP_CLR_FD [pid 4995] openat(AT_FDCWD, "./34/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4996] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4995] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] getdents64(4, 0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4995] getdents64(4, 0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4995] close(4 [pid 4996] close(3 [pid 4995] <... close resumed>) = 0 [pid 4996] <... close resumed>) = 0 [ 127.214494][ T11] [ 127.229050][ T6074] loop4: detected capacity change from 0 to 2048 [pid 4995] rmdir("./34/file0" [pid 4996] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4995] <... rmdir resumed>) = 0 [pid 4995] getdents64(3, 0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4995] close(3 [pid 4996] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6078 [pid 4995] <... close resumed>) = 0 [pid 4995] rmdir("./34"./strace-static-x86_64: Process 6078 attached ) = 0 [pid 4995] mkdir("./35", 0777 [pid 6078] set_robust_list(0x555556fb95e0, 24 [pid 6075] <... write resumed>) = 1048576 [pid 4999] <... umount2 resumed>) = 0 [pid 4995] <... mkdir resumed>) = 0 [pid 4995] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4995] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4995] close(3 [pid 6078] <... set_robust_list resumed>) = 0 [pid 6075] munmap(0x7f5c233f0000, 1048576 [pid 4995] <... close resumed>) = 0 [pid 6078] chdir("./36" [pid 6075] <... munmap resumed>) = 0 [pid 4995] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6077] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4999] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6078] <... chdir resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6082 [pid 4999] lstat("./34/file0", ./strace-static-x86_64: Process 6082 attached [pid 6078] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6075] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6082] set_robust_list(0x555556fb95e0, 24 [pid 6078] <... prctl resumed>) = 0 [pid 6075] <... openat resumed>) = 4 [pid 6074] <... mount resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6074] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 4999] openat(AT_FDCWD, "./34/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6082] <... set_robust_list resumed>) = 0 [pid 6078] setpgid(0, 0 [pid 6075] ioctl(4, LOOP_SET_FD, 3 [pid 6074] <... openat resumed>) = 3 [pid 4999] <... openat resumed>) = 4 [pid 6078] <... setpgid resumed>) = 0 [pid 6074] chdir("./file0" [pid 4999] fstat(4, [pid 6074] <... chdir resumed>) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6074] ioctl(4, LOOP_CLR_FD [pid 4999] getdents64(4, [pid 6074] <... ioctl resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 6074] close(4 [pid 4999] getdents64(4, [pid 6078] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6074] <... close resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 6082] chdir("./35" [pid 6078] <... openat resumed>) = 3 [pid 6077] <... write resumed>) = 1048576 [pid 6075] <... ioctl resumed>) = 0 [pid 6074] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] close(4 [pid 6074] <... futex resumed>) = 1 [pid 6071] <... futex resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 6082] <... chdir resumed>) = 0 [pid 6078] write(3, "1000", 4 [pid 6077] munmap(0x7f5c233f0000, 1048576 [pid 6075] close(3 [pid 6074] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6071] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] rmdir("./34/file0" [pid 6082] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6078] <... write resumed>) = 4 [pid 6077] <... munmap resumed>) = 0 [pid 6075] <... close resumed>) = 0 [pid 6074] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6071] <... futex resumed>) = 0 [pid 6082] <... prctl resumed>) = 0 [pid 6078] close(3 [pid 6077] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6075] mkdir("./file0", 0777 [pid 6074] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6071] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] <... rmdir resumed>) = 0 [pid 6082] setpgid(0, 0 [pid 6078] <... close resumed>) = 0 [pid 6077] <... openat resumed>) = 4 [pid 6075] <... mkdir resumed>) = 0 [pid 6082] <... setpgid resumed>) = 0 [pid 6078] symlink("/dev/binderfs", "./binderfs" [pid 6077] ioctl(4, LOOP_SET_FD, 3 [pid 6075] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6074] <... open resumed>) = 4 [pid 4999] getdents64(3, [pid 6082] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6078] <... symlink resumed>) = 0 [pid 6077] <... ioctl resumed>) = 0 [pid 6074] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 6074] <... futex resumed>) = 1 [pid 6071] <... futex resumed>) = 0 [pid 4999] close(3 [pid 6074] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6071] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... close resumed>) = 0 [pid 6074] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6071] <... futex resumed>) = 0 [pid 4999] rmdir("./34" [pid 6074] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6071] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] <... rmdir resumed>) = 0 [pid 4999] mkdir("./35", 0777) = 0 [pid 6074] <... write resumed>) = 9 [pid 6082] <... openat resumed>) = 3 [pid 6078] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6082] write(3, "1000", 4 [pid 6078] <... futex resumed>) = 0 [pid 6074] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... openat resumed>) = 3 [pid 6082] <... write resumed>) = 4 [pid 6078] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6074] <... futex resumed>) = 1 [pid 6071] <... futex resumed>) = 0 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 6082] close(3 [pid 6078] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6074] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6071] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6082] <... close resumed>) = 0 [pid 6078] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6074] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6071] <... futex resumed>) = 0 [pid 4999] close(3 [pid 6082] symlink("/dev/binderfs", "./binderfs" [pid 6078] <... mprotect resumed>) = 0 [pid 6077] close(3 [pid 6074] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6071] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] <... close resumed>) = 0 [pid 6082] <... symlink resumed>) = 0 [pid 6078] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6077] <... close resumed>) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6082] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [ 127.331170][ T6075] loop3: detected capacity change from 0 to 2048 [ 127.366485][ T6077] loop0: detected capacity change from 0 to 2048 [pid 6077] mkdir("./file0", 0777 [pid 6074] <... openat resumed>) = 5 [pid 6082] <... futex resumed>) = 0 [pid 6078] <... clone resumed>, parent_tid=[6084], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6084 [pid 6077] <... mkdir resumed>) = 0 [pid 6074] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6085 attached ./strace-static-x86_64: Process 6084 attached [pid 6082] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6078] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6077] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6074] <... futex resumed>) = 1 [pid 6071] <... futex resumed>) = 0 [pid 4999] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6085 [pid 6085] set_robust_list(0x555556fb95e0, 24 [pid 6084] set_robust_list(0x7f5c2b8109e0, 24 [pid 6082] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6078] <... futex resumed>) = 0 [pid 6075] <... mount resumed>) = 0 [pid 6074] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6071] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6082] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6078] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6082] <... mprotect resumed>) = 0 [pid 6074] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6071] <... futex resumed>) = 0 [pid 6082] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6075] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6074] open("./bus", O_RDWR./strace-static-x86_64: Process 6087 attached [pid 6085] <... set_robust_list resumed>) = 0 [pid 6084] <... set_robust_list resumed>) = 0 [pid 6071] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6082] <... clone resumed>, parent_tid=[6087], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6087 [pid 6082] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6075] <... openat resumed>) = 3 [pid 6082] <... futex resumed>) = 0 [pid 6087] set_robust_list(0x7f5c2b8109e0, 24 [pid 6085] chdir("./35" [pid 6084] memfd_create("syzkaller", 0 [pid 6082] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6075] chdir("./file0" [pid 6074] <... open resumed>) = 6 [pid 6074] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6071] <... futex resumed>) = 0 [pid 6074] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6071] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6074] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6071] <... futex resumed>) = 0 [pid 6074] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6071] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6087] <... set_robust_list resumed>) = 0 [pid 6085] <... chdir resumed>) = 0 [pid 6084] <... memfd_create resumed>) = 3 [pid 6075] <... chdir resumed>) = 0 [pid 6074] <... mmap resumed>) = 0x20000000 [pid 6087] memfd_create("syzkaller", 0 [pid 6085] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6084] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6077] <... mount resumed>) = 0 [pid 6075] ioctl(4, LOOP_CLR_FD [pid 6074] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6087] <... memfd_create resumed>) = 3 [pid 6085] <... prctl resumed>) = 0 [pid 6084] <... mmap resumed>) = 0x7f5c233f0000 [pid 6077] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6075] <... ioctl resumed>) = 0 [pid 6074] <... futex resumed>) = 1 [pid 6071] <... futex resumed>) = 0 [pid 6087] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6085] setpgid(0, 0 [pid 6084] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6077] <... openat resumed>) = 3 [pid 6075] close(4 [pid 6074] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6071] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6087] <... mmap resumed>) = 0x7f5c233f0000 [pid 6085] <... setpgid resumed>) = 0 [pid 6084] <... write resumed>) = 1048576 [pid 6077] chdir("./file0" [pid 6075] <... close resumed>) = 0 [pid 6074] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6071] <... futex resumed>) = 0 [pid 6077] <... chdir resumed>) = 0 [pid 6074] sendfile(4, 5, NULL, 2147483713 [pid 6071] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6085] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6077] ioctl(4, LOOP_CLR_FD [pid 6075] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6085] <... openat resumed>) = 3 [pid 6077] <... ioctl resumed>) = 0 [pid 6075] <... futex resumed>) = 1 [pid 6073] <... futex resumed>) = 0 [pid 6085] write(3, "1000", 4 [pid 6077] close(4 [pid 6073] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6085] <... write resumed>) = 4 [pid 6077] <... close resumed>) = 0 [pid 6075] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6073] <... futex resumed>) = 0 [pid 6085] close(3 [pid 6077] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6076] <... futex resumed>) = 0 [pid 6073] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6077] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6076] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6085] <... close resumed>) = 0 [pid 6077] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6076] <... futex resumed>) = 0 [pid 6075] <... open resumed>) = 4 [pid 6085] symlink("/dev/binderfs", "./binderfs" [pid 6077] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6076] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6077] <... open resumed>) = 4 [pid 6075] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6077] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6076] <... futex resumed>) = 0 [pid 6077] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6076] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6077] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6076] <... futex resumed>) = 0 [pid 6077] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6076] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6077] <... write resumed>) = 9 [pid 6077] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6076] <... futex resumed>) = 0 [pid 6077] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6076] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6077] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6076] <... futex resumed>) = 0 [pid 6077] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6076] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6077] <... openat resumed>) = 5 [pid 6077] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6076] <... futex resumed>) = 0 [pid 6077] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6076] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6077] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6076] <... futex resumed>) = 0 [pid 6077] open("./bus", O_RDWR [pid 6076] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6077] <... open resumed>) = 6 [pid 6077] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6076] <... futex resumed>) = 0 [pid 6077] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6076] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6077] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6076] <... futex resumed>) = 0 [pid 6077] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6076] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6077] <... mmap resumed>) = 0x20000000 [pid 6077] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6085] <... symlink resumed>) = 0 [pid 6077] <... futex resumed>) = 1 [pid 6076] <... futex resumed>) = 0 [pid 6075] <... futex resumed>) = 1 [pid 6073] <... futex resumed>) = 0 [pid 6085] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6077] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6076] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6075] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6073] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6085] <... futex resumed>) = 0 [pid 6077] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6076] <... futex resumed>) = 0 [pid 6073] <... futex resumed>) = 0 [pid 6085] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6077] sendfile(4, 5, NULL, 2147483713 [pid 6076] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6075] <... write resumed>) = 9 [pid 6073] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6085] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6085] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6084] munmap(0x7f5c233f0000, 1048576 [pid 6085] <... mprotect resumed>) = 0 [pid 6075] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6084] <... munmap resumed>) = 0 [pid 6084] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6084] ioctl(4, LOOP_SET_FD, 3 [pid 6085] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6075] <... futex resumed>) = 1 [pid 6073] <... futex resumed>) = 0 [pid 6073] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6075] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6073] <... futex resumed>) = 0 [pid 6073] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6085] <... clone resumed>, parent_tid=[6090], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6090 [pid 6075] <... openat resumed>) = 5 [pid 6071] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6085] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6075] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6085] <... futex resumed>) = 0 [pid 6073] <... futex resumed>) = 0 [pid 6085] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6075] <... futex resumed>) = 1 [pid 6073] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6075] open("./bus", O_RDWR [pid 6073] <... futex resumed>) = 0 [pid 6073] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6075] <... open resumed>) = 6 [pid 6071] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6075] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6071] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6090 attached [pid 6075] <... futex resumed>) = 1 [pid 6073] <... futex resumed>) = 0 [pid 6071] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6090] set_robust_list(0x7f5c2b8109e0, 24 [pid 6075] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6073] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6071] <... mmap resumed>) = 0x7f5c234cf000 [pid 6090] <... set_robust_list resumed>) = 0 [pid 6075] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6073] <... futex resumed>) = 0 [pid 6071] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 6090] memfd_create("syzkaller", 0 [pid 6075] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6073] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6071] <... mprotect resumed>) = 0 [pid 6087] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6071] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6075] <... mmap resumed>) = 0x20000000 [pid 6090] <... memfd_create resumed>) = 3 [pid 6075] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6071] <... clone resumed>, parent_tid=[6091], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6091 [pid 6090] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6075] <... futex resumed>) = 1 [pid 6073] <... futex resumed>) = 0 [pid 6071] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6090] <... mmap resumed>) = 0x7f5c233f0000 [pid 6075] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6073] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6071] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6091 attached [pid 6075] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6073] <... futex resumed>) = 0 [pid 6071] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6091] set_robust_list(0x7f5c234ef9e0, 24 [pid 6075] sendfile(4, 5, NULL, 2147483713 [pid 6073] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6091] <... set_robust_list resumed>) = 0 [pid 6091] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6084] <... ioctl resumed>) = 0 [pid 6076] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6076] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6084] close(3 [pid 6076] <... futex resumed>) = 0 [ 127.462691][ T6074] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 127.489652][ T6077] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 127.492819][ T6084] loop2: detected capacity change from 0 to 2048 [pid 6084] <... close resumed>) = 0 [pid 6076] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6084] mkdir("./file0", 0777 [pid 6076] <... mmap resumed>) = 0x7f5c234cf000 [pid 6084] <... mkdir resumed>) = 0 [pid 6076] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 6084] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6076] <... mprotect resumed>) = 0 [pid 6076] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6092], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6092 [pid 6076] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6076] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6092 attached [pid 6092] set_robust_list(0x7f5c234ef9e0, 24) = 0 [pid 6092] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6087] <... write resumed>) = 1048576 [pid 6073] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6071] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6073] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6090] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6073] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c234cf000 [pid 6073] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6073] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6094], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6094 [pid 6073] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 6094 attached [pid 6073] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6094] set_robust_list(0x7f5c234ef9e0, 24) = 0 [ 127.538277][ T6075] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 127.562064][ T6077] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 127.575364][ T6074] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 6094] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6087] munmap(0x7f5c233f0000, 1048576 [pid 6084] <... mount resumed>) = 0 [pid 6076] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6084] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6084] chdir("./file0") = 0 [pid 6084] ioctl(4, LOOP_CLR_FD) = 0 [pid 6084] close(4 [pid 6087] <... munmap resumed>) = 0 [pid 6084] <... close resumed>) = 0 [pid 6087] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6084] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6087] <... openat resumed>) = 4 [pid 6084] <... futex resumed>) = 1 [pid 6078] <... futex resumed>) = 0 [pid 6087] ioctl(4, LOOP_SET_FD, 3 [pid 6084] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6078] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6084] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6078] <... futex resumed>) = 0 [ 127.601017][ T6074] EXT4-fs (loop4): This should not happen!! Data will be lost [ 127.601017][ T6074] [ 127.615947][ T6077] EXT4-fs (loop0): This should not happen!! Data will be lost [ 127.615947][ T6077] [ 127.626435][ T6077] EXT4-fs (loop0): Total free blocks count 0 [ 127.632404][ T6087] loop1: detected capacity change from 0 to 2048 [ 127.633108][ T6077] EXT4-fs (loop0): Free/Dirty block details [pid 6084] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6078] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6084] <... open resumed>) = 4 [pid 6073] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6084] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6078] <... futex resumed>) = 0 [pid 6084] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6078] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6084] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6078] <... futex resumed>) = 0 [pid 6084] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6078] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6092] <... ioctl resumed>) = 0 [pid 6090] <... write resumed>) = 1048576 [pid 6084] <... write resumed>) = 9 [pid 6077] <... sendfile resumed>) = 63 [pid 6092] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6084] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6092] <... futex resumed>) = 0 [pid 6090] munmap(0x7f5c233f0000, 1048576 [pid 6084] <... futex resumed>) = 1 [pid 6078] <... futex resumed>) = 0 [pid 6092] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6084] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6078] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6077] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [ 127.639443][ T6075] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 127.645139][ T6077] EXT4-fs (loop0): free_blocks=2415919104 [ 127.663002][ T6077] EXT4-fs (loop0): dirty_blocks=16 [ 127.668646][ T6077] EXT4-fs (loop0): Block reservation details [ 127.675588][ T6077] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 127.682973][ T6074] EXT4-fs (loop4): Total free blocks count 0 [ 127.689755][ T6074] EXT4-fs (loop4): Free/Dirty block details [ 127.696006][ T6074] EXT4-fs (loop4): free_blocks=2415919104 [pid 6076] exit_group(0 [pid 6092] <... futex resumed>) = ? [pid 6090] <... munmap resumed>) = 0 [pid 6087] <... ioctl resumed>) = 0 [pid 6084] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6078] <... futex resumed>) = 0 [pid 6077] <... futex resumed>) = ? [pid 6076] <... exit_group resumed>) = ? [pid 6092] +++ exited with 0 +++ [pid 6090] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6087] close(3 [pid 6084] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6078] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6077] +++ exited with 0 +++ [pid 6076] +++ exited with 0 +++ [pid 6090] <... openat resumed>) = 4 [pid 6087] <... close resumed>) = 0 [pid 6084] <... openat resumed>) = 5 [pid 4994] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6076, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 6091] <... ioctl resumed>) = 0 [pid 6090] ioctl(4, LOOP_SET_FD, 3 [pid 6087] mkdir("./file0", 0777 [pid 6084] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6074] <... sendfile resumed>) = 63 [pid 4994] restart_syscall(<... resuming interrupted clone ...> [pid 6091] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6087] <... mkdir resumed>) = 0 [pid 6084] <... futex resumed>) = 1 [pid 6078] <... futex resumed>) = 0 [pid 4994] <... restart_syscall resumed>) = 0 [pid 6091] <... futex resumed>) = 0 [pid 6087] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6084] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6078] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6091] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6084] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6078] <... futex resumed>) = 0 [pid 6074] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6071] exit_group(0 [pid 6091] <... futex resumed>) = ? [ 127.701775][ T6074] EXT4-fs (loop4): dirty_blocks=16 [ 127.707019][ T6074] EXT4-fs (loop4): Block reservation details [ 127.713519][ T6074] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 127.720235][ T6075] EXT4-fs (loop3): This should not happen!! Data will be lost [ 127.720235][ T6075] [ 127.721226][ T6090] loop5: detected capacity change from 0 to 2048 [ 127.730086][ T6075] EXT4-fs (loop3): Total free blocks count 0 [ 127.743335][ T6075] EXT4-fs (loop3): Free/Dirty block details [pid 6084] open("./bus", O_RDWR [pid 6078] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6071] <... exit_group resumed>) = ? [pid 4994] umount2("./36", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6091] +++ exited with 0 +++ [pid 6084] <... open resumed>) = 6 [pid 6074] <... futex resumed>) = ? [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6084] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6084] <... futex resumed>) = 1 [pid 6078] <... futex resumed>) = 0 [pid 4994] <... openat resumed>) = 3 [pid 6084] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6078] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] fstat(3, [pid 6084] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6078] <... futex resumed>) = 0 [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6084] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6078] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4994] getdents64(3, [pid 6084] <... mmap resumed>) = 0x20000000 [pid 4994] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 6084] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] umount2("./36/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6084] <... futex resumed>) = 1 [pid 6078] <... futex resumed>) = 0 [pid 6074] +++ exited with 0 +++ [pid 6071] +++ exited with 0 +++ [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6084] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6078] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] lstat("./36/binderfs", [pid 6084] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 127.750047][ T6075] EXT4-fs (loop3): free_blocks=2415919104 [ 127.756833][ T6075] EXT4-fs (loop3): dirty_blocks=16 [ 127.764877][ T26] kauditd_printk_skb: 100 callbacks suppressed [ 127.764895][ T26] audit: type=1804 audit(1687834597.822:962): pid=6084 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor113" name="/root/syzkaller.k2b0rY/36/file0/bus" dev="loop2" ino=18 res=1 errno=0 [pid 6078] <... futex resumed>) = 0 [pid 4994] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6084] sendfile(4, 5, NULL, 2147483713 [pid 6078] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4994] unlink("./36/binderfs") = 0 [pid 4994] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6087] <... mount resumed>) = 0 [pid 6087] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6071, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 6087] <... openat resumed>) = 3 [pid 6087] chdir("./file0") = 0 [pid 6087] ioctl(4, LOOP_CLR_FD) = 0 [pid 6087] close(4) = 0 [pid 6087] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6087] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6082] <... futex resumed>) = 0 [pid 4998] restart_syscall(<... resuming interrupted clone ...> [pid 6090] <... ioctl resumed>) = 0 [pid 6090] close(3 [pid 6082] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... restart_syscall resumed>) = 0 [pid 6090] <... close resumed>) = 0 [pid 6090] mkdir("./file0", 0777) = 0 [ 127.791339][ T6084] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 127.795789][ T6075] EXT4-fs (loop3): Block reservation details [ 127.816148][ T6075] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 127.822890][ T5608] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 6090] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6094] <... ioctl resumed>) = 0 [pid 6087] <... futex resumed>) = 0 [pid 6082] <... futex resumed>) = 1 [pid 6075] <... sendfile resumed>) = 63 [pid 6087] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6082] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6087] <... open resumed>) = 4 [pid 4998] umount2("./34", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6087] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6087] <... futex resumed>) = 1 [pid 6082] <... futex resumed>) = 0 [pid 4998] openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6087] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6082] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... openat resumed>) = 3 [pid 6087] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6082] <... futex resumed>) = 0 [pid 4998] fstat(3, [pid 6087] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6082] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6094] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6087] <... write resumed>) = 9 [pid 6078] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6075] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] getdents64(3, [pid 6094] <... futex resumed>) = 0 [pid 6087] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6078] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6075] <... futex resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 6087] <... futex resumed>) = 1 [pid 6082] <... futex resumed>) = 0 [pid 4998] umount2("./34/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6094] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6087] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6082] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6078] <... futex resumed>) = 0 [pid 6075] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6073] exit_group(0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6094] <... futex resumed>) = ? [pid 6087] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6082] <... futex resumed>) = 0 [pid 6078] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6075] <... futex resumed>) = ? [pid 6073] <... exit_group resumed>) = ? [pid 4998] lstat("./34/binderfs", [pid 6094] +++ exited with 0 +++ [pid 6087] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6082] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6078] <... mmap resumed>) = 0x7f5c234cf000 [pid 6075] +++ exited with 0 +++ [pid 6073] +++ exited with 0 +++ [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4994] <... umount2 resumed>) = 0 [pid 6087] <... openat resumed>) = 5 [pid 6078] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [ 127.835784][ T26] audit: type=1804 audit(1687834597.822:963): pid=6084 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor113" name="/root/syzkaller.k2b0rY/36/file0/bus" dev="loop2" ino=18 res=1 errno=0 [ 127.859932][ T5608] EXT4-fs (loop0): This should not happen!! Data will be lost [ 127.859932][ T5608] [ 127.881713][ T6084] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 127.894081][ T6084] EXT4-fs (loop2): This should not happen!! Data will be lost [pid 4998] unlink("./34/binderfs" [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6073, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 6087] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6078] <... mprotect resumed>) = 0 [pid 4998] <... unlink resumed>) = 0 [pid 4994] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6090] <... mount resumed>) = 0 [pid 6087] <... futex resumed>) = 1 [pid 6082] <... futex resumed>) = 0 [pid 6078] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4998] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6100 attached [pid 6090] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6087] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6082] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] umount2("./35", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] lstat("./36/file0", [pid 6090] <... openat resumed>) = 3 [pid 6087] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6082] <... futex resumed>) = 0 [pid 6078] <... clone resumed>, parent_tid=[6100], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6100 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6100] set_robust_list(0x7f5c234ef9e0, 24 [pid 6090] chdir("./file0" [pid 6087] open("./bus", O_RDWR [pid 6082] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6078] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4994] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6100] <... set_robust_list resumed>) = 0 [pid 6090] <... chdir resumed>) = 0 [pid 6087] <... open resumed>) = 6 [pid 6078] <... futex resumed>) = 0 [pid 4997] <... openat resumed>) = 3 [ 127.894081][ T6084] [ 127.903976][ T26] audit: type=1804 audit(1687834597.962:964): pid=6087 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor113" name="/root/syzkaller.0rM9bT/35/file0/bus" dev="loop1" ino=18 res=1 errno=0 [ 127.928254][ T6084] EXT4-fs (loop2): Total free blocks count 0 [ 127.932796][ T74] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 127.934281][ T6084] EXT4-fs (loop2): Free/Dirty block details [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6100] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6090] ioctl(4, LOOP_CLR_FD [pid 6087] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6078] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4997] fstat(3, [pid 4994] openat(AT_FDCWD, "./36/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6090] <... ioctl resumed>) = 0 [pid 6087] <... futex resumed>) = 1 [pid 6082] <... futex resumed>) = 0 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] <... openat resumed>) = 4 [pid 6090] close(4 [pid 6087] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6082] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] getdents64(3, [pid 4994] fstat(4, [pid 6090] <... close resumed>) = 0 [pid 6087] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6082] <... futex resumed>) = 0 [pid 4997] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6090] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6087] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6082] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4997] umount2("./35/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] getdents64(4, [pid 6090] <... futex resumed>) = 1 [pid 6087] <... mmap resumed>) = 0x20000000 [pid 6085] <... futex resumed>) = 0 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 6090] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6087] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6085] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] lstat("./35/binderfs", [pid 4994] getdents64(4, [pid 6090] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6087] <... futex resumed>) = 1 [pid 6085] <... futex resumed>) = 0 [pid 6082] <... futex resumed>) = 0 [pid 4997] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4994] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 6090] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6087] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6085] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6082] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] unlink("./35/binderfs" [pid 4994] close(4 [pid 6090] <... open resumed>) = 4 [pid 6087] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6082] <... futex resumed>) = 0 [pid 4997] <... unlink resumed>) = 0 [pid 4994] <... close resumed>) = 0 [pid 6090] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6087] sendfile(4, 5, NULL, 2147483713 [pid 6082] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4997] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] rmdir("./36/file0" [pid 6090] <... futex resumed>) = 1 [pid 6085] <... futex resumed>) = 0 [pid 4994] <... rmdir resumed>) = 0 [pid 4994] getdents64(3, 0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4994] close(3) = 0 [pid 6090] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6085] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] rmdir("./36") = 0 [pid 4994] mkdir("./37", 0777) = 0 [pid 4994] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4994] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4994] close(3) = 0 [pid 4994] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556fb95d0) = 6101 [ 127.960895][ T26] audit: type=1804 audit(1687834598.022:965): pid=6087 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor113" name="/root/syzkaller.0rM9bT/35/file0/bus" dev="loop1" ino=18 res=1 errno=0 [ 127.993310][ T6084] EXT4-fs (loop2): free_blocks=2415919104 [pid 6090] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6085] <... futex resumed>) = 0 [pid 6078] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6090] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6085] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6090] <... write resumed>) = 9 [pid 6090] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6085] <... futex resumed>) = 0 [ 127.999887][ T11] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 128.012128][ T74] EXT4-fs (loop4): This should not happen!! Data will be lost [ 128.012128][ T74] [ 128.026549][ T6087] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters ./strace-static-x86_64: Process 6101 attached [pid 6090] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6085] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6101] set_robust_list(0x555556fb95e0, 24 [pid 6090] <... openat resumed>) = 5 [pid 6085] <... futex resumed>) = 0 [pid 6082] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6101] <... set_robust_list resumed>) = 0 [pid 6090] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6085] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6090] <... futex resumed>) = 0 [pid 6085] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6090] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 6085] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6090] open("./bus", O_RDWR [pid 6085] <... futex resumed>) = 0 [pid 6101] chdir("./37" [pid 6082] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6082] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6090] <... open resumed>) = 6 [pid 6101] <... chdir resumed>) = 0 [pid 6085] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6082] <... mmap resumed>) = 0x7f5c234cf000 [pid 6082] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6082] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6101] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6090] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6082] <... clone resumed>, parent_tid=[6102], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6102 [pid 6082] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6082] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6102 attached [pid 6102] set_robust_list(0x7f5c234ef9e0, 24) = 0 [pid 6102] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6101] <... prctl resumed>) = 0 [pid 6090] <... futex resumed>) = 1 [pid 6085] <... futex resumed>) = 0 [ 128.039215][ T26] audit: type=1804 audit(1687834598.042:966): pid=6087 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor113" name="/root/syzkaller.0rM9bT/35/file0/bus" dev="loop1" ino=18 res=1 errno=0 [ 128.074867][ T6084] EXT4-fs (loop2): dirty_blocks=16 [ 128.080560][ T11] EXT4-fs (loop3): This should not happen!! Data will be lost [ 128.080560][ T11] [ 128.099271][ T6084] EXT4-fs (loop2): Block reservation details [pid 6101] setpgid(0, 0 [pid 6090] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6085] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6101] <... setpgid resumed>) = 0 [pid 6090] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6085] <... futex resumed>) = 0 [pid 6082] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 128.101286][ T26] audit: type=1804 audit(1687834598.042:967): pid=6087 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor113" name="/root/syzkaller.0rM9bT/35/file0/bus" dev="loop1" ino=18 res=1 errno=0 [ 128.106394][ T6087] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 128.141619][ T6084] EXT4-fs (loop2): i_reserved_data_blocks=1 [pid 6101] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6100] <... ioctl resumed>) = 0 [pid 6090] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6085] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6084] <... sendfile resumed>) = 63 [pid 6101] <... openat resumed>) = 3 [pid 6100] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6101] write(3, "1000", 4 [pid 6100] <... futex resumed>) = 0 [pid 6090] <... mmap resumed>) = 0x20000000 [pid 6084] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6078] exit_group(0 [pid 4998] <... umount2 resumed>) = 0 [pid 6101] <... write resumed>) = 4 [pid 6078] <... exit_group resumed>) = ? [pid 6101] close(3 [pid 6100] +++ exited with 0 +++ [pid 6090] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6101] <... close resumed>) = 0 [pid 6090] <... futex resumed>) = 1 [pid 6085] <... futex resumed>) = 0 [pid 6101] symlink("/dev/binderfs", "./binderfs" [pid 6085] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6101] <... symlink resumed>) = 0 [pid 6085] <... futex resumed>) = 0 [pid 6090] sendfile(4, 5, NULL, 2147483713 [pid 6101] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6085] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6084] <... futex resumed>) = ? [pid 6101] <... futex resumed>) = 0 [pid 6101] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c2b7f0000 [pid 6101] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE) = 0 [ 128.143836][ T26] audit: type=1804 audit(1687834598.132:968): pid=6090 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor113" name="/root/syzkaller.drywye/35/file0/bus" dev="loop5" ino=18 res=1 errno=0 [pid 6101] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6103], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6103 ./strace-static-x86_64: Process 6103 attached [pid 6101] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6084] +++ exited with 0 +++ [pid 6078] +++ exited with 0 +++ [pid 4998] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... umount2 resumed>) = 0 [pid 6103] set_robust_list(0x7f5c2b8109e0, 24 [pid 6101] <... futex resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] lstat("./34/file0", [pid 4996] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6078, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] umount2("./36", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4996] openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] openat(AT_FDCWD, "./34/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4996] <... openat resumed>) = 3 [pid 4998] <... openat resumed>) = 4 [pid 4996] fstat(3, [pid 4998] fstat(4, [pid 4996] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6103] <... set_robust_list resumed>) = 0 [pid 6101] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4996] getdents64(3, [pid 4998] getdents64(4, [pid 4996] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4998] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4996] umount2("./36/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] getdents64(4, [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6103] memfd_create("syzkaller", 0 [pid 6085] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4998] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4997] lstat("./35/file0", [pid 4996] lstat("./36/binderfs", [pid 4998] close(4 [pid 4996] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] <... close resumed>) = 0 [pid 4996] unlink("./36/binderfs" [pid 6103] <... memfd_create resumed>) = 3 [pid 6085] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] rmdir("./34/file0" [pid 4996] <... unlink resumed>) = 0 [ 128.198291][ T6090] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 128.228049][ T6087] EXT4-fs (loop1): This should not happen!! Data will be lost [ 128.228049][ T6087] [ 128.238568][ T6087] EXT4-fs (loop1): Total free blocks count 0 [ 128.245222][ T6087] EXT4-fs (loop1): Free/Dirty block details [pid 4998] <... rmdir resumed>) = 0 [pid 4996] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] getdents64(3, [pid 6103] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6085] <... futex resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4997] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./34" [pid 6103] <... mmap resumed>) = 0x7f5c233f0000 [pid 6085] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4998] <... rmdir resumed>) = 0 [pid 4997] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6085] <... mmap resumed>) = 0x7f5c234cf000 [pid 4998] mkdir("./35", 0777 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6085] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 4998] <... mkdir resumed>) = 0 [pid 4997] openat(AT_FDCWD, "./35/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6085] <... mprotect resumed>) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6085] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4998] <... openat resumed>) = 3 [pid 4997] <... openat resumed>) = 4 [pid 6103] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3 [pid 6085] <... clone resumed>, parent_tid=[6104], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6104 [pid 4998] <... close resumed>) = 0 [pid 4997] fstat(4, ./strace-static-x86_64: Process 6104 attached [pid 6085] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556fb95d0) = 6105 ./strace-static-x86_64: Process 6105 attached [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6085] <... futex resumed>) = 0 [ 128.260555][ T11] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 128.278629][ T6087] EXT4-fs (loop1): free_blocks=2415919104 [ 128.295389][ T6090] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 128.302025][ T6087] EXT4-fs (loop1): dirty_blocks=16 [pid 6104] set_robust_list(0x7f5c234ef9e0, 24) = 0 [pid 6085] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4997] getdents64(4, [pid 6105] set_robust_list(0x555556fb95e0, 24 [pid 6104] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6103] <... write resumed>) = 1048576 [pid 6105] <... set_robust_list resumed>) = 0 [pid 6105] chdir("./35") = 0 [pid 6105] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6105] setpgid(0, 0) = 0 [pid 4997] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 6105] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6103] munmap(0x7f5c233f0000, 1048576 [pid 6105] <... openat resumed>) = 3 [pid 6105] write(3, "1000", 4) = 4 [pid 6105] close(3) = 0 [pid 6105] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6105] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4997] getdents64(4, [pid 6105] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c2b7f0000 [pid 4997] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 6103] <... munmap resumed>) = 0 [pid 6105] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6105] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6106], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6106 [pid 6105] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6105] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4997] close(4 [pid 6103] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 4997] <... close resumed>) = 0 ./strace-static-x86_64: Process 6106 attached [pid 6103] <... openat resumed>) = 4 [ 128.315182][ T6087] EXT4-fs (loop1): Block reservation details [ 128.322259][ T11] EXT4-fs (loop2): This should not happen!! Data will be lost [ 128.322259][ T11] [ 128.334187][ T6087] EXT4-fs (loop1): i_reserved_data_blocks=1 [pid 4997] rmdir("./35/file0" [pid 6106] set_robust_list(0x7f5c2b8109e0, 24 [pid 6103] ioctl(4, LOOP_SET_FD, 3 [pid 6106] <... set_robust_list resumed>) = 0 [pid 6102] <... ioctl resumed>) = 0 [pid 6087] <... sendfile resumed>) = 63 [pid 6085] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4997] <... rmdir resumed>) = 0 [pid 6103] <... ioctl resumed>) = 0 [pid 6102] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6087] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6082] exit_group(0 [pid 4997] getdents64(3, [pid 6103] close(3 [pid 6102] <... futex resumed>) = ? [pid 6087] <... futex resumed>) = ? [pid 6082] <... exit_group resumed>) = ? [pid 4997] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 6103] <... close resumed>) = 0 [pid 6102] +++ exited with 0 +++ [pid 6087] +++ exited with 0 +++ [pid 4997] close(3 [pid 6103] mkdir("./file0", 0777 [pid 4997] <... close resumed>) = 0 [pid 6103] <... mkdir resumed>) = 0 [pid 4997] rmdir("./35" [pid 6103] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6082] +++ exited with 0 +++ [pid 4997] <... rmdir resumed>) = 0 [pid 6106] memfd_create("syzkaller", 0 [pid 4997] mkdir("./36", 0777 [pid 4995] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6082, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=10 /* 0.10 s */} --- [pid 6106] <... memfd_create resumed>) = 3 [pid 4997] <... mkdir resumed>) = 0 [pid 6106] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4997] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 4997] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4995] umount2("./35", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] close(3) = 0 [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4995] openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6107 [pid 4995] <... openat resumed>) = 3 [pid 4995] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] getdents64(3, 0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4995] umount2("./35/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4995] lstat("./35/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4995] unlink("./35/binderfs") = 0 [pid 6106] <... mmap resumed>) = 0x7f5c233f0000 [ 128.345582][ T26] audit: type=1804 audit(1687834598.132:969): pid=6090 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor113" name="/root/syzkaller.drywye/35/file0/bus" dev="loop5" ino=18 res=1 errno=0 [ 128.347986][ T6090] EXT4-fs (loop5): This should not happen!! Data will be lost [ 128.347986][ T6090] [ 128.379700][ T6103] loop0: detected capacity change from 0 to 2048 [ 128.402147][ T6090] EXT4-fs (loop5): Total free blocks count 0 [pid 4995] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 6107 attached [pid 6107] set_robust_list(0x555556fb95e0, 24 [pid 6106] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4996] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6107] <... set_robust_list resumed>) = 0 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6107] chdir("./36" [pid 4996] lstat("./36/file0", [pid 6107] <... chdir resumed>) = 0 [pid 6107] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4996] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6107] <... prctl resumed>) = 0 [pid 4996] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6107] setpgid(0, 0) = 0 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6107] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4996] openat(AT_FDCWD, "./36/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6107] <... openat resumed>) = 3 [pid 4996] <... openat resumed>) = 4 [pid 6107] write(3, "1000", 4 [pid 4996] fstat(4, [pid 6107] <... write resumed>) = 4 [pid 4996] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6107] close(3) = 0 [pid 6103] <... mount resumed>) = 0 [pid 4996] getdents64(4, [pid 6107] symlink("/dev/binderfs", "./binderfs" [pid 6103] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6103] chdir("./file0") = 0 [pid 6107] <... symlink resumed>) = 0 [pid 6103] ioctl(4, LOOP_CLR_FD [pid 6107] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 6107] <... futex resumed>) = 0 [pid 6103] <... ioctl resumed>) = 0 [pid 4996] getdents64(4, [pid 6107] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6103] close(4 [pid 4996] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 6107] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6103] <... close resumed>) = 0 [pid 4996] close(4 [pid 6107] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6103] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6101] <... futex resumed>) = 0 [pid 4996] <... close resumed>) = 0 [pid 6107] <... mprotect resumed>) = 0 [pid 6103] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [ 128.410363][ T11] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 128.423964][ T6090] EXT4-fs (loop5): Free/Dirty block details [ 128.432084][ T11] EXT4-fs (loop1): This should not happen!! Data will be lost [ 128.432084][ T11] [pid 6101] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] rmdir("./36/file0" [pid 6107] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6103] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6101] <... futex resumed>) = 0 [pid 6103] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6101] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6103] <... open resumed>) = 4 [pid 4996] <... rmdir resumed>) = 0 [pid 6107] <... clone resumed>, parent_tid=[6110], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6110 [pid 6103] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] getdents64(3, [pid 6107] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 6107] <... futex resumed>) = 0 [pid 4996] close(3 [pid 6107] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4996] <... close resumed>) = 0 [pid 4996] rmdir("./36") = 0 [pid 4996] mkdir("./37", 0777./strace-static-x86_64: Process 6110 attached ) = 0 [pid 4996] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 6110] set_robust_list(0x7f5c2b8109e0, 24 [pid 4996] ioctl(3, LOOP_CLR_FD [pid 6103] <... futex resumed>) = 1 [pid 6101] <... futex resumed>) = 0 [pid 4996] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6110] <... set_robust_list resumed>) = 0 [pid 4996] close(3 [pid 6110] memfd_create("syzkaller", 0 [pid 4996] <... close resumed>) = 0 [pid 6110] <... memfd_create resumed>) = 3 [ 128.465293][ T6090] EXT4-fs (loop5): free_blocks=2415919104 [ 128.474461][ T26] audit: type=1804 audit(1687834598.232:970): pid=6090 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor113" name="/root/syzkaller.drywye/35/file0/bus" dev="loop5" ino=18 res=1 errno=0 [pid 4996] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [ 128.498388][ T26] audit: type=1804 audit(1687834598.232:971): pid=6090 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor113" name="/root/syzkaller.drywye/35/file0/bus" dev="loop5" ino=18 res=1 errno=0 [ 128.508531][ T6090] EXT4-fs (loop5): dirty_blocks=16 [pid 6110] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6103] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6101] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] <... umount2 resumed>) = 0 [pid 6110] <... mmap resumed>) = 0x7f5c233f0000 [pid 6101] <... futex resumed>) = 0 [pid 4996] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6111 ./strace-static-x86_64: Process 6111 attached [pid 6110] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6106] <... write resumed>) = 1048576 [pid 6104] <... ioctl resumed>) = 0 [pid 6103] <... write resumed>) = 9 [pid 6101] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6090] <... sendfile resumed>) = 63 [pid 4995] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6111] set_robust_list(0x555556fb95e0, 24 [pid 6106] munmap(0x7f5c233f0000, 1048576 [pid 6104] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6103] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6101] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6090] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6111] <... set_robust_list resumed>) = 0 [pid 6104] <... futex resumed>) = 0 [pid 6103] <... futex resumed>) = 0 [pid 6101] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6104] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6103] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6101] <... futex resumed>) = 0 [pid 6111] chdir("./37" [pid 6106] <... munmap resumed>) = 0 [pid 6103] <... openat resumed>) = 5 [pid 6101] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6090] <... futex resumed>) = 0 [pid 4995] lstat("./35/file0", [pid 6111] <... chdir resumed>) = 0 [pid 6106] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6103] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6101] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6090] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6085] exit_group(0 [pid 6111] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6104] <... futex resumed>) = ? [pid 6103] <... futex resumed>) = 0 [pid 6101] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6090] <... futex resumed>) = ? [pid 6085] <... exit_group resumed>) = ? [pid 4995] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6106] <... openat resumed>) = 4 [pid 6111] <... prctl resumed>) = 0 [pid 6106] ioctl(4, LOOP_SET_FD, 3 [pid 6104] +++ exited with 0 +++ [pid 6103] open("./bus", O_RDWR [pid 6101] <... futex resumed>) = 0 [pid 6090] +++ exited with 0 +++ [pid 4995] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6111] setpgid(0, 0 [pid 6106] <... ioctl resumed>) = 0 [pid 6103] <... open resumed>) = 6 [pid 6101] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6085] +++ exited with 0 +++ [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6111] <... setpgid resumed>) = 0 [pid 6106] close(3 [pid 6103] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6101] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6085, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 4995] openat(AT_FDCWD, "./35/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6111] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6103] <... futex resumed>) = 0 [pid 6101] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] <... openat resumed>) = 4 [pid 6111] <... openat resumed>) = 3 [pid 6103] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6101] <... futex resumed>) = 0 [pid 4995] fstat(4, [pid 6111] write(3, "1000", 4 [pid 6110] <... write resumed>) = 1048576 [pid 6106] <... close resumed>) = 0 [pid 6103] <... mmap resumed>) = 0x20000000 [pid 6101] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6111] <... write resumed>) = 4 [pid 6110] munmap(0x7f5c233f0000, 1048576 [pid 6106] mkdir("./file0", 0777 [pid 6103] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6101] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4995] getdents64(4, [pid 6111] close(3 [pid 6110] <... munmap resumed>) = 0 [pid 6106] <... mkdir resumed>) = 0 [pid 6103] <... futex resumed>) = 0 [pid 6101] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 6111] <... close resumed>) = 0 [pid 6110] openat(AT_FDCWD, "/dev/loop3", O_RDWR [ 128.563184][ T6090] EXT4-fs (loop5): Block reservation details [ 128.569424][ T6090] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 128.599097][ T6106] loop4: detected capacity change from 0 to 2048 [pid 6106] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6103] sendfile(4, 5, NULL, 2147483713 [pid 6101] <... futex resumed>) = 0 [pid 4999] umount2("./35", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] getdents64(4, [pid 6111] symlink("/dev/binderfs", "./binderfs" [pid 6110] <... openat resumed>) = 4 [pid 6101] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4995] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 6111] <... symlink resumed>) = 0 [pid 6110] ioctl(4, LOOP_SET_FD, 3 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] close(4 [pid 6111] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] <... close resumed>) = 0 [pid 6111] <... futex resumed>) = 0 [pid 4995] rmdir("./35/file0" [pid 6111] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4995] <... rmdir resumed>) = 0 [pid 6111] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 4995] getdents64(3, [pid 6111] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 4995] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 6111] <... mprotect resumed>) = 0 [pid 4995] close(3 [pid 6111] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4995] <... close resumed>) = 0 [pid 4995] rmdir("./35" [pid 6111] <... clone resumed>, parent_tid=[6112], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6112 [pid 4995] <... rmdir resumed>) = 0 [pid 6111] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] mkdir("./36", 0777 [pid 6111] <... futex resumed>) = 0 [pid 4995] <... mkdir resumed>) = 0 [pid 6111] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4995] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4995] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4995] close(3./strace-static-x86_64: Process 6112 attached [pid 4999] openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4995] <... close resumed>) = 0 [pid 4995] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556fb95d0) = 6113 [pid 6110] <... ioctl resumed>) = 0 [pid 6110] close(3) = 0 [pid 6110] mkdir("./file0", 0777) = 0 [pid 6110] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue"./strace-static-x86_64: Process 6113 attached [pid 6113] set_robust_list(0x555556fb95e0, 24) = 0 [pid 6113] chdir("./36") = 0 [pid 6113] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6113] setpgid(0, 0) = 0 [pid 6113] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6113] write(3, "1000", 4) = 4 [pid 6113] close(3) = 0 [pid 6112] set_robust_list(0x7f5c2b8109e0, 24 [pid 6113] symlink("/dev/binderfs", "./binderfs" [pid 4999] <... openat resumed>) = 3 [pid 6113] <... symlink resumed>) = 0 [pid 6112] <... set_robust_list resumed>) = 0 [pid 4999] fstat(3, [pid 6113] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6113] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c2b7f0000 [pid 6112] memfd_create("syzkaller", 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6113] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6101] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 128.621216][ T6110] loop3: detected capacity change from 0 to 2048 [ 128.622922][ T6103] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 128.645634][ T6103] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 128.659895][ T6103] EXT4-fs (loop0): This should not happen!! Data will be lost [ 128.659895][ T6103] [pid 6113] <... mprotect resumed>) = 0 [pid 6112] <... memfd_create resumed>) = 3 [pid 6101] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] getdents64(3, [pid 6113] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6115], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6115 [pid 6113] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6113] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6115 attached [pid 6115] set_robust_list(0x7f5c2b8109e0, 24) = 0 [pid 6115] memfd_create("syzkaller", 0) = 3 [pid 6115] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5c233f0000 [pid 6112] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6101] <... futex resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 6101] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6112] <... mmap resumed>) = 0x7f5c233f0000 [pid 6101] <... mmap resumed>) = 0x7f5c234cf000 [pid 4999] umount2("./35/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./35/binderfs", [pid 6101] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6101] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6118], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6118 [pid 6101] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] unlink("./35/binderfs" [pid 6101] <... futex resumed>) = 0 [pid 6101] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] <... unlink resumed>) = 0 [pid 4999] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6118 attached [pid 6118] set_robust_list(0x7f5c234ef9e0, 24) = 0 [pid 6118] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6115] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6112] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6106] <... mount resumed>) = 0 [pid 6106] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6106] chdir("./file0") = 0 [pid 6106] ioctl(4, LOOP_CLR_FD) = 0 [pid 6106] close(4) = 0 [pid 6106] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6106] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6105] <... futex resumed>) = 0 [pid 6105] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6105] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6106] <... futex resumed>) = 0 [pid 6106] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000) = 4 [ 128.673345][ T6103] EXT4-fs (loop0): Total free blocks count 0 [ 128.691225][ T5076] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 128.699999][ T6103] EXT4-fs (loop0): Free/Dirty block details [ 128.710828][ T5076] EXT4-fs (loop5): This should not happen!! Data will be lost [ 128.710828][ T5076] [pid 6106] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6112] <... write resumed>) = 1048576 [pid 6106] <... futex resumed>) = 1 [pid 6105] <... futex resumed>) = 0 [pid 6101] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6112] munmap(0x7f5c233f0000, 1048576 [pid 6110] <... mount resumed>) = 0 [pid 6106] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6105] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6110] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6112] <... munmap resumed>) = 0 [pid 6110] <... openat resumed>) = 3 [pid 6112] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6110] chdir("./file0" [pid 6106] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6105] <... futex resumed>) = 0 [pid 6110] <... chdir resumed>) = 0 [pid 6115] <... write resumed>) = 1048576 [pid 6112] <... openat resumed>) = 4 [pid 6110] ioctl(4, LOOP_CLR_FD [pid 6106] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6105] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6110] <... ioctl resumed>) = 0 [pid 6110] close(4) = 0 [pid 6110] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6110] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6112] ioctl(4, LOOP_SET_FD, 3 [pid 6107] <... futex resumed>) = 0 [pid 4999] <... umount2 resumed>) = 0 [pid 4999] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./35/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./35/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4999] close(4) = 0 [pid 6107] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6110] <... futex resumed>) = 0 [pid 6107] <... futex resumed>) = 1 [pid 6110] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6106] <... write resumed>) = 9 [pid 4999] rmdir("./35/file0" [pid 6110] <... open resumed>) = 4 [pid 6107] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6106] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... rmdir resumed>) = 0 [pid 6110] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6106] <... futex resumed>) = 1 [pid 6105] <... futex resumed>) = 0 [pid 4999] getdents64(3, [pid 6110] <... futex resumed>) = 0 [pid 6107] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6106] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6105] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 6110] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6107] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6106] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6105] <... futex resumed>) = 0 [pid 4999] close(3 [pid 6110] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6107] <... futex resumed>) = 0 [pid 6106] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6105] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6115] munmap(0x7f5c233f0000, 1048576 [pid 6110] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6107] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6106] <... openat resumed>) = 5 [pid 4999] <... close resumed>) = 0 [pid 6110] <... write resumed>) = 9 [pid 6106] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] rmdir("./35" [pid 6110] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6106] <... futex resumed>) = 1 [pid 6105] <... futex resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 6110] <... futex resumed>) = 1 [pid 6107] <... futex resumed>) = 0 [pid 6106] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6105] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] mkdir("./36", 0777 [pid 6115] <... munmap resumed>) = 0 [pid 6110] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6107] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6106] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6105] <... futex resumed>) = 0 [pid 4999] <... mkdir resumed>) = 0 [pid 6110] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6107] <... futex resumed>) = 0 [pid 6106] open("./bus", O_RDWR [pid 6105] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] openat(AT_FDCWD, "/dev/loop5", O_RDWR [ 128.741309][ T6103] EXT4-fs (loop0): free_blocks=2415919104 [ 128.752702][ T6103] EXT4-fs (loop0): dirty_blocks=16 [ 128.781404][ T6112] loop2: detected capacity change from 0 to 2048 [pid 6115] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6110] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6107] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6106] <... open resumed>) = 6 [pid 4999] <... openat resumed>) = 3 [pid 6115] <... openat resumed>) = 4 [pid 6110] <... openat resumed>) = 5 [pid 6106] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 6110] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6106] <... futex resumed>) = 1 [pid 6105] <... futex resumed>) = 0 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6110] <... futex resumed>) = 1 [pid 6107] <... futex resumed>) = 0 [pid 6106] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6105] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] close(3 [pid 6110] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6107] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6106] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6105] <... futex resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 6110] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6107] <... futex resumed>) = 0 [pid 6106] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6105] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6115] ioctl(4, LOOP_SET_FD, 3 [pid 6110] open("./bus", O_RDWR [pid 6107] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6106] <... mmap resumed>) = 0x20000000 [pid 6110] <... open resumed>) = 6 [pid 6106] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6120 [pid 6110] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6106] <... futex resumed>) = 1 [pid 6105] <... futex resumed>) = 0 [pid 6110] <... futex resumed>) = 1 [pid 6107] <... futex resumed>) = 0 [pid 6106] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6105] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6110] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6107] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6106] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6105] <... futex resumed>) = 0 [pid 6110] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6107] <... futex resumed>) = 0 [pid 6106] sendfile(4, 5, NULL, 2147483713 [pid 6105] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6112] <... ioctl resumed>) = 0 [pid 6110] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6107] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6110] <... mmap resumed>) = 0x20000000 ./strace-static-x86_64: Process 6120 attached [pid 6110] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6120] set_robust_list(0x555556fb95e0, 24 [pid 6110] <... futex resumed>) = 1 [pid 6107] <... futex resumed>) = 0 [pid 6120] <... set_robust_list resumed>) = 0 [pid 6110] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6107] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6120] chdir("./36" [pid 6110] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6107] <... futex resumed>) = 0 [pid 6120] <... chdir resumed>) = 0 [ 128.804383][ T6103] EXT4-fs (loop0): Block reservation details [ 128.814460][ T6115] loop1: detected capacity change from 0 to 2048 [ 128.821342][ T6106] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 128.835955][ T6103] EXT4-fs (loop0): i_reserved_data_blocks=1 [pid 6110] sendfile(4, 5, NULL, 2147483713 [pid 6107] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6120] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6118] <... ioctl resumed>) = 0 [pid 6115] <... ioctl resumed>) = 0 [pid 6112] close(3 [pid 6103] <... sendfile resumed>) = 63 [pid 6120] <... prctl resumed>) = 0 [pid 6118] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6120] setpgid(0, 0 [pid 6118] <... futex resumed>) = 0 [pid 6120] <... setpgid resumed>) = 0 [pid 6118] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6120] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6120] write(3, "1000", 4) = 4 [pid 6120] close(3) = 0 [pid 6120] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6120] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6120] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c2b7f0000 [pid 6120] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6120] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6121], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6121 [pid 6115] close(3 [pid 6112] <... close resumed>) = 0 [pid 6103] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6120] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6115] <... close resumed>) = 0 [pid 6105] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6120] <... futex resumed>) = 0 [pid 6105] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6120] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6115] mkdir("./file0", 0777 [pid 6112] mkdir("./file0", 0777 [pid 6105] <... futex resumed>) = 0 [pid 6103] <... futex resumed>) = 0 [pid 6105] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6101] exit_group(0 [pid 6118] <... futex resumed>) = ? [pid 6115] <... mkdir resumed>) = 0 [pid 6105] <... mmap resumed>) = 0x7f5c234cf000 [pid 6101] <... exit_group resumed>) = ? [pid 6118] +++ exited with 0 +++ [pid 6115] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6112] <... mkdir resumed>) = 0 [pid 6105] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 6121 attached ) = 0 [pid 6121] set_robust_list(0x7f5c2b8109e0, 24 [pid 6105] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6121] <... set_robust_list resumed>) = 0 [pid 6121] memfd_create("syzkaller", 0 [pid 6105] <... clone resumed>, parent_tid=[6122], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6122 [pid 6121] <... memfd_create resumed>) = 3 [pid 6105] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6121] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6105] <... futex resumed>) = 0 [pid 6121] <... mmap resumed>) = 0x7f5c233f0000 [pid 6105] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6112] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6103] +++ exited with 0 +++ [pid 6101] +++ exited with 0 +++ ./strace-static-x86_64: Process 6122 attached [pid 6122] set_robust_list(0x7f5c234ef9e0, 24) = 0 [pid 6122] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 4994] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6101, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=14 /* 0.14 s */} --- [pid 4994] umount2("./37", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4994] fstat(3, [pid 6121] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] getdents64(3, 0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4994] umount2("./37/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 128.848841][ T6106] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 128.856268][ T6110] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 128.861770][ T6106] EXT4-fs (loop4): This should not happen!! Data will be lost [ 128.861770][ T6106] [pid 4994] lstat("./37/binderfs", [pid 6115] <... mount resumed>) = 0 [pid 4994] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6107] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6107] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6107] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c234cf000 [pid 6107] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6107] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6127], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6127 [pid 6115] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6112] <... mount resumed>) = 0 [pid 6107] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] unlink("./37/binderfs" [pid 6107] <... futex resumed>) = 0 [pid 6107] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6127 attached [pid 6127] set_robust_list(0x7f5c234ef9e0, 24) = 0 [pid 6127] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6115] <... openat resumed>) = 3 [pid 6112] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6105] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4994] <... unlink resumed>) = 0 [pid 6115] chdir("./file0" [pid 6121] <... write resumed>) = 1048576 [pid 6112] <... openat resumed>) = 3 [pid 4994] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6115] <... chdir resumed>) = 0 [pid 6112] chdir("./file0" [ 128.913582][ T6110] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 128.922576][ T6106] EXT4-fs (loop4): Total free blocks count 0 [ 128.935823][ T6110] EXT4-fs (loop3): This should not happen!! Data will be lost [ 128.935823][ T6110] [ 128.944643][ T6106] EXT4-fs (loop4): Free/Dirty block details [ 128.947414][ T6110] EXT4-fs (loop3): Total free blocks count 0 [pid 6115] ioctl(4, LOOP_CLR_FD [pid 6112] <... chdir resumed>) = 0 [pid 6115] <... ioctl resumed>) = 0 [pid 6121] munmap(0x7f5c233f0000, 1048576) = 0 [pid 6121] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6121] ioctl(4, LOOP_SET_FD, 3 [pid 6115] close(4 [pid 6112] ioctl(4, LOOP_CLR_FD [pid 6107] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6107] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6115] <... close resumed>) = 0 [pid 6112] <... ioctl resumed>) = 0 [pid 6115] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6112] close(4 [pid 6115] <... futex resumed>) = 1 [pid 6113] <... futex resumed>) = 0 [pid 6112] <... close resumed>) = 0 [pid 6115] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6113] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6112] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6115] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6113] <... futex resumed>) = 0 [pid 6112] <... futex resumed>) = 1 [pid 6111] <... futex resumed>) = 0 [pid 6115] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6113] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6112] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6111] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6112] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6111] <... futex resumed>) = 0 [pid 6112] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6111] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6115] <... open resumed>) = 4 [ 128.960458][ T11] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 128.961040][ T6110] EXT4-fs (loop3): Free/Dirty block details [ 128.979067][ T6121] loop5: detected capacity change from 0 to 2048 [ 128.979561][ T6110] EXT4-fs (loop3): free_blocks=2415919104 [ 128.988472][ T6106] EXT4-fs (loop4): free_blocks=2415919104 [ 129.004136][ T11] EXT4-fs (loop0): This should not happen!! Data will be lost [ 129.004136][ T11] [pid 6112] <... open resumed>) = 4 [pid 6115] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6112] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6115] <... futex resumed>) = 1 [pid 6113] <... futex resumed>) = 0 [pid 6112] <... futex resumed>) = 1 [pid 6111] <... futex resumed>) = 0 [pid 6115] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6113] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6112] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6111] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6121] <... ioctl resumed>) = 0 [pid 6115] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6113] <... futex resumed>) = 0 [pid 6112] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6111] <... futex resumed>) = 0 [pid 6121] close(3 [pid 6115] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6113] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6112] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6111] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6121] <... close resumed>) = 0 [pid 6115] <... write resumed>) = 9 [pid 6112] <... write resumed>) = 9 [pid 6121] mkdir("./file0", 0777 [pid 6115] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6112] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6122] <... ioctl resumed>) = 0 [pid 6121] <... mkdir resumed>) = 0 [pid 6112] <... futex resumed>) = 1 [pid 6111] <... futex resumed>) = 0 [pid 6106] <... sendfile resumed>) = 63 [pid 6122] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6121] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6115] <... futex resumed>) = 1 [pid 6113] <... futex resumed>) = 0 [pid 6112] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6111] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6127] <... ioctl resumed>) = 0 [pid 6122] <... futex resumed>) = 0 [pid 6115] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6113] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6112] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6111] <... futex resumed>) = 0 [pid 6110] <... sendfile resumed>) = 63 [pid 6106] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6127] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6122] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6113] <... futex resumed>) = 0 [pid 6112] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6111] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6105] exit_group(0 [pid 6127] <... futex resumed>) = 0 [pid 6122] <... futex resumed>) = ? [pid 6115] <... openat resumed>) = 5 [pid 6113] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6112] <... openat resumed>) = 5 [pid 6110] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6106] <... futex resumed>) = ? [pid 6105] <... exit_group resumed>) = ? [pid 6127] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6122] +++ exited with 0 +++ [pid 6115] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6112] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6110] <... futex resumed>) = 0 [pid 6107] exit_group(0 [pid 6106] +++ exited with 0 +++ [pid 6105] +++ exited with 0 +++ [pid 4994] <... umount2 resumed>) = 0 [pid 6127] <... futex resumed>) = ? [pid 6112] <... futex resumed>) = 1 [pid 6111] <... futex resumed>) = 0 [pid 6107] <... exit_group resumed>) = ? [pid 4994] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6127] +++ exited with 0 +++ [pid 6112] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6111] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6112] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6111] <... futex resumed>) = 0 [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6112] open("./bus", O_RDWR [pid 6111] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6115] <... futex resumed>) = 1 [pid 6113] <... futex resumed>) = 0 [pid 6112] <... open resumed>) = 6 [pid 4994] lstat("./37/file0", [pid 6115] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6113] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6112] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6113] <... futex resumed>) = 0 [pid 6112] <... futex resumed>) = 1 [pid 6111] <... futex resumed>) = 0 [pid 4994] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6113] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6112] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6111] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6112] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6115] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6111] <... futex resumed>) = 0 [pid 6110] +++ exited with 0 +++ [pid 6107] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6105, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 4994] openat(AT_FDCWD, "./37/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6115] open("./bus", O_RDWR [ 129.005732][ T6110] EXT4-fs (loop3): dirty_blocks=16 [ 129.025773][ T6106] EXT4-fs (loop4): dirty_blocks=16 [ 129.031301][ T6106] EXT4-fs (loop4): Block reservation details [ 129.037691][ T6106] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 129.047683][ T6110] EXT4-fs (loop3): Block reservation details [ 129.054061][ T6110] EXT4-fs (loop3): i_reserved_data_blocks=1 [pid 6112] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6111] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] umount2("./35", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6107, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 4994] <... openat resumed>) = 4 [pid 6115] <... open resumed>) = 6 [pid 6112] <... mmap resumed>) = 0x20000000 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] restart_syscall(<... resuming interrupted clone ...> [pid 4994] fstat(4, [pid 6115] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6112] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] <... restart_syscall resumed>) = 0 [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6115] <... futex resumed>) = 1 [pid 6113] <... futex resumed>) = 0 [pid 6112] <... futex resumed>) = 1 [pid 6111] <... futex resumed>) = 0 [pid 4998] <... openat resumed>) = 3 [pid 4994] getdents64(4, [pid 6115] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6113] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6112] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6111] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] fstat(3, [pid 4994] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 6121] <... mount resumed>) = 0 [pid 6115] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6113] <... futex resumed>) = 0 [pid 6112] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6111] <... futex resumed>) = 0 [pid 4994] getdents64(4, [pid 6121] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6112] sendfile(4, 5, NULL, 2147483713 [pid 6111] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./36", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 6121] <... openat resumed>) = 3 [pid 6115] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6113] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] getdents64(3, [pid 4994] close(4 [pid 6121] chdir("./file0" [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] <... close resumed>) = 0 [pid 6121] <... chdir resumed>) = 0 [pid 4994] rmdir("./37/file0" [pid 6121] ioctl(4, LOOP_CLR_FD [pid 6115] <... mmap resumed>) = 0x20000000 [pid 4998] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4997] openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4994] <... rmdir resumed>) = 0 [pid 6121] <... ioctl resumed>) = 0 [pid 4997] <... openat resumed>) = 3 [pid 4994] getdents64(3, [pid 6121] close(4 [pid 4998] umount2("./35/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] fstat(3, [pid 4994] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 6121] <... close resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] close(3 [pid 6121] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] lstat("./35/binderfs", [pid 4997] getdents64(3, [pid 4994] <... close resumed>) = 0 [pid 6121] <... futex resumed>) = 1 [pid 6120] <... futex resumed>) = 0 [pid 4994] rmdir("./37" [pid 6121] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6120] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4994] <... rmdir resumed>) = 0 [pid 6121] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6120] <... futex resumed>) = 0 [pid 4994] mkdir("./38", 0777 [pid 6121] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6120] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4994] <... mkdir resumed>) = 0 [pid 4998] unlink("./35/binderfs" [pid 4994] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4998] <... unlink resumed>) = 0 [pid 4997] umount2("./36/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] ioctl(3, LOOP_CLR_FD [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4997] lstat("./36/binderfs", [pid 4994] close(3) = 0 [pid 4994] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6121] <... open resumed>) = 4 [pid 4998] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6121] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6115] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6130 [pid 6121] <... futex resumed>) = 1 [pid 6120] <... futex resumed>) = 0 [pid 6121] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6120] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6115] <... futex resumed>) = 1 [pid 6113] <... futex resumed>) = 0 [pid 4997] unlink("./36/binderfs" [pid 6121] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6120] <... futex resumed>) = 0 [pid 6113] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6121] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [ 129.131036][ T6112] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 129.154124][ T6115] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 6120] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6115] sendfile(4, 5, NULL, 2147483713 [pid 6113] <... futex resumed>) = 0 [pid 4997] <... unlink resumed>) = 0 [pid 6121] <... write resumed>) = 9 [pid 6113] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4997] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6121] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6120] <... futex resumed>) = 0 [pid 6121] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6120] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6121] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6120] <... futex resumed>) = 0 [pid 6121] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6120] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6111] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6111] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6111] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c234cf000 [pid 6111] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 6130 attached [pid 6121] <... openat resumed>) = 5 [pid 6111] <... mprotect resumed>) = 0 [pid 6121] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6121] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6113] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6113] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6113] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c234cf000 [pid 6113] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6113] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6130] set_robust_list(0x555556fb95e0, 24 [pid 6111] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6120] <... futex resumed>) = 0 [pid 6113] <... clone resumed>, parent_tid=[6131], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6131 [pid 6113] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6113] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6131 attached [pid 6131] set_robust_list(0x7f5c234ef9e0, 24) = 0 [pid 6131] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6130] <... set_robust_list resumed>) = 0 [pid 6120] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6132 attached [pid 6132] set_robust_list(0x7f5c234ef9e0, 24 [pid 6130] chdir("./38" [pid 6121] <... futex resumed>) = 0 [pid 6120] <... futex resumed>) = 1 [pid 6111] <... clone resumed>, parent_tid=[6132], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6132 [pid 6121] open("./bus", O_RDWR) = 6 [pid 6121] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6121] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6132] <... set_robust_list resumed>) = 0 [pid 6130] <... chdir resumed>) = 0 [pid 6120] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 129.169678][ T6112] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 129.170499][ T5076] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 129.182319][ T6112] EXT4-fs (loop2): This should not happen!! Data will be lost [ 129.182319][ T6112] [ 129.204475][ T6112] EXT4-fs (loop2): Total free blocks count 0 [ 129.210948][ T6112] EXT4-fs (loop2): Free/Dirty block details [ 129.217521][ T6112] EXT4-fs (loop2): free_blocks=2415919104 [ 129.223576][ T6112] EXT4-fs (loop2): dirty_blocks=16 [pid 6111] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6132] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6130] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6120] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6112] <... sendfile resumed>) = 63 [pid 6111] <... futex resumed>) = 0 [pid 6132] <... ioctl resumed>) = 0 [pid 6113] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6132] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6132] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6130] <... prctl resumed>) = 0 [pid 6120] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6112] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6111] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6130] setpgid(0, 0 [pid 6121] <... futex resumed>) = 0 [pid 6120] <... futex resumed>) = 1 [pid 6112] <... futex resumed>) = 0 [pid 6111] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6121] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 0 [pid 6121] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6120] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6112] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6111] exit_group(0 [pid 6120] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6132] <... futex resumed>) = ? [pid 6130] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6112] <... futex resumed>) = ? [pid 6111] <... exit_group resumed>) = ? [pid 6132] +++ exited with 0 +++ [pid 6120] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6112] +++ exited with 0 +++ [pid 6130] <... openat resumed>) = 3 [pid 6121] <... futex resumed>) = 0 [pid 6120] <... futex resumed>) = 1 [pid 6111] +++ exited with 0 +++ [pid 6121] sendfile(4, 5, NULL, 2147483713 [pid 4996] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6111, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=12 /* 0.12 s */} --- [pid 6130] write(3, "1000", 4 [pid 6120] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4996] umount2("./37", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4996] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] getdents64(3, 0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4996] umount2("./37/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] lstat("./37/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4996] unlink("./37/binderfs") = 0 [pid 4996] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6130] <... write resumed>) = 4 [ 129.276553][ T6115] EXT4-fs (loop1): Total free blocks count 0 [ 129.283563][ T6115] EXT4-fs (loop1): Free/Dirty block details [ 129.291489][ T11] EXT4-fs (loop3): This should not happen!! Data will be lost [ 129.291489][ T11] [ 129.292544][ T6115] EXT4-fs (loop1): free_blocks=2415919104 [ 129.310634][ T6121] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 6130] close(3) = 0 [pid 6130] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6130] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6120] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 129.326341][ T5076] EXT4-fs (loop4): This should not happen!! Data will be lost [ 129.326341][ T5076] [ 129.326360][ T6115] EXT4-fs (loop1): dirty_blocks=16 [ 129.337656][ T74] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 129.342206][ T6121] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 129.366838][ T6115] EXT4-fs (loop1): Block reservation details [ 129.376453][ T6115] EXT4-fs (loop1): i_reserved_data_blocks=1 [pid 6130] <... futex resumed>) = 0 [pid 6120] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6130] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6120] <... futex resumed>) = 0 [pid 6130] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6120] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6130] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6120] <... mmap resumed>) = 0x7f5c234cf000 [pid 6130] <... mprotect resumed>) = 0 [pid 6120] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 6130] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6120] <... mprotect resumed>) = 0 [pid 6130] <... clone resumed>, parent_tid=[6133], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6133 [pid 6120] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6130] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6133 attached ) = 0 [pid 6130] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6120] <... clone resumed>, parent_tid=[6134], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6134 [pid 6133] set_robust_list(0x7f5c2b8109e0, 24 [pid 6131] <... ioctl resumed>) = 0 [pid 6120] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6115] <... sendfile resumed>) = 63 [pid 4998] <... umount2 resumed>) = 0 [pid 6133] <... set_robust_list resumed>) = 0 [pid 6131] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6120] <... futex resumed>) = 0 [pid 6115] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6113] exit_group(0 [pid 4998] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6133] memfd_create("syzkaller", 0 [pid 6131] <... futex resumed>) = ? [pid 6120] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6115] <... futex resumed>) = ? [pid 6113] <... exit_group resumed>) = ? [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6131] +++ exited with 0 +++ [pid 6133] <... memfd_create resumed>) = 3 [pid 6133] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6115] +++ exited with 0 +++ [pid 6113] +++ exited with 0 +++ [pid 4998] lstat("./35/file0", [pid 4997] <... umount2 resumed>) = 0 [pid 6133] <... mmap resumed>) = 0x7f5c233f0000 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6113, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- ./strace-static-x86_64: Process 6134 attached [pid 6134] set_robust_list(0x7f5c234ef9e0, 24) = 0 [pid 6134] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6133] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4998] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./35/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4995] umount2("./36", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... openat resumed>) = 4 [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./36/file0", [pid 4998] fstat(4, [pid 4995] openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./36/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] <... openat resumed>) = 3 [pid 4998] getdents64(4, [pid 4995] fstat(3, [pid 4998] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, [pid 4995] getdents64(3, [pid 4998] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4995] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4998] close(4) = 0 [pid 4997] <... openat resumed>) = 4 [pid 4995] umount2("./36/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] rmdir("./35/file0" [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(4, [pid 4998] <... rmdir resumed>) = 0 [pid 4997] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4995] lstat("./36/binderfs", [pid 4998] getdents64(3, [pid 4997] getdents64(4, [pid 4995] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4995] unlink("./36/binderfs" [pid 4997] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4997] close(4 [pid 4995] <... unlink resumed>) = 0 [pid 4998] close(3 [pid 4997] <... close resumed>) = 0 [pid 4995] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] rmdir("./36/file0" [pid 4998] <... close resumed>) = 0 [pid 4997] <... rmdir resumed>) = 0 [pid 4998] rmdir("./35") = 0 [pid 4997] getdents64(3, 0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4997] close(3) = 0 [pid 4997] rmdir("./36") = 0 [pid 4997] mkdir("./37", 0777) = 0 [pid 4997] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 4997] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4997] close(3) = 0 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556fb95d0) = 6135 [ 129.426755][ T74] EXT4-fs (loop2): This should not happen!! Data will be lost [ 129.426755][ T74] [ 129.439373][ T6121] EXT4-fs (loop5): This should not happen!! Data will be lost [ 129.439373][ T6121] [ 129.447817][ T5608] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 6133] <... write resumed>) = 1048576 [pid 6120] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4998] mkdir("./36", 0777./strace-static-x86_64: Process 6135 attached [pid 6135] set_robust_list(0x555556fb95e0, 24) = 0 [pid 6135] chdir("./37") = 0 [pid 6135] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6135] setpgid(0, 0) = 0 [pid 6135] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6133] munmap(0x7f5c233f0000, 1048576 [pid 4998] <... mkdir resumed>) = 0 [pid 6135] write(3, "1000", 4) = 4 [pid 6135] close(3 [pid 6133] <... munmap resumed>) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 6133] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 4998] ioctl(3, LOOP_CLR_FD [pid 6135] <... close resumed>) = 0 [pid 6135] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6135] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6135] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c2b7f0000 [pid 6135] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6135] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6136 attached [pid 6133] <... openat resumed>) = 4 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [ 129.463837][ T5608] EXT4-fs (loop1): This should not happen!! Data will be lost [ 129.463837][ T5608] [ 129.481088][ T6121] EXT4-fs (loop5): Total free blocks count 0 [ 129.489200][ T6121] EXT4-fs (loop5): Free/Dirty block details [ 129.500470][ T6121] EXT4-fs (loop5): free_blocks=2415919104 [ 129.507580][ T6121] EXT4-fs (loop5): dirty_blocks=16 [ 129.512815][ T6121] EXT4-fs (loop5): Block reservation details [ 129.519336][ T6121] EXT4-fs (loop5): i_reserved_data_blocks=1 [pid 6135] <... clone resumed>, parent_tid=[6136], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6136 [pid 6136] set_robust_list(0x7f5c2b8109e0, 24 [pid 6133] ioctl(4, LOOP_SET_FD, 3 [pid 6136] <... set_robust_list resumed>) = 0 [pid 4998] close(3 [pid 6135] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6135] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4996] <... umount2 resumed>) = 0 [pid 4996] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6133] <... ioctl resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4996] lstat("./37/file0", [pid 6136] memfd_create("syzkaller", 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4996] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] openat(AT_FDCWD, "./37/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4996] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] getdents64(4, 0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4996] getdents64(4, 0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4996] close(4) = 0 [pid 4996] rmdir("./37/file0" [pid 6136] <... memfd_create resumed>) = 3 [pid 6136] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4998] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6137 [pid 6134] <... ioctl resumed>) = 0 [pid 6133] close(3 [pid 6121] <... sendfile resumed>) = 63 ./strace-static-x86_64: Process 6137 attached [pid 6134] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6136] <... mmap resumed>) = 0x7f5c233f0000 [pid 6134] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6137] set_robust_list(0x555556fb95e0, 24 [pid 6133] <... close resumed>) = 0 [pid 6121] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... rmdir resumed>) = 0 [pid 6137] <... set_robust_list resumed>) = 0 [pid 6133] mkdir("./file0", 0777 [pid 6121] <... futex resumed>) = 0 [pid 6120] exit_group(0 [pid 6134] <... futex resumed>) = ? [pid 6120] <... exit_group resumed>) = ? [pid 4996] getdents64(3, [pid 6134] +++ exited with 0 +++ [pid 4996] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4996] close(3) = 0 [pid 4996] rmdir("./37") = 0 [pid 6133] <... mkdir resumed>) = 0 [pid 6133] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 4996] mkdir("./38", 0777) = 0 [pid 6137] chdir("./36" [pid 4996] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6137] <... chdir resumed>) = 0 [pid 6137] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6121] +++ exited with 0 +++ [pid 6120] +++ exited with 0 +++ [pid 4996] <... openat resumed>) = 3 [pid 6137] <... prctl resumed>) = 0 [pid 4996] ioctl(3, LOOP_CLR_FD [pid 6137] setpgid(0, 0 [pid 6136] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6120, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 4996] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6137] <... setpgid resumed>) = 0 [pid 4999] restart_syscall(<... resuming interrupted clone ...> [pid 4996] close(3 [pid 4995] <... umount2 resumed>) = 0 [pid 4996] <... close resumed>) = 0 [ 129.527190][ T6133] loop0: detected capacity change from 0 to 2048 [pid 4996] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6137] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4999] <... restart_syscall resumed>) = 0 [pid 4996] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6139 [pid 6137] <... openat resumed>) = 3 [pid 4999] umount2("./36", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6137] write(3, "1000", 4./strace-static-x86_64: Process 6139 attached [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6137] <... write resumed>) = 4 [pid 6137] close(3 [pid 4999] openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6137] <... close resumed>) = 0 [pid 4999] <... openat resumed>) = 3 [pid 6139] set_robust_list(0x555556fb95e0, 24 [pid 6137] symlink("/dev/binderfs", "./binderfs" [pid 4999] fstat(3, [pid 4995] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6139] <... set_robust_list resumed>) = 0 [pid 6139] chdir("./38" [pid 6137] <... symlink resumed>) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6139] <... chdir resumed>) = 0 [pid 6137] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] getdents64(3, [pid 6139] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6137] <... futex resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4995] lstat("./36/file0", [pid 6139] <... prctl resumed>) = 0 [pid 6137] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4999] umount2("./36/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6139] setpgid(0, 0 [pid 6137] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6139] <... setpgid resumed>) = 0 [pid 6137] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 4999] lstat("./36/binderfs", [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6139] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6137] <... mprotect resumed>) = 0 [pid 4995] openat(AT_FDCWD, "./36/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6139] <... openat resumed>) = 3 [pid 6137] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4995] <... openat resumed>) = 4 [pid 6139] write(3, "1000", 4 [pid 4999] unlink("./36/binderfs" [pid 4995] fstat(4, [pid 6139] <... write resumed>) = 4 [pid 6137] <... clone resumed>, parent_tid=[6140], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6140 [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6139] close(3 [pid 6137] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... unlink resumed>) = 0 [pid 4995] getdents64(4, [pid 6139] <... close resumed>) = 0 [pid 6137] <... futex resumed>) = 0 [pid 4999] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 6139] symlink("/dev/binderfs", "./binderfs" [pid 6137] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4995] getdents64(4, [pid 6139] <... symlink resumed>) = 0 [pid 4995] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 6139] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] close(4 [pid 6139] <... futex resumed>) = 0 [pid 4995] <... close resumed>) = 0 [pid 6139] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4995] rmdir("./36/file0"./strace-static-x86_64: Process 6140 attached [pid 6139] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6136] <... write resumed>) = 1048576 [pid 6133] <... mount resumed>) = 0 [pid 6140] set_robust_list(0x7f5c2b8109e0, 24 [pid 6139] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6136] munmap(0x7f5c233f0000, 1048576 [pid 6133] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 4995] <... rmdir resumed>) = 0 [pid 6140] <... set_robust_list resumed>) = 0 [pid 6136] <... munmap resumed>) = 0 [pid 6133] <... openat resumed>) = 3 [pid 6140] memfd_create("syzkaller", 0 [pid 6139] <... mprotect resumed>) = 0 [pid 4995] getdents64(3, [pid 6140] <... memfd_create resumed>) = 3 [pid 6139] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6136] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6133] chdir("./file0" [pid 4995] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 6140] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6136] <... openat resumed>) = 4 [pid 6133] <... chdir resumed>) = 0 [pid 4995] close(3 [pid 6140] <... mmap resumed>) = 0x7f5c233f0000 [pid 6139] <... clone resumed>, parent_tid=[6142], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6142 [pid 6133] ioctl(4, LOOP_CLR_FD [pid 4995] <... close resumed>) = 0 [pid 6136] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 6142 attached [pid 6139] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] rmdir("./36" [pid 6139] <... futex resumed>) = 0 [pid 6133] <... ioctl resumed>) = 0 [pid 4995] <... rmdir resumed>) = 0 [pid 6139] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4995] mkdir("./37", 0777) = 0 [pid 4995] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4995] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4995] close(3 [pid 6133] close(4 [pid 4995] <... close resumed>) = 0 [pid 6133] <... close resumed>) = 0 [pid 4995] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6133] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6130] <... futex resumed>) = 0 [pid 6133] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6130] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6133] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6130] <... futex resumed>) = 0 [pid 4995] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6143 [pid 6142] set_robust_list(0x7f5c2b8109e0, 24 [pid 6133] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6130] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6142] <... set_robust_list resumed>) = 0 [pid 6142] memfd_create("syzkaller", 0) = 3 [pid 6133] <... open resumed>) = 4 [pid 6142] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6133] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6142] <... mmap resumed>) = 0x7f5c233f0000 [pid 6133] <... futex resumed>) = 1 [pid 6130] <... futex resumed>) = 0 [pid 6142] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6133] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6130] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6133] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6130] <... futex resumed>) = 0 [pid 6136] <... ioctl resumed>) = 0 [pid 6133] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6130] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6143 attached [pid 6140] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6136] close(3 [pid 6133] <... write resumed>) = 9 [pid 6136] <... close resumed>) = 0 [pid 6133] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6143] set_robust_list(0x555556fb95e0, 24 [pid 6136] mkdir("./file0", 0777 [pid 6133] <... futex resumed>) = 1 [pid 6130] <... futex resumed>) = 0 [pid 6143] <... set_robust_list resumed>) = 0 [pid 6136] <... mkdir resumed>) = 0 [pid 6133] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6130] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6136] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6133] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6130] <... futex resumed>) = 0 [pid 6143] chdir("./37" [pid 6133] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6130] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6143] <... chdir resumed>) = 0 [pid 6133] <... openat resumed>) = 5 [pid 4999] <... umount2 resumed>) = 0 [ 129.616492][ T5608] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 129.635674][ T5608] EXT4-fs (loop5): This should not happen!! Data will be lost [ 129.635674][ T5608] [ 129.652404][ T6136] loop3: detected capacity change from 0 to 2048 [pid 6143] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6133] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6143] <... prctl resumed>) = 0 [pid 6133] <... futex resumed>) = 1 [pid 6130] <... futex resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6143] setpgid(0, 0 [pid 6142] <... write resumed>) = 1048576 [pid 6133] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6130] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] lstat("./36/file0", [pid 6143] <... setpgid resumed>) = 0 [pid 6133] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6130] <... futex resumed>) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6143] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6133] open("./bus", O_RDWR [pid 6130] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6143] <... openat resumed>) = 3 [pid 6133] <... open resumed>) = 6 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6143] write(3, "1000", 4 [pid 6133] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] openat(AT_FDCWD, "./36/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6143] <... write resumed>) = 4 [pid 6133] <... futex resumed>) = 1 [pid 6130] <... futex resumed>) = 0 [pid 4999] <... openat resumed>) = 4 [pid 6143] close(3 [pid 6140] <... write resumed>) = 1048576 [pid 6133] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6130] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] fstat(4, [pid 6143] <... close resumed>) = 0 [pid 6140] munmap(0x7f5c233f0000, 1048576 [pid 6133] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6130] <... futex resumed>) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6143] symlink("/dev/binderfs", "./binderfs" [pid 6140] <... munmap resumed>) = 0 [pid 6133] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6130] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] getdents64(4, [pid 6143] <... symlink resumed>) = 0 [pid 6140] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6133] <... mmap resumed>) = 0x20000000 [pid 4999] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 6143] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6133] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6143] <... futex resumed>) = 0 [pid 6136] <... mount resumed>) = 0 [pid 6140] <... openat resumed>) = 4 [pid 6133] <... futex resumed>) = 1 [pid 6130] <... futex resumed>) = 0 [pid 4999] getdents64(4, [pid 6143] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6140] ioctl(4, LOOP_SET_FD, 3 [pid 6136] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6133] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6130] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 6143] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6136] <... openat resumed>) = 3 [pid 6133] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6130] <... futex resumed>) = 0 [pid 6133] sendfile(4, 5, NULL, 2147483713 [pid 6130] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6143] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6140] <... ioctl resumed>) = 0 [pid 6136] chdir("./file0" [pid 4999] close(4 [pid 6143] <... mprotect resumed>) = 0 [pid 6142] munmap(0x7f5c233f0000, 1048576 [pid 6140] close(3 [pid 6136] <... chdir resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 6143] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6140] <... close resumed>) = 0 [pid 6136] ioctl(4, LOOP_CLR_FD [pid 4999] rmdir("./36/file0" [pid 6140] mkdir("./file0", 0777 [pid 6136] <... ioctl resumed>) = 0 [pid 6142] <... munmap resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 6142] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6140] <... mkdir resumed>) = 0 [pid 6136] close(4 [pid 4999] getdents64(3, [pid 6143] <... clone resumed>, parent_tid=[6146], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6146 [pid 6142] <... openat resumed>) = 4 [ 129.738869][ T6140] loop4: detected capacity change from 0 to 2048 [ 129.745239][ T6133] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 129.770278][ T6133] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 6142] ioctl(4, LOOP_SET_FD, 3 [pid 6143] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6140] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6136] <... close resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 6143] <... futex resumed>) = 0 [pid 6143] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6136] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] close(3./strace-static-x86_64: Process 6146 attached [pid 6136] <... futex resumed>) = 1 [pid 6135] <... futex resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 6146] set_robust_list(0x7f5c2b8109e0, 24 [pid 6136] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6135] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] rmdir("./36" [pid 6146] <... set_robust_list resumed>) = 0 [pid 6142] <... ioctl resumed>) = 0 [pid 6136] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6135] <... futex resumed>) = 0 [pid 6130] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4999] <... rmdir resumed>) = 0 [pid 6146] memfd_create("syzkaller", 0 [pid 6135] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6130] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6146] <... memfd_create resumed>) = 3 [pid 6142] close(3 [pid 6136] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6130] <... futex resumed>) = 0 [pid 4999] mkdir("./37", 0777 [pid 6146] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6142] <... close resumed>) = 0 [pid 6140] <... mount resumed>) = 0 [ 129.783058][ T6133] EXT4-fs (loop0): This should not happen!! Data will be lost [ 129.783058][ T6133] [ 129.787649][ T6142] loop2: detected capacity change from 0 to 2048 [ 129.814483][ T6133] EXT4-fs (loop0): Total free blocks count 0 [ 129.821167][ T6133] EXT4-fs (loop0): Free/Dirty block details [ 129.827330][ T6133] EXT4-fs (loop0): free_blocks=2415919104 [ 129.833113][ T6133] EXT4-fs (loop0): dirty_blocks=16 [pid 6136] <... open resumed>) = 4 [pid 6130] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4999] <... mkdir resumed>) = 0 [pid 6146] <... mmap resumed>) = 0x7f5c233f0000 [pid 6142] mkdir("./file0", 0777 [pid 6140] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6136] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6130] <... mmap resumed>) = 0x7f5c234cf000 [pid 4999] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6146] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6133] <... sendfile resumed>) = 63 [pid 6142] <... mkdir resumed>) = 0 [pid 6133] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6140] <... openat resumed>) = 3 [pid 6133] <... futex resumed>) = 0 [pid 6133] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4999] <... openat resumed>) = 3 [pid 6142] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6140] chdir("./file0" [pid 6130] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 4999] ioctl(3, LOOP_CLR_FD [pid 6135] <... futex resumed>) = 0 [pid 6135] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6135] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6140] <... chdir resumed>) = 0 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6140] ioctl(4, LOOP_CLR_FD [pid 6136] <... futex resumed>) = 1 [pid 6130] <... mprotect resumed>) = 0 [pid 6140] <... ioctl resumed>) = 0 [pid 4999] close(3 [pid 6140] close(4 [pid 6130] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4999] <... close resumed>) = 0 [pid 6136] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6140] <... close resumed>) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6140] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6137] <... futex resumed>) = 0 [pid 6137] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6137] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6149 attached [pid 6149] set_robust_list(0x7f5c234ef9e0, 24 [pid 6136] <... write resumed>) = 9 [pid 6136] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6135] <... futex resumed>) = 0 [pid 6135] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6136] <... futex resumed>) = 1 [pid 6135] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6136] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6140] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6130] <... clone resumed>, parent_tid=[6149], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6149 [pid 6136] <... openat resumed>) = 5 [pid 6130] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6136] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6130] <... futex resumed>) = 0 [pid 6136] <... futex resumed>) = 1 [pid 6135] <... futex resumed>) = 0 [pid 6136] open("./bus", O_RDWR [pid 6135] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6130] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6140] <... open resumed>) = 4 [pid 6136] <... open resumed>) = 6 [pid 6135] <... futex resumed>) = 0 [pid 4999] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6150 [pid 6136] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6135] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6136] <... futex resumed>) = 0 [pid 6135] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6136] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6140] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6135] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6150 attached [pid 6149] <... set_robust_list resumed>) = 0 [pid 6140] <... futex resumed>) = 1 [pid 6137] <... futex resumed>) = 0 [pid 6136] <... mmap resumed>) = 0x20000000 [pid 6135] <... futex resumed>) = 0 [pid 6150] set_robust_list(0x555556fb95e0, 24 [pid 6149] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6146] <... write resumed>) = 1048576 [pid 6140] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6137] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6136] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6135] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6150] <... set_robust_list resumed>) = 0 [pid 6149] <... ioctl resumed>) = 0 [pid 6140] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6137] <... futex resumed>) = 0 [pid 6136] <... futex resumed>) = 0 [pid 6135] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6150] chdir("./37" [pid 6149] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6140] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6137] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6136] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6135] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6150] <... chdir resumed>) = 0 [pid 6149] <... futex resumed>) = 1 [pid 6140] <... write resumed>) = 9 [pid 6136] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6135] <... futex resumed>) = 0 [pid 6130] <... futex resumed>) = 0 [ 129.838599][ T6133] EXT4-fs (loop0): Block reservation details [ 129.847491][ T6133] EXT4-fs (loop0): i_reserved_data_blocks=1 [pid 6150] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6149] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6140] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6136] sendfile(4, 5, NULL, 2147483713 [pid 6135] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6130] exit_group(0 [pid 6150] <... prctl resumed>) = 0 [pid 6149] <... futex resumed>) = ? [pid 6146] munmap(0x7f5c233f0000, 1048576 [pid 6140] <... futex resumed>) = 1 [pid 6137] <... futex resumed>) = 0 [pid 6133] <... futex resumed>) = ? [pid 6130] <... exit_group resumed>) = ? [pid 6150] setpgid(0, 0 [pid 6149] +++ exited with 0 +++ [pid 6146] <... munmap resumed>) = 0 [pid 6142] <... mount resumed>) = 0 [pid 6140] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6137] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6133] +++ exited with 0 +++ [pid 6130] +++ exited with 0 +++ [pid 6146] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6140] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6137] <... futex resumed>) = 0 [pid 6146] <... openat resumed>) = 4 [pid 6140] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6137] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4994] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6130, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 6146] ioctl(4, LOOP_SET_FD, 3 [pid 6140] <... openat resumed>) = 5 [pid 4994] restart_syscall(<... resuming interrupted clone ...> [pid 6150] <... setpgid resumed>) = 0 [pid 6142] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6140] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] <... restart_syscall resumed>) = 0 [pid 6150] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6142] <... openat resumed>) = 3 [pid 6140] <... futex resumed>) = 1 [pid 6137] <... futex resumed>) = 0 [pid 6150] <... openat resumed>) = 3 [pid 6142] chdir("./file0" [pid 6140] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6137] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6150] write(3, "1000", 4 [pid 6142] <... chdir resumed>) = 0 [pid 6140] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6137] <... futex resumed>) = 0 [pid 4994] umount2("./38", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6150] <... write resumed>) = 4 [pid 6142] ioctl(4, LOOP_CLR_FD [ 129.902454][ T6136] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 129.907137][ T6146] loop1: detected capacity change from 0 to 2048 [ 129.924509][ T6136] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 129.937847][ T6136] EXT4-fs (loop3): This should not happen!! Data will be lost [ 129.937847][ T6136] [pid 6140] open("./bus", O_RDWR [pid 6137] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6150] close(3 [pid 6142] <... ioctl resumed>) = 0 [pid 6140] <... open resumed>) = 6 [pid 6135] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4994] openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6150] <... close resumed>) = 0 [pid 6142] close(4 [pid 6140] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6135] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] <... openat resumed>) = 3 [pid 6150] symlink("/dev/binderfs", "./binderfs" [pid 6142] <... close resumed>) = 0 [pid 6140] <... futex resumed>) = 1 [pid 6137] <... futex resumed>) = 0 [pid 6135] <... futex resumed>) = 0 [pid 4994] fstat(3, [pid 6150] <... symlink resumed>) = 0 [pid 6142] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6140] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6137] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6135] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6150] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6142] <... futex resumed>) = 1 [pid 6140] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6139] <... futex resumed>) = 0 [pid 6137] <... futex resumed>) = 0 [pid 6135] <... mmap resumed>) = 0x7f5c234cf000 [pid 4994] getdents64(3, [pid 6150] <... futex resumed>) = 0 [pid 6142] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6140] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6139] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6137] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6135] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 4994] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 6150] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6146] <... ioctl resumed>) = 0 [pid 6142] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6140] <... mmap resumed>) = 0x20000000 [pid 6139] <... futex resumed>) = 0 [pid 6135] <... mprotect resumed>) = 0 [pid 4994] umount2("./38/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6150] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6146] close(3 [pid 6142] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6140] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6139] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6136] <... sendfile resumed>) = 63 [pid 6135] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6150] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6146] <... close resumed>) = 0 [pid 6142] <... open resumed>) = 4 [pid 6140] <... futex resumed>) = 1 [pid 6137] <... futex resumed>) = 0 [pid 6136] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] lstat("./38/binderfs", [pid 6150] <... mprotect resumed>) = 0 [pid 6140] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6137] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6136] <... futex resumed>) = 0 [pid 6150] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6140] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6136] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6135] <... clone resumed>, parent_tid=[6153], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6153 [pid 6137] <... futex resumed>) = 0 [pid 4994] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [ 129.948890][ T6136] EXT4-fs (loop3): Total free blocks count 0 [ 129.954950][ T6136] EXT4-fs (loop3): Free/Dirty block details [ 129.961946][ T6136] EXT4-fs (loop3): free_blocks=2415919104 [ 129.967785][ T6136] EXT4-fs (loop3): dirty_blocks=16 [ 129.973633][ T6136] EXT4-fs (loop3): Block reservation details [ 129.980245][ T6136] EXT4-fs (loop3): i_reserved_data_blocks=1 [pid 6142] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6146] mkdir("./file0", 0777 [pid 6142] <... futex resumed>) = 1 [pid 6140] sendfile(4, 5, NULL, 2147483713 [pid 6139] <... futex resumed>) = 0 [pid 6137] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6135] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] unlink("./38/binderfs"./strace-static-x86_64: Process 6153 attached [pid 6150] <... clone resumed>, parent_tid=[6154], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6154 [pid 6142] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6139] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6135] <... futex resumed>) = 0 [pid 4994] <... unlink resumed>) = 0 [pid 6135] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6139] <... futex resumed>) = 0 [pid 6150] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6153] set_robust_list(0x7f5c234ef9e0, 24 [pid 6139] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6153] <... set_robust_list resumed>) = 0 [pid 6150] <... futex resumed>) = 0 [pid 6142] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6153] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6150] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6142] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6153] <... ioctl resumed>) = 0 [pid 6153] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6142] <... write resumed>) = 9 [pid 6135] <... futex resumed>) = 0 [pid 6153] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6142] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6135] exit_group(0 [pid 6139] <... futex resumed>) = 0 [pid 6139] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6139] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6142] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6135] <... exit_group resumed>) = ? [pid 6153] <... futex resumed>) = ? [pid 6136] <... futex resumed>) = ? [pid 6142] <... openat resumed>) = 5 [ 130.003813][ T6140] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 130.022493][ T6140] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 130.023511][ T5608] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 ./strace-static-x86_64: Process 6154 attached [pid 6153] +++ exited with 0 +++ [pid 6146] <... mkdir resumed>) = 0 [pid 6142] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6137] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6136] +++ exited with 0 +++ [pid 6135] +++ exited with 0 +++ [pid 6154] set_robust_list(0x7f5c2b8109e0, 24 [pid 6146] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6142] <... futex resumed>) = 1 [pid 6139] <... futex resumed>) = 0 [pid 6137] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6154] <... set_robust_list resumed>) = 0 [pid 6154] memfd_create("syzkaller", 0) = 3 [pid 6154] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5c233f0000 [pid 6142] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6139] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6137] <... futex resumed>) = 0 [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6135, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6142] <... futex resumed>) = 0 [pid 6139] <... futex resumed>) = 1 [pid 6142] open("./bus", O_RDWR [pid 6139] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6137] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4997] restart_syscall(<... resuming interrupted clone ...> [pid 6142] <... open resumed>) = 6 [pid 6137] <... mmap resumed>) = 0x7f5c234cf000 [pid 6142] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6137] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 4997] <... restart_syscall resumed>) = 0 [pid 6142] <... futex resumed>) = 1 [pid 6139] <... futex resumed>) = 0 [pid 6137] <... mprotect resumed>) = 0 [pid 6142] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6139] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6137] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6142] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6139] <... futex resumed>) = 0 [pid 6142] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6139] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6137] <... clone resumed>, parent_tid=[6155], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6155 [pid 4997] umount2("./37", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6155 attached [pid 6154] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6142] <... mmap resumed>) = 0x20000000 [pid 6142] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6139] <... futex resumed>) = 0 [pid 6142] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6139] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6142] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6139] <... futex resumed>) = 0 [pid 6142] sendfile(4, 5, NULL, 2147483713 [pid 6139] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6155] set_robust_list(0x7f5c234ef9e0, 24 [ 130.035464][ T6140] EXT4-fs (loop4): This should not happen!! Data will be lost [ 130.035464][ T6140] [ 130.056981][ T6140] EXT4-fs (loop4): Total free blocks count 0 [ 130.063172][ T5608] EXT4-fs (loop0): This should not happen!! Data will be lost [ 130.063172][ T5608] [ 130.063853][ T6140] EXT4-fs (loop4): Free/Dirty block details [ 130.092294][ T6140] EXT4-fs (loop4): free_blocks=2415919104 [pid 6137] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] <... umount2 resumed>) = 0 [pid 6155] <... set_robust_list resumed>) = 0 [pid 6137] <... futex resumed>) = 0 [pid 6137] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4997] openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6155] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6154] <... write resumed>) = 1048576 [pid 6146] <... mount resumed>) = 0 [pid 4994] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6146] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6146] chdir("./file0") = 0 [pid 6146] ioctl(4, LOOP_CLR_FD) = 0 [ 130.116398][ T6140] EXT4-fs (loop4): dirty_blocks=16 [ 130.122766][ T6140] EXT4-fs (loop4): Block reservation details [ 130.126084][ T6142] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 130.129139][ T6140] EXT4-fs (loop4): i_reserved_data_blocks=1 [pid 6154] munmap(0x7f5c233f0000, 1048576 [pid 6146] close(4 [pid 4997] <... openat resumed>) = 3 [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6155] <... ioctl resumed>) = 0 [pid 6154] <... munmap resumed>) = 0 [pid 6146] <... close resumed>) = 0 [pid 6140] <... sendfile resumed>) = 63 [pid 6139] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6137] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6146] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6139] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6146] <... futex resumed>) = 1 [pid 6143] <... futex resumed>) = 0 [pid 6139] <... futex resumed>) = 0 [pid 6146] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6143] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6139] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6155] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6154] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6146] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6143] <... futex resumed>) = 0 [pid 6140] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6139] <... mmap resumed>) = 0x7f5c234cf000 [pid 6137] exit_group(0 [pid 4997] fstat(3, [pid 4994] lstat("./38/file0", [pid 6146] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6143] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6139] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 6155] <... futex resumed>) = ? [pid 6154] <... openat resumed>) = 4 [pid 6146] <... open resumed>) = 4 [pid 6140] <... futex resumed>) = ? [pid 6139] <... mprotect resumed>) = 0 [pid 6137] <... exit_group resumed>) = ? [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6146] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6139] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6155] +++ exited with 0 +++ [pid 6154] ioctl(4, LOOP_SET_FD, 3 [pid 6146] <... futex resumed>) = 1 [pid 6143] <... futex resumed>) = 0 [pid 6140] +++ exited with 0 +++ [pid 6146] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6143] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6139] <... clone resumed>, parent_tid=[6158], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6158 [pid 6146] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6143] <... futex resumed>) = 0 [pid 6139] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6137] +++ exited with 0 +++ [pid 4997] getdents64(3, [pid 4994] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6146] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6143] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6139] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6158 attached [pid 6146] <... write resumed>) = 9 [pid 6139] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6137, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 4997] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 6154] <... ioctl resumed>) = 0 [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6158] set_robust_list(0x7f5c234ef9e0, 24 [pid 6146] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] umount2("./36", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6158] <... set_robust_list resumed>) = 0 [pid 6146] <... futex resumed>) = 1 [pid 6143] <... futex resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] umount2("./37/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6158] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6154] close(3 [pid 6146] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6143] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4994] openat(AT_FDCWD, "./38/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6146] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 130.156623][ T6142] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 130.168915][ T6142] EXT4-fs (loop2): This should not happen!! Data will be lost [ 130.168915][ T6142] [ 130.178742][ T6142] EXT4-fs (loop2): Total free blocks count 0 [ 130.185290][ T6142] EXT4-fs (loop2): Free/Dirty block details [ 130.192091][ T6142] EXT4-fs (loop2): free_blocks=2415919104 [ 130.201081][ T6154] loop5: detected capacity change from 0 to 2048 [ 130.207943][ T6142] EXT4-fs (loop2): dirty_blocks=16 [pid 6143] <... futex resumed>) = 0 [pid 4998] <... openat resumed>) = 3 [pid 6154] <... close resumed>) = 0 [pid 6146] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6143] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] fstat(3, [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] <... openat resumed>) = 4 [pid 6158] <... ioctl resumed>) = 0 [pid 6154] mkdir("./file0", 0777 [pid 6146] <... openat resumed>) = 5 [pid 6142] <... sendfile resumed>) = 63 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] lstat("./37/binderfs", [pid 4994] fstat(4, [pid 6158] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6154] <... mkdir resumed>) = 0 [pid 6146] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6142] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6158] <... futex resumed>) = 1 [pid 6154] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6146] <... futex resumed>) = 1 [pid 6143] <... futex resumed>) = 0 [pid 6142] <... futex resumed>) = 0 [pid 6139] <... futex resumed>) = 0 [pid 4998] getdents64(3, [pid 4997] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4994] getdents64(4, [pid 6158] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6146] open("./bus", O_RDWR [pid 6143] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6142] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6139] exit_group(0 [pid 4998] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4994] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 6158] <... futex resumed>) = ? [pid 6146] <... open resumed>) = 6 [pid 6143] <... futex resumed>) = 0 [pid 6142] <... futex resumed>) = ? [pid 6139] <... exit_group resumed>) = ? [pid 4998] umount2("./36/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] unlink("./37/binderfs" [pid 4994] getdents64(4, [pid 6158] +++ exited with 0 +++ [pid 6146] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6143] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6142] +++ exited with 0 +++ [pid 4994] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4994] close(4) = 0 [pid 4994] rmdir("./38/file0" [pid 6146] <... futex resumed>) = 0 [pid 6143] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6139] +++ exited with 0 +++ [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] <... unlink resumed>) = 0 [pid 4994] <... rmdir resumed>) = 0 [pid 6146] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6143] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] lstat("./36/binderfs", [pid 4997] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6139, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 4994] getdents64(3, [pid 6146] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6143] <... futex resumed>) = 0 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4994] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4994] close(3) = 0 [pid 4994] rmdir("./38") = 0 [pid 4994] mkdir("./39", 0777) = 0 [pid 4994] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4994] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4994] close(3) = 0 [pid 4994] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556fb95d0) = 6160 [pid 6146] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6143] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] unlink("./36/binderfs" [pid 6146] <... mmap resumed>) = 0x20000000 [pid 4998] <... unlink resumed>) = 0 [pid 4996] umount2("./38", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6146] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4996] openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 6160 attached [ 130.213388][ T6142] EXT4-fs (loop2): Block reservation details [ 130.219937][ T6142] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 130.240626][ T5608] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 130.256942][ T5608] EXT4-fs (loop3): This should not happen!! Data will be lost [ 130.256942][ T5608] [pid 6160] set_robust_list(0x555556fb95e0, 24) = 0 [pid 6160] chdir("./39") = 0 [pid 6160] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6160] setpgid(0, 0) = 0 [pid 6160] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6160] write(3, "1000", 4) = 4 [pid 6160] close(3) = 0 [pid 6160] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6160] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4996] <... openat resumed>) = 3 [pid 4996] fstat(3, [pid 6160] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4996] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6160] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6146] <... futex resumed>) = 1 [pid 6143] <... futex resumed>) = 0 [pid 4996] getdents64(3, [pid 6146] sendfile(4, 5, NULL, 2147483713 [pid 6143] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 6143] <... futex resumed>) = 0 [pid 4996] umount2("./38/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6143] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4996] lstat("./38/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4996] unlink("./38/binderfs" [pid 6160] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 4996] <... unlink resumed>) = 0 [pid 4996] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6160] <... mprotect resumed>) = 0 [pid 6160] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6162], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6162 [pid 6160] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6160] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6162 attached [pid 6162] set_robust_list(0x7f5c2b8109e0, 24) = 0 [pid 6162] memfd_create("syzkaller", 0) = 3 [pid 6162] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5c233f0000 [ 130.268154][ T5076] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 130.291180][ T11] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 6162] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4997] <... umount2 resumed>) = 0 [pid 4997] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./37/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./37/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4997] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(4, 0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 6154] <... mount resumed>) = 0 [pid 6154] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6143] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6154] <... openat resumed>) = 3 [pid 6143] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6154] chdir("./file0" [pid 6143] <... futex resumed>) = 0 [pid 6154] <... chdir resumed>) = 0 [pid 6143] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6154] ioctl(4, LOOP_CLR_FD) = 0 [pid 6143] <... mmap resumed>) = 0x7f5c234cf000 [pid 6154] close(4 [pid 6143] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 4997] getdents64(4, [pid 6162] <... write resumed>) = 1048576 [pid 6154] <... close resumed>) = 0 [pid 6143] <... mprotect resumed>) = 0 [pid 4997] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 6154] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6143] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4997] close(4) = 0 [pid 4997] rmdir("./37/file0") = 0 [pid 4997] getdents64(3, 0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4997] close(3) = 0 [pid 4997] rmdir("./37" [pid 6154] <... futex resumed>) = 1 [pid 6150] <... futex resumed>) = 0 [pid 4997] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 6163 attached [pid 6154] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6150] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6143] <... clone resumed>, parent_tid=[6163], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6163 [pid 6163] set_robust_list(0x7f5c234ef9e0, 24 [pid 6154] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6150] <... futex resumed>) = 0 [pid 6143] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [ 130.315304][ T6146] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 130.349557][ T5076] EXT4-fs (loop4): This should not happen!! Data will be lost [ 130.349557][ T5076] [pid 6154] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6150] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6143] <... futex resumed>) = 0 [pid 6163] <... set_robust_list resumed>) = 0 [pid 6162] munmap(0x7f5c233f0000, 1048576 [pid 6154] <... open resumed>) = 4 [pid 6143] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4997] mkdir("./38", 0777 [pid 6163] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6162] <... munmap resumed>) = 0 [pid 6154] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... umount2 resumed>) = 0 [pid 4997] <... mkdir resumed>) = 0 [pid 6162] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6154] <... futex resumed>) = 1 [pid 6150] <... futex resumed>) = 0 [pid 4998] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6162] <... openat resumed>) = 4 [pid 6154] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6150] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 130.363240][ T11] EXT4-fs (loop2): This should not happen!! Data will be lost [ 130.363240][ T11] [pid 4997] <... openat resumed>) = 3 [pid 6154] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6150] <... futex resumed>) = 0 [pid 4998] lstat("./36/file0", [pid 4997] ioctl(3, LOOP_CLR_FD [pid 6154] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6150] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6162] ioctl(4, LOOP_SET_FD, 3 [pid 6154] <... write resumed>) = 9 [pid 4998] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] close(3 [pid 6154] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] <... close resumed>) = 0 [pid 6154] <... futex resumed>) = 1 [pid 6150] <... futex resumed>) = 0 [pid 4998] openat(AT_FDCWD, "./36/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6154] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6150] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... openat resumed>) = 4 [pid 6154] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6150] <... futex resumed>) = 0 [pid 4998] fstat(4, [pid 4997] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6164 [pid 6154] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6150] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6154] <... openat resumed>) = 5 [pid 4998] getdents64(4, [pid 6154] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 6164 attached [pid 6154] <... futex resumed>) = 1 [pid 6150] <... futex resumed>) = 0 [pid 4998] getdents64(4, [pid 6164] set_robust_list(0x555556fb95e0, 24 [pid 6154] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6150] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 6164] <... set_robust_list resumed>) = 0 [pid 6154] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6150] <... futex resumed>) = 0 [pid 4998] close(4 [pid 6164] chdir("./38" [pid 6162] <... ioctl resumed>) = 0 [pid 6154] open("./bus", O_RDWR [pid 6150] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] <... close resumed>) = 0 [pid 6164] <... chdir resumed>) = 0 [pid 6154] <... open resumed>) = 6 [ 130.391340][ T6146] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 130.404142][ T6146] EXT4-fs (loop1): This should not happen!! Data will be lost [ 130.404142][ T6146] [ 130.414332][ T6162] loop0: detected capacity change from 0 to 2048 [pid 4998] rmdir("./36/file0" [pid 6164] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6162] close(3 [pid 6154] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6143] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4998] <... rmdir resumed>) = 0 [pid 4996] <... umount2 resumed>) = 0 [pid 6164] <... prctl resumed>) = 0 [pid 6154] <... futex resumed>) = 1 [pid 6150] <... futex resumed>) = 0 [pid 4998] getdents64(3, [pid 4996] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6164] setpgid(0, 0 [pid 6154] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6150] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6164] <... setpgid resumed>) = 0 [pid 6162] <... close resumed>) = 0 [pid 6154] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6150] <... futex resumed>) = 0 [pid 4998] close(3 [pid 6164] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6162] mkdir("./file0", 0777 [pid 6154] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6150] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] <... close resumed>) = 0 [pid 4996] lstat("./38/file0", [pid 6164] <... openat resumed>) = 3 [pid 6162] <... mkdir resumed>) = 0 [pid 6154] <... mmap resumed>) = 0x20000000 [pid 4998] rmdir("./36" [pid 4996] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6164] write(3, "1000", 4 [pid 6162] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6154] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... rmdir resumed>) = 0 [pid 4996] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6164] <... write resumed>) = 4 [pid 6154] <... futex resumed>) = 1 [pid 6150] <... futex resumed>) = 0 [pid 4998] mkdir("./37", 0777 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6164] close(3 [pid 6154] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6150] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... mkdir resumed>) = 0 [ 130.450016][ T6146] EXT4-fs (loop1): Total free blocks count 0 [ 130.488325][ T6146] EXT4-fs (loop1): Free/Dirty block details [ 130.494500][ T6146] EXT4-fs (loop1): free_blocks=2415919104 [pid 4996] openat(AT_FDCWD, "./38/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6164] <... close resumed>) = 0 [pid 6154] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6150] <... futex resumed>) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4996] <... openat resumed>) = 4 [pid 6164] symlink("/dev/binderfs", "./binderfs" [pid 6154] sendfile(4, 5, NULL, 2147483713 [pid 6150] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] <... openat resumed>) = 3 [pid 4996] fstat(4, [pid 6164] <... symlink resumed>) = 0 [pid 6163] <... ioctl resumed>) = 0 [pid 6146] <... sendfile resumed>) = 63 [pid 6163] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6146] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6163] <... futex resumed>) = 0 [pid 6146] <... futex resumed>) = 0 [pid 6163] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6146] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6162] <... mount resumed>) = 0 [pid 6162] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6162] chdir("./file0") = 0 [pid 6162] ioctl(4, LOOP_CLR_FD) = 0 [pid 6162] close(4) = 0 [pid 6162] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6162] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6164] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6160] <... futex resumed>) = 0 [pid 6143] exit_group(0 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 4996] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6163] <... futex resumed>) = ? [pid 6160] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6146] <... futex resumed>) = ? [pid 6143] <... exit_group resumed>) = ? [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6163] +++ exited with 0 +++ [pid 6146] +++ exited with 0 +++ [pid 6143] +++ exited with 0 +++ [pid 6162] <... futex resumed>) = 0 [pid 6160] <... futex resumed>) = 1 [pid 4996] getdents64(4, [pid 6164] <... futex resumed>) = 0 [pid 4998] close(3 [pid 4995] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6143, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6164] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6162] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6160] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4996] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4998] <... close resumed>) = 0 [pid 6164] <... mmap resumed>) = 0x7f5c2b7f0000 [ 130.501349][ T6146] EXT4-fs (loop1): dirty_blocks=16 [ 130.507687][ T6146] EXT4-fs (loop1): Block reservation details [ 130.510647][ T6154] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1097: group 0, [ 130.513693][ T6146] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 130.528044][ T6154] block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 6164] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6162] <... open resumed>) = 4 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4996] getdents64(4, ./strace-static-x86_64: Process 6167 attached [pid 6164] <... mprotect resumed>) = 0 [pid 6162] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 6164] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6162] <... futex resumed>) = 1 [pid 4998] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6167 [pid 4996] close(4 [pid 6160] <... futex resumed>) = 0 [pid 6162] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6160] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... close resumed>) = 0 [pid 6160] <... futex resumed>) = 0 [pid 4996] rmdir("./38/file0" [pid 6164] <... clone resumed>, parent_tid=[6168], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6168 [pid 4995] umount2("./37", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6162] <... write resumed>) = 9 [pid 6160] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4996] <... rmdir resumed>) = 0 [pid 6164] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6162] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] getdents64(3, [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6164] <... futex resumed>) = 0 [pid 6162] <... futex resumed>) = 1 [pid 6160] <... futex resumed>) = 0 [pid 4995] openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 6168 attached [pid 6167] set_robust_list(0x555556fb95e0, 24 [pid 6164] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6162] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6160] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 6168] set_robust_list(0x7f5c2b8109e0, 24 [pid 6167] <... set_robust_list resumed>) = 0 [pid 4995] <... openat resumed>) = 3 [pid 6162] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6160] <... futex resumed>) = 0 [pid 4996] close(3 [pid 6168] <... set_robust_list resumed>) = 0 [pid 6167] chdir("./37" [pid 6162] openat(AT_FDCWD, "./bus", O_RDONLY [pid 4996] <... close resumed>) = 0 [pid 6168] memfd_create("syzkaller", 0 [pid 6160] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6162] <... openat resumed>) = 5 [pid 6167] <... chdir resumed>) = 0 [pid 4996] rmdir("./38" [pid 4995] fstat(3, [pid 6168] <... memfd_create resumed>) = 3 [pid 6167] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6162] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... rmdir resumed>) = 0 [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6167] <... prctl resumed>) = 0 [pid 6168] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6162] <... futex resumed>) = 1 [pid 6160] <... futex resumed>) = 0 [pid 4995] getdents64(3, [pid 6167] setpgid(0, 0 [pid 6168] <... mmap resumed>) = 0x7f5c233f0000 [pid 6160] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 6162] open("./bus", O_RDWR [pid 6167] <... setpgid resumed>) = 0 [pid 4996] mkdir("./39", 0777 [pid 6167] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6162] <... open resumed>) = 6 [pid 6160] <... futex resumed>) = 0 [pid 4995] umount2("./37/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6160] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6150] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4996] <... mkdir resumed>) = 0 [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6167] <... openat resumed>) = 3 [pid 6162] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6160] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6167] write(3, "1000", 4 [pid 6150] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4995] lstat("./37/binderfs", [pid 6167] <... write resumed>) = 4 [pid 6162] <... futex resumed>) = 0 [pid 6160] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6150] <... futex resumed>) = 0 [pid 4996] <... openat resumed>) = 3 [pid 6167] close(3 [pid 6162] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6160] <... futex resumed>) = 0 [pid 6150] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4996] ioctl(3, LOOP_CLR_FD [pid 4995] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6167] <... close resumed>) = 0 [ 130.541833][ T6154] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 130.558756][ T6154] EXT4-fs (loop5): This should not happen!! Data will be lost [ 130.558756][ T6154] [ 130.573126][ T6154] EXT4-fs (loop5): Total free blocks count 0 [ 130.584349][ T6154] EXT4-fs (loop5): Free/Dirty block details [ 130.590648][ T6154] EXT4-fs (loop5): free_blocks=2415919104 [pid 6168] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6167] symlink("/dev/binderfs", "./binderfs" [pid 6162] <... mmap resumed>) = 0x20000000 [pid 6160] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6150] <... mmap resumed>) = 0x7f5c234cf000 [pid 4996] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4995] unlink("./37/binderfs" [pid 6167] <... symlink resumed>) = 0 [pid 6162] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6150] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 4996] close(3 [pid 4995] <... unlink resumed>) = 0 [pid 6167] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6162] <... futex resumed>) = 1 [pid 6160] <... futex resumed>) = 0 [pid 6167] <... futex resumed>) = 0 [pid 6162] sendfile(4, 5, NULL, 2147483713 [pid 6160] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6150] <... mprotect resumed>) = 0 [pid 4996] <... close resumed>) = 0 [pid 4995] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6167] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6160] <... futex resumed>) = 0 [pid 4996] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6167] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6160] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6154] <... sendfile resumed>) = 63 [pid 6154] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6154] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6167] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6167] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6170], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6170 [pid 6167] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4996] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6169 [pid 6150] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6167] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6150] <... clone resumed>, parent_tid=[6171], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6171 [pid 6168] <... write resumed>) = 1048576 [pid 6168] munmap(0x7f5c233f0000, 1048576) = 0 [ 130.601057][ T6154] EXT4-fs (loop5): dirty_blocks=16 [ 130.607987][ T6154] EXT4-fs (loop5): Block reservation details [ 130.615332][ T6154] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 130.624870][ T5076] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 6168] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6168] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 6171 attached ./strace-static-x86_64: Process 6170 attached ./strace-static-x86_64: Process 6169 attached [pid 6150] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6171] set_robust_list(0x7f5c234ef9e0, 24 [pid 6170] set_robust_list(0x7f5c2b8109e0, 24 [pid 6150] <... futex resumed>) = 0 [pid 6171] <... set_robust_list resumed>) = 0 [pid 6150] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6170] <... set_robust_list resumed>) = 0 [pid 6171] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6169] set_robust_list(0x555556fb95e0, 24 [pid 6171] <... ioctl resumed>) = 0 [pid 6170] memfd_create("syzkaller", 0 [pid 6169] <... set_robust_list resumed>) = 0 [pid 6171] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6150] <... futex resumed>) = 0 [pid 6171] <... futex resumed>) = 1 [pid 6150] exit_group(0 [pid 6170] <... memfd_create resumed>) = 3 [pid 6169] chdir("./39" [pid 6154] <... futex resumed>) = ? [pid 6150] <... exit_group resumed>) = ? [pid 6171] +++ exited with 0 +++ [pid 6170] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6169] <... chdir resumed>) = 0 [pid 6154] +++ exited with 0 +++ [pid 6168] <... ioctl resumed>) = 0 [pid 6168] close(3) = 0 [pid 6168] mkdir("./file0", 0777) = 0 [pid 6168] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6170] <... mmap resumed>) = 0x7f5c233f0000 [pid 6169] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6160] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6150] +++ exited with 0 +++ [pid 6170] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6169] <... prctl resumed>) = 0 [pid 6160] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6169] setpgid(0, 0 [pid 6160] <... futex resumed>) = 0 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6150, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 6169] <... setpgid resumed>) = 0 [pid 6160] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4999] umount2("./37", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6169] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6160] <... mmap resumed>) = 0x7f5c234cf000 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6169] <... openat resumed>) = 3 [pid 6160] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 4999] openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6169] write(3, "1000", 4 [pid 6160] <... mprotect resumed>) = 0 [pid 4999] <... openat resumed>) = 3 [pid 6169] <... write resumed>) = 4 [pid 6160] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4999] fstat(3, [pid 6169] close(3 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6169] <... close resumed>) = 0 [pid 6160] <... clone resumed>, parent_tid=[6173], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6173 [pid 4999] getdents64(3, [pid 6169] symlink("/dev/binderfs", "./binderfs" [pid 6160] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 6169] <... symlink resumed>) = 0 [pid 6160] <... futex resumed>) = 0 [pid 4999] umount2("./37/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6169] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6160] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6169] <... futex resumed>) = 0 [pid 4999] lstat("./37/binderfs", [pid 6169] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6169] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 4999] unlink("./37/binderfs" [pid 6169] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 4999] <... unlink resumed>) = 0 [pid 6169] <... mprotect resumed>) = 0 [ 130.645101][ T6162] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 130.655448][ T6168] loop3: detected capacity change from 0 to 2048 [ 130.672208][ T5076] EXT4-fs (loop1): This should not happen!! Data will be lost [ 130.672208][ T5076] [ 130.684622][ T6162] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 4999] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6169] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6174], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6174 [pid 6169] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6169] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6173 attached [pid 6173] set_robust_list(0x7f5c234ef9e0, 24) = 0 [pid 6173] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040./strace-static-x86_64: Process 6174 attached [pid 6174] set_robust_list(0x7f5c2b8109e0, 24) = 0 [pid 6174] memfd_create("syzkaller", 0) = 3 [pid 6174] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5c233f0000 [pid 6168] <... mount resumed>) = 0 [pid 6168] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6168] chdir("./file0") = 0 [pid 6168] ioctl(4, LOOP_CLR_FD) = 0 [pid 6168] close(4) = 0 [pid 6168] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6164] <... futex resumed>) = 0 [pid 6168] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6164] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6170] <... write resumed>) = 1048576 [pid 6168] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6164] <... futex resumed>) = 0 [pid 6170] munmap(0x7f5c233f0000, 1048576 [pid 6168] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6164] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6170] <... munmap resumed>) = 0 [pid 6168] <... open resumed>) = 4 [pid 6168] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6164] <... futex resumed>) = 0 [pid 6168] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6164] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6168] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6164] <... futex resumed>) = 0 [pid 6168] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6164] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6168] <... write resumed>) = 9 [pid 6168] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6164] <... futex resumed>) = 0 [pid 6168] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6164] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6168] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6164] <... futex resumed>) = 0 [pid 6168] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6164] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6168] <... openat resumed>) = 5 [pid 6168] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6164] <... futex resumed>) = 0 [pid 4995] <... umount2 resumed>) = 0 [pid 6168] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6164] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6168] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6164] <... futex resumed>) = 0 [pid 6168] open("./bus", O_RDWR [pid 6164] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6170] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6168] <... open resumed>) = 6 [pid 6168] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6164] <... futex resumed>) = 0 [pid 6168] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6164] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6168] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6164] <... futex resumed>) = 0 [pid 6168] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6164] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6170] <... openat resumed>) = 4 [pid 6168] <... mmap resumed>) = 0x20000000 [pid 6160] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4995] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6170] ioctl(4, LOOP_SET_FD, 3 [pid 6168] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6164] <... futex resumed>) = 0 [ 130.720582][ T11] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 6168] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6164] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6168] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6164] <... futex resumed>) = 0 [pid 6168] sendfile(4, 5, NULL, 2147483713 [pid 6164] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6174] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 130.769775][ T6170] loop4: detected capacity change from 0 to 2048 [ 130.774113][ T6168] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 130.780745][ T11] EXT4-fs (loop5): This should not happen!! Data will be lost [ 130.780745][ T11] [ 130.791482][ T6168] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 4995] lstat("./37/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4995] openat(AT_FDCWD, "./37/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4995] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] getdents64(4, 0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4995] getdents64(4, 0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4995] close(4) = 0 [pid 4995] rmdir("./37/file0" [pid 6170] <... ioctl resumed>) = 0 [pid 6168] <... sendfile resumed>) = 63 [pid 6164] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4995] <... rmdir resumed>) = 0 [pid 6164] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] getdents64(3, [pid 6164] <... futex resumed>) = 0 [ 130.813556][ T6168] EXT4-fs (loop3): This should not happen!! Data will be lost [ 130.813556][ T6168] [ 130.823346][ T6168] EXT4-fs (loop3): Total free blocks count 0 [ 130.829640][ T6168] EXT4-fs (loop3): Free/Dirty block details [ 130.835638][ T6168] EXT4-fs (loop3): free_blocks=2415919104 [ 130.841540][ T6168] EXT4-fs (loop3): dirty_blocks=16 [ 130.846815][ T6168] EXT4-fs (loop3): Block reservation details [ 130.853010][ T6168] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 130.855603][ T6162] EXT4-fs (loop0): This should not happen!! Data will be lost [ 130.855603][ T6162] [pid 4995] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 6174] <... write resumed>) = 1048576 [pid 6170] close(3 [pid 6168] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6164] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4995] close(3 [pid 6174] munmap(0x7f5c233f0000, 1048576 [pid 6170] <... close resumed>) = 0 [pid 6168] <... futex resumed>) = 0 [pid 6164] <... mmap resumed>) = 0x7f5c234cf000 [pid 4999] <... umount2 resumed>) = 0 [pid 4995] <... close resumed>) = 0 [pid 6164] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 4999] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] rmdir("./37" [pid 6174] <... munmap resumed>) = 0 [pid 6170] mkdir("./file0", 0777 [pid 6168] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6164] <... mprotect resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] <... rmdir resumed>) = 0 [pid 6174] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6170] <... mkdir resumed>) = 0 [pid 6164] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4999] lstat("./37/file0", [pid 4995] mkdir("./38", 0777 [pid 6174] <... openat resumed>) = 4 [pid 6170] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] <... mkdir resumed>) = 0 [pid 6174] ioctl(4, LOOP_SET_FD, 3 [pid 6173] <... ioctl resumed>) = 0 [pid 6164] <... clone resumed>, parent_tid=[6176], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6176 [pid 6162] <... sendfile resumed>) = 63 [pid 4999] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] openat(AT_FDCWD, "/dev/loop1", O_RDWR./strace-static-x86_64: Process 6176 attached [pid 6173] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6162] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6176] set_robust_list(0x7f5c234ef9e0, 24 [pid 6173] <... futex resumed>) = 0 [pid 6162] <... futex resumed>) = 0 [pid 6176] <... set_robust_list resumed>) = 0 [pid 6173] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6162] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6176] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6164] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6160] exit_group(0 [pid 4995] <... openat resumed>) = 3 [pid 6164] <... futex resumed>) = 0 [pid 6164] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6176] <... ioctl resumed>) = 0 [pid 6173] <... futex resumed>) = ? [pid 6162] <... futex resumed>) = ? [pid 6160] <... exit_group resumed>) = ? [pid 4995] ioctl(3, LOOP_CLR_FD [pid 6176] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6173] +++ exited with 0 +++ [pid 6164] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6162] +++ exited with 0 +++ [pid 6176] <... futex resumed>) = 0 [pid 6176] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6174] <... ioctl resumed>) = 0 [pid 6174] close(3) = 0 [pid 6174] mkdir("./file0", 0777 [pid 6160] +++ exited with 0 +++ [pid 6164] exit_group(0) = ? [pid 6168] <... futex resumed>) = ? [pid 4995] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6176] <... futex resumed>) = ? [pid 6170] <... mount resumed>) = 0 [pid 6168] +++ exited with 0 +++ [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] close(3 [pid 4994] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6160, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6176] +++ exited with 0 +++ [pid 6174] <... mkdir resumed>) = 0 [pid 6170] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6164] +++ exited with 0 +++ [pid 4999] openat(AT_FDCWD, "./37/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4995] <... close resumed>) = 0 [pid 4994] umount2("./39", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... openat resumed>) = 4 [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6164, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] fstat(4, [pid 4995] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6170] <... openat resumed>) = 3 [pid 6174] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue"./strace-static-x86_64: Process 6179 attached [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./38", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6179 [pid 4994] openat(AT_FDCWD, "./39", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6170] chdir("./file0" [pid 4999] getdents64(4, [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] <... openat resumed>) = 3 [pid 4999] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4994] fstat(3, [pid 4999] getdents64(4, [pid 4997] openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6170] <... chdir resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6170] ioctl(4, LOOP_CLR_FD [pid 4999] close(4 [pid 4997] <... openat resumed>) = 3 [pid 4999] <... close resumed>) = 0 [pid 4997] fstat(3, [pid 4994] getdents64(3, [pid 6170] <... ioctl resumed>) = 0 [pid 4999] rmdir("./37/file0" [pid 4994] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6179] set_robust_list(0x555556fb95e0, 24 [pid 4999] <... rmdir resumed>) = 0 [pid 6179] <... set_robust_list resumed>) = 0 [pid 6170] close(4 [pid 4997] getdents64(3, [pid 4994] umount2("./39/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6179] chdir("./38" [pid 6170] <... close resumed>) = 0 [pid 4999] getdents64(3, [pid 4997] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 6179] <... chdir resumed>) = 0 [pid 6170] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6179] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4997] umount2("./38/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6170] <... futex resumed>) = 1 [pid 6167] <... futex resumed>) = 0 [pid 4999] close(3 [pid 4994] lstat("./39/binderfs", [pid 6179] <... prctl resumed>) = 0 [pid 6170] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6167] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... close resumed>) = 0 [pid 6179] setpgid(0, 0 [pid 6167] <... futex resumed>) = 0 [ 130.879297][ T6162] EXT4-fs (loop0): Total free blocks count 0 [ 130.885762][ T6162] EXT4-fs (loop0): Free/Dirty block details [ 130.891711][ T6162] EXT4-fs (loop0): free_blocks=2415919104 [ 130.899009][ T6162] EXT4-fs (loop0): dirty_blocks=16 [ 130.904190][ T6162] EXT4-fs (loop0): Block reservation details [ 130.910321][ T6162] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 130.920139][ T6174] loop2: detected capacity change from 0 to 2048 [pid 4997] lstat("./38/binderfs", [pid 4994] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6179] <... setpgid resumed>) = 0 [pid 6167] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] rmdir("./37" [pid 6179] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6170] <... open resumed>) = 4 [pid 4997] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4994] unlink("./39/binderfs" [pid 6179] <... openat resumed>) = 3 [pid 6170] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... rmdir resumed>) = 0 [pid 4997] unlink("./38/binderfs" [pid 6179] write(3, "1000", 4 [pid 6170] <... futex resumed>) = 1 [pid 6167] <... futex resumed>) = 0 [pid 4994] <... unlink resumed>) = 0 [pid 6179] <... write resumed>) = 4 [pid 6170] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6167] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] mkdir("./38", 0777 [pid 4997] <... unlink resumed>) = 0 [pid 6179] close(3 [pid 6167] <... futex resumed>) = 0 [pid 4994] umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6179] <... close resumed>) = 0 [pid 6167] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6179] symlink("/dev/binderfs", "./binderfs" [pid 4999] <... mkdir resumed>) = 0 [pid 4997] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6179] <... symlink resumed>) = 0 [pid 6179] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6179] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c2b7f0000 [pid 6179] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6179] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6182], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6182 [pid 6179] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6179] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6182 attached [pid 6174] <... mount resumed>) = 0 [pid 6170] <... write resumed>) = 9 [pid 4999] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6182] set_robust_list(0x7f5c2b8109e0, 24 [pid 6174] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6170] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... openat resumed>) = 3 [pid 6170] <... futex resumed>) = 1 [pid 6167] <... futex resumed>) = 0 [pid 6174] <... openat resumed>) = 3 [pid 6170] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6167] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6167] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6170] <... openat resumed>) = 5 [pid 6174] chdir("./file0" [pid 4999] ioctl(3, LOOP_CLR_FD [pid 6174] <... chdir resumed>) = 0 [pid 6170] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6174] ioctl(4, LOOP_CLR_FD [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6170] <... futex resumed>) = 1 [pid 6167] <... futex resumed>) = 0 [pid 6174] <... ioctl resumed>) = 0 [pid 4999] close(3 [pid 6167] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... close resumed>) = 0 [pid 6182] <... set_robust_list resumed>) = 0 [pid 6182] memfd_create("syzkaller", 0) = 3 [pid 6182] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5c233f0000 [pid 6167] <... futex resumed>) = 0 [pid 6174] close(4 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6167] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6174] <... close resumed>) = 0 [pid 6182] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6174] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [ 130.970290][ T5076] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 130.987033][ T5076] EXT4-fs (loop0): This should not happen!! Data will be lost [ 130.987033][ T5076] [ 130.997908][ T5457] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 6170] open("./bus", O_RDWR [pid 6174] <... futex resumed>) = 1 [pid 6170] <... open resumed>) = 6 [pid 6169] <... futex resumed>) = 0 [pid 4999] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6183 [pid 6174] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6169] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6174] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6169] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6174] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6170] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6174] <... open resumed>) = 4 [pid 6170] <... futex resumed>) = 1 [pid 6167] <... futex resumed>) = 0 [pid 6167] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6170] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6167] <... futex resumed>) = 0 [pid 6170] <... mmap resumed>) = 0x20000000 [pid 6167] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6174] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6169] <... futex resumed>) = 0 [pid 6169] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6174] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6169] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6174] <... write resumed>) = 9 [pid 6170] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6174] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6169] <... futex resumed>) = 0 [pid 6174] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6170] <... futex resumed>) = 1 [pid 6169] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6167] <... futex resumed>) = 0 [pid 6169] <... futex resumed>) = 0 [pid 6167] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6169] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6167] <... futex resumed>) = 0 [pid 6167] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6174] <... openat resumed>) = 5 [pid 6170] sendfile(4, 5, NULL, 2147483713 [pid 6174] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6169] <... futex resumed>) = 0 [pid 6174] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6169] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6174] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6169] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 131.029697][ T5457] EXT4-fs (loop3): This should not happen!! Data will be lost [ 131.029697][ T5457] [pid 6174] open("./bus", O_RDWR) = 6 [pid 4997] <... umount2 resumed>) = 0 [pid 6174] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6169] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6183 attached [pid 6182] <... write resumed>) = 1048576 [pid 6174] <... futex resumed>) = 1 [pid 4997] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] <... umount2 resumed>) = 0 [pid 6169] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6183] set_robust_list(0x555556fb95e0, 24 [pid 6182] munmap(0x7f5c233f0000, 1048576 [pid 6174] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6169] <... futex resumed>) = 0 [pid 6174] <... mmap resumed>) = 0x20000000 [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6183] <... set_robust_list resumed>) = 0 [pid 6182] <... munmap resumed>) = 0 [pid 6174] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6169] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6167] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4997] lstat("./38/file0", [pid 4994] lstat("./39/file0", [pid 6183] chdir("./38" [pid 6182] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6174] <... futex resumed>) = 0 [pid 6169] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6167] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6174] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4994] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6182] <... openat resumed>) = 4 [pid 6169] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6174] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6169] <... futex resumed>) = 0 [pid 6167] <... futex resumed>) = 0 [pid 6182] ioctl(4, LOOP_SET_FD, 3 [pid 4997] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6183] <... chdir resumed>) = 0 [pid 6174] sendfile(4, 5, NULL, 2147483713 [pid 6169] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 131.068945][ T6170] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 131.094550][ T6170] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 131.113140][ T6170] EXT4-fs (loop4): This should not happen!! Data will be lost [ 131.113140][ T6170] [pid 6167] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6183] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6167] <... mmap resumed>) = 0x7f5c234cf000 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6183] <... prctl resumed>) = 0 [pid 6183] setpgid(0, 0 [pid 6167] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 4997] openat(AT_FDCWD, "./38/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4994] openat(AT_FDCWD, "./39/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6183] <... setpgid resumed>) = 0 [pid 6167] <... mprotect resumed>) = 0 [pid 4997] <... openat resumed>) = 4 [pid 4994] <... openat resumed>) = 4 [pid 6183] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4994] fstat(4, [pid 6183] <... openat resumed>) = 3 [pid 4997] fstat(4, [pid 6167] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6183] write(3, "1000", 4 [pid 4997] getdents64(4, [pid 6183] <... write resumed>) = 4 [pid 4994] getdents64(4, ./strace-static-x86_64: Process 6184 attached [pid 6182] <... ioctl resumed>) = 0 [pid 6167] <... clone resumed>, parent_tid=[6184], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6184 [pid 4997] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4997] getdents64(4, 0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4997] close(4) = 0 [pid 4997] rmdir("./38/file0" [pid 6183] close(3 [pid 6167] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6184] set_robust_list(0x7f5c234ef9e0, 24 [pid 6183] <... close resumed>) = 0 [pid 6182] close(3 [pid 6167] <... futex resumed>) = 0 [pid 6184] <... set_robust_list resumed>) = 0 [pid 6183] symlink("/dev/binderfs", "./binderfs" [pid 6167] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6182] <... close resumed>) = 0 [pid 6184] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [ 131.124576][ T6170] EXT4-fs (loop4): Total free blocks count 0 [ 131.131305][ T6182] loop1: detected capacity change from 0 to 2048 [ 131.153652][ T6174] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 6182] mkdir("./file0", 0777 [pid 4997] <... rmdir resumed>) = 0 [pid 4997] getdents64(3, 0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4997] close(3) = 0 [pid 4997] rmdir("./38") = 0 [pid 4997] mkdir("./39", 0777) = 0 [pid 4997] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 6169] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4994] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 6182] <... mkdir resumed>) = 0 [pid 6183] <... symlink resumed>) = 0 [pid 4997] ioctl(3, LOOP_CLR_FD [pid 6169] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] getdents64(4, [pid 6183] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6182] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6169] <... futex resumed>) = 0 [pid 6183] <... futex resumed>) = 0 [pid 4997] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4994] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4997] close(3 [pid 6183] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6169] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4997] <... close resumed>) = 0 [pid 4994] close(4 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556fb95d0) = 6185 [pid 6183] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6169] <... mmap resumed>) = 0x7f5c234cf000 [pid 4994] <... close resumed>) = 0 [pid 6184] <... ioctl resumed>) = 0 [pid 6183] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6170] <... sendfile resumed>) = 63 [pid 6169] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 6167] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4994] rmdir("./39/file0"./strace-static-x86_64: Process 6185 attached [pid 6185] set_robust_list(0x555556fb95e0, 24) = 0 [ 131.178307][ T6170] EXT4-fs (loop4): Free/Dirty block details [ 131.184205][ T6174] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 131.184486][ T6170] EXT4-fs (loop4): free_blocks=2415919104 [ 131.205748][ T6170] EXT4-fs (loop4): dirty_blocks=16 [ 131.211335][ T6170] EXT4-fs (loop4): Block reservation details [ 131.217966][ T6170] EXT4-fs (loop4): i_reserved_data_blocks=1 [pid 6185] chdir("./39") = 0 [pid 6185] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6185] setpgid(0, 0 [pid 6184] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6183] <... mprotect resumed>) = 0 [pid 6170] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6169] <... mprotect resumed>) = 0 [pid 6167] exit_group(0 [pid 4994] <... rmdir resumed>) = 0 [pid 6170] <... futex resumed>) = ? [pid 6184] <... futex resumed>) = ? [pid 6167] <... exit_group resumed>) = ? [pid 6169] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6185] <... setpgid resumed>) = 0 [pid 6184] +++ exited with 0 +++ [pid 6183] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6170] +++ exited with 0 +++ ./strace-static-x86_64: Process 6187 attached [pid 6185] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6167] +++ exited with 0 +++ [pid 4994] getdents64(3, [pid 6185] <... openat resumed>) = 3 [pid 6185] write(3, "1000", 4) = 4 [pid 6185] close(3) = 0 [pid 6187] set_robust_list(0x7f5c2b8109e0, 24 [pid 6185] symlink("/dev/binderfs", "./binderfs" [pid 6183] <... clone resumed>, parent_tid=[6187], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6187 [pid 6169] <... clone resumed>, parent_tid=[6186], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6186 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6167, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 4994] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 6185] <... symlink resumed>) = 0 [pid 6185] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 6186 attached [pid 6185] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6186] set_robust_list(0x7f5c234ef9e0, 24 [pid 6185] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6186] <... set_robust_list resumed>) = 0 [pid 6185] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6186] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6185] <... mprotect resumed>) = 0 [pid 6187] <... set_robust_list resumed>) = 0 [pid 6186] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6185] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6183] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6169] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] close(3 [pid 6186] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6185] <... clone resumed>, parent_tid=[6190], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6190 [pid 6185] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6185] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6190 attached [pid 6190] set_robust_list(0x7f5c2b8109e0, 24 [pid 6187] memfd_create("syzkaller", 0 [pid 6183] <... futex resumed>) = 0 [pid 6169] <... futex resumed>) = 0 [pid 6187] <... memfd_create resumed>) = 3 [pid 6183] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6182] <... mount resumed>) = 0 [pid 6169] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4994] <... close resumed>) = 0 [pid 6190] <... set_robust_list resumed>) = 0 [pid 6182] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6190] memfd_create("syzkaller", 0 [pid 6182] <... openat resumed>) = 3 [pid 6190] <... memfd_create resumed>) = 3 [pid 6182] chdir("./file0" [pid 6190] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6182] <... chdir resumed>) = 0 [pid 6190] <... mmap resumed>) = 0x7f5c233f0000 [pid 6187] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [ 131.226448][ T6174] EXT4-fs (loop2): This should not happen!! Data will be lost [ 131.226448][ T6174] [ 131.242508][ T6174] EXT4-fs (loop2): Total free blocks count 0 [ 131.248759][ T6174] EXT4-fs (loop2): Free/Dirty block details [ 131.256043][ T6174] EXT4-fs (loop2): free_blocks=2415919104 [ 131.263360][ T6174] EXT4-fs (loop2): dirty_blocks=16 [ 131.270504][ T6174] EXT4-fs (loop2): Block reservation details [pid 6182] ioctl(4, LOOP_CLR_FD [pid 4998] umount2("./37", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] rmdir("./39" [pid 6187] <... mmap resumed>) = 0x7f5c233f0000 [pid 6186] <... ioctl resumed>) = 0 [pid 6182] <... ioctl resumed>) = 0 [pid 6174] <... sendfile resumed>) = 63 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] <... rmdir resumed>) = 0 [pid 6190] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6186] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6182] close(4 [pid 4998] openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4994] mkdir("./40", 0777 [pid 6190] <... write resumed>) = 1048576 [pid 6187] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6186] <... futex resumed>) = 1 [pid 6182] <... close resumed>) = 0 [pid 6174] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6169] <... futex resumed>) = 0 [pid 4998] <... openat resumed>) = 3 [pid 4994] <... mkdir resumed>) = 0 [pid 6190] munmap(0x7f5c233f0000, 1048576 [pid 6174] <... futex resumed>) = 0 [pid 4998] fstat(3, [pid 6186] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6182] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6169] exit_group(0 [pid 4994] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6190] <... munmap resumed>) = 0 [ 131.277823][ T6174] EXT4-fs (loop2): i_reserved_data_blocks=1 [pid 6187] <... write resumed>) = 1048576 [pid 6186] <... futex resumed>) = ? [pid 6182] <... futex resumed>) = 1 [pid 6179] <... futex resumed>) = 0 [pid 6169] <... exit_group resumed>) = ? [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] <... openat resumed>) = 3 [pid 6190] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6186] +++ exited with 0 +++ [pid 6182] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6179] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6174] +++ exited with 0 +++ [pid 4998] getdents64(3, [pid 4994] ioctl(3, LOOP_CLR_FD [pid 6190] <... openat resumed>) = 4 [pid 4998] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4994] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6190] ioctl(4, LOOP_SET_FD, 3 [pid 6182] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6179] <... futex resumed>) = 0 [pid 6169] +++ exited with 0 +++ [pid 4998] umount2("./37/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] close(3 [pid 6187] munmap(0x7f5c233f0000, 1048576 [pid 6182] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6179] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] <... close resumed>) = 0 [pid 6187] <... munmap resumed>) = 0 [pid 4998] lstat("./37/binderfs", [pid 4996] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6169, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 4994] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6191 attached [pid 6187] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6182] <... open resumed>) = 4 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4996] restart_syscall(<... resuming interrupted clone ...> [pid 6187] <... openat resumed>) = 4 [pid 6182] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] unlink("./37/binderfs" [pid 6191] set_robust_list(0x555556fb95e0, 24 [pid 6187] ioctl(4, LOOP_SET_FD, 3 [pid 6182] <... futex resumed>) = 1 [pid 6179] <... futex resumed>) = 0 [pid 4996] <... restart_syscall resumed>) = 0 [pid 4994] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6191 [pid 6191] <... set_robust_list resumed>) = 0 [pid 6182] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6179] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... unlink resumed>) = 0 [pid 6190] <... ioctl resumed>) = 0 [pid 6182] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6179] <... futex resumed>) = 0 [pid 6190] close(3 [pid 6182] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6179] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6190] <... close resumed>) = 0 [pid 6182] <... write resumed>) = 9 [pid 6190] mkdir("./file0", 0777 [pid 6182] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6191] chdir("./40" [pid 6190] <... mkdir resumed>) = 0 [pid 6182] <... futex resumed>) = 1 [pid 6179] <... futex resumed>) = 0 [pid 6191] <... chdir resumed>) = 0 [pid 6187] <... ioctl resumed>) = 0 [pid 6191] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6190] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6187] close(3 [pid 6182] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6179] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] umount2("./39", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6191] <... prctl resumed>) = 0 [pid 6187] <... close resumed>) = 0 [pid 6182] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6179] <... futex resumed>) = 0 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6191] setpgid(0, 0 [ 131.324402][ T6190] loop3: detected capacity change from 0 to 2048 [ 131.344355][ T6187] loop5: detected capacity change from 0 to 2048 [ 131.353687][ T5076] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 6187] mkdir("./file0", 0777 [pid 6182] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6179] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4996] openat(AT_FDCWD, "./39", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6191] <... setpgid resumed>) = 0 [pid 6187] <... mkdir resumed>) = 0 [pid 4996] <... openat resumed>) = 3 [pid 6191] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6187] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 4996] fstat(3, [pid 6191] <... openat resumed>) = 3 [pid 4996] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6191] write(3, "1000", 4 [pid 4996] getdents64(3, [pid 6191] <... write resumed>) = 4 [pid 4996] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 6191] close(3 [pid 4996] umount2("./39/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6191] <... close resumed>) = 0 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6191] symlink("/dev/binderfs", "./binderfs" [pid 4996] lstat("./39/binderfs", [pid 6191] <... symlink resumed>) = 0 [pid 4996] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6191] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] unlink("./39/binderfs" [pid 6191] <... futex resumed>) = 0 [pid 4996] <... unlink resumed>) = 0 [pid 6191] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4996] umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6191] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6191] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6182] <... openat resumed>) = 5 [pid 6191] <... mprotect resumed>) = 0 [pid 6191] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6192], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6192 [pid 6191] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6191] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6182] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6179] <... futex resumed>) = 0 [pid 6182] open("./bus", O_RDWR [pid 6179] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 6192 attached [pid 6182] <... open resumed>) = 6 [pid 6179] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6182] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6179] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6182] <... futex resumed>) = 0 [pid 6179] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6182] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6179] <... futex resumed>) = 0 [pid 6192] set_robust_list(0x7f5c2b8109e0, 24 [pid 6179] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6192] <... set_robust_list resumed>) = 0 [pid 6192] memfd_create("syzkaller", 0 [pid 6182] <... mmap resumed>) = 0x20000000 [pid 4998] <... umount2 resumed>) = 0 [pid 6182] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6179] <... futex resumed>) = 0 [pid 6179] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6179] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6182] sendfile(4, 5, NULL, 2147483713 [pid 6192] <... memfd_create resumed>) = 3 [pid 6192] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5c233f0000 [pid 6190] <... mount resumed>) = 0 [pid 6190] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6190] chdir("./file0") = 0 [pid 4998] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 131.370144][ T5076] EXT4-fs (loop4): This should not happen!! Data will be lost [ 131.370144][ T5076] [ 131.381149][ T74] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 131.398383][ T74] EXT4-fs (loop2): This should not happen!! Data will be lost [ 131.398383][ T74] [pid 6190] ioctl(4, LOOP_CLR_FD [pid 4998] lstat("./37/file0", [pid 6192] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6190] <... ioctl resumed>) = 0 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./37/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 6190] close(4 [pid 4998] close(4) = 0 [pid 4998] rmdir("./37/file0" [pid 6190] <... close resumed>) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 6190] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] getdents64(3, [pid 6190] <... futex resumed>) = 1 [pid 6185] <... futex resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 6190] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6185] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] close(3 [pid 6190] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6185] <... futex resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 6190] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6185] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] rmdir("./37" [pid 6190] <... open resumed>) = 4 [pid 4998] <... rmdir resumed>) = 0 [pid 6192] <... write resumed>) = 1048576 [pid 6190] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6187] <... mount resumed>) = 0 [pid 6179] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4998] mkdir("./38", 0777 [pid 4996] <... umount2 resumed>) = 0 [pid 6190] <... futex resumed>) = 1 [pid 6187] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6185] <... futex resumed>) = 0 [pid 6179] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... mkdir resumed>) = 0 [pid 6190] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6187] <... openat resumed>) = 3 [pid 6185] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6179] <... futex resumed>) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4996] umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6192] munmap(0x7f5c233f0000, 1048576 [pid 6190] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6187] chdir("./file0" [pid 6185] <... futex resumed>) = 0 [pid 6179] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4998] <... openat resumed>) = 3 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6192] <... munmap resumed>) = 0 [pid 6190] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6187] <... chdir resumed>) = 0 [ 131.443774][ T6182] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 6185] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6179] <... mmap resumed>) = 0x7f5c234cf000 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 4996] lstat("./39/file0", [pid 6192] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6190] <... write resumed>) = 9 [pid 6187] ioctl(4, LOOP_CLR_FD [pid 6179] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4996] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6192] <... openat resumed>) = 4 [pid 6190] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6187] <... ioctl resumed>) = 0 [pid 6179] <... mprotect resumed>) = 0 [pid 4998] close(3 [pid 4996] umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6192] ioctl(4, LOOP_SET_FD, 3 [pid 6190] <... futex resumed>) = 1 [pid 6187] close(4 [pid 6185] <... futex resumed>) = 0 [pid 6179] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4998] <... close resumed>) = 0 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6190] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6187] <... close resumed>) = 0 [pid 6185] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4996] openat(AT_FDCWD, "./39/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6192] <... ioctl resumed>) = 0 [pid 6190] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6187] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6185] <... futex resumed>) = 0 [pid 6179] <... clone resumed>, parent_tid=[6197], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6197 [pid 4996] <... openat resumed>) = 4 [pid 6192] close(3 [pid 6190] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6187] <... futex resumed>) = 1 [pid 6185] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6183] <... futex resumed>) = 0 [pid 6179] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] fstat(4, [pid 6192] <... close resumed>) = 0 [pid 6190] <... openat resumed>) = 5 [pid 6187] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6183] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6179] <... futex resumed>) = 0 [pid 4998] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6198 [pid 4996] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 6198 attached [pid 6192] mkdir("./file0", 0777 [pid 6190] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6187] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6183] <... futex resumed>) = 0 [pid 6179] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4996] getdents64(4, [pid 6198] set_robust_list(0x555556fb95e0, 24 [pid 6192] <... mkdir resumed>) = 0 [pid 6190] <... futex resumed>) = 1 [pid 6187] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6185] <... futex resumed>) = 0 [pid 6183] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4996] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 6198] <... set_robust_list resumed>) = 0 [pid 6192] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6190] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6187] <... open resumed>) = 4 [pid 6185] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] getdents64(4, ./strace-static-x86_64: Process 6197 attached [pid 6197] set_robust_list(0x7f5c234ef9e0, 24) = 0 [pid 6197] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6198] chdir("./38" [pid 6190] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6187] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6185] <... futex resumed>) = 0 [pid 4996] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 6198] <... chdir resumed>) = 0 [pid 6190] open("./bus", O_RDWR [pid 6187] <... futex resumed>) = 1 [pid 6183] <... futex resumed>) = 0 [pid 6183] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6198] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6190] <... open resumed>) = 6 [pid 6187] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6185] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6183] <... futex resumed>) = 0 [ 131.509447][ T6192] loop0: detected capacity change from 0 to 2048 [ 131.526574][ T6182] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 131.539003][ T6182] EXT4-fs (loop1): This should not happen!! Data will be lost [ 131.539003][ T6182] [ 131.550940][ T6182] EXT4-fs (loop1): Total free blocks count 0 [pid 4996] close(4 [pid 6198] <... prctl resumed>) = 0 [pid 6190] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6187] <... write resumed>) = 9 [pid 6185] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6183] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4996] <... close resumed>) = 0 [pid 6198] setpgid(0, 0 [pid 6190] <... futex resumed>) = 0 [pid 6187] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6185] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6183] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4996] rmdir("./39/file0" [pid 6198] <... setpgid resumed>) = 0 [pid 6190] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6187] <... futex resumed>) = 0 [pid 6185] <... futex resumed>) = 0 [pid 6183] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6179] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4996] <... rmdir resumed>) = 0 [pid 6198] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6197] <... ioctl resumed>) = 0 [pid 6190] <... mmap resumed>) = 0x20000000 [pid 6187] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6185] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6183] <... futex resumed>) = 0 [pid 6182] <... sendfile resumed>) = 63 [pid 4996] getdents64(3, [pid 6198] <... openat resumed>) = 3 [pid 6197] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6190] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6187] <... openat resumed>) = 5 [pid 6185] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6183] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6182] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 6198] write(3, "1000", 4 [pid 6197] <... futex resumed>) = 0 [pid 6190] <... futex resumed>) = 0 [pid 6182] <... futex resumed>) = 0 [pid 6179] exit_group(0) = ? [pid 6182] +++ exited with 0 +++ [pid 6187] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6185] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6187] <... futex resumed>) = 0 [pid 6183] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4996] close(3 [pid 6190] sendfile(4, 5, NULL, 2147483713 [pid 6187] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6185] <... futex resumed>) = 0 [pid 6183] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... close resumed>) = 0 [pid 6187] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6187] open("./bus", O_RDWR) = 6 [pid 6187] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6197] +++ exited with 0 +++ [pid 6187] <... futex resumed>) = 0 [pid 6179] +++ exited with 0 +++ [pid 6187] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6185] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6198] <... write resumed>) = 4 [pid 6192] <... mount resumed>) = 0 [pid 6187] <... futex resumed>) = 0 [pid 6183] <... futex resumed>) = 1 [pid 4996] rmdir("./39" [pid 6198] close(3 [pid 6192] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6187] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6183] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4995] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6179, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 6198] <... close resumed>) = 0 [pid 6192] <... openat resumed>) = 3 [pid 6183] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4996] <... rmdir resumed>) = 0 [pid 4995] restart_syscall(<... resuming interrupted clone ...> [pid 6198] symlink("/dev/binderfs", "./binderfs" [pid 6192] chdir("./file0" [pid 6183] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] <... restart_syscall resumed>) = 0 [pid 6198] <... symlink resumed>) = 0 [pid 6192] <... chdir resumed>) = 0 [pid 6187] <... futex resumed>) = 0 [pid 6183] <... futex resumed>) = 1 [pid 4996] mkdir("./40", 0777 [ 131.557356][ T6182] EXT4-fs (loop1): Free/Dirty block details [ 131.563304][ T6182] EXT4-fs (loop1): free_blocks=2415919104 [ 131.569399][ T6182] EXT4-fs (loop1): dirty_blocks=16 [ 131.574621][ T6182] EXT4-fs (loop1): Block reservation details [ 131.580734][ T6182] EXT4-fs (loop1): i_reserved_data_blocks=1 [pid 6192] ioctl(4, LOOP_CLR_FD [pid 6187] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6192] <... ioctl resumed>) = 0 [pid 6187] <... mmap resumed>) = 0x20000000 [pid 6192] close(4 [pid 6187] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6192] <... close resumed>) = 0 [pid 6187] <... futex resumed>) = 0 [pid 6192] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6187] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6192] <... futex resumed>) = 1 [pid 6191] <... futex resumed>) = 0 [pid 6192] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6191] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6192] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6191] <... futex resumed>) = 0 [pid 6192] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6191] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6192] <... open resumed>) = 4 [pid 6192] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6191] <... futex resumed>) = 0 [pid 6192] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6191] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6192] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6191] <... futex resumed>) = 0 [pid 6192] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6191] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6192] <... write resumed>) = 9 [pid 6192] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6191] <... futex resumed>) = 0 [pid 6192] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6191] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6192] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6191] <... futex resumed>) = 0 [pid 6192] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6191] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6192] <... openat resumed>) = 5 [pid 6192] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6191] <... futex resumed>) = 0 [pid 6183] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6192] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6191] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6183] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6192] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6191] <... futex resumed>) = 0 [pid 6192] open("./bus", O_RDWR [pid 6191] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6183] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... mkdir resumed>) = 0 [pid 6192] <... open resumed>) = 6 [pid 4995] umount2("./38", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6192] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6191] <... futex resumed>) = 0 [pid 6187] <... futex resumed>) = 0 [pid 6183] <... futex resumed>) = 1 [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6198] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6192] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6191] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6187] sendfile(4, 5, NULL, 2147483713 [pid 6183] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4995] openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4996] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6198] <... futex resumed>) = 0 [pid 6192] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6191] <... futex resumed>) = 0 [pid 4996] <... openat resumed>) = 3 [pid 4995] <... openat resumed>) = 3 [pid 6198] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4996] ioctl(3, LOOP_CLR_FD [pid 4995] fstat(3, [pid 6198] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 4996] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6198] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6192] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6191] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4996] close(3 [pid 4995] getdents64(3, [pid 6198] <... mprotect resumed>) = 0 [pid 6192] <... mmap resumed>) = 0x20000000 [pid 6185] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4996] <... close resumed>) = 0 [pid 4995] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 6198] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6192] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6185] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4995] umount2("./38/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6192] <... futex resumed>) = 1 [pid 6191] <... futex resumed>) = 0 [pid 6185] <... futex resumed>) = 0 [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6198] <... clone resumed>, parent_tid=[6201], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6201 [pid 6192] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6191] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6185] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4996] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6202 [pid 4995] lstat("./38/binderfs", [pid 6198] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6192] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6191] <... futex resumed>) = 0 [pid 6185] <... mmap resumed>) = 0x7f5c234cf000 [ 131.611477][ T6190] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 131.637644][ T6187] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 4995] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 ./strace-static-x86_64: Process 6202 attached [pid 6198] <... futex resumed>) = 0 [pid 6192] sendfile(4, 5, NULL, 2147483713 [pid 6191] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6185] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 4995] unlink("./38/binderfs"./strace-static-x86_64: Process 6201 attached [pid 6198] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6185] <... mprotect resumed>) = 0 [pid 4995] <... unlink resumed>) = 0 [pid 6201] set_robust_list(0x7f5c2b8109e0, 24 [pid 6185] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4995] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6201] <... set_robust_list resumed>) = 0 [pid 6201] memfd_create("syzkaller", 0 [pid 6185] <... clone resumed>, parent_tid=[6203], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6203 [pid 6201] <... memfd_create resumed>) = 3 [pid 6185] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6201] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6185] <... futex resumed>) = 0 [pid 6201] <... mmap resumed>) = 0x7f5c233f0000 [pid 6185] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6203 attached [pid 6203] set_robust_list(0x7f5c234ef9e0, 24) = 0 [ 131.677978][ T6192] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 131.697890][ T5076] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 131.702434][ T6187] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 6203] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6202] set_robust_list(0x555556fb95e0, 24 [pid 6183] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6201] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6183] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6183] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c234cf000 [pid 6183] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6183] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6202] <... set_robust_list resumed>) = 0 [pid 6191] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6185] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6183] <... clone resumed>, parent_tid=[6204], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6204 [pid 6183] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6183] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6204 attached [pid 6204] set_robust_list(0x7f5c234ef9e0, 24) = 0 [pid 6204] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6202] chdir("./40" [pid 6191] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6202] <... chdir resumed>) = 0 [pid 6191] <... futex resumed>) = 0 [ 131.722785][ T6190] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 131.735709][ T6192] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 131.749218][ T6190] EXT4-fs (loop3): This should not happen!! Data will be lost [ 131.749218][ T6190] [ 131.749497][ T5076] EXT4-fs (loop1): This should not happen!! Data will be lost [ 131.749497][ T5076] [ 131.759488][ T6192] EXT4-fs (loop0): This should not happen!! Data will be lost [ 131.759488][ T6192] [pid 6202] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6191] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6201] <... write resumed>) = 1048576 [pid 6202] <... prctl resumed>) = 0 [pid 6191] <... mmap resumed>) = 0x7f5c234cf000 [pid 6183] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6201] munmap(0x7f5c233f0000, 1048576 [pid 6202] setpgid(0, 0 [pid 6191] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 6201] <... munmap resumed>) = 0 [pid 6202] <... setpgid resumed>) = 0 [pid 6201] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6202] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6201] <... openat resumed>) = 4 [pid 6191] <... mprotect resumed>) = 0 [pid 6201] ioctl(4, LOOP_SET_FD, 3 [pid 6202] <... openat resumed>) = 3 [pid 6191] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6202] write(3, "1000", 4) = 4 [pid 6191] <... clone resumed>, parent_tid=[6205], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6205 [ 131.779508][ T6187] EXT4-fs (loop5): This should not happen!! Data will be lost [ 131.779508][ T6187] [ 131.790348][ T6190] EXT4-fs (loop3): Total free blocks count 0 [ 131.797330][ T6190] EXT4-fs (loop3): Free/Dirty block details [ 131.804754][ T6187] EXT4-fs (loop5): Total free blocks count 0 [ 131.806212][ T6201] loop4: detected capacity change from 0 to 2048 [ 131.811727][ T6190] EXT4-fs (loop3): free_blocks=2415919104 [ 131.824008][ T6192] EXT4-fs (loop0): Total free blocks count 0 [pid 6202] close(3 [pid 6191] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6202] <... close resumed>) = 0 [pid 6191] <... futex resumed>) = 0 [pid 6202] symlink("/dev/binderfs", "./binderfs" [pid 6201] <... ioctl resumed>) = 0 [pid 6191] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6201] close(3) = 0 [pid 6201] mkdir("./file0", 0777) = 0 ./strace-static-x86_64: Process 6205 attached [pid 6205] set_robust_list(0x7f5c234ef9e0, 24) = 0 [pid 6202] <... symlink resumed>) = 0 [pid 6205] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6202] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6201] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6202] <... futex resumed>) = 0 [ 131.830684][ T6187] EXT4-fs (loop5): Free/Dirty block details [ 131.837205][ T6190] EXT4-fs (loop3): dirty_blocks=16 [ 131.842743][ T6190] EXT4-fs (loop3): Block reservation details [ 131.849642][ T6192] EXT4-fs (loop0): Free/Dirty block details [ 131.869606][ T6187] EXT4-fs (loop5): free_blocks=2415919104 [pid 6202] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4995] <... umount2 resumed>) = 0 [pid 6203] <... ioctl resumed>) = 0 [pid 6203] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6203] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6202] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6202] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6190] <... sendfile resumed>) = 63 [pid 6190] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6202] <... mprotect resumed>) = 0 [pid 6202] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6185] exit_group(0 [pid 6203] <... futex resumed>) = ? [pid 6185] <... exit_group resumed>) = ? [pid 4995] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6203] +++ exited with 0 +++ [pid 6202] <... clone resumed>, parent_tid=[6207], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6207 [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6202] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4995] lstat("./38/file0", [pid 6202] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6190] <... futex resumed>) = ? [pid 4995] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6201] <... mount resumed>) = 0 ./strace-static-x86_64: Process 6207 attached [pid 6201] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6191] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6190] +++ exited with 0 +++ [pid 6185] +++ exited with 0 +++ [pid 4995] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6201] <... openat resumed>) = 3 [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6207] set_robust_list(0x7f5c2b8109e0, 24 [ 131.871412][ T6190] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 131.881496][ T6187] EXT4-fs (loop5): dirty_blocks=16 [ 131.895761][ T6192] EXT4-fs (loop0): free_blocks=2415919104 [ 131.902143][ T6192] EXT4-fs (loop0): dirty_blocks=16 [ 131.914075][ T6187] EXT4-fs (loop5): Block reservation details [ 131.920439][ T6192] EXT4-fs (loop0): Block reservation details [pid 6201] chdir("./file0" [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6185, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 4995] openat(AT_FDCWD, "./38/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6207] <... set_robust_list resumed>) = 0 [pid 6201] <... chdir resumed>) = 0 [pid 4997] umount2("./39", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6201] ioctl(4, LOOP_CLR_FD [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] <... openat resumed>) = 4 [pid 6201] <... ioctl resumed>) = 0 [pid 4997] openat(AT_FDCWD, "./39", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6201] close(4 [pid 4997] <... openat resumed>) = 3 [pid 6201] <... close resumed>) = 0 [pid 4997] fstat(3, [pid 6201] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6201] <... futex resumed>) = 1 [pid 6198] <... futex resumed>) = 0 [pid 4997] getdents64(3, [pid 6201] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6198] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 6201] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6198] <... futex resumed>) = 0 [pid 4997] umount2("./39/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6207] memfd_create("syzkaller", 0 [pid 6205] <... ioctl resumed>) = 0 [pid 6201] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6198] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6192] <... sendfile resumed>) = 63 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] fstat(4, [pid 6204] <... ioctl resumed>) = 0 [pid 6207] <... memfd_create resumed>) = 3 [pid 6205] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6201] <... open resumed>) = 4 [pid 6192] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6187] <... sendfile resumed>) = 63 [pid 4997] lstat("./39/binderfs", [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6207] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6205] <... futex resumed>) = 0 [pid 6201] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6192] <... futex resumed>) = 0 [pid 6191] exit_group(0 [pid 6187] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4995] getdents64(4, [pid 6207] <... mmap resumed>) = 0x7f5c233f0000 [pid 6201] <... futex resumed>) = 1 [pid 6198] <... futex resumed>) = 0 [pid 6191] <... exit_group resumed>) = ? [pid 6187] <... futex resumed>) = 0 [pid 4997] unlink("./39/binderfs" [pid 4995] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 6205] +++ exited with 0 +++ [pid 6204] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6201] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6198] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6192] +++ exited with 0 +++ [pid 6191] +++ exited with 0 +++ [pid 6187] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6207] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6204] <... futex resumed>) = 0 [pid 6201] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6198] <... futex resumed>) = 0 [pid 6183] exit_group(0 [pid 4997] <... unlink resumed>) = 0 [pid 4995] getdents64(4, [pid 6201] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6198] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6187] <... futex resumed>) = ? [pid 6183] <... exit_group resumed>) = ? [pid 4997] umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4994] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6191, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 6187] +++ exited with 0 +++ [pid 6204] +++ exited with 0 +++ [pid 6183] +++ exited with 0 +++ [pid 4995] close(4 [ 131.926904][ T6192] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 131.938277][ T6187] EXT4-fs (loop5): i_reserved_data_blocks=1 [pid 4994] umount2("./40", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] openat(AT_FDCWD, "./40", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4994] fstat(3, [pid 6207] <... write resumed>) = 1048576 [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] getdents64(3, 0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4994] umount2("./40/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6183, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 6201] <... write resumed>) = 9 [pid 4995] <... close resumed>) = 0 [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] restart_syscall(<... resuming interrupted clone ...> [pid 4995] rmdir("./38/file0" [pid 4999] <... restart_syscall resumed>) = 0 [pid 4995] <... rmdir resumed>) = 0 [pid 4995] getdents64(3, 0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4999] umount2("./38", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] close(3 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] <... close resumed>) = 0 [pid 4999] openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4995] rmdir("./38" [pid 4999] <... openat resumed>) = 3 [pid 4995] <... rmdir resumed>) = 0 [pid 4999] fstat(3, [pid 4995] mkdir("./39", 0777 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] <... mkdir resumed>) = 0 [pid 4999] getdents64(3, [pid 4995] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 4999] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4995] <... openat resumed>) = 3 [pid 4999] umount2("./38/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] ioctl(3, LOOP_CLR_FD [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] lstat("./38/binderfs", [pid 4995] close(3 [pid 6207] munmap(0x7f5c233f0000, 1048576 [pid 6201] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4995] <... close resumed>) = 0 [pid 4994] lstat("./40/binderfs", [pid 6207] <... munmap resumed>) = 0 [pid 6201] <... futex resumed>) = 1 [pid 6198] <... futex resumed>) = 0 [pid 4999] unlink("./38/binderfs" [pid 4995] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4994] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6207] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6201] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6198] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... unlink resumed>) = 0 [pid 4994] unlink("./40/binderfs"./strace-static-x86_64: Process 6209 attached [pid 6207] <... openat resumed>) = 4 [pid 6201] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6198] <... futex resumed>) = 0 [pid 4999] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] <... unlink resumed>) = 0 [pid 6209] set_robust_list(0x555556fb95e0, 24 [ 131.971682][ T74] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 131.984458][ T74] EXT4-fs (loop3): This should not happen!! Data will be lost [ 131.984458][ T74] [pid 6207] ioctl(4, LOOP_SET_FD, 3 [pid 6201] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6198] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4995] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6209 [pid 4994] umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6209] <... set_robust_list resumed>) = 0 [pid 6201] <... openat resumed>) = 5 [pid 6209] chdir("./39" [pid 6201] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6209] <... chdir resumed>) = 0 [pid 6201] <... futex resumed>) = 1 [pid 6198] <... futex resumed>) = 0 [pid 6209] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6201] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6198] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6209] <... prctl resumed>) = 0 [pid 6201] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6198] <... futex resumed>) = 0 [ 132.017406][ T74] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 132.019606][ T6207] loop2: detected capacity change from 0 to 2048 [ 132.045873][ T74] EXT4-fs (loop5): This should not happen!! Data will be lost [ 132.045873][ T74] [pid 4997] <... umount2 resumed>) = 0 [pid 6209] setpgid(0, 0 [pid 6201] open("./bus", O_RDWR [pid 6198] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4997] umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./39/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./39/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4997] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(4, 0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4997] getdents64(4, 0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4997] close(4) = 0 [pid 4997] rmdir("./39/file0") = 0 [pid 4997] getdents64(3, 0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4997] close(3) = 0 [pid 4997] rmdir("./39" [pid 6209] <... setpgid resumed>) = 0 [pid 6201] <... open resumed>) = 6 [pid 6207] <... ioctl resumed>) = 0 [pid 4997] <... rmdir resumed>) = 0 [pid 6209] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6207] close(3 [pid 6201] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6209] <... openat resumed>) = 3 [pid 6207] <... close resumed>) = 0 [pid 6201] <... futex resumed>) = 1 [pid 6198] <... futex resumed>) = 0 [pid 6209] write(3, "1000", 4 [pid 6207] mkdir("./file0", 0777 [pid 6201] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6198] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] mkdir("./40", 0777 [pid 6209] <... write resumed>) = 4 [pid 6207] <... mkdir resumed>) = 0 [pid 6201] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6198] <... futex resumed>) = 0 [pid 6209] close(3 [pid 6207] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6201] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6198] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4997] <... mkdir resumed>) = 0 [pid 6209] <... close resumed>) = 0 [pid 6201] <... mmap resumed>) = 0x20000000 [pid 4997] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6209] symlink("/dev/binderfs", "./binderfs" [pid 6201] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6209] <... symlink resumed>) = 0 [pid 6201] <... futex resumed>) = 1 [pid 6198] <... futex resumed>) = 0 [pid 4997] <... openat resumed>) = 3 [pid 6209] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6201] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6198] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] ioctl(3, LOOP_CLR_FD [pid 6209] <... futex resumed>) = 0 [pid 6201] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6198] <... futex resumed>) = 0 [ 132.045954][ T5457] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 132.045993][ T5457] EXT4-fs (loop0): This should not happen!! Data will be lost [ 132.045993][ T5457] [pid 6209] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6201] sendfile(4, 5, NULL, 2147483713 [pid 6198] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4997] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6209] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 4999] <... umount2 resumed>) = 0 [pid 4997] close(3 [pid 4994] <... umount2 resumed>) = 0 [pid 6209] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6209] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4999] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... close resumed>) = 0 [pid 4994] umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6209] <... clone resumed>, parent_tid=[6212], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6212 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6209] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] lstat("./38/file0", [pid 6209] <... futex resumed>) = 0 [pid 6209] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4994] lstat("./40/file0", [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6213 [pid 4999] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] openat(AT_FDCWD, "./38/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6212 attached [pid 4999] <... openat resumed>) = 4 [pid 4994] openat(AT_FDCWD, "./40/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6212] set_robust_list(0x7f5c2b8109e0, 24 [pid 4999] fstat(4, [pid 4994] <... openat resumed>) = 4 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, [pid 4994] fstat(4, [pid 4999] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4994] getdents64(4, [pid 4999] close(4 [pid 4994] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4999] <... close resumed>) = 0 [pid 4994] getdents64(4, [pid 4999] rmdir("./38/file0" [pid 4994] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 6212] <... set_robust_list resumed>) = 0 [pid 6212] memfd_create("syzkaller", 0 [pid 4999] <... rmdir resumed>) = 0 [pid 4994] close(4 [pid 6212] <... memfd_create resumed>) = 3 [pid 4999] getdents64(3, [pid 4994] <... close resumed>) = 0 [pid 6212] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4999] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4994] rmdir("./40/file0"./strace-static-x86_64: Process 6213 attached [pid 6212] <... mmap resumed>) = 0x7f5c233f0000 [ 132.120018][ T6201] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 4999] close(3 [pid 6213] set_robust_list(0x555556fb95e0, 24 [pid 6212] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6207] <... mount resumed>) = 0 [pid 4994] <... rmdir resumed>) = 0 [pid 6213] <... set_robust_list resumed>) = 0 [pid 6207] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 4999] <... close resumed>) = 0 [pid 6213] chdir("./40" [pid 6207] <... openat resumed>) = 3 [pid 4999] rmdir("./38" [pid 6213] <... chdir resumed>) = 0 [pid 6207] chdir("./file0" [pid 4999] <... rmdir resumed>) = 0 [pid 4994] getdents64(3, [pid 6213] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6207] <... chdir resumed>) = 0 [pid 4999] mkdir("./39", 0777 [pid 6213] <... prctl resumed>) = 0 [pid 6207] ioctl(4, LOOP_CLR_FD [pid 6198] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4999] <... mkdir resumed>) = 0 [pid 4994] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 6213] setpgid(0, 0 [pid 6207] <... ioctl resumed>) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6213] <... setpgid resumed>) = 0 [pid 6207] close(4 [pid 6198] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... openat resumed>) = 3 [pid 4994] close(3 [pid 6213] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6207] <... close resumed>) = 0 [ 132.164541][ T6201] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 132.177217][ T6201] EXT4-fs (loop4): This should not happen!! Data will be lost [ 132.177217][ T6201] [ 132.187249][ T6201] EXT4-fs (loop4): Total free blocks count 0 [ 132.193465][ T6201] EXT4-fs (loop4): Free/Dirty block details [ 132.199789][ T6201] EXT4-fs (loop4): free_blocks=2415919104 [ 132.205929][ T6201] EXT4-fs (loop4): dirty_blocks=16 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 6213] <... openat resumed>) = 3 [pid 6207] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6198] <... futex resumed>) = 0 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4994] <... close resumed>) = 0 [pid 6213] write(3, "1000", 4 [pid 6207] <... futex resumed>) = 1 [pid 6202] <... futex resumed>) = 0 [pid 6198] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4999] close(3 [pid 4994] rmdir("./40" [pid 6213] <... write resumed>) = 4 [pid 6207] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6202] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6201] <... sendfile resumed>) = 63 [pid 6198] <... mmap resumed>) = 0x7f5c234cf000 [pid 4999] <... close resumed>) = 0 [pid 4994] <... rmdir resumed>) = 0 [pid 6213] close(3 [pid 6212] <... write resumed>) = 1048576 [pid 6207] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6202] <... futex resumed>) = 0 [pid 6201] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6198] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4994] mkdir("./41", 0777 [pid 6213] <... close resumed>) = 0 [pid 6212] munmap(0x7f5c233f0000, 1048576 [pid 6207] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6202] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6201] <... futex resumed>) = 0 [pid 6198] <... mprotect resumed>) = 0 [pid 4994] <... mkdir resumed>) = 0 [pid 6213] symlink("/dev/binderfs", "./binderfs" [pid 6212] <... munmap resumed>) = 0 [pid 6207] <... open resumed>) = 4 [pid 6201] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6198] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4999] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6214 [pid 4994] openat(AT_FDCWD, "/dev/loop0", O_RDWR./strace-static-x86_64: Process 6215 attached ./strace-static-x86_64: Process 6214 attached [pid 6213] <... symlink resumed>) = 0 [pid 6212] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6207] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6215] set_robust_list(0x7f5c234ef9e0, 24 [pid 6214] set_robust_list(0x555556fb95e0, 24 [pid 6213] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6212] <... openat resumed>) = 4 [pid 6207] <... futex resumed>) = 1 [pid 4994] <... openat resumed>) = 3 [pid 6215] <... set_robust_list resumed>) = 0 [pid 6214] <... set_robust_list resumed>) = 0 [pid 6213] <... futex resumed>) = 0 [ 132.211098][ T6201] EXT4-fs (loop4): Block reservation details [ 132.217393][ T6201] EXT4-fs (loop4): i_reserved_data_blocks=1 [pid 6212] ioctl(4, LOOP_SET_FD, 3 [pid 6207] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6202] <... futex resumed>) = 0 [pid 6198] <... clone resumed>, parent_tid=[6215], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6215 [pid 4994] ioctl(3, LOOP_CLR_FD [pid 6215] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6214] chdir("./39" [pid 6213] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6202] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6198] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6215] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6214] <... chdir resumed>) = 0 [pid 6213] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6207] <... futex resumed>) = 0 [pid 6202] <... futex resumed>) = 1 [pid 6198] <... futex resumed>) = 0 [pid 4994] close(3 [pid 6215] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6214] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6213] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6207] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6198] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6215] <... ioctl resumed>) = 0 [pid 6214] <... prctl resumed>) = 0 [pid 6202] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4994] <... close resumed>) = 0 [pid 6215] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6214] setpgid(0, 0 [pid 6213] <... mprotect resumed>) = 0 [pid 6215] <... futex resumed>) = 0 [pid 6214] <... setpgid resumed>) = 0 [pid 6198] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4994] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6215] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6214] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6213] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6207] <... write resumed>) = 9 [pid 6198] exit_group(0 [pid 6214] <... openat resumed>) = 3 [pid 6214] write(3, "1000", 4) = 4 [pid 6214] close(3) = 0 [pid 6215] <... futex resumed>) = ? [pid 6201] <... futex resumed>) = ? [pid 6207] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6198] <... exit_group resumed>) = ? [pid 6215] +++ exited with 0 +++ [pid 6214] symlink("/dev/binderfs", "./binderfs" [pid 6201] +++ exited with 0 +++ [pid 6214] <... symlink resumed>) = 0 [pid 6214] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6214] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c2b7f0000 [pid 6214] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 6216 attached ) = 0 [pid 6213] <... clone resumed>, parent_tid=[6217], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6217 [pid 6207] <... futex resumed>) = 1 [pid 6202] <... futex resumed>) = 0 [pid 6198] +++ exited with 0 +++ [pid 4994] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6216 [pid 6216] set_robust_list(0x555556fb95e0, 24 [pid 6214] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6213] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6202] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6207] openat(AT_FDCWD, "./bus", O_RDONLY [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6198, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 6216] <... set_robust_list resumed>) = 0 [pid 6213] <... futex resumed>) = 0 [pid 6202] <... futex resumed>) = 0 [pid 6216] chdir("./41" [pid 6214] <... clone resumed>, parent_tid=[6218], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6218 [pid 6213] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6207] <... openat resumed>) = 5 [pid 6202] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6216] <... chdir resumed>) = 0 [pid 6214] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6207] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6202] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6216] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6214] <... futex resumed>) = 0 [pid 6207] <... futex resumed>) = 0 [pid 6202] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6216] <... prctl resumed>) = 0 [pid 6214] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6207] open("./bus", O_RDWR [pid 6202] <... futex resumed>) = 0 [pid 6216] setpgid(0, 0) = 0 [pid 6216] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6207] <... open resumed>) = 6 [pid 6202] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6216] <... openat resumed>) = 3 [pid 6207] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6202] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6216] write(3, "1000", 4 [pid 6207] <... futex resumed>) = 0 [pid 6202] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6212] <... ioctl resumed>) = 0 [pid 6216] <... write resumed>) = 4 [pid 6207] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6202] <... futex resumed>) = 0 [pid 4998] umount2("./38", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6212] close(3 [pid 6216] close(3) = 0 [pid 6216] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6216] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6216] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6207] <... mmap resumed>) = 0x20000000 [pid 6216] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6212] <... close resumed>) = 0 [ 132.259059][ T6212] loop1: detected capacity change from 0 to 2048 [ 132.292990][ T74] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 6207] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6202] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6216] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6212] mkdir("./file0", 0777 [pid 6207] <... futex resumed>) = 0 [pid 6202] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6216] <... mprotect resumed>) = 0 [pid 6207] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6202] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6216] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6207] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6202] <... futex resumed>) = 0 [pid 6212] <... mkdir resumed>) = 0 [pid 6207] sendfile(4, 5, NULL, 2147483713 [pid 6202] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] <... openat resumed>) = 3 [pid 6216] <... clone resumed>, parent_tid=[6219], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6219 [pid 4998] fstat(3, [pid 6216] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6216] <... futex resumed>) = 0 [pid 6216] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4998] getdents64(3, ./strace-static-x86_64: Process 6217 attached 0x555556fba620 /* 4 entries */, 32768) = 112 [pid 6217] set_robust_list(0x7f5c2b8109e0, 24 [pid 4998] umount2("./38/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./38/binderfs", [pid 6217] <... set_robust_list resumed>) = 0 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./38/binderfs" [pid 6217] memfd_create("syzkaller", 0 [pid 4998] <... unlink resumed>) = 0 [pid 4998] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6217] <... memfd_create resumed>) = 3 [pid 6217] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5c233f0000 [pid 6217] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 6217] munmap(0x7f5c233f0000, 1048576) = 0 [pid 6217] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6217] ioctl(4, LOOP_SET_FD, 3 [pid 6212] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6217] <... ioctl resumed>) = 0 [pid 6217] close(3) = 0 [pid 6217] mkdir("./file0", 0777) = 0 [pid 6217] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6202] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6202] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6202] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c234cf000 [pid 6202] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6202] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6220], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6220 [pid 6202] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6202] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6218 attached [pid 6218] set_robust_list(0x7f5c2b8109e0, 24) = 0 [pid 6218] memfd_create("syzkaller", 0) = 3 ./strace-static-x86_64: Process 6219 attached [pid 6218] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5c233f0000 ./strace-static-x86_64: Process 6220 attached [pid 6219] set_robust_list(0x7f5c2b8109e0, 24 [pid 6218] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6220] set_robust_list(0x7f5c234ef9e0, 24) = 0 [pid 6220] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6219] <... set_robust_list resumed>) = 0 [ 132.311328][ T6207] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 132.318177][ T6217] loop3: detected capacity change from 0 to 2048 [pid 6219] memfd_create("syzkaller", 0 [pid 6218] <... write resumed>) = 1048576 [pid 6219] <... memfd_create resumed>) = 3 [pid 6219] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5c233f0000 [pid 6218] munmap(0x7f5c233f0000, 1048576) = 0 [pid 6218] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6212] <... mount resumed>) = 0 [pid 6218] <... openat resumed>) = 4 [pid 6218] ioctl(4, LOOP_SET_FD, 3 [pid 6202] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6218] <... ioctl resumed>) = 0 [pid 6218] close(3) = 0 [pid 6218] mkdir("./file0", 0777 [pid 6212] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6218] <... mkdir resumed>) = 0 [pid 6218] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6212] <... openat resumed>) = 3 [pid 6212] chdir("./file0") = 0 [ 132.358263][ T74] EXT4-fs (loop4): This should not happen!! Data will be lost [ 132.358263][ T74] [ 132.363513][ T6207] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 132.386195][ T6218] loop5: detected capacity change from 0 to 2048 [ 132.397836][ T6207] EXT4-fs (loop2): This should not happen!! Data will be lost [ 132.397836][ T6207] [pid 6212] ioctl(4, LOOP_CLR_FD) = 0 [pid 6212] close(4) = 0 [pid 6212] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6209] <... futex resumed>) = 0 [pid 6209] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6209] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6212] <... futex resumed>) = 1 [pid 6212] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000) = 4 [pid 6212] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6209] <... futex resumed>) = 0 [pid 6209] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6212] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6209] <... futex resumed>) = 0 [pid 6212] <... write resumed>) = 9 [pid 6209] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6220] <... ioctl resumed>) = 0 [pid 6217] <... mount resumed>) = 0 [pid 6212] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6209] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6207] <... sendfile resumed>) = 63 [pid 6220] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6207] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6220] <... futex resumed>) = 0 [pid 6207] <... futex resumed>) = 0 [pid 6220] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6207] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6219] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6209] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6217] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6209] <... futex resumed>) = 0 [pid 6217] <... openat resumed>) = 3 [pid 6209] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6202] exit_group(0) = ? [pid 6220] <... futex resumed>) = ? [pid 6207] <... futex resumed>) = ? [pid 6220] +++ exited with 0 +++ [pid 6207] +++ exited with 0 +++ [pid 6202] +++ exited with 0 +++ [pid 6217] chdir("./file0" [pid 4996] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6202, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 4996] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 6217] <... chdir resumed>) = 0 [pid 6217] ioctl(4, LOOP_CLR_FD) = 0 [pid 4996] umount2("./40", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6217] close(4 [pid 6209] <... futex resumed>) = 0 [pid 6217] <... close resumed>) = 0 [pid 6212] <... futex resumed>) = 1 [pid 6209] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=43000000} [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4996] openat(AT_FDCWD, "./40", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6217] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6213] <... futex resumed>) = 0 [pid 4996] <... openat resumed>) = 3 [pid 6213] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6217] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6213] <... futex resumed>) = 0 [pid 4996] fstat(3, [pid 6212] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6213] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4996] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] getdents64(3, [pid 6219] <... write resumed>) = 1048576 [pid 6217] <... open resumed>) = 4 [pid 6212] <... openat resumed>) = 5 [pid 4996] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 6217] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6212] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] umount2("./40/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6217] <... futex resumed>) = 1 [pid 6213] <... futex resumed>) = 0 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6213] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6212] <... futex resumed>) = 1 [pid 6209] <... futex resumed>) = 0 [pid 6217] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 4996] lstat("./40/binderfs", [pid 6213] <... futex resumed>) = 0 [pid 6212] open("./bus", O_RDWR [pid 6209] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6213] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4996] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6209] <... futex resumed>) = 0 [pid 6209] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4996] unlink("./40/binderfs" [pid 6217] <... write resumed>) = 9 [pid 6212] <... open resumed>) = 6 [pid 4998] <... umount2 resumed>) = 0 [pid 4996] <... unlink resumed>) = 0 [pid 6217] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6212] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW [ 132.409978][ T6207] EXT4-fs (loop2): Total free blocks count 0 [ 132.416206][ T6207] EXT4-fs (loop2): Free/Dirty block details [ 132.422145][ T6207] EXT4-fs (loop2): free_blocks=2415919104 [ 132.428360][ T6207] EXT4-fs (loop2): dirty_blocks=16 [ 132.433523][ T6207] EXT4-fs (loop2): Block reservation details [ 132.439824][ T6207] EXT4-fs (loop2): i_reserved_data_blocks=1 [pid 4996] umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6217] <... futex resumed>) = 1 [pid 6213] <... futex resumed>) = 0 [pid 6219] munmap(0x7f5c233f0000, 1048576 [pid 6212] <... futex resumed>) = 1 [pid 6218] <... mount resumed>) = 0 [pid 6209] <... futex resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6218] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6217] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6213] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6212] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6209] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6219] <... munmap resumed>) = 0 [pid 6218] <... openat resumed>) = 3 [pid 6217] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6213] <... futex resumed>) = 0 [pid 6212] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6209] <... futex resumed>) = 0 [pid 4998] lstat("./38/file0", [pid 6218] chdir("./file0" [pid 6217] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6213] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6212] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6209] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6218] <... chdir resumed>) = 0 [pid 6217] <... openat resumed>) = 5 [pid 6212] <... mmap resumed>) = 0x20000000 [pid 6218] ioctl(4, LOOP_CLR_FD [pid 6217] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6212] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6218] <... ioctl resumed>) = 0 [pid 6217] <... futex resumed>) = 1 [pid 6213] <... futex resumed>) = 0 [pid 6212] <... futex resumed>) = 1 [pid 6209] <... futex resumed>) = 0 [pid 6218] close(4 [pid 6217] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6213] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6212] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6209] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6219] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6218] <... close resumed>) = 0 [pid 6217] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6213] <... futex resumed>) = 0 [pid 6212] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6209] <... futex resumed>) = 0 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6219] <... openat resumed>) = 4 [pid 6218] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6217] open("./bus", O_RDWR [pid 6213] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 132.489321][ T5076] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 6212] sendfile(4, 5, NULL, 2147483713 [pid 6209] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6219] ioctl(4, LOOP_SET_FD, 3 [pid 6218] <... futex resumed>) = 1 [pid 6217] <... open resumed>) = 6 [pid 6214] <... futex resumed>) = 0 [pid 6218] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6217] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6213] <... futex resumed>) = 0 [pid 6217] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6213] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6217] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6213] <... futex resumed>) = 0 [pid 6217] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6213] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6217] <... mmap resumed>) = 0x20000000 [pid 6217] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6213] <... futex resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6217] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6213] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6217] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6213] <... futex resumed>) = 0 [pid 6217] sendfile(4, 5, NULL, 2147483713 [pid 6213] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6219] <... ioctl resumed>) = 0 [pid 6214] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] openat(AT_FDCWD, "./38/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6219] close(3 [pid 6218] <... futex resumed>) = 0 [pid 6214] <... futex resumed>) = 1 [ 132.528711][ T6212] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 132.536836][ T5076] EXT4-fs (loop2): This should not happen!! Data will be lost [ 132.536836][ T5076] [ 132.554305][ T6219] loop0: detected capacity change from 0 to 2048 [ 132.559676][ T6217] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 6219] <... close resumed>) = 0 [pid 6218] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6214] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] <... openat resumed>) = 4 [pid 6219] mkdir("./file0", 0777 [pid 6209] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4998] fstat(4, [pid 6209] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6219] <... mkdir resumed>) = 0 [pid 6209] <... futex resumed>) = 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6209] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4998] getdents64(4, [pid 6209] <... mmap resumed>) = 0x7f5c234cf000 [pid 4998] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 6209] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 6218] <... open resumed>) = 4 [pid 6219] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 4998] getdents64(4, [pid 6209] <... mprotect resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 6218] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6209] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4998] close(4 [pid 6218] <... futex resumed>) = 1 [pid 6214] <... futex resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 6218] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6214] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6209] <... clone resumed>, parent_tid=[6227], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6227 [pid 4998] rmdir("./38/file0" [pid 6214] <... futex resumed>) = 0 [pid 6209] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6209] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6218] <... write resumed>) = 9 [pid 6214] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] <... rmdir resumed>) = 0 [pid 6218] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6214] <... futex resumed>) = 0 [pid 4998] getdents64(3, [pid 6218] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6214] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4996] <... umount2 resumed>) = 0 [pid 6218] <... openat resumed>) = 5 [pid 6214] <... futex resumed>) = 0 [pid 4998] close(3 [pid 4996] umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6218] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6214] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] <... close resumed>) = 0 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6218] <... futex resumed>) = 0 [pid 6214] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4998] rmdir("./38"./strace-static-x86_64: Process 6227 attached [pid 6218] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6214] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... rmdir resumed>) = 0 [pid 4996] lstat("./40/file0", [pid 6218] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6214] <... futex resumed>) = 0 [pid 6227] set_robust_list(0x7f5c234ef9e0, 24 [pid 6218] open("./bus", O_RDWR [pid 6214] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] mkdir("./39", 0777 [pid 4996] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6227] <... set_robust_list resumed>) = 0 [pid 4996] umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6227] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6213] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6213] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] openat(AT_FDCWD, "./40/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6213] <... futex resumed>) = 0 [pid 4996] <... openat resumed>) = 4 [pid 6213] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4996] fstat(4, [pid 6213] <... mmap resumed>) = 0x7f5c234cf000 [pid 4996] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6213] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 4996] getdents64(4, [pid 6213] <... mprotect resumed>) = 0 [pid 4996] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 6213] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4996] getdents64(4, 0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 6213] <... clone resumed>, parent_tid=[6228], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6228 [pid 4996] close(4 [pid 6213] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... close resumed>) = 0 [pid 6213] <... futex resumed>) = 0 [pid 4996] rmdir("./40/file0" [pid 6213] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4996] <... rmdir resumed>) = 0 [pid 4996] getdents64(3, 0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4996] close(3) = 0 [pid 4996] rmdir("./40") = 0 [pid 4996] mkdir("./41", 0777 [pid 6218] <... open resumed>) = 6 [pid 4998] <... mkdir resumed>) = 0 [pid 4996] <... mkdir resumed>) = 0 [pid 6218] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4996] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6218] <... futex resumed>) = 1 [pid 6214] <... futex resumed>) = 0 [pid 4998] <... openat resumed>) = 3 [ 132.587152][ T6212] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 132.614310][ T6212] EXT4-fs (loop1): This should not happen!! Data will be lost [ 132.614310][ T6212] [ 132.625347][ T6217] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 4996] <... openat resumed>) = 3 [pid 6219] <... mount resumed>) = 0 [pid 6218] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6214] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 4996] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 6228 attached [pid 6209] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4996] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6228] set_robust_list(0x7f5c234ef9e0, 24 [pid 4996] close(3 [pid 6228] <... set_robust_list resumed>) = 0 [pid 6219] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6218] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6214] <... futex resumed>) = 0 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4996] <... close resumed>) = 0 [pid 6228] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 4996] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6219] <... openat resumed>) = 3 [pid 6218] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6214] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] close(3 [pid 4996] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6231 ./strace-static-x86_64: Process 6231 attached [pid 6231] set_robust_list(0x555556fb95e0, 24) = 0 [pid 6231] chdir("./41" [pid 6219] chdir("./file0" [pid 6213] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 132.649355][ T6212] EXT4-fs (loop1): Total free blocks count 0 [ 132.649983][ T6217] EXT4-fs (loop3): This should not happen!! Data will be lost [ 132.649983][ T6217] [ 132.666479][ T6217] EXT4-fs (loop3): Total free blocks count 0 [ 132.672581][ T6217] EXT4-fs (loop3): Free/Dirty block details [ 132.679288][ T6217] EXT4-fs (loop3): free_blocks=2415919104 [ 132.687294][ T6212] EXT4-fs (loop1): Free/Dirty block details [ 132.693261][ T6212] EXT4-fs (loop1): free_blocks=2415919104 [pid 4998] <... close resumed>) = 0 [pid 6231] <... chdir resumed>) = 0 [pid 6219] <... chdir resumed>) = 0 [pid 6218] <... mmap resumed>) = 0x20000000 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6231] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4998] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6232 [pid 6231] setpgid(0, 0 [pid 6219] ioctl(4, LOOP_CLR_FD [pid 6218] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6231] <... setpgid resumed>) = 0 ./strace-static-x86_64: Process 6232 attached [pid 6231] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6232] set_robust_list(0x555556fb95e0, 24 [pid 6231] <... openat resumed>) = 3 [pid 6219] <... ioctl resumed>) = 0 [pid 6218] <... futex resumed>) = 1 [pid 6214] <... futex resumed>) = 0 [pid 6232] <... set_robust_list resumed>) = 0 [pid 6231] write(3, "1000", 4 [pid 6219] close(4 [pid 6218] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6214] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6232] chdir("./39" [pid 6231] <... write resumed>) = 4 [pid 6219] <... close resumed>) = 0 [pid 6218] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6214] <... futex resumed>) = 0 [pid 6232] <... chdir resumed>) = 0 [pid 6231] close(3 [pid 6219] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [ 132.695732][ T6217] EXT4-fs (loop3): dirty_blocks=16 [ 132.699155][ T6212] EXT4-fs (loop1): dirty_blocks=16 [ 132.709957][ T6212] EXT4-fs (loop1): Block reservation details [ 132.713764][ T6217] EXT4-fs (loop3): Block reservation details [ 132.732840][ T6217] EXT4-fs (loop3): i_reserved_data_blocks=1 [pid 6218] sendfile(4, 5, NULL, 2147483713 [pid 6214] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6232] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6231] <... close resumed>) = 0 [pid 6228] <... ioctl resumed>) = 0 [pid 6219] <... futex resumed>) = 1 [pid 6217] <... sendfile resumed>) = 63 [pid 6216] <... futex resumed>) = 0 [pid 6232] <... prctl resumed>) = 0 [pid 6231] symlink("/dev/binderfs", "./binderfs" [pid 6228] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6219] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6216] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6232] setpgid(0, 0 [pid 6231] <... symlink resumed>) = 0 [pid 6228] <... futex resumed>) = 0 [pid 6219] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6216] <... futex resumed>) = 0 [pid 6232] <... setpgid resumed>) = 0 [pid 6231] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6228] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6227] <... ioctl resumed>) = 0 [pid 6219] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6217] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6216] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6212] <... sendfile resumed>) = 63 [pid 6232] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6231] <... futex resumed>) = 0 [pid 6227] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6219] <... open resumed>) = 4 [pid 6232] <... openat resumed>) = 3 [pid 6231] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6227] <... futex resumed>) = 0 [pid 6219] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6232] write(3, "1000", 4 [pid 6231] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6227] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6219] <... futex resumed>) = 1 [pid 6217] <... futex resumed>) = 0 [pid 6216] <... futex resumed>) = 0 [pid 6213] exit_group(0 [pid 6212] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6232] <... write resumed>) = 4 [pid 6231] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6228] <... futex resumed>) = ? [pid 6219] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6216] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6213] <... exit_group resumed>) = ? [pid 6209] exit_group(0 [pid 6232] close(3 [pid 6231] <... mprotect resumed>) = 0 [pid 6228] +++ exited with 0 +++ [pid 6227] <... futex resumed>) = ? [pid 6219] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6216] <... futex resumed>) = 0 [pid 6209] <... exit_group resumed>) = ? [pid 6232] <... close resumed>) = 0 [pid 6231] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6227] +++ exited with 0 +++ [pid 6219] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6216] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6232] symlink("/dev/binderfs", "./binderfs" [pid 6219] <... write resumed>) = 9 [pid 6212] <... futex resumed>) = ? [pid 6232] <... symlink resumed>) = 0 [pid 6231] <... clone resumed>, parent_tid=[6233], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6233 [pid 6219] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6217] +++ exited with 0 +++ [pid 6213] +++ exited with 0 +++ [pid 6232] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6231] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6219] <... futex resumed>) = 1 [pid 6216] <... futex resumed>) = 0 [pid 6232] <... futex resumed>) = 0 [ 132.741574][ T6218] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 132.752686][ T6212] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 132.763298][ T6218] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 132.779793][ T6218] EXT4-fs (loop5): This should not happen!! Data will be lost [ 132.779793][ T6218] [pid 6231] <... futex resumed>) = 0 [pid 6219] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6216] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6213, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6232] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6231] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6219] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6216] <... futex resumed>) = 0 [pid 6212] +++ exited with 0 +++ [pid 6209] +++ exited with 0 +++ [pid 4997] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 6233 attached [pid 6232] <... mmap resumed>) = 0x7f5c2b7f0000 [ 132.794809][ T6218] EXT4-fs (loop5): Total free blocks count 0 [ 132.800935][ T6218] EXT4-fs (loop5): Free/Dirty block details [ 132.806906][ T6218] EXT4-fs (loop5): free_blocks=2415919104 [ 132.815964][ T6218] EXT4-fs (loop5): dirty_blocks=16 [ 132.817505][ T26] kauditd_printk_skb: 100 callbacks suppressed [pid 6219] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6216] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6214] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4997] <... restart_syscall resumed>) = 0 [pid 6233] set_robust_list(0x7f5c2b8109e0, 24 [pid 6232] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6219] <... openat resumed>) = 5 [pid 6214] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6209, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 6233] <... set_robust_list resumed>) = 0 [pid 6232] <... mprotect resumed>) = 0 [pid 6219] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6214] <... futex resumed>) = 0 [pid 4995] restart_syscall(<... resuming interrupted clone ...> [pid 6233] memfd_create("syzkaller", 0 [pid 6232] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6219] <... futex resumed>) = 1 [pid 6216] <... futex resumed>) = 0 [pid 6214] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4997] umount2("./40", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] <... restart_syscall resumed>) = 0 [pid 6233] <... memfd_create resumed>) = 3 [pid 6219] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6216] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6214] <... mmap resumed>) = 0x7f5c234cf000 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6233] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6232] <... clone resumed>, parent_tid=[6234], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6234 [pid 6219] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6216] <... futex resumed>) = 0 [pid 6214] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 4997] openat(AT_FDCWD, "./40", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6233] <... mmap resumed>) = 0x7f5c233f0000 [pid 6232] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6219] open("./bus", O_RDWR [pid 6216] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6214] <... mprotect resumed>) = 0 [pid 4997] <... openat resumed>) = 3 [pid 4995] umount2("./39", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6234 attached [pid 6233] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6232] <... futex resumed>) = 0 [pid 6219] <... open resumed>) = 6 [pid 6214] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4997] fstat(3, [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6232] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6219] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] openat(AT_FDCWD, "./39", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6219] <... futex resumed>) = 1 [pid 6216] <... futex resumed>) = 0 [pid 6214] <... clone resumed>, parent_tid=[6235], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6235 [pid 4997] getdents64(3, [pid 4995] <... openat resumed>) = 3 [pid 6219] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6216] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6214] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4995] fstat(3, [pid 6219] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6216] <... futex resumed>) = 0 [pid 6214] <... futex resumed>) = 0 [pid 4997] umount2("./40/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6219] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6216] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6214] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] getdents64(3, [pid 6233] <... write resumed>) = 1048576 [pid 6219] <... mmap resumed>) = 0x20000000 [pid 4997] lstat("./40/binderfs", [pid 4995] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 6219] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4995] umount2("./39/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6219] <... futex resumed>) = 1 [pid 6216] <... futex resumed>) = 0 [pid 4997] unlink("./40/binderfs" [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6219] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6216] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] <... unlink resumed>) = 0 [pid 4995] lstat("./39/binderfs", [pid 6219] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6216] <... futex resumed>) = 0 [pid 4997] umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [ 132.817523][ T26] audit: type=1804 audit(1687834602.882:1072): pid=6219 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor113" name="/root/syzkaller.slA38Q/41/file0/bus" dev="loop0" ino=18 res=1 errno=0 [ 132.821487][ T6218] EXT4-fs (loop5): Block reservation details [ 132.858328][ T6218] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 132.864906][ T26] audit: type=1804 audit(1687834602.922:1073): pid=6219 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor113" name="/root/syzkaller.slA38Q/41/file0/bus" dev="loop0" ino=18 res=1 errno=0 [pid 6234] set_robust_list(0x7f5c2b8109e0, 24 [pid 6219] sendfile(4, 5, NULL, 2147483713 [pid 6216] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4995] unlink("./39/binderfs"./strace-static-x86_64: Process 6235 attached [pid 6234] <... set_robust_list resumed>) = 0 [pid 6233] munmap(0x7f5c233f0000, 1048576 [pid 6218] <... sendfile resumed>) = 63 [pid 6235] set_robust_list(0x7f5c234ef9e0, 24 [pid 6234] memfd_create("syzkaller", 0 [pid 6233] <... munmap resumed>) = 0 [pid 6218] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6235] <... set_robust_list resumed>) = 0 [pid 6234] <... memfd_create resumed>) = 3 [pid 6233] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6218] <... futex resumed>) = 0 [pid 6235] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6234] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6233] <... openat resumed>) = 4 [pid 6218] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6235] <... ioctl resumed>) = 0 [pid 6234] <... mmap resumed>) = 0x7f5c233f0000 [pid 6233] ioctl(4, LOOP_SET_FD, 3 [ 132.891075][ T26] audit: type=1804 audit(1687834602.932:1074): pid=6219 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor113" name="/root/syzkaller.slA38Q/41/file0/bus" dev="loop0" ino=18 res=1 errno=0 [ 132.891110][ T74] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 132.914861][ T26] audit: type=1804 audit(1687834602.932:1075): pid=6219 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor113" name="/root/syzkaller.slA38Q/41/file0/bus" dev="loop0" ino=18 res=1 errno=0 [pid 6235] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6234] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6214] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4995] <... unlink resumed>) = 0 [pid 6214] exit_group(0 [pid 4995] umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6214] <... exit_group resumed>) = ? [pid 6233] <... ioctl resumed>) = 0 [pid 6233] close(3) = 0 [pid 6233] mkdir("./file0", 0777 [pid 6235] <... futex resumed>) = ? [pid 6218] <... futex resumed>) = ? [pid 6218] +++ exited with 0 +++ [pid 6233] <... mkdir resumed>) = 0 [ 132.948765][ T6233] loop2: detected capacity change from 0 to 2048 [ 132.956367][ T74] EXT4-fs (loop3): This should not happen!! Data will be lost [ 132.956367][ T74] [ 132.960632][ T6219] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 132.983811][ T5076] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 6233] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6235] +++ exited with 0 +++ [pid 6214] +++ exited with 0 +++ [pid 4997] <... umount2 resumed>) = 0 [pid 6234] <... write resumed>) = 1048576 [pid 6216] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6214, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 6216] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6216] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c234cf000 [pid 6216] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6216] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6236], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6236 [pid 6216] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6216] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4997] umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6234] munmap(0x7f5c233f0000, 1048576 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6234] <... munmap resumed>) = 0 [pid 4999] umount2("./39", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./39", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6234] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4997] lstat("./40/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] <... openat resumed>) = 3 [pid 6234] <... openat resumed>) = 4 [pid 4999] fstat(3, [pid 4997] openat(AT_FDCWD, "./40/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4997] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(4, [pid 6234] ioctl(4, LOOP_SET_FD, 3 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [ 132.993225][ T6219] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 133.005587][ T5076] EXT4-fs (loop1): This should not happen!! Data will be lost [ 133.005587][ T5076] [ 133.023179][ T6219] EXT4-fs (loop0): This should not happen!! Data will be lost [ 133.023179][ T6219] [ 133.043002][ T6219] EXT4-fs (loop0): Total free blocks count 0 [pid 4997] getdents64(4, 0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4997] close(4./strace-static-x86_64: Process 6236 attached [pid 6234] <... ioctl resumed>) = 0 [pid 4999] getdents64(3, [pid 4997] <... close resumed>) = 0 [pid 4995] <... umount2 resumed>) = 0 [pid 6236] set_robust_list(0x7f5c234ef9e0, 24 [pid 4997] rmdir("./40/file0" [pid 4995] umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6236] <... set_robust_list resumed>) = 0 [pid 4997] <... rmdir resumed>) = 0 [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6236] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 4997] getdents64(3, [pid 4995] lstat("./39/file0", [pid 4997] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4995] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] close(3 [pid 4995] umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... close resumed>) = 0 [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] rmdir("./40" [pid 4995] openat(AT_FDCWD, "./39/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6234] close(3 [pid 4999] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4997] <... rmdir resumed>) = 0 [pid 4995] <... openat resumed>) = 4 [pid 6234] <... close resumed>) = 0 [pid 4999] umount2("./39/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] mkdir("./41", 0777 [pid 4995] fstat(4, [pid 6234] mkdir("./file0", 0777 [pid 6233] <... mount resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] <... mkdir resumed>) = 0 [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6234] <... mkdir resumed>) = 0 [pid 6233] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6216] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4999] lstat("./39/binderfs", [pid 4997] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4995] getdents64(4, [pid 6234] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6233] <... openat resumed>) = 3 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] <... openat resumed>) = 3 [pid 4995] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4997] ioctl(3, LOOP_CLR_FD [pid 4995] getdents64(4, [pid 6233] chdir("./file0" [pid 4999] unlink("./39/binderfs" [pid 4997] <... ioctl resumed>) = -1 ENXIO (No such device or address) [ 133.050739][ T6234] loop4: detected capacity change from 0 to 2048 [ 133.058005][ T6219] EXT4-fs (loop0): Free/Dirty block details [ 133.064038][ T6219] EXT4-fs (loop0): free_blocks=2415919104 [ 133.087068][ T6219] EXT4-fs (loop0): dirty_blocks=16 [pid 4995] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 6233] <... chdir resumed>) = 0 [pid 4999] <... unlink resumed>) = 0 [pid 4997] close(3 [pid 4995] close(4 [pid 6236] <... ioctl resumed>) = 0 [pid 6233] ioctl(4, LOOP_CLR_FD [pid 6219] <... sendfile resumed>) = 63 [pid 4999] umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... close resumed>) = 0 [pid 4995] <... close resumed>) = 0 [pid 6236] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6233] <... ioctl resumed>) = 0 [pid 6219] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4995] rmdir("./39/file0" [pid 6236] <... futex resumed>) = 0 [pid 6234] <... mount resumed>) = 0 [pid 6233] close(4 [pid 6219] <... futex resumed>) = 0 [pid 6216] exit_group(0 [pid 4995] <... rmdir resumed>) = 0 [pid 6234] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6216] <... exit_group resumed>) = ? [pid 4997] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6241 [pid 4995] getdents64(3, [pid 6236] +++ exited with 0 +++ [pid 6234] <... openat resumed>) = 3 [pid 4995] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 6234] chdir("./file0" [pid 4995] close(3 [pid 6234] <... chdir resumed>) = 0 [pid 4995] <... close resumed>) = 0 ./strace-static-x86_64: Process 6241 attached [pid 6233] <... close resumed>) = 0 [pid 6241] set_robust_list(0x555556fb95e0, 24 [pid 6234] ioctl(4, LOOP_CLR_FD [pid 6233] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6219] +++ exited with 0 +++ [pid 6216] +++ exited with 0 +++ [pid 4995] rmdir("./39" [pid 6241] <... set_robust_list resumed>) = 0 [pid 6233] <... futex resumed>) = 1 [pid 6241] chdir("./41" [pid 6233] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6241] <... chdir resumed>) = 0 [pid 6241] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6241] setpgid(0, 0) = 0 [pid 6241] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6241] write(3, "1000", 4 [pid 6234] <... ioctl resumed>) = 0 [pid 6231] <... futex resumed>) = 0 [pid 6241] <... write resumed>) = 4 [pid 6241] close(3 [pid 6234] close(4 [pid 6231] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] <... rmdir resumed>) = 0 [pid 4994] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6216, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=10 /* 0.10 s */} --- [pid 6241] <... close resumed>) = 0 [pid 6234] <... close resumed>) = 0 [pid 6233] <... futex resumed>) = 0 [pid 6231] <... futex resumed>) = 1 [pid 4994] umount2("./41", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6241] symlink("/dev/binderfs", "./binderfs" [pid 6234] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6233] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6231] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4995] mkdir("./40", 0777 [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6241] <... symlink resumed>) = 0 [pid 6234] <... futex resumed>) = 1 [pid 6232] <... futex resumed>) = 0 [pid 6241] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4995] <... mkdir resumed>) = 0 [pid 6241] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6234] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6232] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 4994] openat(AT_FDCWD, "./41", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6241] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6234] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6232] <... futex resumed>) = 0 [pid 6241] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6234] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6232] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4995] <... openat resumed>) = 3 [pid 4994] <... openat resumed>) = 3 [pid 6241] <... mprotect resumed>) = 0 [pid 6241] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4995] ioctl(3, LOOP_CLR_FD [pid 4994] fstat(3, [pid 4995] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6241] <... clone resumed>, parent_tid=[6242], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6242 [pid 4995] close(3 [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6241] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4994] getdents64(3, [pid 6241] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6242 attached [pid 4994] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 6234] <... open resumed>) = 4 [pid 6234] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] <... close resumed>) = 0 [pid 4994] umount2("./41/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6234] <... futex resumed>) = 1 [pid 6232] <... futex resumed>) = 0 [pid 4995] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6234] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6233] <... open resumed>) = 4 [pid 6232] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6233] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6231] <... futex resumed>) = 0 [pid 6233] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6231] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6234] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6233] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6232] <... futex resumed>) = 0 [pid 6231] <... futex resumed>) = 0 [pid 4994] lstat("./41/binderfs", [pid 6234] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6233] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6232] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6231] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4995] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6243 [pid 6242] set_robust_list(0x7f5c2b8109e0, 24 [pid 6234] <... write resumed>) = 9 [pid 6233] <... write resumed>) = 9 [pid 4994] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6242] <... set_robust_list resumed>) = 0 [pid 6234] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6233] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] unlink("./41/binderfs" [pid 6242] memfd_create("syzkaller", 0 [pid 6234] <... futex resumed>) = 1 [pid 6233] <... futex resumed>) = 1 [pid 6232] <... futex resumed>) = 0 [pid 6231] <... futex resumed>) = 0 [pid 6242] <... memfd_create resumed>) = 3 [pid 6234] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6233] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6232] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6231] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] <... unlink resumed>) = 0 [ 133.099292][ T6219] EXT4-fs (loop0): Block reservation details [ 133.106755][ T6219] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 133.117950][ T5076] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 133.132033][ T5076] EXT4-fs (loop5): This should not happen!! Data will be lost [ 133.132033][ T5076] [pid 6242] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6234] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6233] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6232] <... futex resumed>) = 0 [pid 6231] <... futex resumed>) = 0 [pid 4994] umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6242] <... mmap resumed>) = 0x7f5c233f0000 [pid 6234] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6233] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6232] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6231] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6243 attached [pid 6242] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6234] <... openat resumed>) = 5 [pid 6233] <... openat resumed>) = 5 [pid 4999] <... umount2 resumed>) = 0 [pid 6233] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6231] <... futex resumed>) = 0 [pid 6233] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6231] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6233] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6231] <... futex resumed>) = 0 [pid 6233] open("./bus", O_RDWR [pid 6231] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6243] set_robust_list(0x555556fb95e0, 24 [pid 6234] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6233] <... open resumed>) = 6 [pid 4999] umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6243] <... set_robust_list resumed>) = 0 [pid 6234] <... futex resumed>) = 1 [pid 6233] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6232] <... futex resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6243] chdir("./40" [pid 6234] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6233] <... futex resumed>) = 1 [pid 6232] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6231] <... futex resumed>) = 0 [pid 4999] lstat("./39/file0", [pid 6243] <... chdir resumed>) = 0 [pid 6234] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6233] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6232] <... futex resumed>) = 0 [pid 6231] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6243] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6234] open("./bus", O_RDWR [pid 6233] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6231] <... futex resumed>) = 0 [pid 6233] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6231] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6243] <... prctl resumed>) = 0 [pid 6234] <... open resumed>) = 6 [pid 6233] <... mmap resumed>) = 0x20000000 [pid 6232] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6243] setpgid(0, 0 [pid 6242] <... write resumed>) = 1048576 [pid 6234] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6233] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6231] <... futex resumed>) = 0 [pid 6233] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6231] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6233] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6232] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6231] <... futex resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6233] sendfile(4, 5, NULL, 2147483713 [pid 6232] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6231] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] openat(AT_FDCWD, "./39/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6232] <... futex resumed>) = 0 [pid 4999] <... openat resumed>) = 4 [pid 6232] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 133.176341][ T5076] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 133.180832][ T26] audit: type=1804 audit(1687834603.242:1076): pid=6233 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor113" name="/root/syzkaller.k2b0rY/41/file0/bus" dev="loop2" ino=18 res=1 errno=0 [ 133.205536][ T5076] EXT4-fs (loop0): This should not happen!! Data will be lost [ 133.205536][ T5076] [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6243] <... setpgid resumed>) = 0 [pid 6234] <... futex resumed>) = 1 [pid 6232] <... futex resumed>) = 0 [pid 4999] getdents64(4, [pid 6243] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6234] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6232] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=48000000} [pid 4999] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4999] close(4) = 0 [pid 4999] rmdir("./39/file0" [pid 6234] <... mmap resumed>) = 0x20000000 [pid 4999] <... rmdir resumed>) = 0 [pid 4999] getdents64(3, 0x555556fba620 /* 0 entries */, 32768) = 0 [pid 6243] <... openat resumed>) = 3 [pid 4999] close(3) = 0 [pid 4999] rmdir("./39" [pid 6243] write(3, "1000", 4 [pid 4999] <... rmdir resumed>) = 0 [pid 6243] <... write resumed>) = 4 [pid 6234] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] mkdir("./40", 0777 [pid 6243] close(3 [pid 6234] <... futex resumed>) = 1 [pid 6232] <... futex resumed>) = 0 [pid 4999] <... mkdir resumed>) = 0 [pid 6232] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6232] <... futex resumed>) = 0 [pid 4999] <... openat resumed>) = 3 [pid 6232] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556fb95d0) = 6244 [pid 6242] munmap(0x7f5c233f0000, 1048576./strace-static-x86_64: Process 6244 attached [pid 6244] set_robust_list(0x555556fb95e0, 24) = 0 [pid 6242] <... munmap resumed>) = 0 [pid 6244] chdir("./40") = 0 [pid 6244] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6244] setpgid(0, 0 [pid 6242] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6244] <... setpgid resumed>) = 0 [pid 6244] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6242] ioctl(4, LOOP_SET_FD, 3 [pid 6244] <... openat resumed>) = 3 [pid 6243] <... close resumed>) = 0 [pid 6234] sendfile(4, 5, NULL, 2147483713 [pid 6244] write(3, "1000", 4 [pid 6243] symlink("/dev/binderfs", "./binderfs" [pid 6244] <... write resumed>) = 4 [pid 6244] close(3) = 0 [pid 6243] <... symlink resumed>) = 0 [pid 6244] symlink("/dev/binderfs", "./binderfs" [pid 6243] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6244] <... symlink resumed>) = 0 [pid 6244] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6243] <... futex resumed>) = 0 [pid 6244] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6243] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6244] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6244] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6244] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6245], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6245 [pid 6244] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6244] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6245 attached [pid 6245] set_robust_list(0x7f5c2b8109e0, 24) = 0 [pid 6245] memfd_create("syzkaller", 0 [pid 4994] <... umount2 resumed>) = 0 [pid 6243] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6245] <... memfd_create resumed>) = 3 [pid 6245] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5c233f0000 [pid 6243] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6231] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6243] <... mprotect resumed>) = 0 [pid 6231] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6243] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6231] <... futex resumed>) = 0 [ 133.255220][ T6233] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 133.268591][ T6242] loop3: detected capacity change from 0 to 2048 [pid 6231] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6242] <... ioctl resumed>) = 0 [pid 6231] <... mmap resumed>) = 0x7f5c234cf000 [pid 6242] close(3 [pid 6231] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 6242] <... close resumed>) = 0 [pid 6231] <... mprotect resumed>) = 0 [pid 6242] mkdir("./file0", 0777 [pid 6231] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6242] <... mkdir resumed>) = 0 [pid 6232] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) ./strace-static-x86_64: Process 6246 attached [pid 6243] <... clone resumed>, parent_tid=[6246], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6246 [pid 6242] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6232] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6231] <... clone resumed>, parent_tid=[6247], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6247 [pid 4994] umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6232] <... futex resumed>) = 0 [pid 6231] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6232] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [ 133.299846][ T6234] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 133.308345][ T26] audit: type=1804 audit(1687834603.252:1077): pid=6234 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor113" name="/root/syzkaller.qSu2w6/39/file0/bus" dev="loop4" ino=18 res=1 errno=0 [pid 6231] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6247 attached [pid 6246] set_robust_list(0x7f5c2b8109e0, 24 [pid 6243] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6232] <... mmap resumed>) = 0x7f5c234cf000 [pid 6231] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6247] set_robust_list(0x7f5c234ef9e0, 24 [pid 6232] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 6247] <... set_robust_list resumed>) = 0 [pid 6246] <... set_robust_list resumed>) = 0 [pid 6243] <... futex resumed>) = 0 [pid 6232] <... mprotect resumed>) = 0 [pid 6247] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6232] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6246] memfd_create("syzkaller", 0 [pid 6243] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4994] lstat("./41/file0", [pid 6246] <... memfd_create resumed>) = 3 [pid 6245] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6246] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6232] <... clone resumed>, parent_tid=[6248], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6248 [pid 4994] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6246] <... mmap resumed>) = 0x7f5c233f0000 [pid 6232] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6232] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6248 attached [pid 6232] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6248] set_robust_list(0x7f5c234ef9e0, 24) = 0 [pid 6248] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6246] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] openat(AT_FDCWD, "./41/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4994] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] getdents64(4, [pid 6245] <... write resumed>) = 1048576 [pid 4994] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [ 133.340639][ T6234] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 133.355265][ T6233] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 4994] getdents64(4, [pid 6231] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4994] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4994] close(4) = 0 [pid 4994] rmdir("./41/file0") = 0 [pid 4994] getdents64(3, 0x555556fba620 /* 0 entries */, 32768) = 0 [pid 6245] munmap(0x7f5c233f0000, 1048576 [pid 4994] close(3) = 0 [pid 6246] <... write resumed>) = 1048576 [pid 6232] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4994] rmdir("./41" [pid 6245] <... munmap resumed>) = 0 [pid 6245] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [ 133.394279][ T6233] EXT4-fs (loop2): This should not happen!! Data will be lost [ 133.394279][ T6233] [ 133.429760][ T6234] EXT4-fs (loop4): This should not happen!! Data will be lost [ 133.429760][ T6234] [pid 6245] ioctl(4, LOOP_SET_FD, 3 [pid 6246] munmap(0x7f5c233f0000, 1048576 [pid 4994] <... rmdir resumed>) = 0 [pid 4994] mkdir("./42", 0777) = 0 [pid 4994] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6246] <... munmap resumed>) = 0 [pid 4994] <... openat resumed>) = 3 [pid 6245] <... ioctl resumed>) = 0 [pid 6245] close(3) = 0 [pid 6245] mkdir("./file0", 0777 [pid 6246] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 4994] ioctl(3, LOOP_CLR_FD [pid 6246] <... openat resumed>) = 4 [pid 4994] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6246] ioctl(4, LOOP_SET_FD, 3 [pid 4994] close(3 [pid 6245] <... mkdir resumed>) = 0 [pid 6245] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 4994] <... close resumed>) = 0 [pid 4994] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6246] <... ioctl resumed>) = 0 [ 133.436515][ T6245] loop5: detected capacity change from 0 to 2048 [ 133.451477][ T6233] EXT4-fs (loop2): Total free blocks count 0 [ 133.456747][ T6234] EXT4-fs (loop4): Total free blocks count 0 [ 133.465366][ T6246] loop1: detected capacity change from 0 to 2048 [ 133.474656][ T6233] EXT4-fs (loop2): Free/Dirty block details [ 133.481658][ T6234] EXT4-fs (loop4): Free/Dirty block details ./strace-static-x86_64: Process 6250 attached [pid 6246] close(3 [pid 6250] set_robust_list(0x555556fb95e0, 24 [pid 6246] <... close resumed>) = 0 [pid 4994] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6250 [pid 6242] <... mount resumed>) = 0 [pid 6242] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6250] <... set_robust_list resumed>) = 0 [pid 6246] mkdir("./file0", 0777 [pid 6242] <... openat resumed>) = 3 [pid 6242] chdir("./file0" [pid 6250] chdir("./42" [pid 6242] <... chdir resumed>) = 0 [pid 6242] ioctl(4, LOOP_CLR_FD [pid 6246] <... mkdir resumed>) = 0 [pid 6242] <... ioctl resumed>) = 0 [pid 6242] close(4) = 0 [pid 6242] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6241] <... futex resumed>) = 0 [pid 6242] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6241] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6241] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6250] <... chdir resumed>) = 0 [pid 6246] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6250] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6242] <... open resumed>) = 4 [pid 6250] <... prctl resumed>) = 0 [pid 6250] setpgid(0, 0) = 0 [pid 6250] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [ 133.483268][ T26] audit: type=1804 audit(1687834603.292:1078): pid=6233 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor113" name="/root/syzkaller.k2b0rY/41/file0/bus" dev="loop2" ino=18 res=1 errno=0 [ 133.503748][ T6234] EXT4-fs (loop4): free_blocks=2415919104 [ 133.513762][ T6233] EXT4-fs (loop2): free_blocks=2415919104 [ 133.523323][ T6234] EXT4-fs (loop4): dirty_blocks=16 [ 133.533585][ T6233] EXT4-fs (loop2): dirty_blocks=16 [pid 6242] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6241] <... futex resumed>) = 0 [pid 6250] <... openat resumed>) = 3 [pid 6242] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6241] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6242] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6241] <... futex resumed>) = 0 [pid 6242] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6241] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6242] <... write resumed>) = 9 [pid 6242] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6241] <... futex resumed>) = 0 [pid 6242] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6241] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6242] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6241] <... futex resumed>) = 0 [pid 6242] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6241] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6242] <... openat resumed>) = 5 [pid 6242] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6241] <... futex resumed>) = 0 [pid 6242] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6241] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6242] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6241] <... futex resumed>) = 0 [pid 6246] <... mount resumed>) = 0 [pid 6242] open("./bus", O_RDWR [pid 6241] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6246] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6242] <... open resumed>) = 6 [pid 6246] <... openat resumed>) = 3 [pid 6242] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6246] chdir("./file0" [pid 6242] <... futex resumed>) = 1 [pid 6241] <... futex resumed>) = 0 [pid 6250] write(3, "1000", 4 [pid 6246] <... chdir resumed>) = 0 [pid 6242] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6250] <... write resumed>) = 4 [pid 6245] <... mount resumed>) = 0 [pid 6241] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6250] close(3) = 0 [pid 6250] symlink("/dev/binderfs", "./binderfs" [pid 6246] ioctl(4, LOOP_CLR_FD [pid 6242] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 133.546292][ T26] audit: type=1804 audit(1687834603.292:1080): pid=6234 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor113" name="/root/syzkaller.qSu2w6/39/file0/bus" dev="loop4" ino=18 res=1 errno=0 [ 133.564696][ T6233] EXT4-fs (loop2): Block reservation details [ 133.572571][ T6234] EXT4-fs (loop4): Block reservation details [ 133.579031][ T6233] EXT4-fs (loop2): i_reserved_data_blocks=1 [pid 6245] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6241] <... futex resumed>) = 0 [pid 6250] <... symlink resumed>) = 0 [pid 6247] <... ioctl resumed>) = 0 [pid 6246] <... ioctl resumed>) = 0 [pid 6242] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6233] <... sendfile resumed>) = 63 [pid 6250] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6246] close(4 [pid 6242] <... mmap resumed>) = 0x20000000 [pid 6245] <... openat resumed>) = 3 [pid 6250] <... futex resumed>) = 0 [pid 6247] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6246] <... close resumed>) = 0 [pid 6242] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6241] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6233] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6250] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6247] <... futex resumed>) = 0 [pid 6246] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6245] chdir("./file0" [pid 6242] <... futex resumed>) = 0 [pid 6241] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6233] <... futex resumed>) = 0 [pid 6231] exit_group(0 [pid 6250] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6248] <... ioctl resumed>) = 0 [pid 6246] <... futex resumed>) = 1 [pid 6245] <... chdir resumed>) = 0 [pid 6243] <... futex resumed>) = 0 [pid 6242] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6241] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6234] <... sendfile resumed>) = 63 [pid 6231] <... exit_group resumed>) = ? [pid 6250] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6248] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6247] +++ exited with 0 +++ [pid 6246] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6245] ioctl(4, LOOP_CLR_FD [pid 6243] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6242] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6241] <... futex resumed>) = 0 [pid 6234] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6233] +++ exited with 0 +++ [pid 6248] <... futex resumed>) = 0 [pid 6245] <... ioctl resumed>) = 0 [pid 6241] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6234] <... futex resumed>) = 0 [pid 6248] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6245] close(4 [pid 6234] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6231] +++ exited with 0 +++ [pid 6243] <... futex resumed>) = 0 [pid 6250] <... mprotect resumed>) = 0 [pid 6246] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6245] <... close resumed>) = 0 [pid 6242] sendfile(4, 5, NULL, 2147483713 [pid 6232] exit_group(0 [pid 4996] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6231, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 6245] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6244] <... futex resumed>) = 0 [pid 6245] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6244] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6245] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6244] <... futex resumed>) = 0 [ 133.588956][ T26] audit: type=1804 audit(1687834603.292:1079): pid=6233 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor113" name="/root/syzkaller.k2b0rY/41/file0/bus" dev="loop2" ino=18 res=1 errno=0 [ 133.613472][ T26] audit: type=1804 audit(1687834603.292:1081): pid=6233 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor113" name="/root/syzkaller.k2b0rY/41/file0/bus" dev="loop2" ino=18 res=1 errno=0 [ 133.627679][ T6234] EXT4-fs (loop4): i_reserved_data_blocks=1 [pid 6245] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6244] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6243] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6250] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6246] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6248] <... futex resumed>) = ? [pid 6232] <... exit_group resumed>) = ? [pid 4996] umount2("./41", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] openat(AT_FDCWD, "./41", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6248] +++ exited with 0 +++ [pid 4996] <... openat resumed>) = 3 [pid 4996] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] getdents64(3, 0x555556fba620 /* 4 entries */, 32768) = 112 [pid 6250] <... clone resumed>, parent_tid=[6256], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6256 [pid 6245] <... open resumed>) = 4 [pid 4996] umount2("./41/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6250] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6250] <... futex resumed>) = 0 [pid 6246] <... open resumed>) = 4 [pid 6245] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6234] <... futex resumed>) = ? [pid 4996] lstat("./41/binderfs", [pid 6250] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6245] <... futex resumed>) = 1 [pid 6244] <... futex resumed>) = 0 [pid 4996] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4996] unlink("./41/binderfs") = 0 [pid 4996] umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6246] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6245] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6244] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6234] +++ exited with 0 +++ [pid 6232] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6232, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 4998] umount2("./39", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./39", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./39/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./39/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./39/binderfs") = 0 [pid 4998] umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6256 attached [pid 6256] set_robust_list(0x7f5c2b8109e0, 24) = 0 [pid 6256] memfd_create("syzkaller", 0) = 3 [pid 6256] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5c233f0000 [pid 6241] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6241] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6241] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c234cf000 [pid 6241] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6241] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6257], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6257 [pid 6241] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6244] <... futex resumed>) = 0 [pid 6241] <... futex resumed>) = 0 [pid 6241] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6244] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6246] <... futex resumed>) = 1 [pid 6243] <... futex resumed>) = 0 [pid 6246] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6245] <... write resumed>) = 9 [pid 6243] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6256] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6243] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6257 attached [pid 6246] <... write resumed>) = 9 [pid 6245] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [ 133.679060][ T74] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 133.695588][ T5076] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 133.711023][ T6242] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 6243] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6257] set_robust_list(0x7f5c234ef9e0, 24 [pid 6246] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6245] <... futex resumed>) = 1 [pid 6244] <... futex resumed>) = 0 [pid 6243] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6257] <... set_robust_list resumed>) = 0 [pid 6246] <... futex resumed>) = 0 [pid 6245] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6244] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6243] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6257] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6246] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6245] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6244] <... futex resumed>) = 0 [pid 6243] <... futex resumed>) = 0 [pid 6246] <... openat resumed>) = 5 [pid 6245] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6244] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6243] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6246] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6245] <... openat resumed>) = 5 [pid 6243] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6246] <... futex resumed>) = 0 [pid 6245] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6243] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6246] open("./bus", O_RDWR [pid 6245] <... futex resumed>) = 1 [pid 6244] <... futex resumed>) = 0 [pid 6243] <... futex resumed>) = 0 [pid 6241] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4996] <... umount2 resumed>) = 0 [pid 6246] <... open resumed>) = 6 [pid 6245] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6244] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6243] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6256] <... write resumed>) = 1048576 [pid 6246] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6245] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6244] <... futex resumed>) = 0 [pid 6243] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4998] <... umount2 resumed>) = 0 [pid 6246] <... futex resumed>) = 0 [pid 6245] open("./bus", O_RDWR [pid 6244] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6243] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6256] munmap(0x7f5c233f0000, 1048576 [pid 6246] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6245] <... open resumed>) = 6 [pid 6243] <... futex resumed>) = 0 [pid 6246] <... mmap resumed>) = 0x20000000 [ 133.728193][ T5076] EXT4-fs (loop4): This should not happen!! Data will be lost [ 133.728193][ T5076] [ 133.738000][ T74] EXT4-fs (loop2): This should not happen!! Data will be lost [ 133.738000][ T74] [pid 6245] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6243] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6246] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6245] <... futex resumed>) = 1 [pid 6244] <... futex resumed>) = 0 [pid 6243] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4996] umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6256] <... munmap resumed>) = 0 [pid 6246] <... futex resumed>) = 0 [pid 6245] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6244] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6243] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6256] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6246] sendfile(4, 5, NULL, 2147483713 [pid 6245] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6244] <... futex resumed>) = 0 [pid 6243] <... futex resumed>) = 0 [pid 4998] umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] lstat("./41/file0", [pid 6256] <... openat resumed>) = 4 [pid 6245] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6244] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4996] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] openat(AT_FDCWD, "./41/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4996] fstat(4, [pid 6256] ioctl(4, LOOP_SET_FD, 3 [pid 6243] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4996] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6245] <... mmap resumed>) = 0x20000000 [pid 4996] getdents64(4, 0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4996] getdents64(4, 0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4996] close(4) = 0 [ 133.801566][ T6242] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 133.815204][ T6242] EXT4-fs (loop3): This should not happen!! Data will be lost [ 133.815204][ T6242] [ 133.819388][ T6246] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 133.826109][ T6242] EXT4-fs (loop3): Total free blocks count 0 [pid 4996] rmdir("./41/file0") = 0 [pid 4996] getdents64(3, 0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4996] close(3) = 0 [pid 4998] lstat("./39/file0", [pid 4996] rmdir("./41" [pid 6256] <... ioctl resumed>) = 0 [pid 6245] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] <... rmdir resumed>) = 0 [pid 6256] close(3 [pid 6245] <... futex resumed>) = 1 [pid 6244] <... futex resumed>) = 0 [pid 4998] umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] mkdir("./42", 0777 [pid 6256] <... close resumed>) = 0 [pid 6245] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6244] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4996] <... mkdir resumed>) = 0 [pid 6256] mkdir("./file0", 0777 [pid 6245] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4996] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 4996] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4996] close(3) = 0 [pid 4996] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6245] sendfile(4, 5, NULL, 2147483713 [pid 6244] <... futex resumed>) = 0 [pid 4998] openat(AT_FDCWD, "./39/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4996] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6258 ./strace-static-x86_64: Process 6258 attached [pid 6244] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] <... openat resumed>) = 4 [pid 6256] <... mkdir resumed>) = 0 [pid 4998] fstat(4, [pid 6258] set_robust_list(0x555556fb95e0, 24 [pid 6256] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6258] <... set_robust_list resumed>) = 0 [pid 6258] chdir("./42" [pid 4998] getdents64(4, [pid 6258] <... chdir resumed>) = 0 [pid 6243] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4998] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 6258] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6243] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6258] <... prctl resumed>) = 0 [ 133.850324][ T6256] loop0: detected capacity change from 0 to 2048 [ 133.864852][ T6242] EXT4-fs (loop3): Free/Dirty block details [ 133.879640][ T6245] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 6258] setpgid(0, 0) = 0 [pid 6258] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6258] write(3, "1000", 4) = 4 [pid 6258] close(3) = 0 [pid 6243] <... futex resumed>) = 0 [pid 4998] getdents64(4, [pid 6258] symlink("/dev/binderfs", "./binderfs" [pid 6243] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6258] <... symlink resumed>) = 0 [pid 6258] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6258] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c2b7f0000 [pid 6258] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4998] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 6243] <... mmap resumed>) = 0x7f5c234cf000 [pid 6258] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6243] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 4998] close(4 [pid 6258] <... clone resumed>, parent_tid=[6260], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6260 [pid 6258] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6258] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6260 attached [pid 6260] set_robust_list(0x7f5c2b8109e0, 24) = 0 [pid 6260] memfd_create("syzkaller", 0) = 3 [pid 6244] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6243] <... mprotect resumed>) = 0 [pid 6260] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6244] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6243] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4998] <... close resumed>) = 0 [pid 6260] <... mmap resumed>) = 0x7f5c233f0000 [pid 6244] <... futex resumed>) = 0 [pid 6260] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6257] <... ioctl resumed>) = 0 [pid 6256] <... mount resumed>) = 0 [pid 6242] <... sendfile resumed>) = 63 [ 133.901471][ T6242] EXT4-fs (loop3): free_blocks=2415919104 [ 133.908843][ T6242] EXT4-fs (loop3): dirty_blocks=16 [ 133.915083][ T6242] EXT4-fs (loop3): Block reservation details [ 133.916538][ T6246] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 133.922095][ T6242] EXT4-fs (loop3): i_reserved_data_blocks=1 [pid 4998] rmdir("./39/file0"./strace-static-x86_64: Process 6262 attached [pid 6262] set_robust_list(0x7f5c234ef9e0, 24) = 0 [pid 6262] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6244] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6243] <... clone resumed>, parent_tid=[6262], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6262 [pid 6257] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6256] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6242] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... rmdir resumed>) = 0 [pid 6241] exit_group(0 [pid 6244] <... mmap resumed>) = 0x7f5c234cf000 [pid 6241] <... exit_group resumed>) = ? [pid 6243] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6257] <... futex resumed>) = ? [pid 6256] <... openat resumed>) = 3 [pid 6244] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 6242] <... futex resumed>) = ? [pid 4998] getdents64(3, [pid 6262] <... futex resumed>) = 0 [pid 6257] +++ exited with 0 +++ [pid 6256] chdir("./file0" [pid 6244] <... mprotect resumed>) = 0 [pid 6243] <... futex resumed>) = 1 [pid 6242] +++ exited with 0 +++ [pid 6241] +++ exited with 0 +++ [pid 4998] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 6262] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6256] <... chdir resumed>) = 0 [pid 6244] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6243] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] close(3 [pid 6256] ioctl(4, LOOP_CLR_FD [pid 4998] <... close resumed>) = 0 ./strace-static-x86_64: Process 6263 attached [pid 6256] <... ioctl resumed>) = 0 [pid 6244] <... clone resumed>, parent_tid=[6263], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6263 [pid 4998] rmdir("./39" [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6241, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 6256] close(4 [pid 6244] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... rmdir resumed>) = 0 [pid 6263] set_robust_list(0x7f5c234ef9e0, 24 [pid 6256] <... close resumed>) = 0 [pid 6244] <... futex resumed>) = 0 [pid 4998] mkdir("./40", 0777 [pid 6263] <... set_robust_list resumed>) = 0 [pid 6256] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [ 133.945337][ T6245] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 133.961210][ T6245] EXT4-fs (loop5): This should not happen!! Data will be lost [ 133.961210][ T6245] [ 133.971799][ T6245] EXT4-fs (loop5): Total free blocks count 0 [ 133.978457][ T6245] EXT4-fs (loop5): Free/Dirty block details [ 133.985099][ T6245] EXT4-fs (loop5): free_blocks=2415919104 [ 133.991240][ T6245] EXT4-fs (loop5): dirty_blocks=16 [pid 6244] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] <... mkdir resumed>) = 0 [pid 6263] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6260] <... write resumed>) = 1048576 [pid 6256] <... futex resumed>) = 1 [pid 6250] <... futex resumed>) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6263] <... ioctl resumed>) = 0 [pid 6256] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6250] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6245] <... sendfile resumed>) = 63 [pid 4998] <... openat resumed>) = 3 [pid 4997] umount2("./41", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6263] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6256] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4998] ioctl(3, LOOP_CLR_FD [pid 6263] <... futex resumed>) = 1 [pid 6256] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6244] <... futex resumed>) = 0 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6263] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6256] <... open resumed>) = 4 [pid 4998] close(3 [pid 6256] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... close resumed>) = 0 [pid 6256] <... futex resumed>) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6256] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6250] <... futex resumed>) = 0 [pid 6245] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6243] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4998] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6264 [pid 6250] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6245] <... futex resumed>) = 0 [pid 4997] openat(AT_FDCWD, "./41", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 6264 attached [pid 6250] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6245] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6244] exit_group(0 [pid 4997] <... openat resumed>) = 3 [pid 6264] set_robust_list(0x555556fb95e0, 24 [pid 6263] <... futex resumed>) = ? [pid 6250] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6245] <... futex resumed>) = ? [pid 6244] <... exit_group resumed>) = ? [pid 4997] fstat(3, [pid 6264] <... set_robust_list resumed>) = 0 [ 133.997503][ T6245] EXT4-fs (loop5): Block reservation details [ 134.003711][ T6245] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 134.010519][ T6246] EXT4-fs (loop1): This should not happen!! Data will be lost [ 134.010519][ T6246] [ 134.021624][ T6246] EXT4-fs (loop1): Total free blocks count 0 [ 134.028327][ T6246] EXT4-fs (loop1): Free/Dirty block details [ 134.034342][ T6246] EXT4-fs (loop1): free_blocks=2415919104 [ 134.040836][ T6246] EXT4-fs (loop1): dirty_blocks=16 [ 134.046621][ T6246] EXT4-fs (loop1): Block reservation details [pid 6263] +++ exited with 0 +++ [pid 6260] munmap(0x7f5c233f0000, 1048576 [pid 6256] <... futex resumed>) = 0 [pid 6250] <... futex resumed>) = 1 [pid 6245] +++ exited with 0 +++ [pid 6244] +++ exited with 0 +++ [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6264] chdir("./40" [pid 6260] <... munmap resumed>) = 0 [pid 6256] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6250] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4997] getdents64(3, [pid 6264] <... chdir resumed>) = 0 [pid 6262] <... ioctl resumed>) = 0 [pid 6260] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6256] <... write resumed>) = 9 [pid 6246] <... sendfile resumed>) = 63 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6244, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 4997] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 6264] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6262] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6260] <... openat resumed>) = 4 [pid 6256] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6246] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] umount2("./40", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] umount2("./41/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6264] <... prctl resumed>) = 0 [pid 6262] <... futex resumed>) = 0 [pid 6260] ioctl(4, LOOP_SET_FD, 3 [pid 6256] <... futex resumed>) = 1 [pid 6250] <... futex resumed>) = 0 [pid 6246] <... futex resumed>) = 0 [pid 6243] exit_group(0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6264] setpgid(0, 0 [pid 6256] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6250] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6243] <... exit_group resumed>) = ? [pid 4999] openat(AT_FDCWD, "./40", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] lstat("./41/binderfs", [pid 6264] <... setpgid resumed>) = 0 [pid 6262] +++ exited with 0 +++ [pid 6260] <... ioctl resumed>) = 0 [pid 6256] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6250] <... futex resumed>) = 0 [pid 6246] +++ exited with 0 +++ [pid 6243] +++ exited with 0 +++ [pid 4999] <... openat resumed>) = 3 [pid 4997] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6264] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6260] close(3 [pid 6256] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6250] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] fstat(3, [pid 4997] unlink("./41/binderfs" [pid 6264] <... openat resumed>) = 3 [pid 6260] <... close resumed>) = 0 [pid 6260] mkdir("./file0", 0777 [pid 6256] <... openat resumed>) = 5 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6264] write(3, "1000", 4 [pid 6260] <... mkdir resumed>) = 0 [pid 6256] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] <... unlink resumed>) = 0 [pid 4995] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6243, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 6260] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6264] <... write resumed>) = 4 [pid 6256] <... futex resumed>) = 1 [pid 6250] <... futex resumed>) = 0 [pid 4999] getdents64(3, [pid 4997] umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] umount2("./40", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6264] close(3 [pid 6256] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6250] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 6264] <... close resumed>) = 0 [pid 6256] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6250] <... futex resumed>) = 0 [pid 4999] umount2("./40/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6264] symlink("/dev/binderfs", "./binderfs" [pid 6256] open("./bus", O_RDWR [pid 6250] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] openat(AT_FDCWD, "./40", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6264] <... symlink resumed>) = 0 [pid 6256] <... open resumed>) = 6 [pid 4995] <... openat resumed>) = 3 [pid 4999] lstat("./40/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./40/binderfs") = 0 [pid 4999] umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6264] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6264] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c2b7f0000 [pid 6264] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6264] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6265], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6265 [pid 6264] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6264] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6256] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6250] <... futex resumed>) = 0 [pid 4995] fstat(3, [ 134.053027][ T6246] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 134.069258][ T6260] loop2: detected capacity change from 0 to 2048 [ 134.091092][ T74] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 6256] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 6265 attached [pid 6250] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6265] set_robust_list(0x7f5c2b8109e0, 24) = 0 [pid 6265] memfd_create("syzkaller", 0) = 3 [pid 6265] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5c233f0000 [pid 6256] <... futex resumed>) = 0 [pid 6250] <... futex resumed>) = 1 [pid 4995] getdents64(3, [pid 6256] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6250] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4995] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 6256] <... mmap resumed>) = 0x20000000 [pid 4995] umount2("./40/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4995] lstat("./40/binderfs", [pid 6256] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6256] <... futex resumed>) = 1 [pid 6250] <... futex resumed>) = 0 [pid 4995] unlink("./40/binderfs" [pid 6256] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6250] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] <... unlink resumed>) = 0 [pid 6256] <... futex resumed>) = 0 [pid 6250] <... futex resumed>) = 1 [pid 6265] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6260] <... mount resumed>) = 0 [pid 6256] sendfile(4, 5, NULL, 2147483713 [pid 6250] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4997] <... umount2 resumed>) = 0 [pid 4995] umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./41/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./41/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4997] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 134.104000][ T5076] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 134.105778][ T74] EXT4-fs (loop3): This should not happen!! Data will be lost [ 134.105778][ T74] [ 134.119810][ T5076] EXT4-fs (loop5): This should not happen!! Data will be lost [ 134.119810][ T5076] [pid 6260] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 4997] getdents64(4, [pid 6260] <... openat resumed>) = 3 [pid 4999] <... umount2 resumed>) = 0 [pid 4997] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 6260] chdir("./file0" [pid 4999] umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] getdents64(4, [pid 6260] <... chdir resumed>) = 0 [pid 6250] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 6250] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] close(4 [pid 6250] <... futex resumed>) = 0 [pid 4997] <... close resumed>) = 0 [pid 6250] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4997] rmdir("./41/file0" [pid 6260] ioctl(4, LOOP_CLR_FD [pid 6250] <... mmap resumed>) = 0x7f5c234cf000 [pid 4999] lstat("./40/file0", [pid 4997] <... rmdir resumed>) = 0 [pid 6250] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 4997] getdents64(3, [pid 6250] <... mprotect resumed>) = 0 [pid 4997] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 6250] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4997] close(3) = 0 [pid 6250] <... clone resumed>, parent_tid=[6268], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6268 [pid 4997] rmdir("./41" [pid 6260] <... ioctl resumed>) = 0 [pid 6250] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] <... rmdir resumed>) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6260] close(4 [pid 6250] <... futex resumed>) = 0 [pid 4997] mkdir("./42", 0777 [pid 6265] <... write resumed>) = 1048576 [pid 6260] <... close resumed>) = 0 [pid 6250] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... mkdir resumed>) = 0 [pid 6260] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6260] <... futex resumed>) = 1 [pid 6258] <... futex resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] <... openat resumed>) = 3 [pid 6260] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6258] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] openat(AT_FDCWD, "./40/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] ioctl(3, LOOP_CLR_FD [pid 6260] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6258] <... futex resumed>) = 0 [pid 4997] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] <... openat resumed>) = 4 [pid 6260] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [ 134.163217][ T5457] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 134.177900][ T6256] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 6258] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] fstat(4, [pid 4997] close(3./strace-static-x86_64: Process 6268 attached ) = 0 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6260] <... open resumed>) = 4 [pid 4997] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6269 [pid 4999] getdents64(4, [pid 6260] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6269 attached [pid 6268] set_robust_list(0x7f5c234ef9e0, 24 [pid 6260] <... futex resumed>) = 1 [pid 6258] <... futex resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 6260] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6258] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] getdents64(4, [pid 6269] set_robust_list(0x555556fb95e0, 24 [pid 6268] <... set_robust_list resumed>) = 0 [pid 6265] munmap(0x7f5c233f0000, 1048576 [pid 6260] <... write resumed>) = 9 [pid 6258] <... futex resumed>) = 0 [pid 6269] <... set_robust_list resumed>) = 0 [pid 6268] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6265] <... munmap resumed>) = 0 [pid 6260] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6258] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 6269] chdir("./42" [pid 6265] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6269] <... chdir resumed>) = 0 [pid 6265] <... openat resumed>) = 4 [pid 6269] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6265] ioctl(4, LOOP_SET_FD, 3 [pid 6260] <... futex resumed>) = 0 [pid 6258] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4999] close(4 [pid 6269] <... prctl resumed>) = 0 [pid 6260] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6258] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6269] setpgid(0, 0) = 0 [pid 6260] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6258] <... futex resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 6269] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6260] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6258] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6269] <... openat resumed>) = 3 [pid 4999] rmdir("./40/file0" [pid 6269] write(3, "1000", 4) = 4 [pid 6269] close(3) = 0 [pid 6269] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6269] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6260] <... openat resumed>) = 5 [pid 6269] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c2b7f0000 [pid 6260] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... rmdir resumed>) = 0 [pid 6269] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6260] <... futex resumed>) = 1 [pid 6258] <... futex resumed>) = 0 [pid 6250] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6269] <... mprotect resumed>) = 0 [pid 6260] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4999] getdents64(3, [pid 6269] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6260] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6258] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 6260] open("./bus", O_RDWR [pid 6258] <... futex resumed>) = 0 [pid 4999] close(3 [pid 6269] <... clone resumed>, parent_tid=[6270], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6270 [pid 6269] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6265] <... ioctl resumed>) = 0 [pid 6269] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6265] close(3) = 0 [pid 6265] mkdir("./file0", 0777) = 0 [pid 6260] <... open resumed>) = 6 [pid 6258] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] <... close resumed>) = 0 ./strace-static-x86_64: Process 6270 attached [pid 6265] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6260] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6258] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 134.227367][ T5457] EXT4-fs (loop1): This should not happen!! Data will be lost [ 134.227367][ T5457] [ 134.243179][ T6256] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 134.261124][ T6265] loop4: detected capacity change from 0 to 2048 [pid 6270] set_robust_list(0x7f5c2b8109e0, 24 [pid 6260] <... futex resumed>) = 0 [pid 6258] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] rmdir("./40" [pid 6270] <... set_robust_list resumed>) = 0 [pid 6270] memfd_create("syzkaller", 0) = 3 [pid 6270] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5c233f0000 [pid 6258] <... futex resumed>) = 0 [pid 6260] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6258] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] <... rmdir resumed>) = 0 [pid 6260] <... mmap resumed>) = 0x20000000 [pid 4999] mkdir("./41", 0777 [pid 6270] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4999] <... mkdir resumed>) = 0 [pid 6260] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6260] <... futex resumed>) = 1 [pid 6258] <... futex resumed>) = 0 [pid 4999] <... openat resumed>) = 3 [pid 6260] sendfile(4, 5, NULL, 2147483713 [pid 6258] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 6258] <... futex resumed>) = 0 [pid 6258] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [ 134.284831][ T6256] EXT4-fs (loop0): This should not happen!! Data will be lost [ 134.284831][ T6256] [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6265] <... mount resumed>) = 0 [pid 6265] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6265] chdir("./file0") = 0 [pid 6265] ioctl(4, LOOP_CLR_FD [pid 4995] <... umount2 resumed>) = 0 [pid 6265] <... ioctl resumed>) = 0 [pid 6265] close(4) = 0 [pid 4995] umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6265] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6265] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4995] lstat("./40/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4995] openat(AT_FDCWD, "./40/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4995] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] getdents64(4, 0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4995] getdents64(4, 0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4995] close(4) = 0 [pid 4995] rmdir("./40/file0") = 0 [pid 6264] <... futex resumed>) = 0 [pid 6264] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6273 [pid 4995] getdents64(3, [pid 6265] <... futex resumed>) = 0 [pid 6264] <... futex resumed>) = 1 [pid 4995] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 6265] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6264] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4995] close(3 [pid 6270] <... write resumed>) = 1048576 [pid 6265] <... open resumed>) = 4 [pid 6265] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6270] munmap(0x7f5c233f0000, 1048576 [pid 6265] <... futex resumed>) = 1 [pid 6264] <... futex resumed>) = 0 [pid 4995] <... close resumed>) = 0 ./strace-static-x86_64: Process 6273 attached [pid 6270] <... munmap resumed>) = 0 [pid 6265] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6264] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6258] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6265] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6264] <... futex resumed>) = 0 [pid 6258] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6265] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6264] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6258] <... futex resumed>) = 0 [pid 6270] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6258] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4995] rmdir("./40" [pid 6270] <... openat resumed>) = 4 [pid 6265] <... write resumed>) = 9 [pid 6258] <... mmap resumed>) = 0x7f5c234cf000 [pid 4995] <... rmdir resumed>) = 0 [pid 6270] ioctl(4, LOOP_SET_FD, 3 [pid 6265] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6258] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 4995] mkdir("./41", 0777 [pid 6273] set_robust_list(0x555556fb95e0, 24 [pid 6265] <... futex resumed>) = 1 [pid 6264] <... futex resumed>) = 0 [pid 6258] <... mprotect resumed>) = 0 [pid 6265] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6264] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6258] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6265] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6264] <... futex resumed>) = 0 [pid 6265] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6264] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6258] <... clone resumed>, parent_tid=[6274], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6274 [pid 6265] <... openat resumed>) = 5 [pid 6258] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6265] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6258] <... futex resumed>) = 0 [pid 6265] <... futex resumed>) = 1 [pid 6264] <... futex resumed>) = 0 [pid 6258] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6265] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6264] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6265] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6264] <... futex resumed>) = 0 [pid 6273] <... set_robust_list resumed>) = 0 [pid 6270] <... ioctl resumed>) = 0 [ 134.328554][ T6260] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 134.350554][ T6256] EXT4-fs (loop0): Total free blocks count 0 [ 134.364174][ T6270] loop3: detected capacity change from 0 to 2048 [pid 6265] open("./bus", O_RDWR [pid 6264] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4995] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 6274 attached [pid 6273] chdir("./41" [pid 6270] close(3 [pid 6265] <... open resumed>) = 6 [pid 6274] set_robust_list(0x7f5c234ef9e0, 24 [pid 6273] <... chdir resumed>) = 0 [pid 6265] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6274] <... set_robust_list resumed>) = 0 [pid 6273] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6265] <... futex resumed>) = 1 [pid 6264] <... futex resumed>) = 0 [pid 6274] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6273] <... prctl resumed>) = 0 [pid 6265] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6270] <... close resumed>) = 0 [pid 6264] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6273] setpgid(0, 0 [pid 6265] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6264] <... futex resumed>) = 0 [pid 6273] <... setpgid resumed>) = 0 [pid 6265] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6264] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6273] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6270] mkdir("./file0", 0777 [pid 6265] <... mmap resumed>) = 0x20000000 [pid 4995] <... openat resumed>) = 3 [pid 6273] <... openat resumed>) = 3 [ 134.371830][ T6260] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 134.384626][ T6260] EXT4-fs (loop2): This should not happen!! Data will be lost [ 134.384626][ T6260] [ 134.394869][ T6260] EXT4-fs (loop2): Total free blocks count 0 [ 134.402317][ T6260] EXT4-fs (loop2): Free/Dirty block details [ 134.406551][ T6256] EXT4-fs (loop0): Free/Dirty block details [ 134.409757][ T6260] EXT4-fs (loop2): free_blocks=2415919104 [ 134.414138][ T6256] EXT4-fs (loop0): free_blocks=2415919104 [pid 6265] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6273] write(3, "1000", 4 [pid 6270] <... mkdir resumed>) = 0 [pid 6265] <... futex resumed>) = 1 [pid 6264] <... futex resumed>) = 0 [pid 6258] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4995] ioctl(3, LOOP_CLR_FD [pid 6273] <... write resumed>) = 4 [pid 6265] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6264] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6273] close(3 [pid 6265] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6264] <... futex resumed>) = 0 [pid 6273] <... close resumed>) = 0 [pid 6265] sendfile(4, 5, NULL, 2147483713 [pid 6264] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6274] <... ioctl resumed>) = 0 [pid 6273] symlink("/dev/binderfs", "./binderfs" [pid 6270] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6260] <... sendfile resumed>) = 63 [ 134.420206][ T6260] EXT4-fs (loop2): dirty_blocks=16 [ 134.431081][ T6260] EXT4-fs (loop2): Block reservation details [ 134.437784][ T6260] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 134.440346][ T6265] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 134.460699][ T6256] EXT4-fs (loop0): dirty_blocks=16 [ 134.466298][ T6256] EXT4-fs (loop0): Block reservation details [ 134.472322][ T6256] EXT4-fs (loop0): i_reserved_data_blocks=1 [pid 4995] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6274] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6273] <... symlink resumed>) = 0 [pid 6268] <... ioctl resumed>) = 0 [pid 6256] <... sendfile resumed>) = 63 [pid 6274] <... futex resumed>) = 0 [pid 6273] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6268] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6274] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6273] <... futex resumed>) = 0 [pid 6268] <... futex resumed>) = 0 [pid 6273] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6268] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6273] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6260] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6256] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] close(3 [pid 6273] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6258] exit_group(0 [pid 6274] <... futex resumed>) = ? [pid 6273] <... mprotect resumed>) = 0 [pid 6260] <... futex resumed>) = ? [pid 6258] <... exit_group resumed>) = ? [pid 6256] <... futex resumed>) = 0 [pid 4995] <... close resumed>) = 0 [pid 6274] +++ exited with 0 +++ [pid 6273] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6264] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6264] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6273] <... clone resumed>, parent_tid=[6276], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6276 [pid 6264] <... futex resumed>) = 0 [pid 6273] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6264] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6260] +++ exited with 0 +++ [pid 6258] +++ exited with 0 +++ [pid 6256] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6250] exit_group(0 [pid 4995] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6273] <... futex resumed>) = 0 [pid 6270] <... mount resumed>) = 0 [pid 6268] <... futex resumed>) = ? [pid 6264] <... mmap resumed>) = 0x7f5c234cf000 [pid 6256] <... futex resumed>) = ? [pid 6250] <... exit_group resumed>) = ? [pid 4996] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6258, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- ./strace-static-x86_64: Process 6276 attached [pid 6273] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6270] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6264] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 6276] set_robust_list(0x7f5c2b8109e0, 24 [pid 6270] <... openat resumed>) = 3 [pid 6268] +++ exited with 0 +++ [pid 6264] <... mprotect resumed>) = 0 [pid 6256] +++ exited with 0 +++ [pid 6276] <... set_robust_list resumed>) = 0 [pid 6270] chdir("./file0" [pid 6264] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4996] umount2("./42", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6276] memfd_create("syzkaller", 0 [pid 6270] <... chdir resumed>) = 0 [pid 6250] +++ exited with 0 +++ [ 134.478990][ T6265] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 134.492852][ T6265] EXT4-fs (loop4): This should not happen!! Data will be lost [ 134.492852][ T6265] [ 134.503546][ T6265] EXT4-fs (loop4): Total free blocks count 0 [ 134.512190][ T6265] EXT4-fs (loop4): Free/Dirty block details [ 134.518709][ T6265] EXT4-fs (loop4): free_blocks=2415919104 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6276] <... memfd_create resumed>) = 3 [pid 6270] ioctl(4, LOOP_CLR_FD [pid 6264] <... clone resumed>, parent_tid=[6279], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6279 [pid 4996] openat(AT_FDCWD, "./42", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4994] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6250, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- ./strace-static-x86_64: Process 6279 attached [pid 6276] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6270] <... ioctl resumed>) = 0 [pid 6264] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... openat resumed>) = 3 [pid 4995] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6278 [pid 6276] <... mmap resumed>) = 0x7f5c233f0000 [pid 6270] close(4 [pid 6264] <... futex resumed>) = 0 [pid 4996] fstat(3, ./strace-static-x86_64: Process 6278 attached [pid 6279] set_robust_list(0x7f5c234ef9e0, 24 [pid 6276] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6270] <... close resumed>) = 0 [pid 6265] <... sendfile resumed>) = 63 [pid 6279] <... set_robust_list resumed>) = 0 [pid 6278] set_robust_list(0x555556fb95e0, 24 [pid 6270] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6265] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6264] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4996] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] umount2("./42", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6279] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6278] <... set_robust_list resumed>) = 0 [pid 6270] <... futex resumed>) = 1 [pid 6269] <... futex resumed>) = 0 [pid 6265] <... futex resumed>) = 0 [pid 4996] getdents64(3, [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6279] <... ioctl resumed>) = 0 [pid 6278] chdir("./41" [pid 6270] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6269] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6265] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4996] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4994] openat(AT_FDCWD, "./42", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6279] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6278] <... chdir resumed>) = 0 [pid 6270] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6269] <... futex resumed>) = 0 [pid 4996] umount2("./42/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6279] <... futex resumed>) = 1 [pid 6278] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6270] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6269] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6264] <... futex resumed>) = 0 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] <... openat resumed>) = 3 [pid 6279] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6278] <... prctl resumed>) = 0 [pid 6264] exit_group(0 [pid 6279] <... futex resumed>) = ? [pid 6278] setpgid(0, 0 [pid 6265] <... futex resumed>) = ? [pid 6264] <... exit_group resumed>) = ? [pid 4996] lstat("./42/binderfs", [pid 4994] fstat(3, [pid 6279] +++ exited with 0 +++ [pid 6278] <... setpgid resumed>) = 0 [pid 6265] +++ exited with 0 +++ [pid 6278] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6278] write(3, "1000", 4) = 4 [pid 6264] +++ exited with 0 +++ [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6278] close(3 [pid 6270] <... open resumed>) = 4 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6264, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 4996] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6278] <... close resumed>) = 0 [pid 6270] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] unlink("./42/binderfs" [pid 4994] getdents64(3, [pid 6278] symlink("/dev/binderfs", "./binderfs" [pid 6270] <... futex resumed>) = 1 [pid 6269] <... futex resumed>) = 0 [pid 6278] <... symlink resumed>) = 0 [pid 6270] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6269] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] umount2("./40", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] <... unlink resumed>) = 0 [pid 4994] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 6278] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6270] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6269] <... futex resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 134.528234][ T6265] EXT4-fs (loop4): dirty_blocks=16 [ 134.533545][ T6265] EXT4-fs (loop4): Block reservation details [ 134.540207][ T6265] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 134.562837][ T74] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 4996] umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] umount2("./42/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6278] <... futex resumed>) = 0 [pid 6270] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6269] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] openat(AT_FDCWD, "./40", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6278] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4998] <... openat resumed>) = 3 [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6278] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6270] <... write resumed>) = 9 [pid 4998] fstat(3, [pid 6278] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6278] <... mprotect resumed>) = 0 [pid 4998] getdents64(3, [pid 6278] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4998] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./40/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6278] <... clone resumed>, parent_tid=[6280], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6280 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6278] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] lstat("./40/binderfs", [pid 6278] <... futex resumed>) = 0 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6278] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4998] unlink("./40/binderfs") = 0 [pid 4998] umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6270] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] lstat("./42/binderfs", [pid 6270] <... futex resumed>) = 1 [pid 6269] <... futex resumed>) = 0 [pid 6269] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6270] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6269] <... futex resumed>) = 0 [pid 4994] unlink("./42/binderfs" [pid 6269] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6270] <... openat resumed>) = 5 [pid 4994] <... unlink resumed>) = 0 [pid 6270] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6269] <... futex resumed>) = 0 [pid 4994] umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6270] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6269] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6270] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6269] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6280 attached [pid 6280] set_robust_list(0x7f5c2b8109e0, 24) = 0 [pid 6280] memfd_create("syzkaller", 0) = 3 [pid 6280] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5c233f0000 [pid 6280] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6270] open("./bus", O_RDWR) = 6 [pid 6270] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6269] <... futex resumed>) = 0 [pid 6270] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6269] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6270] <... mmap resumed>) = 0x20000000 [pid 6269] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6270] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6269] <... futex resumed>) = 0 [pid 6269] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 134.576275][ T5457] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 134.584727][ T74] EXT4-fs (loop2): This should not happen!! Data will be lost [ 134.584727][ T74] [ 134.603075][ T5076] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 134.615687][ T5457] EXT4-fs (loop4): This should not happen!! Data will be lost [ 134.615687][ T5457] [pid 6269] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6276] <... write resumed>) = 1048576 [pid 6270] sendfile(4, 5, NULL, 2147483713 [pid 6280] <... write resumed>) = 1048576 [pid 6276] munmap(0x7f5c233f0000, 1048576 [pid 6280] munmap(0x7f5c233f0000, 1048576 [pid 6276] <... munmap resumed>) = 0 [pid 6269] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6280] <... munmap resumed>) = 0 [pid 6276] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6280] openat(AT_FDCWD, "/dev/loop1", O_RDWR [ 134.639244][ T5076] EXT4-fs (loop0): This should not happen!! Data will be lost [ 134.639244][ T5076] [ 134.644652][ T6270] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 6276] <... openat resumed>) = 4 [pid 6280] <... openat resumed>) = 4 [pid 6276] ioctl(4, LOOP_SET_FD, 3 [pid 6269] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... umount2 resumed>) = 0 [pid 6280] ioctl(4, LOOP_SET_FD, 3 [pid 6276] <... ioctl resumed>) = 0 [pid 6269] <... futex resumed>) = 0 [pid 4994] <... umount2 resumed>) = 0 [pid 6280] <... ioctl resumed>) = 0 [pid 6269] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4996] <... umount2 resumed>) = 0 [pid 4998] umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6269] <... mmap resumed>) = 0x7f5c234cf000 [pid 6276] close(3 [pid 6269] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4996] umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6276] <... close resumed>) = 0 [pid 6280] close(3 [pid 6276] mkdir("./file0", 0777 [pid 6280] <... close resumed>) = 0 [pid 6276] <... mkdir resumed>) = 0 [pid 6269] <... mprotect resumed>) = 0 [pid 4998] lstat("./40/file0", [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] lstat("./42/file0", [pid 6280] mkdir("./file0", 0777 [pid 6276] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6280] <... mkdir resumed>) = 0 [pid 6269] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] lstat("./42/file0", [pid 4994] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6269] <... clone resumed>, parent_tid=[6281], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6281 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4996] umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6269] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] openat(AT_FDCWD, "./40/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6269] <... futex resumed>) = 0 [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6269] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] <... openat resumed>) = 4 [pid 4994] openat(AT_FDCWD, "./42/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] fstat(4, [pid 4996] openat(AT_FDCWD, "./42/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6280] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] <... openat resumed>) = 4 [pid 4994] <... openat resumed>) = 4 ./strace-static-x86_64: Process 6281 attached [pid 4998] getdents64(4, [pid 4996] fstat(4, [pid 4994] fstat(4, [pid 6281] set_robust_list(0x7f5c234ef9e0, 24 [pid 4998] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4996] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, [pid 6281] <... set_robust_list resumed>) = 0 [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6281] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 4998] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4996] getdents64(4, [pid 4994] getdents64(4, [pid 4998] close(4 [pid 4996] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4994] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4998] <... close resumed>) = 0 [pid 4996] getdents64(4, [pid 4994] getdents64(4, [pid 4998] rmdir("./40/file0" [pid 4996] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4994] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4998] <... rmdir resumed>) = 0 [ 134.708872][ T6276] loop5: detected capacity change from 0 to 2048 [ 134.717007][ T6280] loop1: detected capacity change from 0 to 2048 [pid 4996] close(4 [pid 4994] close(4 [pid 6280] <... mount resumed>) = 0 [pid 6280] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6280] chdir("./file0") = 0 [pid 6280] ioctl(4, LOOP_CLR_FD) = 0 [pid 4998] getdents64(3, [pid 4996] <... close resumed>) = 0 [pid 4994] <... close resumed>) = 0 [pid 6280] close(4 [pid 6276] <... mount resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4996] rmdir("./42/file0" [pid 4994] rmdir("./42/file0" [pid 4998] close(3 [pid 6276] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 4996] <... rmdir resumed>) = 0 [pid 6276] chdir("./file0") = 0 [pid 4994] <... rmdir resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 4998] rmdir("./40" [pid 4994] getdents64(3, [pid 4996] getdents64(3, [pid 6280] <... close resumed>) = 0 [pid 6276] ioctl(4, LOOP_CLR_FD [pid 6280] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6276] <... ioctl resumed>) = 0 [pid 6280] <... futex resumed>) = 1 [pid 6278] <... futex resumed>) = 0 [pid 6276] close(4 [pid 6280] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6278] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6280] <... open resumed>) = 4 [pid 6278] <... futex resumed>) = 0 [pid 6276] <... close resumed>) = 0 [pid 6280] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6278] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6280] <... futex resumed>) = 0 [pid 6278] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6276] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6280] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6278] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6276] <... futex resumed>) = 1 [pid 6273] <... futex resumed>) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 6280] <... write resumed>) = 9 [pid 6278] <... futex resumed>) = 0 [pid 6276] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6273] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6269] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4996] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4994] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 6280] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6278] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6276] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6273] <... futex resumed>) = 0 [pid 6280] <... futex resumed>) = 0 [pid 6278] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6276] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6273] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6280] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6278] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6276] <... open resumed>) = 4 [pid 6280] <... openat resumed>) = 5 [pid 6278] <... futex resumed>) = 0 [pid 6276] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] mkdir("./41", 0777 [pid 4996] close(3 [pid 4994] close(3 [pid 6280] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6278] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6276] <... futex resumed>) = 1 [pid 6273] <... futex resumed>) = 0 [pid 4996] <... close resumed>) = 0 [pid 4994] <... close resumed>) = 0 [pid 6280] <... futex resumed>) = 0 [ 134.752450][ T6270] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 134.767864][ T6270] EXT4-fs (loop3): This should not happen!! Data will be lost [ 134.767864][ T6270] [ 134.778489][ T6270] EXT4-fs (loop3): Total free blocks count 0 [ 134.788742][ T6270] EXT4-fs (loop3): Free/Dirty block details [pid 6278] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6276] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6273] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... mkdir resumed>) = 0 [pid 6280] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6278] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6276] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6273] <... futex resumed>) = 0 [pid 4996] rmdir("./42" [pid 4994] rmdir("./42" [pid 6280] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6278] <... futex resumed>) = 0 [pid 6276] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6273] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6280] open("./bus", O_RDWR [pid 6278] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4996] <... rmdir resumed>) = 0 [pid 6280] <... open resumed>) = 6 [pid 6276] <... write resumed>) = 9 [pid 4998] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4994] <... rmdir resumed>) = 0 [pid 6280] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6276] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] mkdir("./43", 0777 [pid 6280] <... futex resumed>) = 1 [pid 6278] <... futex resumed>) = 0 [pid 6276] <... futex resumed>) = 1 [pid 6273] <... futex resumed>) = 0 [pid 4998] <... openat resumed>) = 3 [pid 4994] mkdir("./43", 0777 [pid 6280] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6278] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6276] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6273] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6280] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6278] <... futex resumed>) = 0 [pid 6276] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6273] <... futex resumed>) = 0 [pid 4996] <... mkdir resumed>) = 0 [pid 4994] <... mkdir resumed>) = 0 [pid 6280] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6278] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6276] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6273] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] ioctl(3, LOOP_CLR_FD [pid 4996] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4994] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6280] <... mmap resumed>) = 0x20000000 [pid 6276] <... openat resumed>) = 5 [pid 6280] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6276] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6280] <... futex resumed>) = 1 [pid 6278] <... futex resumed>) = 0 [pid 6276] <... futex resumed>) = 1 [pid 6273] <... futex resumed>) = 0 [pid 6280] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6278] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6276] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6273] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6280] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6278] <... futex resumed>) = 0 [pid 6276] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6273] <... futex resumed>) = 0 [pid 6280] sendfile(4, 5, NULL, 2147483713 [pid 6278] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6276] open("./bus", O_RDWR [pid 6273] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4996] <... openat resumed>) = 3 [pid 6276] <... open resumed>) = 6 [pid 4994] <... openat resumed>) = 3 [pid 6276] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] close(3 [pid 4996] ioctl(3, LOOP_CLR_FD [pid 6276] <... futex resumed>) = 1 [pid 6273] <... futex resumed>) = 0 [pid 4994] ioctl(3, LOOP_CLR_FD [pid 6276] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6273] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... close resumed>) = 0 [pid 4996] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6276] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6273] <... futex resumed>) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4996] close(3 [pid 4994] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6276] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6273] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6276] <... mmap resumed>) = 0x20000000 [pid 6276] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6273] <... futex resumed>) = 0 [pid 6276] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6273] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6276] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6273] <... futex resumed>) = 0 [pid 6276] sendfile(4, 5, NULL, 2147483713 [ 134.797597][ T6270] EXT4-fs (loop3): free_blocks=2415919104 [ 134.803811][ T6270] EXT4-fs (loop3): dirty_blocks=16 [ 134.825993][ T6270] EXT4-fs (loop3): Block reservation details [pid 6273] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6286 attached [pid 4996] <... close resumed>) = 0 [pid 4994] close(3 [pid 6286] set_robust_list(0x555556fb95e0, 24 [pid 4994] <... close resumed>) = 0 [pid 4996] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4994] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6286 [pid 6286] <... set_robust_list resumed>) = 0 [pid 6286] chdir("./41") = 0 [pid 6286] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6286] setpgid(0, 0 [pid 4996] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6287 [pid 4994] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6288 [pid 6286] <... setpgid resumed>) = 0 [pid 6286] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6286] write(3, "1000", 4) = 4 [pid 6286] close(3) = 0 [pid 6286] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6286] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6286] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c2b7f0000 [pid 6278] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6278] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6278] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c234cf000 [pid 6278] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6278] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6289], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6289 [pid 6278] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6278] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6286] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6286] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6290], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6290 [pid 6286] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6286] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6289 attached [pid 6289] set_robust_list(0x7f5c234ef9e0, 24 [pid 6273] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6273] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6273] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c234cf000 [pid 6273] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6273] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6291], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6291 [pid 6273] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6273] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6289] <... set_robust_list resumed>) = 0 [pid 6289] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040./strace-static-x86_64: Process 6291 attached ./strace-static-x86_64: Process 6290 attached [ 134.839773][ T6280] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 134.872826][ T6276] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 6291] set_robust_list(0x7f5c234ef9e0, 24) = 0 [pid 6290] set_robust_list(0x7f5c2b8109e0, 24 [pid 6270] <... sendfile resumed>) = 63 [pid 6281] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 6288 attached ./strace-static-x86_64: Process 6287 attached [pid 6291] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6290] <... set_robust_list resumed>) = 0 [pid 6281] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6290] memfd_create("syzkaller", 0) = 3 [pid 6290] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5c233f0000 [pid 6290] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6288] set_robust_list(0x555556fb95e0, 24 [pid 6287] set_robust_list(0x555556fb95e0, 24 [pid 6281] <... futex resumed>) = 0 [pid 6270] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6270] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6278] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6278] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6288] <... set_robust_list resumed>) = 0 [pid 6287] <... set_robust_list resumed>) = 0 [pid 6281] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6273] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 134.906084][ T6270] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 134.918429][ T6276] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 134.932347][ T6276] EXT4-fs (loop5): This should not happen!! Data will be lost [ 134.932347][ T6276] [ 134.941673][ T6280] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 6288] chdir("./43" [pid 6287] chdir("./43" [pid 6269] exit_group(0 [pid 6287] <... chdir resumed>) = 0 [pid 6281] <... futex resumed>) = ? [pid 6270] <... futex resumed>) = ? [pid 6269] <... exit_group resumed>) = ? [pid 6288] <... chdir resumed>) = 0 [pid 6287] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6281] +++ exited with 0 +++ [pid 6288] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6287] <... prctl resumed>) = 0 [pid 6270] +++ exited with 0 +++ [pid 6269] +++ exited with 0 +++ [pid 6288] <... prctl resumed>) = 0 [pid 6287] setpgid(0, 0 [pid 6288] setpgid(0, 0 [pid 6287] <... setpgid resumed>) = 0 [pid 6288] <... setpgid resumed>) = 0 [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6269, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 6287] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6288] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6287] <... openat resumed>) = 3 [pid 6288] <... openat resumed>) = 3 [pid 6288] write(3, "1000", 4 [pid 6287] write(3, "1000", 4 [pid 4997] umount2("./42", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6288] <... write resumed>) = 4 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./42", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4997] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(3, [pid 6288] close(3 [pid 6287] <... write resumed>) = 4 [pid 4997] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 6291] <... ioctl resumed>) = 0 [pid 6276] <... sendfile resumed>) = 63 [pid 4997] umount2("./42/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [ 134.943518][ T6276] EXT4-fs (loop5): Total free blocks count 0 [ 134.964130][ T6276] EXT4-fs (loop5): Free/Dirty block details [ 134.971152][ T6276] EXT4-fs (loop5): free_blocks=2415919104 [ 134.977708][ T6276] EXT4-fs (loop5): dirty_blocks=16 [ 134.985363][ T6276] EXT4-fs (loop5): Block reservation details [ 134.992842][ T6276] EXT4-fs (loop5): i_reserved_data_blocks=1 [pid 6291] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6291] <... futex resumed>) = 0 [pid 6290] <... write resumed>) = 1048576 [pid 6288] <... close resumed>) = 0 [pid 6287] close(3 [pid 6276] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6273] exit_group(0 [pid 4997] lstat("./42/binderfs", [pid 6273] <... exit_group resumed>) = ? [pid 4997] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6291] +++ exited with 0 +++ [pid 4997] unlink("./42/binderfs" [pid 6290] munmap(0x7f5c233f0000, 1048576 [pid 4997] <... unlink resumed>) = 0 [pid 6290] <... munmap resumed>) = 0 [pid 6288] symlink("/dev/binderfs", "./binderfs" [pid 6287] <... close resumed>) = 0 [pid 6276] <... futex resumed>) = ? [pid 4997] umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6290] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6290] ioctl(4, LOOP_SET_FD, 3 [pid 6288] <... symlink resumed>) = 0 [pid 6287] symlink("/dev/binderfs", "./binderfs" [pid 6276] +++ exited with 0 +++ [pid 6273] +++ exited with 0 +++ [ 135.000415][ T6280] EXT4-fs (loop1): This should not happen!! Data will be lost [ 135.000415][ T6280] [ 135.011354][ T6280] EXT4-fs (loop1): Total free blocks count 0 [ 135.017784][ T6280] EXT4-fs (loop1): Free/Dirty block details [ 135.025009][ T6280] EXT4-fs (loop1): free_blocks=2415919104 [ 135.029936][ T6290] loop4: detected capacity change from 0 to 2048 [ 135.034337][ T6280] EXT4-fs (loop1): dirty_blocks=16 [ 135.043219][ T5076] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 6288] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6287] <... symlink resumed>) = 0 [pid 6290] <... ioctl resumed>) = 0 [pid 6290] close(3) = 0 [pid 6290] mkdir("./file0", 0777 [pid 6288] <... futex resumed>) = 0 [pid 6287] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6273, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 6288] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6287] <... futex resumed>) = 0 [pid 4999] restart_syscall(<... resuming interrupted clone ...> [pid 6289] <... ioctl resumed>) = 0 [pid 6288] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6287] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6280] <... sendfile resumed>) = 63 [pid 4999] <... restart_syscall resumed>) = 0 [pid 6289] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6289] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6290] <... mkdir resumed>) = 0 [pid 6290] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6288] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6288] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6292], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6292 [pid 6288] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6288] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6287] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6287] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 4999] umount2("./41", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6280] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6278] exit_group(0 [pid 6289] <... futex resumed>) = ? [pid 6278] <... exit_group resumed>) = ? [pid 6289] +++ exited with 0 +++ [pid 6287] <... mprotect resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6280] <... futex resumed>) = ? [pid 4999] openat(AT_FDCWD, "./41", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 6292 attached [pid 6292] set_robust_list(0x7f5c2b8109e0, 24) = 0 [pid 6292] memfd_create("syzkaller", 0 [pid 6280] +++ exited with 0 +++ [pid 6278] +++ exited with 0 +++ [pid 4999] <... openat resumed>) = 3 [pid 4995] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6278, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6287] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4999] getdents64(3, [pid 4995] umount2("./41", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6287] <... clone resumed>, parent_tid=[6293], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6293 [pid 4999] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6293 attached [pid 6292] <... memfd_create resumed>) = 3 [pid 6287] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [ 135.043821][ T6280] EXT4-fs (loop1): Block reservation details [ 135.062057][ T6280] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 135.070006][ T5076] EXT4-fs (loop3): This should not happen!! Data will be lost [ 135.070006][ T5076] [pid 4999] umount2("./41/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] openat(AT_FDCWD, "./41", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6287] <... futex resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] <... openat resumed>) = 3 [pid 6287] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4999] lstat("./41/binderfs", [pid 4995] fstat(3, [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] unlink("./41/binderfs" [pid 4995] getdents64(3, [pid 4999] <... unlink resumed>) = 0 [pid 4995] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] umount2("./41/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6293] set_robust_list(0x7f5c2b8109e0, 24 [pid 6292] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6293] <... set_robust_list resumed>) = 0 [pid 6292] <... mmap resumed>) = 0x7f5c233f0000 [pid 4995] lstat("./41/binderfs", [pid 6293] memfd_create("syzkaller", 0 [pid 6292] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6293] <... memfd_create resumed>) = 3 [pid 4995] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6293] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4995] unlink("./41/binderfs" [pid 6293] <... mmap resumed>) = 0x7f5c233f0000 [pid 4995] <... unlink resumed>) = 0 [pid 6290] <... mount resumed>) = 0 [pid 4995] umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6293] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6290] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6290] chdir("./file0") = 0 [pid 6290] ioctl(4, LOOP_CLR_FD) = 0 [pid 6290] close(4 [pid 6292] <... write resumed>) = 1048576 [pid 6290] <... close resumed>) = 0 [pid 6290] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6286] <... futex resumed>) = 0 [pid 6286] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6286] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6290] <... futex resumed>) = 1 [pid 6290] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000) = 4 [pid 6290] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6290] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6286] <... futex resumed>) = 0 [pid 6286] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6290] <... futex resumed>) = 0 [pid 6286] <... futex resumed>) = 1 [pid 6290] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6286] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6290] <... write resumed>) = 9 [pid 6290] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6286] <... futex resumed>) = 0 [pid 6290] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6286] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6290] <... openat resumed>) = 5 [pid 6286] <... futex resumed>) = 0 [pid 6290] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6286] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6290] <... futex resumed>) = 0 [pid 6286] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6290] open("./bus", O_RDWR [pid 6286] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6290] <... open resumed>) = 6 [pid 6286] <... futex resumed>) = 0 [pid 6290] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6286] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6290] <... futex resumed>) = 0 [pid 6286] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6290] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6286] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6290] <... mmap resumed>) = 0x20000000 [pid 6286] <... futex resumed>) = 0 [pid 4999] <... umount2 resumed>) = 0 [pid 6290] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6286] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6290] <... futex resumed>) = 0 [pid 6286] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6290] sendfile(4, 5, NULL, 2147483713 [ 135.099032][ T5457] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 135.112479][ T5457] EXT4-fs (loop5): This should not happen!! Data will be lost [ 135.112479][ T5457] [ 135.128736][ T11] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 6286] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6293] <... write resumed>) = 1048576 [pid 6286] <... futex resumed>) = 0 [pid 4999] umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6293] munmap(0x7f5c233f0000, 1048576 [pid 6286] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4997] <... umount2 resumed>) = 0 [pid 6292] munmap(0x7f5c233f0000, 1048576) = 0 [pid 6292] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6292] ioctl(4, LOOP_SET_FD, 3 [pid 6293] <... munmap resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6293] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4999] lstat("./41/file0", [ 135.180009][ T6290] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 135.199766][ T11] EXT4-fs (loop1): This should not happen!! Data will be lost [ 135.199766][ T11] [ 135.210084][ T6292] loop0: detected capacity change from 0 to 2048 [pid 4997] umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6293] <... openat resumed>) = 4 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./42/file0", [pid 4999] umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6293] ioctl(4, LOOP_SET_FD, 3 [pid 6292] <... ioctl resumed>) = 0 [pid 4997] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6292] close(3) = 0 [pid 6292] mkdir("./file0", 0777) = 0 [pid 6292] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6293] <... ioctl resumed>) = 0 [pid 4999] openat(AT_FDCWD, "./41/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... openat resumed>) = 4 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] fstat(4, [pid 6293] close(3 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] openat(AT_FDCWD, "./42/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] getdents64(4, [pid 4997] <... openat resumed>) = 4 [pid 4999] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4997] fstat(4, [pid 4999] getdents64(4, [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4997] getdents64(4, [pid 4999] close(4 [pid 4997] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4999] <... close resumed>) = 0 [pid 4997] getdents64(4, [pid 4999] rmdir("./41/file0" [pid 4997] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 4997] close(4 [pid 6286] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4999] getdents64(3, [pid 4997] <... close resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4997] rmdir("./42/file0" [pid 6286] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] close(3 [pid 4997] <... rmdir resumed>) = 0 [pid 6286] <... futex resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 4997] getdents64(3, [pid 6286] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4999] rmdir("./41" [pid 4997] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 6286] <... mmap resumed>) = 0x7f5c234cf000 [pid 4999] <... rmdir resumed>) = 0 [pid 4997] close(3 [pid 6286] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 4999] mkdir("./42", 0777 [pid 4997] <... close resumed>) = 0 [pid 6286] <... mprotect resumed>) = 0 [pid 4999] <... mkdir resumed>) = 0 [pid 4997] rmdir("./42" [pid 6293] <... close resumed>) = 0 [pid 6286] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4999] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 4997] <... rmdir resumed>) = 0 [pid 6293] mkdir("./file0", 0777 [pid 4999] <... openat resumed>) = 3 [ 135.227914][ T6293] loop2: detected capacity change from 0 to 2048 [ 135.236850][ T6290] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 4997] mkdir("./43", 0777./strace-static-x86_64: Process 6297 attached [pid 6293] <... mkdir resumed>) = 0 [pid 6286] <... clone resumed>, parent_tid=[6297], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6297 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 4997] <... mkdir resumed>) = 0 [pid 4995] <... umount2 resumed>) = 0 [pid 6297] set_robust_list(0x7f5c234ef9e0, 24 [pid 6293] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6292] <... mount resumed>) = 0 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4997] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6297] <... set_robust_list resumed>) = 0 [pid 6292] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6286] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] close(3 [pid 4997] <... openat resumed>) = 3 [pid 4995] umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6292] <... openat resumed>) = 3 [pid 4999] <... close resumed>) = 0 [pid 4997] ioctl(3, LOOP_CLR_FD [pid 6292] chdir("./file0" [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4997] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6297] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6292] <... chdir resumed>) = 0 [pid 6286] <... futex resumed>) = 0 [pid 4997] close(3 [pid 6292] ioctl(4, LOOP_CLR_FD [pid 4999] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6299 [pid 4997] <... close resumed>) = 0 [pid 6292] <... ioctl resumed>) = 0 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6292] close(4 [pid 6286] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4995] lstat("./41/file0", [pid 6292] <... close resumed>) = 0 [pid 4997] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6300 [pid 4995] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 6299 attached [pid 6292] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6299] set_robust_list(0x555556fb95e0, 24 [pid 6292] <... futex resumed>) = 1 [pid 6288] <... futex resumed>) = 0 [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6300 attached [pid 6299] <... set_robust_list resumed>) = 0 [pid 6292] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6288] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] openat(AT_FDCWD, "./41/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6300] set_robust_list(0x555556fb95e0, 24 [pid 6299] chdir("./42" [pid 6292] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6288] <... futex resumed>) = 0 [pid 4995] <... openat resumed>) = 4 [pid 6300] <... set_robust_list resumed>) = 0 [pid 6299] <... chdir resumed>) = 0 [pid 6292] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6300] chdir("./43" [pid 6292] <... open resumed>) = 4 [pid 6300] <... chdir resumed>) = 0 [pid 6292] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6300] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6299] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6292] <... futex resumed>) = 0 [pid 6288] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4995] fstat(4, [pid 6300] <... prctl resumed>) = 0 [pid 6299] <... prctl resumed>) = 0 [pid 6292] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6300] setpgid(0, 0) = 0 [pid 6300] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6300] write(3, "1000", 4) = 4 [pid 6299] setpgid(0, 0 [pid 6288] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6300] close(3 [pid 6299] <... setpgid resumed>) = 0 [ 135.284827][ T6290] EXT4-fs (loop4): This should not happen!! Data will be lost [ 135.284827][ T6290] [ 135.296105][ T6290] EXT4-fs (loop4): Total free blocks count 0 [ 135.319142][ T6290] EXT4-fs (loop4): Free/Dirty block details [pid 6288] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] getdents64(4, [pid 6300] <... close resumed>) = 0 [pid 6300] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6300] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6299] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6293] <... mount resumed>) = 0 [pid 6292] <... futex resumed>) = 0 [pid 6288] <... futex resumed>) = 1 [pid 4995] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 6300] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6293] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6292] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6300] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6299] <... openat resumed>) = 3 [pid 6293] <... openat resumed>) = 3 [pid 6292] <... write resumed>) = 9 [pid 6288] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4995] getdents64(4, [pid 6300] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6299] write(3, "1000", 4 [pid 6293] chdir("./file0" [pid 6292] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6288] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4995] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 6300] <... mprotect resumed>) = 0 [pid 6299] <... write resumed>) = 4 [pid 6293] <... chdir resumed>) = 0 [pid 6292] <... futex resumed>) = 0 [pid 6300] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6293] ioctl(4, LOOP_CLR_FD [pid 6292] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6293] <... ioctl resumed>) = 0 [pid 6300] <... clone resumed>, parent_tid=[6303], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6303 [pid 6299] close(3 [pid 6293] close(4 [pid 6288] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6286] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4995] close(4 [pid 6300] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6299] <... close resumed>) = 0 [pid 6293] <... close resumed>) = 0 [pid 6292] <... futex resumed>) = 0 [pid 6288] <... futex resumed>) = 1 [pid 4995] <... close resumed>) = 0 ./strace-static-x86_64: Process 6303 attached [pid 6300] <... futex resumed>) = 0 [pid 6299] symlink("/dev/binderfs", "./binderfs" [pid 6293] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6292] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6288] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4995] rmdir("./41/file0" [pid 6303] set_robust_list(0x7f5c2b8109e0, 24 [pid 6300] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6299] <... symlink resumed>) = 0 [pid 6293] <... futex resumed>) = 1 [pid 6292] <... openat resumed>) = 5 [pid 6287] <... futex resumed>) = 0 [pid 4995] <... rmdir resumed>) = 0 [pid 6303] <... set_robust_list resumed>) = 0 [pid 6299] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6293] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6292] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6287] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] getdents64(3, [pid 6303] memfd_create("syzkaller", 0 [pid 6299] <... futex resumed>) = 0 [pid 6293] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6292] <... futex resumed>) = 1 [pid 6288] <... futex resumed>) = 0 [pid 6287] <... futex resumed>) = 0 [pid 4995] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 6303] <... memfd_create resumed>) = 3 [pid 6299] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6293] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6292] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6288] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6287] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4995] close(3 [pid 6303] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6299] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6292] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4995] <... close resumed>) = 0 [pid 6303] <... mmap resumed>) = 0x7f5c233f0000 [pid 6299] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6288] <... futex resumed>) = 0 [ 135.337541][ T6290] EXT4-fs (loop4): free_blocks=2415919104 [ 135.345775][ T6290] EXT4-fs (loop4): dirty_blocks=16 [ 135.356068][ T6290] EXT4-fs (loop4): Block reservation details [pid 4995] rmdir("./41" [pid 6303] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6299] <... mprotect resumed>) = 0 [pid 6293] <... open resumed>) = 4 [pid 6292] open("./bus", O_RDWR [pid 6288] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4995] <... rmdir resumed>) = 0 [pid 6299] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4995] mkdir("./42", 0777) = 0 [pid 6299] <... clone resumed>, parent_tid=[6304], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6304 [pid 4995] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6299] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] <... openat resumed>) = 3 [pid 6299] <... futex resumed>) = 0 [pid 4995] ioctl(3, LOOP_CLR_FD [pid 6299] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4995] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4995] close(3) = 0 [pid 4995] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6292] <... open resumed>) = 6 [pid 6293] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6292] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6305 [pid 6293] <... futex resumed>) = 1 [pid 6292] <... futex resumed>) = 1 [pid 6288] <... futex resumed>) = 0 [pid 6287] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6305 attached ./strace-static-x86_64: Process 6304 attached [pid 6297] <... ioctl resumed>) = 0 [pid 6293] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6292] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6290] <... sendfile resumed>) = 63 [pid 6288] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6287] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6305] set_robust_list(0x555556fb95e0, 24 [pid 6297] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6293] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6292] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6288] <... futex resumed>) = 0 [pid 6287] <... futex resumed>) = 0 [pid 6305] <... set_robust_list resumed>) = 0 [pid 6304] set_robust_list(0x7f5c2b8109e0, 24 [pid 6303] <... write resumed>) = 1048576 [pid 6297] <... futex resumed>) = 0 [pid 6290] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6303] munmap(0x7f5c233f0000, 1048576 [pid 6297] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6303] <... munmap resumed>) = 0 [pid 6293] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6292] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6288] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6287] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6303] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6286] exit_group(0 [pid 6303] <... openat resumed>) = 4 [pid 6297] <... futex resumed>) = ? [pid 6286] <... exit_group resumed>) = ? [pid 6303] ioctl(4, LOOP_SET_FD, 3 [pid 6297] +++ exited with 0 +++ [pid 6305] chdir("./42" [pid 6304] <... set_robust_list resumed>) = 0 [pid 6293] <... write resumed>) = 9 [pid 6292] <... mmap resumed>) = 0x20000000 [pid 6293] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6287] <... futex resumed>) = 0 [pid 6293] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6287] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6293] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6287] <... futex resumed>) = 0 [pid 6287] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6293] openat(AT_FDCWD, "./bus", O_RDONLY) = 5 [pid 6293] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6287] <... futex resumed>) = 0 [pid 6293] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6287] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6293] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6287] <... futex resumed>) = 0 [pid 6293] open("./bus", O_RDWR [pid 6292] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6303] <... ioctl resumed>) = 0 [pid 6303] close(3 [pid 6304] memfd_create("syzkaller", 0 [pid 6303] <... close resumed>) = 0 [pid 6287] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6293] <... open resumed>) = 6 [pid 6305] <... chdir resumed>) = 0 [pid 6292] <... futex resumed>) = 1 [pid 6288] <... futex resumed>) = 0 [pid 6293] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6304] <... memfd_create resumed>) = 3 [pid 6305] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6293] <... futex resumed>) = 1 [pid 6292] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6288] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6287] <... futex resumed>) = 0 [pid 6305] <... prctl resumed>) = 0 [pid 6304] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6303] mkdir("./file0", 0777 [pid 6293] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6292] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6290] <... futex resumed>) = ? [pid 6303] <... mkdir resumed>) = 0 [pid 6288] <... futex resumed>) = 0 [pid 6287] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6305] setpgid(0, 0 [pid 6303] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6304] <... mmap resumed>) = 0x7f5c233f0000 [pid 6292] sendfile(4, 5, NULL, 2147483713 [pid 6293] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6287] <... futex resumed>) = 0 [pid 6305] <... setpgid resumed>) = 0 [pid 6288] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6305] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6293] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6287] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6293] <... mmap resumed>) = 0x20000000 [pid 6305] <... openat resumed>) = 3 [pid 6290] +++ exited with 0 +++ [pid 6286] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6286, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6305] write(3, "1000", 4 [pid 4998] restart_syscall(<... resuming interrupted clone ...> [pid 6305] <... write resumed>) = 4 [pid 4998] <... restart_syscall resumed>) = 0 [pid 6305] close(3 [pid 4998] umount2("./41", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6305] <... close resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./41", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6305] symlink("/dev/binderfs", "./binderfs" [pid 4998] <... openat resumed>) = 3 [pid 4998] fstat(3, [pid 6305] <... symlink resumed>) = 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6293] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] getdents64(3, [pid 6293] <... futex resumed>) = 1 [pid 6287] <... futex resumed>) = 0 [pid 6287] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 6305] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6293] sendfile(4, 5, NULL, 2147483713 [pid 6287] <... futex resumed>) = 0 [pid 6287] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] umount2("./41/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6305] <... futex resumed>) = 0 [pid 4998] lstat("./41/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [ 135.383282][ T6290] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 135.408532][ T6303] loop3: detected capacity change from 0 to 2048 [pid 6305] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c2b7f0000 [pid 6304] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4998] unlink("./41/binderfs" [pid 6305] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6288] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4998] <... unlink resumed>) = 0 [pid 6288] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 135.456307][ T6292] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 135.473951][ T6293] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 6305] <... mprotect resumed>) = 0 [pid 6304] <... write resumed>) = 1048576 [pid 6288] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6287] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4998] umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6305] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6304] munmap(0x7f5c233f0000, 1048576 [pid 6288] <... mmap resumed>) = 0x7f5c234cf000 [pid 6287] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6287] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c234cf000 [pid 6304] <... munmap resumed>) = 0 [pid 6304] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6304] ioctl(4, LOOP_SET_FD, 3 [pid 6303] <... mount resumed>) = 0 [pid 6288] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 6287] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 6305] <... clone resumed>, parent_tid=[6308], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6308 [pid 6304] <... ioctl resumed>) = 0 [pid 6304] close(3) = 0 [pid 6304] mkdir("./file0", 0777 [pid 6303] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6304] <... mkdir resumed>) = 0 [pid 6304] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6288] <... mprotect resumed>) = 0 [pid 6287] <... mprotect resumed>) = 0 [pid 6305] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6303] <... openat resumed>) = 3 ./strace-static-x86_64: Process 6308 attached [pid 6308] set_robust_list(0x7f5c2b8109e0, 24 [pid 6305] <... futex resumed>) = 0 [pid 6305] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6303] chdir("./file0" [pid 6287] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6288] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6308] <... set_robust_list resumed>) = 0 [pid 6303] <... chdir resumed>) = 0 [pid 6308] memfd_create("syzkaller", 0 [pid 6303] ioctl(4, LOOP_CLR_FD [pid 6308] <... memfd_create resumed>) = 3 [pid 6303] <... ioctl resumed>) = 0 [pid 6288] <... clone resumed>, parent_tid=[6310], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6310 [pid 6287] <... clone resumed>, parent_tid=[6309], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6309 [pid 6308] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6303] close(4 [pid 6288] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6287] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6303] <... close resumed>) = 0 [pid 6308] <... mmap resumed>) = 0x7f5c233f0000 [pid 6303] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6288] <... futex resumed>) = 0 [pid 6287] <... futex resumed>) = 0 [pid 6303] <... futex resumed>) = 1 [pid 6300] <... futex resumed>) = 0 [pid 6288] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6287] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6309 attached [pid 6303] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6300] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6303] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6300] <... futex resumed>) = 0 [pid 6303] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6300] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6309] set_robust_list(0x7f5c234ef9e0, 24./strace-static-x86_64: Process 6310 attached ) = 0 [pid 6310] set_robust_list(0x7f5c234ef9e0, 24 [pid 6309] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6310] <... set_robust_list resumed>) = 0 [pid 6303] <... open resumed>) = 4 [pid 6310] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6303] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6300] <... futex resumed>) = 0 [pid 6303] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6300] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6303] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6300] <... futex resumed>) = 0 [ 135.503338][ T11] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 135.504644][ T6304] loop5: detected capacity change from 0 to 2048 [ 135.522291][ T11] EXT4-fs (loop4): This should not happen!! Data will be lost [ 135.522291][ T11] [pid 6303] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6300] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6308] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6303] <... write resumed>) = 9 [pid 6303] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6300] <... futex resumed>) = 0 [pid 6303] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6300] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6303] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6300] <... futex resumed>) = 0 [pid 6303] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6300] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6303] <... openat resumed>) = 5 [pid 6303] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6300] <... futex resumed>) = 0 [pid 6303] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6300] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6303] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6300] <... futex resumed>) = 0 [pid 6303] open("./bus", O_RDWR [pid 6300] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6303] <... open resumed>) = 6 [pid 6303] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6300] <... futex resumed>) = 0 [pid 6303] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6300] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6303] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6300] <... futex resumed>) = 0 [pid 6308] <... write resumed>) = 1048576 [pid 6304] <... mount resumed>) = 0 [pid 6303] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6300] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6304] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6303] <... mmap resumed>) = 0x20000000 [pid 6304] <... openat resumed>) = 3 [pid 6303] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6304] chdir("./file0" [pid 6303] <... futex resumed>) = 1 [pid 6300] <... futex resumed>) = 0 [pid 6304] <... chdir resumed>) = 0 [pid 6303] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6300] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6304] ioctl(4, LOOP_CLR_FD [pid 6303] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6300] <... futex resumed>) = 0 [pid 6304] <... ioctl resumed>) = 0 [ 135.552317][ T6292] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 135.579895][ T6293] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 135.581619][ T6292] EXT4-fs (loop0): This should not happen!! Data will be lost [ 135.581619][ T6292] [pid 6303] sendfile(4, 5, NULL, 2147483713 [pid 6300] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6308] munmap(0x7f5c233f0000, 1048576 [pid 6304] close(4 [pid 6288] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6287] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6308] <... munmap resumed>) = 0 [pid 6304] <... close resumed>) = 0 [pid 6308] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6304] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6308] <... openat resumed>) = 4 [pid 6304] <... futex resumed>) = 1 [pid 6299] <... futex resumed>) = 0 [ 135.603414][ T6292] EXT4-fs (loop0): Total free blocks count 0 [ 135.603728][ T6303] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 135.624849][ T6292] EXT4-fs (loop0): Free/Dirty block details [ 135.625255][ T6303] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 135.643194][ T6303] EXT4-fs (loop3): This should not happen!! Data will be lost [ 135.643194][ T6303] [pid 6308] ioctl(4, LOOP_SET_FD, 3 [pid 6304] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6299] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6304] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6299] <... futex resumed>) = 0 [pid 6304] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6299] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6304] <... open resumed>) = 4 [pid 6300] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6304] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6300] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6304] <... futex resumed>) = 1 [ 135.652945][ T6303] EXT4-fs (loop3): Total free blocks count 0 [ 135.659092][ T6303] EXT4-fs (loop3): Free/Dirty block details [ 135.659591][ T6308] loop1: detected capacity change from 0 to 2048 [ 135.665009][ T6303] EXT4-fs (loop3): free_blocks=2415919104 [ 135.665039][ T6303] EXT4-fs (loop3): dirty_blocks=16 [ 135.665059][ T6303] EXT4-fs (loop3): Block reservation details [ 135.688956][ T6293] EXT4-fs (loop2): This should not happen!! Data will be lost [ 135.688956][ T6293] [ 135.698803][ T6293] EXT4-fs (loop2): Total free blocks count 0 [pid 6300] <... futex resumed>) = 0 [pid 6299] <... futex resumed>) = 0 [pid 6304] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6300] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6299] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... umount2 resumed>) = 0 [pid 6304] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6300] <... mmap resumed>) = 0x7f5c234cf000 [pid 6299] <... futex resumed>) = 0 [pid 6304] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6300] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 6299] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6309] <... ioctl resumed>) = 0 [pid 6308] <... ioctl resumed>) = 0 [pid 6304] <... write resumed>) = 9 [pid 6300] <... mprotect resumed>) = 0 [pid 6293] <... sendfile resumed>) = 63 [pid 6304] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6300] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6309] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6308] close(3 [pid 6304] <... futex resumed>) = 1 [pid 6299] <... futex resumed>) = 0 [pid 6293] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6304] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6300] <... clone resumed>, parent_tid=[6313], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6313 [pid 6299] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6287] exit_group(0./strace-static-x86_64: Process 6313 attached [pid 6304] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6300] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6299] <... futex resumed>) = 0 [pid 6287] <... exit_group resumed>) = ? [pid 4998] umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6313] set_robust_list(0x7f5c234ef9e0, 24 [pid 6309] <... futex resumed>) = ? [pid 6308] <... close resumed>) = 0 [ 135.704982][ T6293] EXT4-fs (loop2): Free/Dirty block details [ 135.706705][ T6292] EXT4-fs (loop0): free_blocks=2415919104 [ 135.715122][ T6293] EXT4-fs (loop2): free_blocks=2415919104 [ 135.722657][ T6293] EXT4-fs (loop2): dirty_blocks=16 [ 135.728185][ T6293] EXT4-fs (loop2): Block reservation details [ 135.734367][ T6293] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 135.741347][ T6303] EXT4-fs (loop3): i_reserved_data_blocks=1 [pid 6304] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6303] <... sendfile resumed>) = 63 [pid 6300] <... futex resumed>) = 0 [pid 6299] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6293] <... futex resumed>) = ? [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6313] <... set_robust_list resumed>) = 0 [pid 6309] +++ exited with 0 +++ [pid 6308] mkdir("./file0", 0777 [pid 6304] <... openat resumed>) = 5 [pid 6303] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6300] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] lstat("./41/file0", [pid 6313] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6308] <... mkdir resumed>) = 0 [pid 6304] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6303] <... futex resumed>) = 0 [pid 6293] +++ exited with 0 +++ [pid 6287] +++ exited with 0 +++ [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6313] <... ioctl resumed>) = 0 [pid 6304] <... futex resumed>) = 1 [pid 6299] <... futex resumed>) = 0 [pid 4998] umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6287, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 6313] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6304] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6299] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6313] <... futex resumed>) = 1 [pid 6304] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6300] <... futex resumed>) = 0 [pid 6299] <... futex resumed>) = 0 [pid 4998] openat(AT_FDCWD, "./41/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6313] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6308] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6304] open("./bus", O_RDWR [pid 6303] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6300] exit_group(0 [pid 6299] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] <... openat resumed>) = 4 [pid 6310] <... ioctl resumed>) = 0 [pid 6292] <... sendfile resumed>) = 63 [pid 6304] <... open resumed>) = 6 [pid 6303] <... futex resumed>) = ? [pid 6300] <... exit_group resumed>) = ? [pid 6313] <... futex resumed>) = ? [pid 4998] fstat(4, [pid 6310] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6303] +++ exited with 0 +++ [pid 6292] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6288] exit_group(0 [pid 6310] <... futex resumed>) = 0 [pid 6292] <... futex resumed>) = 0 [pid 6310] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6292] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6304] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6304] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, [pid 6313] +++ exited with 0 +++ [pid 6300] +++ exited with 0 +++ [pid 4998] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 6310] <... futex resumed>) = ? [pid 6299] <... futex resumed>) = 0 [pid 6292] <... futex resumed>) = ? [pid 6288] <... exit_group resumed>) = ? [pid 4998] getdents64(4, [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6300, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 6310] +++ exited with 0 +++ [pid 6299] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6292] +++ exited with 0 +++ [pid 4998] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./41/file0") = 0 [pid 4998] getdents64(3, [pid 6304] <... futex resumed>) = 0 [pid 6299] <... futex resumed>) = 1 [pid 6288] +++ exited with 0 +++ [pid 4998] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 6304] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6299] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] close(3 [pid 4996] umount2("./43", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... close resumed>) = 0 [pid 4998] rmdir("./41") = 0 [pid 4998] mkdir("./42", 0777 [pid 6304] <... mmap resumed>) = 0x20000000 [pid 4998] <... mkdir resumed>) = 0 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6288, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 6304] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4996] openat(AT_FDCWD, "./43", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4994] restart_syscall(<... resuming interrupted clone ...> [pid 6304] <... futex resumed>) = 1 [pid 6299] <... futex resumed>) = 0 [pid 4998] <... openat resumed>) = 3 [pid 6299] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 4996] <... openat resumed>) = 3 [pid 4997] umount2("./43", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6304] sendfile(4, 5, NULL, 2147483713 [pid 4994] <... restart_syscall resumed>) = 0 [pid 6299] <... futex resumed>) = 0 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4996] fstat(3, [pid 6299] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] close(3) = 0 [pid 4997] openat(AT_FDCWD, "./43", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4996] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556fb95d0) = 6314 [pid 4994] umount2("./43", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] openat(AT_FDCWD, "./43", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4994] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] getdents64(3, 0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4994] umount2("./43/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] lstat("./43/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4994] unlink("./43/binderfs") = 0 [pid 4994] umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... openat resumed>) = 3 [ 135.759713][ T6292] EXT4-fs (loop0): dirty_blocks=16 [ 135.767809][ T6292] EXT4-fs (loop0): Block reservation details [ 135.773856][ T6292] EXT4-fs (loop0): i_reserved_data_blocks=1 [pid 4996] getdents64(3, ./strace-static-x86_64: Process 6314 attached [pid 6314] set_robust_list(0x555556fb95e0, 24) = 0 [pid 6314] chdir("./42") = 0 [pid 6314] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6314] setpgid(0, 0) = 0 [pid 6314] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6314] write(3, "1000", 4 [pid 4997] fstat(3, [pid 4996] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] umount2("./43/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6314] <... write resumed>) = 4 [pid 4997] getdents64(3, [pid 6314] close(3 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6314] <... close resumed>) = 0 [pid 4997] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4996] lstat("./43/binderfs", [pid 6314] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4997] umount2("./43/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6314] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4996] unlink("./43/binderfs" [pid 6314] <... futex resumed>) = 0 [pid 6314] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c2b7f0000 [pid 6314] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6314] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6317], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6317 [pid 6314] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6314] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6308] <... mount resumed>) = 0 [pid 6299] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4997] lstat("./43/binderfs", [pid 4996] <... unlink resumed>) = 0 [pid 6308] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6299] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4996] umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6308] <... openat resumed>) = 3 [pid 6299] <... futex resumed>) = 0 [pid 4997] unlink("./43/binderfs" [pid 6299] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4997] <... unlink resumed>) = 0 [pid 6299] <... mmap resumed>) = 0x7f5c234cf000 [pid 6308] chdir("./file0" [pid 6299] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 4997] umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6308] <... chdir resumed>) = 0 [pid 6299] <... mprotect resumed>) = 0 [pid 6308] ioctl(4, LOOP_CLR_FD [pid 6299] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6308] <... ioctl resumed>) = 0 [pid 6308] close(4) = 0 [pid 6299] <... clone resumed>, parent_tid=[6318], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6318 [pid 6308] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6299] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6308] <... futex resumed>) = 1 [pid 6305] <... futex resumed>) = 0 [pid 6299] <... futex resumed>) = 0 [pid 6308] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6305] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6299] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6308] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6305] <... futex resumed>) = 0 [pid 6308] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6305] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6308] <... open resumed>) = 4 [pid 6308] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6305] <... futex resumed>) = 0 [ 135.816671][ T5076] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 135.837876][ T6304] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 135.846175][ T5076] EXT4-fs (loop0): This should not happen!! Data will be lost [ 135.846175][ T5076] ./strace-static-x86_64: Process 6318 attached ./strace-static-x86_64: Process 6317 attached [pid 6308] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6305] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6318] set_robust_list(0x7f5c234ef9e0, 24 [pid 6305] <... futex resumed>) = 0 [ 135.873847][ T11] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 135.874594][ T6304] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 135.896894][ T11] EXT4-fs (loop2): This should not happen!! Data will be lost [ 135.896894][ T11] [ 135.899580][ T6304] EXT4-fs (loop5): This should not happen!! Data will be lost [ 135.899580][ T6304] [pid 6318] <... set_robust_list resumed>) = 0 [pid 6305] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6299] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6318] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6308] <... write resumed>) = 9 [pid 6308] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6317] set_robust_list(0x7f5c2b8109e0, 24 [pid 6308] <... futex resumed>) = 1 [pid 6305] <... futex resumed>) = 0 [pid 6317] <... set_robust_list resumed>) = 0 [pid 6308] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6305] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6317] memfd_create("syzkaller", 0 [pid 6308] <... openat resumed>) = 5 [pid 6305] <... futex resumed>) = 0 [pid 6305] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6308] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6305] <... futex resumed>) = 0 [pid 6308] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6305] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6308] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6305] <... futex resumed>) = 0 [pid 6317] <... memfd_create resumed>) = 3 [pid 6308] open("./bus", O_RDWR [pid 6305] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6317] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6308] <... open resumed>) = 6 [pid 6317] <... mmap resumed>) = 0x7f5c233f0000 [pid 6308] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 135.910174][ T5076] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 135.918523][ T6304] EXT4-fs (loop5): Total free blocks count 0 [ 135.936868][ T6304] EXT4-fs (loop5): Free/Dirty block details [ 135.942874][ T6304] EXT4-fs (loop5): free_blocks=2415919104 [ 135.948710][ T6304] EXT4-fs (loop5): dirty_blocks=16 [ 135.955058][ T6304] EXT4-fs (loop5): Block reservation details [ 135.961650][ T6304] EXT4-fs (loop5): i_reserved_data_blocks=1 [pid 6305] <... futex resumed>) = 0 [pid 6318] <... ioctl resumed>) = 0 [pid 6308] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6305] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6304] <... sendfile resumed>) = 63 [pid 6318] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6308] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6305] <... futex resumed>) = 0 [pid 6304] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6318] <... futex resumed>) = 0 [pid 6308] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6305] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6304] <... futex resumed>) = 0 [pid 6318] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6308] <... mmap resumed>) = 0x20000000 [pid 6304] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6299] exit_group(0 [pid 6318] <... futex resumed>) = ? [pid 6308] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6299] <... exit_group resumed>) = ? [pid 6318] +++ exited with 0 +++ [pid 6308] <... futex resumed>) = 1 [pid 6305] <... futex resumed>) = 0 [pid 6308] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6305] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6308] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6305] <... futex resumed>) = 0 [pid 6308] sendfile(4, 5, NULL, 2147483713 [pid 6305] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6304] <... futex resumed>) = ? [pid 4994] <... umount2 resumed>) = 0 [pid 6317] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4996] <... umount2 resumed>) = 0 [pid 4994] umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] lstat("./43/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] openat(AT_FDCWD, "./43/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6304] +++ exited with 0 +++ [pid 6299] +++ exited with 0 +++ [pid 4994] fstat(4, [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6299, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 4999] restart_syscall(<... resuming interrupted clone ...> [pid 4997] <... umount2 resumed>) = 0 [pid 4996] umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... restart_syscall resumed>) = 0 [pid 4997] umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] getdents64(4, [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] umount2("./42", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] lstat("./43/file0", [pid 4994] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./42", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] getdents64(4, [pid 4999] <... openat resumed>) = 3 [pid 4997] umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4999] fstat(3, [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] close(4 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] openat(AT_FDCWD, "./43/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4994] <... close resumed>) = 0 [pid 4999] getdents64(3, [pid 4997] <... openat resumed>) = 4 [pid 4994] rmdir("./43/file0" [pid 4999] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4997] fstat(4, [pid 4994] <... rmdir resumed>) = 0 [pid 4999] umount2("./42/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] getdents64(3, [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] getdents64(4, [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4999] lstat("./42/binderfs", [pid 4997] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4994] close(3 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] getdents64(4, [pid 4996] lstat("./43/file0", [pid 4994] <... close resumed>) = 0 [pid 4999] unlink("./42/binderfs" [pid 4997] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4996] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] rmdir("./43" [pid 4999] <... unlink resumed>) = 0 [pid 4997] close(4 [pid 4996] umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] <... rmdir resumed>) = 0 [pid 4999] umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... close resumed>) = 0 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] mkdir("./44", 0777 [pid 4997] rmdir("./43/file0" [pid 4996] openat(AT_FDCWD, "./43/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4994] <... mkdir resumed>) = 0 [pid 4997] <... rmdir resumed>) = 0 [pid 4996] <... openat resumed>) = 4 [pid 4994] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 4997] getdents64(3, [pid 4996] fstat(4, [pid 4994] <... openat resumed>) = 3 [pid 4997] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4996] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] ioctl(3, LOOP_CLR_FD [pid 4997] close(3 [pid 4996] getdents64(4, [pid 4994] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4997] <... close resumed>) = 0 [pid 4996] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4994] close(3 [pid 4997] rmdir("./43" [pid 4996] getdents64(4, [pid 4994] <... close resumed>) = 0 [pid 4997] <... rmdir resumed>) = 0 [ 135.980424][ T5076] EXT4-fs (loop3): This should not happen!! Data will be lost [ 135.980424][ T5076] [ 136.008075][ T6308] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 4996] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4994] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4997] mkdir("./44", 0777 [pid 4996] close(4 [pid 4997] <... mkdir resumed>) = 0 [pid 4996] <... close resumed>) = 0 [pid 4994] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6319 [pid 4997] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4996] rmdir("./43/file0" [pid 4997] <... openat resumed>) = 3 [pid 4997] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4996] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 6319 attached [pid 6317] <... write resumed>) = 1048576 [pid 6305] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4997] close(3 [pid 4996] getdents64(3, [pid 6319] set_robust_list(0x555556fb95e0, 24 [pid 6317] munmap(0x7f5c233f0000, 1048576 [pid 4996] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 6319] <... set_robust_list resumed>) = 0 [pid 6317] <... munmap resumed>) = 0 [pid 4996] close(3 [pid 6319] chdir("./44" [pid 6317] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4996] <... close resumed>) = 0 [pid 6319] <... chdir resumed>) = 0 [pid 6317] <... openat resumed>) = 4 [pid 4996] rmdir("./43" [pid 6319] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6317] ioctl(4, LOOP_SET_FD, 3 [pid 6305] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] <... close resumed>) = 0 [pid 4996] <... rmdir resumed>) = 0 [ 136.067399][ T6308] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 136.080730][ T5076] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 6319] <... prctl resumed>) = 0 [pid 6305] <... futex resumed>) = 0 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4996] mkdir("./44", 0777 [pid 6319] setpgid(0, 0 [pid 6305] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4996] <... mkdir resumed>) = 0 [pid 6319] <... setpgid resumed>) = 0 [pid 4996] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6319] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4996] <... openat resumed>) = 3 [pid 6319] <... openat resumed>) = 3 [pid 4996] ioctl(3, LOOP_CLR_FD [pid 6319] write(3, "1000", 4 [pid 4996] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6319] <... write resumed>) = 4 [pid 4996] close(3 [pid 6319] close(3 [pid 4996] <... close resumed>) = 0 [pid 6319] <... close resumed>) = 0 [pid 4996] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6319] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4996] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6321 [pid 6319] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6305] <... mmap resumed>) = 0x7f5c234cf000 [pid 6319] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c2b7f0000 [pid 6305] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 4997] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6320 [pid 6319] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6305] <... mprotect resumed>) = 0 ./strace-static-x86_64: Process 6320 attached [pid 6319] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6305] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6319] <... clone resumed>, parent_tid=[6322], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6322 ./strace-static-x86_64: Process 6321 attached [pid 6320] set_robust_list(0x555556fb95e0, 24 [pid 6319] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6305] <... clone resumed>, parent_tid=[6323], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6323 [pid 6321] set_robust_list(0x555556fb95e0, 24 [pid 6320] <... set_robust_list resumed>) = 0 [pid 6319] <... futex resumed>) = 0 [pid 6317] <... ioctl resumed>) = 0 [pid 6305] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6323 attached [pid 6321] <... set_robust_list resumed>) = 0 [pid 6320] chdir("./44" [pid 6319] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6317] close(3 [pid 6305] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6322 attached [pid 6323] set_robust_list(0x7f5c234ef9e0, 24 [pid 6321] chdir("./44" [pid 6320] <... chdir resumed>) = 0 [pid 6317] <... close resumed>) = 0 [pid 6322] set_robust_list(0x7f5c2b8109e0, 24 [pid 6321] <... chdir resumed>) = 0 [pid 6317] mkdir("./file0", 0777 [pid 6322] <... set_robust_list resumed>) = 0 [pid 6321] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6317] <... mkdir resumed>) = 0 [pid 6322] memfd_create("syzkaller", 0 [pid 6321] <... prctl resumed>) = 0 [pid 6322] <... memfd_create resumed>) = 3 [pid 6321] setpgid(0, 0 [pid 6317] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6322] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6321] <... setpgid resumed>) = 0 [pid 6305] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6323] <... set_robust_list resumed>) = 0 [pid 6322] <... mmap resumed>) = 0x7f5c233f0000 [ 136.114261][ T6317] loop4: detected capacity change from 0 to 2048 [ 136.123583][ T5076] EXT4-fs (loop5): This should not happen!! Data will be lost [ 136.123583][ T5076] [ 136.145367][ T6308] EXT4-fs (loop1): This should not happen!! Data will be lost [ 136.145367][ T6308] [pid 6321] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6320] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6323] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6321] <... openat resumed>) = 3 [pid 6321] write(3, "1000", 4) = 4 [pid 6321] close(3) = 0 [pid 6321] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6320] <... prctl resumed>) = 0 [pid 6321] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6320] setpgid(0, 0 [pid 6321] <... futex resumed>) = 0 [pid 6321] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c2b7f0000 [pid 6321] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6320] <... setpgid resumed>) = 0 [pid 6321] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6322] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6321] <... clone resumed>, parent_tid=[6324], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6324 [pid 6321] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6320] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6321] <... futex resumed>) = 0 [pid 6321] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6324 attached [pid 6324] set_robust_list(0x7f5c2b8109e0, 24) = 0 [pid 6324] memfd_create("syzkaller", 0 [pid 6320] <... openat resumed>) = 3 [pid 6320] write(3, "1000", 4 [pid 6324] <... memfd_create resumed>) = 3 [pid 6324] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5c233f0000 [pid 6320] <... write resumed>) = 4 [pid 6305] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4999] <... umount2 resumed>) = 0 [pid 6320] close(3) = 0 [ 136.163648][ T6308] EXT4-fs (loop1): Total free blocks count 0 [ 136.171150][ T6308] EXT4-fs (loop1): Free/Dirty block details [ 136.179690][ T6308] EXT4-fs (loop1): free_blocks=2415919104 [ 136.191905][ T6308] EXT4-fs (loop1): dirty_blocks=16 [ 136.207621][ T6308] EXT4-fs (loop1): Block reservation details [pid 4999] umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6324] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6323] <... ioctl resumed>) = 0 [pid 6320] symlink("/dev/binderfs", "./binderfs" [pid 6308] <... sendfile resumed>) = 63 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6323] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6320] <... symlink resumed>) = 0 [pid 6308] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] lstat("./42/file0", [pid 6323] <... futex resumed>) = 0 [pid 6320] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6317] <... mount resumed>) = 0 [pid 6308] <... futex resumed>) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6323] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6320] <... futex resumed>) = 0 [pid 6317] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6308] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4999] umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6324] <... write resumed>) = 1048576 [pid 6322] <... write resumed>) = 1048576 [pid 6320] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6317] <... openat resumed>) = 3 [pid 6305] exit_group(0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6323] <... futex resumed>) = ? [pid 6320] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6317] chdir("./file0" [pid 6308] <... futex resumed>) = ? [pid 6305] <... exit_group resumed>) = ? [pid 4999] openat(AT_FDCWD, "./42/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6323] +++ exited with 0 +++ [pid 6320] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6317] <... chdir resumed>) = 0 [pid 6308] +++ exited with 0 +++ [pid 6322] munmap(0x7f5c233f0000, 1048576 [pid 6305] +++ exited with 0 +++ [pid 4999] <... openat resumed>) = 4 [pid 6322] <... munmap resumed>) = 0 [pid 6320] <... mprotect resumed>) = 0 [pid 6317] ioctl(4, LOOP_CLR_FD [pid 4999] fstat(4, [pid 6320] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6317] <... ioctl resumed>) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6305, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 6317] close(4 [pid 4999] getdents64(4, [pid 4995] restart_syscall(<... resuming interrupted clone ...> [pid 6322] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6320] <... clone resumed>, parent_tid=[6327], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6327 [pid 6317] <... close resumed>) = 0 [pid 6322] <... openat resumed>) = 4 [ 136.216341][ T6308] EXT4-fs (loop1): i_reserved_data_blocks=1 [pid 6322] ioctl(4, LOOP_SET_FD, 3 [pid 4999] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4995] <... restart_syscall resumed>) = 0 [pid 6320] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6317] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] getdents64(4, ./strace-static-x86_64: Process 6327 attached [pid 6320] <... futex resumed>) = 0 [pid 6317] <... futex resumed>) = 1 [pid 6314] <... futex resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 6327] set_robust_list(0x7f5c2b8109e0, 24 [pid 6320] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6317] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6314] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] close(4 [pid 4995] umount2("./42", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6327] <... set_robust_list resumed>) = 0 [pid 6324] munmap(0x7f5c233f0000, 1048576 [pid 6322] <... ioctl resumed>) = 0 [pid 6317] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6314] <... futex resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6327] memfd_create("syzkaller", 0 [pid 6324] <... munmap resumed>) = 0 [pid 6322] close(3 [pid 6317] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6314] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] rmdir("./42/file0" [pid 4995] openat(AT_FDCWD, "./42", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6327] <... memfd_create resumed>) = 3 [pid 6324] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6327] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4999] <... rmdir resumed>) = 0 [pid 4995] <... openat resumed>) = 3 [pid 6327] <... mmap resumed>) = 0x7f5c233f0000 [pid 6324] <... openat resumed>) = 4 [pid 6322] <... close resumed>) = 0 [pid 6317] <... open resumed>) = 4 [pid 4999] getdents64(3, [pid 4995] fstat(3, [pid 6324] ioctl(4, LOOP_SET_FD, 3 [pid 6322] mkdir("./file0", 0777 [pid 6317] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 6317] <... futex resumed>) = 1 [pid 6314] <... futex resumed>) = 0 [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6314] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6314] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6327] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6324] <... ioctl resumed>) = 0 [pid 6317] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 4999] close(3 [pid 4995] getdents64(3, [pid 6322] <... mkdir resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 6322] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6317] <... write resumed>) = 9 [pid 4999] rmdir("./42" [pid 4995] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 6317] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... rmdir resumed>) = 0 [pid 6317] <... futex resumed>) = 1 [pid 6314] <... futex resumed>) = 0 [pid 4995] umount2("./42/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6324] close(3 [pid 6317] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6314] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] mkdir("./43", 0777 [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6324] <... close resumed>) = 0 [pid 6317] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6314] <... futex resumed>) = 0 [pid 6324] mkdir("./file0", 0777 [pid 6317] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6314] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] <... mkdir resumed>) = 0 [pid 4995] lstat("./42/binderfs", [pid 6324] <... mkdir resumed>) = 0 [pid 6317] <... openat resumed>) = 5 [pid 4999] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6324] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6317] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6317] <... futex resumed>) = 1 [pid 6314] <... futex resumed>) = 0 [pid 4999] <... openat resumed>) = 3 [pid 4995] unlink("./42/binderfs" [pid 6322] <... mount resumed>) = 0 [pid 6317] open("./bus", O_RDWR [pid 6314] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 4995] <... unlink resumed>) = 0 [pid 6322] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6317] <... open resumed>) = 6 [pid 6314] <... futex resumed>) = 0 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4995] umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6322] <... openat resumed>) = 3 [ 136.259458][ T6322] loop0: detected capacity change from 0 to 2048 [ 136.287146][ T6324] loop2: detected capacity change from 0 to 2048 [pid 6317] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6314] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] close(3 [pid 6327] <... write resumed>) = 1048576 [pid 6322] chdir("./file0" [pid 6317] <... futex resumed>) = 0 [pid 6314] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4999] <... close resumed>) = 0 [pid 6327] munmap(0x7f5c233f0000, 1048576 [pid 6322] <... chdir resumed>) = 0 [pid 6317] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6314] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6327] <... munmap resumed>) = 0 [pid 6322] ioctl(4, LOOP_CLR_FD [pid 6317] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6314] <... futex resumed>) = 0 [pid 6327] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6317] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 4999] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6332 [pid 6327] <... openat resumed>) = 4 [pid 6324] <... mount resumed>) = 0 [pid 6322] <... ioctl resumed>) = 0 [pid 6317] <... mmap resumed>) = 0x20000000 [pid 6314] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6327] ioctl(4, LOOP_SET_FD, 3 [pid 6322] close(4 [pid 6317] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6314] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6324] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6322] <... close resumed>) = 0 [pid 6317] <... futex resumed>) = 0 [pid 6317] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6327] <... ioctl resumed>) = 0 [pid 6327] close(3) = 0 [pid 6327] mkdir("./file0", 0777) = 0 [pid 6327] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue"./strace-static-x86_64: Process 6332 attached [pid 6324] <... openat resumed>) = 3 [pid 6322] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6314] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6332] set_robust_list(0x555556fb95e0, 24 [pid 6324] chdir("./file0" [pid 6332] <... set_robust_list resumed>) = 0 [pid 6324] <... chdir resumed>) = 0 [pid 6322] <... futex resumed>) = 1 [pid 6319] <... futex resumed>) = 0 [pid 6317] <... futex resumed>) = 0 [pid 6314] <... futex resumed>) = 1 [ 136.322919][ T5608] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 136.343917][ T6327] loop3: detected capacity change from 0 to 2048 [ 136.351686][ T5608] EXT4-fs (loop1): This should not happen!! Data will be lost [ 136.351686][ T5608] [pid 6317] sendfile(4, 5, NULL, 2147483713 [pid 6332] chdir("./43" [pid 6324] ioctl(4, LOOP_CLR_FD [pid 6322] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6319] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6314] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6332] <... chdir resumed>) = 0 [pid 6324] <... ioctl resumed>) = 0 [pid 6322] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6319] <... futex resumed>) = 0 [pid 6332] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6324] close(4 [pid 6322] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6319] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6332] <... prctl resumed>) = 0 [pid 6324] <... close resumed>) = 0 [pid 6332] setpgid(0, 0 [pid 6324] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6332] <... setpgid resumed>) = 0 [pid 6324] <... futex resumed>) = 1 [pid 6321] <... futex resumed>) = 0 [pid 6332] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6324] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6322] <... open resumed>) = 4 [pid 6321] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6332] <... openat resumed>) = 3 [pid 6324] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6322] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6321] <... futex resumed>) = 0 [pid 6332] write(3, "1000", 4 [pid 6324] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6322] <... futex resumed>) = 1 [pid 6321] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6319] <... futex resumed>) = 0 [pid 6332] <... write resumed>) = 4 [pid 6322] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6319] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6332] close(3 [pid 6324] <... open resumed>) = 4 [pid 6322] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6319] <... futex resumed>) = 0 [pid 6332] <... close resumed>) = 0 [pid 6324] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6322] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6319] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6332] symlink("/dev/binderfs", "./binderfs" [pid 6324] <... futex resumed>) = 1 [pid 6322] <... write resumed>) = 9 [pid 6321] <... futex resumed>) = 0 [pid 6332] <... symlink resumed>) = 0 [pid 6324] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6322] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6321] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6332] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6324] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6322] <... futex resumed>) = 1 [pid 6321] <... futex resumed>) = 0 [pid 6319] <... futex resumed>) = 0 [pid 6332] <... futex resumed>) = 0 [pid 6324] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6322] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6321] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6319] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6332] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6324] <... write resumed>) = 9 [pid 6322] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6319] <... futex resumed>) = 0 [pid 6332] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6324] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6322] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6319] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6332] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6324] <... futex resumed>) = 1 [pid 6322] <... openat resumed>) = 5 [pid 6321] <... futex resumed>) = 0 [pid 6332] <... mprotect resumed>) = 0 [pid 6324] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6322] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6321] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6332] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6324] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6322] <... futex resumed>) = 1 [pid 6321] <... futex resumed>) = 0 [pid 6319] <... futex resumed>) = 0 [pid 6324] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6322] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6321] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6319] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6332] <... clone resumed>, parent_tid=[6334], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6334 [pid 6324] <... openat resumed>) = 5 [pid 6322] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6319] <... futex resumed>) = 0 [pid 6332] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6324] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6322] open("./bus", O_RDWR [pid 6319] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6332] <... futex resumed>) = 0 [pid 6324] <... futex resumed>) = 1 [pid 6322] <... open resumed>) = 6 [pid 6321] <... futex resumed>) = 0 [ 136.371543][ T6317] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters ./strace-static-x86_64: Process 6334 attached [pid 6332] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6324] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6322] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6321] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6334] set_robust_list(0x7f5c2b8109e0, 24 [pid 6324] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6322] <... futex resumed>) = 1 [pid 6321] <... futex resumed>) = 0 [pid 6319] <... futex resumed>) = 0 [pid 6334] <... set_robust_list resumed>) = 0 [pid 6324] open("./bus", O_RDWR [pid 6322] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6321] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6319] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] <... umount2 resumed>) = 0 [pid 6334] memfd_create("syzkaller", 0 [pid 6324] <... open resumed>) = 6 [pid 6322] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6319] <... futex resumed>) = 0 [pid 6334] <... memfd_create resumed>) = 3 [pid 6322] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6319] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6334] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6327] <... mount resumed>) = 0 [pid 6324] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6322] <... mmap resumed>) = 0x20000000 [pid 6314] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4995] umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6334] <... mmap resumed>) = 0x7f5c233f0000 [pid 6327] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6324] <... futex resumed>) = 1 [pid 6322] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6321] <... futex resumed>) = 0 [pid 6314] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6334] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6327] <... openat resumed>) = 3 [pid 6324] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6322] <... futex resumed>) = 1 [pid 6319] <... futex resumed>) = 0 [pid 6314] <... futex resumed>) = 0 [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6322] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6319] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6314] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6322] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6319] <... futex resumed>) = 0 [pid 6314] <... mmap resumed>) = 0x7f5c234cf000 [pid 6322] sendfile(4, 5, NULL, 2147483713 [pid 6319] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6314] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6314] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6336], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6336 [pid 6314] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6314] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6327] chdir("./file0" [pid 6324] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6321] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] lstat("./42/file0", [pid 6327] <... chdir resumed>) = 0 [pid 6324] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6321] <... futex resumed>) = 0 [pid 4995] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6327] ioctl(4, LOOP_CLR_FD [pid 6324] <... mmap resumed>) = 0x20000000 [pid 6321] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6327] <... ioctl resumed>) = 0 [pid 6324] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6327] close(4 [pid 4995] umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6336 attached [pid 6327] <... close resumed>) = 0 [pid 6324] <... futex resumed>) = 1 [pid 6321] <... futex resumed>) = 0 [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6336] set_robust_list(0x7f5c234ef9e0, 24 [pid 6334] <... write resumed>) = 1048576 [pid 6327] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6324] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6321] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] openat(AT_FDCWD, "./42/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6336] <... set_robust_list resumed>) = 0 [pid 6327] <... futex resumed>) = 1 [pid 6324] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6321] <... futex resumed>) = 0 [pid 6320] <... futex resumed>) = 0 [pid 6336] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6327] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6324] sendfile(4, 5, NULL, 2147483713 [pid 6321] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6320] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] <... openat resumed>) = 4 [pid 6327] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6327] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6320] <... futex resumed>) = 0 [pid 4995] fstat(4, [pid 6320] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6319] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 136.464183][ T6317] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 136.484312][ T6322] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 6327] <... open resumed>) = 4 [pid 6319] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6314] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6334] munmap(0x7f5c233f0000, 1048576 [pid 6319] <... futex resumed>) = 0 [pid 6334] <... munmap resumed>) = 0 [pid 6319] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c234cf000 [pid 6334] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6319] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 6334] <... openat resumed>) = 4 [pid 6319] <... mprotect resumed>) = 0 [pid 6334] ioctl(4, LOOP_SET_FD, 3 [pid 6319] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6327] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] getdents64(4, [pid 6319] <... clone resumed>, parent_tid=[6337], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6337 [pid 6319] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6319] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6337 attached [pid 6337] set_robust_list(0x7f5c234ef9e0, 24) = 0 [pid 6337] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6334] <... ioctl resumed>) = 0 [pid 6334] close(3 [pid 6327] <... futex resumed>) = 1 [pid 4995] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 6327] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6320] <... futex resumed>) = 0 [ 136.521778][ T6322] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 136.525028][ T6324] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 136.544007][ T6334] loop5: detected capacity change from 0 to 2048 [ 136.555599][ T6317] EXT4-fs (loop4): This should not happen!! Data will be lost [ 136.555599][ T6317] [pid 4995] getdents64(4, [pid 6334] <... close resumed>) = 0 [pid 6321] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6320] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6334] mkdir("./file0", 0777) = 0 [pid 6321] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6320] <... futex resumed>) = 1 [pid 4995] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 6334] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6327] <... futex resumed>) = 0 [pid 6327] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6321] <... futex resumed>) = 0 [pid 6320] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4995] close(4 [pid 6321] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4995] <... close resumed>) = 0 [pid 6327] <... write resumed>) = 9 [pid 6321] <... mmap resumed>) = 0x7f5c234cf000 [pid 6319] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4995] rmdir("./42/file0" [pid 6327] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6321] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 4995] <... rmdir resumed>) = 0 [ 136.570428][ T6317] EXT4-fs (loop4): Total free blocks count 0 [ 136.578034][ T6324] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 136.590895][ T6317] EXT4-fs (loop4): Free/Dirty block details [ 136.598897][ T6317] EXT4-fs (loop4): free_blocks=2415919104 [ 136.599891][ T6322] EXT4-fs (loop0): This should not happen!! Data will be lost [ 136.599891][ T6322] [ 136.605308][ T6317] EXT4-fs (loop4): dirty_blocks=16 [pid 6327] <... futex resumed>) = 1 [pid 6321] <... mprotect resumed>) = 0 [pid 6334] <... mount resumed>) = 0 [pid 6320] <... futex resumed>) = 0 [pid 4995] getdents64(3, [pid 6334] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6327] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6321] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6334] <... openat resumed>) = 3 [pid 6334] chdir("./file0") = 0 [pid 6334] ioctl(4, LOOP_CLR_FD) = 0 [pid 6334] close(4 [pid 6320] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 6340 attached [pid 6334] <... close resumed>) = 0 [pid 6327] <... futex resumed>) = 0 [pid 6321] <... clone resumed>, parent_tid=[6340], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6340 [pid 6320] <... futex resumed>) = 1 [pid 4995] close(3 [pid 6334] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6327] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6321] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6320] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4995] <... close resumed>) = 0 [pid 6340] set_robust_list(0x7f5c234ef9e0, 24 [pid 6334] <... futex resumed>) = 1 [pid 6332] <... futex resumed>) = 0 [pid 6327] <... openat resumed>) = 5 [pid 6321] <... futex resumed>) = 0 [ 136.620969][ T6324] EXT4-fs (loop2): This should not happen!! Data will be lost [ 136.620969][ T6324] [ 136.631687][ T6317] EXT4-fs (loop4): Block reservation details [ 136.638330][ T6324] EXT4-fs (loop2): Total free blocks count 0 [ 136.645713][ T6324] EXT4-fs (loop2): Free/Dirty block details [ 136.651826][ T6324] EXT4-fs (loop2): free_blocks=2415919104 [ 136.658114][ T6324] EXT4-fs (loop2): dirty_blocks=16 [ 136.663733][ T6324] EXT4-fs (loop2): Block reservation details [pid 4995] rmdir("./42" [pid 6334] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6332] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6327] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6321] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4995] <... rmdir resumed>) = 0 [pid 6340] <... set_robust_list resumed>) = 0 [pid 6334] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6332] <... futex resumed>) = 0 [pid 6327] <... futex resumed>) = 1 [pid 6324] <... sendfile resumed>) = 63 [pid 6320] <... futex resumed>) = 0 [pid 4995] mkdir("./43", 0777 [pid 6340] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6334] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6332] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6327] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6320] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] <... mkdir resumed>) = 0 [pid 6340] <... ioctl resumed>) = 0 [pid 6334] <... open resumed>) = 4 [pid 6327] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6324] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6320] <... futex resumed>) = 0 [pid 4995] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6334] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6327] open("./bus", O_RDWR [pid 6320] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4995] <... openat resumed>) = 3 [pid 6340] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6334] <... futex resumed>) = 1 [pid 6332] <... futex resumed>) = 0 [pid 6327] <... open resumed>) = 6 [pid 6324] <... futex resumed>) = 0 [pid 4995] ioctl(3, LOOP_CLR_FD [pid 6334] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6332] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6327] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6340] <... futex resumed>) = 1 [pid 6324] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6321] <... futex resumed>) = 0 [pid 4995] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6340] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6337] <... ioctl resumed>) = 0 [pid 6336] <... ioctl resumed>) = 0 [pid 6334] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6332] <... futex resumed>) = 0 [pid 6327] <... futex resumed>) = 1 [pid 6322] <... sendfile resumed>) = 63 [pid 6321] exit_group(0 [pid 6320] <... futex resumed>) = 0 [pid 6317] <... sendfile resumed>) = 63 [pid 4995] close(3 [pid 6340] <... futex resumed>) = ? [pid 6337] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6336] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6334] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6332] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6327] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6324] <... futex resumed>) = ? [pid 6322] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6321] <... exit_group resumed>) = ? [pid 6320] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6317] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] <... close resumed>) = 0 [pid 6340] +++ exited with 0 +++ [pid 6337] <... futex resumed>) = 0 [pid 6336] <... futex resumed>) = 0 [pid 6327] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6324] +++ exited with 0 +++ [pid 6322] <... futex resumed>) = 0 [pid 6317] <... futex resumed>) = 0 [pid 6336] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6322] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6317] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6337] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6334] <... write resumed>) = 9 [pid 6327] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6321] +++ exited with 0 +++ [pid 6320] <... futex resumed>) = 0 [pid 6319] exit_group(0 [pid 6314] exit_group(0 [pid 4995] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6337] <... futex resumed>) = ? [pid 6336] <... futex resumed>) = ? [pid 6334] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6327] <... mmap resumed>) = 0x20000000 [pid 6322] <... futex resumed>) = ? [pid 6320] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6319] <... exit_group resumed>) = ? [pid 6317] <... futex resumed>) = ? [pid 6314] <... exit_group resumed>) = ? [pid 4996] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6321, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 6337] +++ exited with 0 +++ [pid 6336] +++ exited with 0 +++ [pid 6334] <... futex resumed>) = 1 [pid 6332] <... futex resumed>) = 0 [pid 6327] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6320] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6317] +++ exited with 0 +++ [pid 6314] +++ exited with 0 +++ [pid 4995] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6341 [pid 6334] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6332] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6327] <... futex resumed>) = 0 [pid 6320] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6334] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6332] <... futex resumed>) = 0 [ 136.670362][ T6324] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 136.677700][ T6322] EXT4-fs (loop0): Total free blocks count 0 [ 136.678367][ T6317] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 136.683908][ T6322] EXT4-fs (loop0): Free/Dirty block details [ 136.696356][ T6322] EXT4-fs (loop0): free_blocks=2415919104 [ 136.703261][ T6322] EXT4-fs (loop0): dirty_blocks=16 [ 136.708542][ T6322] EXT4-fs (loop0): Block reservation details [ 136.714576][ T6322] EXT4-fs (loop0): i_reserved_data_blocks=1 [pid 6327] sendfile(4, 5, NULL, 2147483713 [pid 6322] +++ exited with 0 +++ [pid 6320] <... futex resumed>) = 0 [pid 6319] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6314, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=12 /* 0.12 s */} --- ./strace-static-x86_64: Process 6341 attached [pid 6334] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6332] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6320] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] restart_syscall(<... resuming interrupted clone ...> [pid 6341] set_robust_list(0x555556fb95e0, 24 [pid 6334] <... openat resumed>) = 5 [pid 4998] <... restart_syscall resumed>) = 0 [pid 6341] <... set_robust_list resumed>) = 0 [pid 4994] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6319, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 4996] umount2("./44", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6341] chdir("./43" [pid 6334] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] restart_syscall(<... resuming interrupted clone ...> [pid 6341] <... chdir resumed>) = 0 [pid 6341] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6341] setpgid(0, 0) = 0 [pid 6341] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6341] write(3, "1000", 4) = 4 [pid 6341] close(3) = 0 [pid 6341] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6341] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6341] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c2b7f0000 [pid 6341] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6341] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6342], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6342 [pid 6341] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6341] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6342 attached [pid 6342] set_robust_list(0x7f5c2b8109e0, 24) = 0 [pid 6342] memfd_create("syzkaller", 0) = 3 [pid 6342] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5c233f0000 [pid 6342] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4994] <... restart_syscall resumed>) = 0 [pid 4998] umount2("./42", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] openat(AT_FDCWD, "./44", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4996] <... openat resumed>) = 3 [pid 4998] openat(AT_FDCWD, "./42", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4994] umount2("./44", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6334] <... futex resumed>) = 1 [pid 6332] <... futex resumed>) = 0 [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... openat resumed>) = 3 [pid 6332] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6334] open("./bus", O_RDWR [pid 4994] openat(AT_FDCWD, "./44", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6332] <... futex resumed>) = 0 [pid 6334] <... open resumed>) = 6 [pid 6332] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4994] <... openat resumed>) = 3 [pid 4996] fstat(3, [pid 6334] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] fstat(3, [pid 4994] fstat(3, [pid 6334] <... futex resumed>) = 1 [pid 6332] <... futex resumed>) = 0 [pid 4996] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6332] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6332] <... futex resumed>) = 0 [pid 4998] getdents64(3, [pid 4996] getdents64(3, [pid 4994] getdents64(3, [pid 6334] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6332] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4996] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./42/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] umount2("./44/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 6334] <... mmap resumed>) = 0x20000000 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4996] lstat("./44/binderfs", [pid 6334] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] lstat("./42/binderfs", [pid 4994] umount2("./44/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6332] <... futex resumed>) = 0 [pid 4996] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6332] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6334] <... futex resumed>) = 1 [pid 6332] <... futex resumed>) = 0 [ 136.756083][ T6327] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 136.787296][ T6334] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 4998] unlink("./42/binderfs" [pid 4996] unlink("./44/binderfs" [pid 6334] sendfile(4, 5, NULL, 2147483713 [pid 6332] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] <... unlink resumed>) = 0 [pid 4994] lstat("./44/binderfs", [pid 4998] umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] <... unlink resumed>) = 0 [pid 4994] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4996] umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] unlink("./44/binderfs" [pid 6342] <... write resumed>) = 1048576 [pid 4994] <... unlink resumed>) = 0 [pid 6342] munmap(0x7f5c233f0000, 1048576) = 0 [pid 6342] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6342] ioctl(4, LOOP_SET_FD, 3 [pid 4994] umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6342] <... ioctl resumed>) = 0 [pid 6342] close(3) = 0 [pid 6342] mkdir("./file0", 0777) = 0 [pid 6342] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6320] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6320] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6320] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c234cf000 [pid 6320] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6320] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6343], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6343 [pid 6320] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6320] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6332] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 136.792530][ T6342] loop1: detected capacity change from 0 to 2048 [ 136.804007][ T5076] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 136.822655][ T5076] EXT4-fs (loop4): This should not happen!! Data will be lost [ 136.822655][ T5076] [ 136.825331][ T6327] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 ./strace-static-x86_64: Process 6343 attached [pid 6332] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6343] set_robust_list(0x7f5c234ef9e0, 24 [pid 6332] <... futex resumed>) = 0 [pid 6320] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 136.833877][ T6334] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 136.845934][ T74] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 136.858913][ T5076] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 136.873045][ T6327] EXT4-fs (loop3): This should not happen!! Data will be lost [ 136.873045][ T6327] [ 136.882358][ T6334] EXT4-fs (loop5): This should not happen!! Data will be lost [ 136.882358][ T6334] [pid 6343] <... set_robust_list resumed>) = 0 [pid 6332] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6343] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6332] <... mmap resumed>) = 0x7f5c234cf000 [pid 6332] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6332] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6345], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6345 [pid 6332] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6332] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6345 attached [ 136.901633][ T5076] EXT4-fs (loop0): This should not happen!! Data will be lost [ 136.901633][ T5076] [ 136.918026][ T74] EXT4-fs (loop2): This should not happen!! Data will be lost [ 136.918026][ T74] [ 136.919202][ T6334] EXT4-fs (loop5): Total free blocks count 0 [ 136.934265][ T6334] EXT4-fs (loop5): Free/Dirty block details [ 136.940910][ T6334] EXT4-fs (loop5): free_blocks=2415919104 [ 136.947314][ T6334] EXT4-fs (loop5): dirty_blocks=16 [pid 6345] set_robust_list(0x7f5c234ef9e0, 24) = 0 [pid 4994] <... umount2 resumed>) = 0 [pid 6345] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040) = 0 [pid 6334] <... sendfile resumed>) = 63 [pid 4994] umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] lstat("./44/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6345] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6334] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6345] <... futex resumed>) = 1 [pid 6334] <... futex resumed>) = 0 [pid 6332] <... futex resumed>) = 0 [pid 6345] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6334] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6332] exit_group(0) = ? [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6334] <... futex resumed>) = ? [pid 6345] <... futex resumed>) = ? [pid 6334] +++ exited with 0 +++ [pid 4994] openat(AT_FDCWD, "./44/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6345] +++ exited with 0 +++ [pid 6342] <... mount resumed>) = 0 [pid 6332] +++ exited with 0 +++ [pid 4998] <... umount2 resumed>) = 0 [pid 4994] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] getdents64(4, 0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4994] getdents64(4, 0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4994] close(4) = 0 [pid 4994] rmdir("./44/file0" [pid 4998] umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./42/file0", [pid 4994] <... rmdir resumed>) = 0 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] getdents64(3, [pid 4998] umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] close(3 [pid 4998] openat(AT_FDCWD, "./42/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4994] <... close resumed>) = 0 [pid 6342] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 4998] fstat(4, [pid 4994] rmdir("./44" [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] <... rmdir resumed>) = 0 [pid 4998] getdents64(4, [pid 4994] mkdir("./45", 0777 [pid 4998] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, [pid 4994] <... mkdir resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4998] close(4 [pid 4994] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 4998] <... close resumed>) = 0 [pid 4994] <... openat resumed>) = 3 [pid 6342] <... openat resumed>) = 3 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6332, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 6342] chdir("./file0" [pid 4999] restart_syscall(<... resuming interrupted clone ...> [pid 4998] rmdir("./42/file0" [pid 4994] ioctl(3, LOOP_CLR_FD [pid 6342] <... chdir resumed>) = 0 [ 136.952480][ T6334] EXT4-fs (loop5): Block reservation details [ 136.959159][ T6334] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 136.966230][ T6327] EXT4-fs (loop3): Total free blocks count 0 [ 136.977953][ T6327] EXT4-fs (loop3): Free/Dirty block details [ 136.986181][ T6327] EXT4-fs (loop3): free_blocks=2415919104 [ 136.992713][ T6327] EXT4-fs (loop3): dirty_blocks=16 [ 136.999966][ T6327] EXT4-fs (loop3): Block reservation details [pid 4999] <... restart_syscall resumed>) = 0 [pid 6342] ioctl(4, LOOP_CLR_FD [pid 4998] <... rmdir resumed>) = 0 [pid 4994] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] getdents64(3, [pid 6343] <... ioctl resumed>) = 0 [pid 6342] <... ioctl resumed>) = 0 [pid 6327] <... sendfile resumed>) = 63 [pid 4998] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4994] close(3 [pid 6343] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6342] close(4 [pid 6327] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] close(3 [pid 4994] <... close resumed>) = 0 [pid 6343] <... futex resumed>) = 0 [pid 6342] <... close resumed>) = 0 [pid 6327] <... futex resumed>) = 0 [pid 4999] umount2("./43", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... close resumed>) = 0 [pid 6343] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6342] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6327] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6320] exit_group(0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] rmdir("./42" [pid 4994] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6343] <... futex resumed>) = ? [pid 6342] <... futex resumed>) = 1 [pid 6341] <... futex resumed>) = 0 [pid 6327] <... futex resumed>) = ? [pid 6320] <... exit_group resumed>) = ? [pid 4999] openat(AT_FDCWD, "./43", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6343] +++ exited with 0 +++ [pid 6342] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6327] +++ exited with 0 +++ [pid 4999] <... openat resumed>) = 3 [pid 4998] <... rmdir resumed>) = 0 [pid 4999] fstat(3, [pid 6320] +++ exited with 0 +++ [pid 6341] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] mkdir("./43", 0777 [pid 6342] <... futex resumed>) = 0 [pid 6341] <... futex resumed>) = 1 [pid 4999] getdents64(3, [pid 6342] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6341] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6320, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 4998] <... mkdir resumed>) = 0 [pid 4994] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6347 [pid 4999] umount2("./43/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] umount2("./44", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6342] <... open resumed>) = 4 [pid 4999] lstat("./43/binderfs", [pid 4998] <... openat resumed>) = 3 [pid 4997] openat(AT_FDCWD, "./44", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6342] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 4997] <... openat resumed>) = 3 [pid 6342] <... futex resumed>) = 1 [pid 6341] <... futex resumed>) = 0 [pid 4999] unlink("./43/binderfs" [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4997] fstat(3, [pid 4996] <... umount2 resumed>) = 0 [pid 6342] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6341] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... unlink resumed>) = 0 [pid 4998] close(3 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 6347 attached [pid 6342] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6341] <... futex resumed>) = 0 [pid 4999] umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... close resumed>) = 0 [pid 4997] getdents64(3, [pid 4996] umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6347] set_robust_list(0x555556fb95e0, 24 [pid 6342] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6341] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4997] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [ 137.006580][ T6327] EXT4-fs (loop3): i_reserved_data_blocks=1 [pid 4997] umount2("./44/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./44/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] unlink("./44/binderfs") = 0 [pid 4997] umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6347] <... set_robust_list resumed>) = 0 [pid 6342] <... write resumed>) = 9 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6347] chdir("./45" [pid 6342] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6348 [pid 4996] lstat("./44/file0", [pid 6347] <... chdir resumed>) = 0 [pid 6342] <... futex resumed>) = 1 [pid 6341] <... futex resumed>) = 0 [pid 6342] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6341] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6347] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6342] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6347] <... prctl resumed>) = 0 [pid 6341] <... futex resumed>) = 0 [pid 4996] umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6347] setpgid(0, 0 [pid 6342] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6341] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6347] <... setpgid resumed>) = 0 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6342] <... openat resumed>) = 5 [pid 4996] openat(AT_FDCWD, "./44/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6347] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6342] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... openat resumed>) = 4 [pid 6347] <... openat resumed>) = 3 [pid 6342] <... futex resumed>) = 1 [pid 6341] <... futex resumed>) = 0 [pid 4996] fstat(4, ./strace-static-x86_64: Process 6348 attached [pid 6348] set_robust_list(0x555556fb95e0, 24) = 0 [pid 6348] chdir("./43") = 0 [pid 6348] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6348] setpgid(0, 0) = 0 [pid 6348] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 137.056541][ T74] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 137.070552][ T5076] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 137.083056][ T74] EXT4-fs (loop5): This should not happen!! Data will be lost [ 137.083056][ T74] [ 137.098310][ T5076] EXT4-fs (loop3): This should not happen!! Data will be lost [pid 6348] write(3, "1000", 4) = 4 [pid 6348] close(3 [pid 6347] write(3, "1000", 4 [pid 6342] open("./bus", O_RDWR [pid 6341] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6348] <... close resumed>) = 0 [pid 6347] <... write resumed>) = 4 [pid 6342] <... open resumed>) = 6 [pid 6341] <... futex resumed>) = 0 [pid 4996] getdents64(4, [pid 6348] symlink("/dev/binderfs", "./binderfs" [pid 6347] close(3 [pid 6342] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6341] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4996] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 6348] <... symlink resumed>) = 0 [pid 6347] <... close resumed>) = 0 [pid 6342] <... futex resumed>) = 0 [pid 6341] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4996] getdents64(4, [pid 6348] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6347] symlink("/dev/binderfs", "./binderfs" [pid 6342] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6341] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 6348] <... futex resumed>) = 0 [pid 6347] <... symlink resumed>) = 0 [pid 6342] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6341] <... futex resumed>) = 0 [pid 4996] close(4 [pid 6348] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6347] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6342] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6341] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4996] <... close resumed>) = 0 [pid 6348] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6347] <... futex resumed>) = 0 [pid 6342] <... mmap resumed>) = 0x20000000 [pid 4996] rmdir("./44/file0" [pid 6347] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6342] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... rmdir resumed>) = 0 [pid 6347] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6342] <... futex resumed>) = 1 [pid 6341] <... futex resumed>) = 0 [pid 4996] getdents64(3, [pid 6348] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6347] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6342] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6341] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 6347] <... mprotect resumed>) = 0 [pid 6342] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6341] <... futex resumed>) = 0 [pid 4996] close(3 [pid 6348] <... mprotect resumed>) = 0 [ 137.098310][ T5076] [pid 6347] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6342] sendfile(4, 5, NULL, 2147483713 [pid 6341] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4996] <... close resumed>) = 0 [pid 6348] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4996] rmdir("./44" [pid 6347] <... clone resumed>, parent_tid=[6349], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6349 [pid 4996] <... rmdir resumed>) = 0 [pid 6348] <... clone resumed>, parent_tid=[6350], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6350 [pid 6347] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] mkdir("./45", 0777 [pid 6348] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6347] <... futex resumed>) = 0 [pid 4996] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 6349 attached [pid 6348] <... futex resumed>) = 0 [pid 6347] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4996] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6349] set_robust_list(0x7f5c2b8109e0, 24 [pid 6348] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4996] <... openat resumed>) = 3 [pid 6349] <... set_robust_list resumed>) = 0 [pid 4996] ioctl(3, LOOP_CLR_FD [pid 6349] memfd_create("syzkaller", 0 [pid 4996] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6349] <... memfd_create resumed>) = 3 [pid 4996] close(3 [pid 6349] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4996] <... close resumed>) = 0 [pid 6349] <... mmap resumed>) = 0x7f5c233f0000 [pid 4996] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6349] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4996] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6351 ./strace-static-x86_64: Process 6351 attached [pid 6351] set_robust_list(0x555556fb95e0, 24) = 0 [pid 6351] chdir("./45") = 0 [pid 6351] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6351] setpgid(0, 0) = 0 [pid 6351] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6351] write(3, "1000", 4) = 4 [pid 6351] close(3) = 0 [pid 6351] symlink("/dev/binderfs", "./binderfs") = 0 [ 137.143328][ T6342] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 6351] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6351] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 6350 attached ) = 0x7f5c2b7f0000 [pid 6341] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4999] <... umount2 resumed>) = 0 [pid 4997] <... umount2 resumed>) = 0 [pid 6351] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6350] set_robust_list(0x7f5c2b8109e0, 24 [pid 6341] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6351] <... mprotect resumed>) = 0 [pid 6350] <... set_robust_list resumed>) = 0 [pid 6341] <... futex resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6351] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6350] memfd_create("syzkaller", 0 [pid 6341] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4999] lstat("./43/file0", [pid 6350] <... memfd_create resumed>) = 3 [pid 6341] <... mmap resumed>) = 0x7f5c234cf000 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] lstat("./44/file0", [pid 6351] <... clone resumed>, parent_tid=[6352], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6352 [pid 6350] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6341] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 4999] umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6351] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6350] <... mmap resumed>) = 0x7f5c233f0000 [pid 6341] <... mprotect resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6352 attached [pid 6351] <... futex resumed>) = 0 [pid 6341] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6352] set_robust_list(0x7f5c2b8109e0, 24 [pid 6351] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6352] <... set_robust_list resumed>) = 0 [pid 6341] <... clone resumed>, parent_tid=[6353], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6353 [pid 4999] openat(AT_FDCWD, "./43/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6352] memfd_create("syzkaller", 0 [pid 6350] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6349] <... write resumed>) = 1048576 [pid 6341] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... openat resumed>) = 4 [pid 4997] openat(AT_FDCWD, "./44/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6352] <... memfd_create resumed>) = 3 [pid 6341] <... futex resumed>) = 0 [pid 4999] fstat(4, [pid 4997] <... openat resumed>) = 4 ./strace-static-x86_64: Process 6353 attached [pid 6352] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6341] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] fstat(4, [pid 6353] set_robust_list(0x7f5c234ef9e0, 24 [pid 6352] <... mmap resumed>) = 0x7f5c233f0000 [pid 4999] getdents64(4, [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6353] <... set_robust_list resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4997] getdents64(4, [pid 6353] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 4999] getdents64(4, [pid 4997] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 6349] munmap(0x7f5c233f0000, 1048576 [pid 4999] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4997] getdents64(4, [pid 6349] <... munmap resumed>) = 0 [pid 4999] close(4 [pid 4997] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4999] <... close resumed>) = 0 [ 137.210109][ T6342] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 4997] close(4 [pid 4999] rmdir("./43/file0" [pid 4997] <... close resumed>) = 0 [pid 6349] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 4999] <... rmdir resumed>) = 0 [pid 4997] rmdir("./44/file0" [pid 6349] <... openat resumed>) = 4 [pid 4999] getdents64(3, [pid 4997] <... rmdir resumed>) = 0 [pid 6349] ioctl(4, LOOP_SET_FD, 3 [pid 4999] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4997] getdents64(3, [pid 6352] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6350] <... write resumed>) = 1048576 [pid 4999] close(3 [pid 6349] <... ioctl resumed>) = 0 [pid 6349] close(3) = 0 [pid 6349] mkdir("./file0", 0777) = 0 [pid 6349] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 4997] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 6350] munmap(0x7f5c233f0000, 1048576 [pid 4999] <... close resumed>) = 0 [pid 4997] close(3 [pid 6350] <... munmap resumed>) = 0 [pid 6341] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4999] rmdir("./43" [pid 6350] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4997] <... close resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 6350] <... openat resumed>) = 4 [pid 4997] rmdir("./44" [pid 6350] ioctl(4, LOOP_SET_FD, 3 [pid 4999] mkdir("./44", 0777 [pid 4997] <... rmdir resumed>) = 0 [ 137.276657][ T6342] EXT4-fs (loop1): This should not happen!! Data will be lost [ 137.276657][ T6342] [ 137.289734][ T6349] loop0: detected capacity change from 0 to 2048 [ 137.296455][ T6342] EXT4-fs (loop1): Total free blocks count 0 [ 137.309649][ T6342] EXT4-fs (loop1): Free/Dirty block details [ 137.316736][ T6350] loop4: detected capacity change from 0 to 2048 [pid 6352] <... write resumed>) = 1048576 [pid 6350] <... ioctl resumed>) = 0 [pid 4999] <... mkdir resumed>) = 0 [pid 4997] mkdir("./45", 0777 [pid 4999] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 4997] <... mkdir resumed>) = 0 [pid 4999] <... openat resumed>) = 3 [pid 4997] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4999] ioctl(3, LOOP_CLR_FD [pid 4997] <... openat resumed>) = 3 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4997] ioctl(3, LOOP_CLR_FD [pid 4999] close(3 [pid 4997] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] <... close resumed>) = 0 [pid 4997] close(3 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4997] <... close resumed>) = 0 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6356 [pid 4997] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6357 [pid 6350] close(3 [pid 6352] munmap(0x7f5c233f0000, 1048576 [pid 6350] <... close resumed>) = 0 ./strace-static-x86_64: Process 6357 attached ./strace-static-x86_64: Process 6356 attached [pid 6353] <... ioctl resumed>) = 0 [pid 6352] <... munmap resumed>) = 0 [pid 6350] mkdir("./file0", 0777 [pid 6349] <... mount resumed>) = 0 [pid 6342] <... sendfile resumed>) = 63 [pid 6357] set_robust_list(0x555556fb95e0, 24 [pid 6356] set_robust_list(0x555556fb95e0, 24 [pid 6353] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6352] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6350] <... mkdir resumed>) = 0 [pid 6349] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6342] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6353] <... futex resumed>) = 0 [pid 6350] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6357] <... set_robust_list resumed>) = 0 [pid 6356] <... set_robust_list resumed>) = 0 [pid 6353] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6352] <... openat resumed>) = 4 [pid 6349] <... openat resumed>) = 3 [pid 6342] <... futex resumed>) = 0 [pid 6341] exit_group(0 [pid 6353] <... futex resumed>) = ? [pid 6341] <... exit_group resumed>) = ? [pid 6357] chdir("./45") = 0 [ 137.318660][ T6342] EXT4-fs (loop1): free_blocks=2415919104 [ 137.331099][ T6342] EXT4-fs (loop1): dirty_blocks=16 [ 137.338071][ T6342] EXT4-fs (loop1): Block reservation details [ 137.344524][ T6342] EXT4-fs (loop1): i_reserved_data_blocks=1 [pid 6356] chdir("./44" [pid 6353] +++ exited with 0 +++ [pid 6352] ioctl(4, LOOP_SET_FD, 3 [pid 6349] chdir("./file0" [pid 6352] <... ioctl resumed>) = 0 [pid 6349] <... chdir resumed>) = 0 [pid 6357] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6356] <... chdir resumed>) = 0 [pid 6357] <... prctl resumed>) = 0 [pid 6356] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6357] setpgid(0, 0 [pid 6352] close(3 [pid 6349] ioctl(4, LOOP_CLR_FD [pid 6342] +++ exited with 0 +++ [pid 6341] +++ exited with 0 +++ [pid 6356] <... prctl resumed>) = 0 [pid 6357] <... setpgid resumed>) = 0 [pid 6356] setpgid(0, 0 [pid 6352] <... close resumed>) = 0 [pid 6349] <... ioctl resumed>) = 0 [pid 4995] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6341, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 6357] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6356] <... setpgid resumed>) = 0 [pid 6352] mkdir("./file0", 0777 [pid 6349] close(4 [pid 6357] <... openat resumed>) = 3 [pid 6356] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6349] <... close resumed>) = 0 [pid 6357] write(3, "1000", 4 [pid 6356] <... openat resumed>) = 3 [pid 6352] <... mkdir resumed>) = 0 [pid 6349] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6357] <... write resumed>) = 4 [pid 6356] write(3, "1000", 4 [pid 6352] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6349] <... futex resumed>) = 1 [pid 6347] <... futex resumed>) = 0 [pid 6357] close(3 [pid 6356] <... write resumed>) = 4 [pid 6349] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6347] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6357] <... close resumed>) = 0 [pid 6356] close(3 [pid 6349] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6347] <... futex resumed>) = 0 [pid 4995] umount2("./43", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6357] symlink("/dev/binderfs", "./binderfs" [pid 6356] <... close resumed>) = 0 [pid 6349] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6347] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6357] <... symlink resumed>) = 0 [pid 6356] symlink("/dev/binderfs", "./binderfs" [pid 6349] <... open resumed>) = 4 [pid 4995] openat(AT_FDCWD, "./43", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6357] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6349] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6356] <... symlink resumed>) = 0 [pid 6349] <... futex resumed>) = 1 [pid 6347] <... futex resumed>) = 0 [pid 4995] <... openat resumed>) = 3 [pid 6357] <... futex resumed>) = 0 [pid 6356] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6349] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6347] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] fstat(3, [pid 6357] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6356] <... futex resumed>) = 0 [pid 6349] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6347] <... futex resumed>) = 0 [pid 6349] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6347] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6357] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6356] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6349] <... write resumed>) = 9 [pid 4995] getdents64(3, [pid 6357] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6356] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6349] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6356] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6349] <... futex resumed>) = 1 [pid 6347] <... futex resumed>) = 0 [pid 4995] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 6357] <... mprotect resumed>) = 0 [pid 6356] <... mprotect resumed>) = 0 [pid 6349] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6347] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] umount2("./43/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6357] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6356] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6349] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6347] <... futex resumed>) = 0 [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6349] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6347] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6357] <... clone resumed>, parent_tid=[6362], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6362 [pid 6349] <... openat resumed>) = 5 [pid 4995] lstat("./43/binderfs", [pid 6349] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6347] <... futex resumed>) = 0 [pid 6356] <... clone resumed>, parent_tid=[6363], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6363 [pid 4995] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6357] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6356] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6357] <... futex resumed>) = 0 [pid 6349] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6347] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] unlink("./43/binderfs"./strace-static-x86_64: Process 6363 attached ./strace-static-x86_64: Process 6362 attached [pid 6357] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6356] <... futex resumed>) = 0 [pid 6352] <... mount resumed>) = 0 [pid 6350] <... mount resumed>) = 0 [pid 6349] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6347] <... futex resumed>) = 0 [pid 4995] <... unlink resumed>) = 0 [pid 6356] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6352] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6350] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 4995] umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6363] set_robust_list(0x7f5c2b8109e0, 24 [pid 6362] set_robust_list(0x7f5c2b8109e0, 24 [pid 6352] <... openat resumed>) = 3 [pid 6350] <... openat resumed>) = 3 [pid 6349] open("./bus", O_RDWR [ 137.368789][ T6352] loop2: detected capacity change from 0 to 2048 [pid 6347] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6363] <... set_robust_list resumed>) = 0 [pid 6362] <... set_robust_list resumed>) = 0 [pid 6352] chdir("./file0" [pid 6350] chdir("./file0" [pid 6349] <... open resumed>) = 6 [pid 6363] memfd_create("syzkaller", 0 [pid 6362] memfd_create("syzkaller", 0 [pid 6349] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6363] <... memfd_create resumed>) = 3 [pid 6362] <... memfd_create resumed>) = 3 [pid 6349] <... futex resumed>) = 1 [pid 6347] <... futex resumed>) = 0 [pid 6363] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6362] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6349] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6347] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6363] <... mmap resumed>) = 0x7f5c233f0000 [pid 6362] <... mmap resumed>) = 0x7f5c233f0000 [pid 6349] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6347] <... futex resumed>) = 0 [pid 6363] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6362] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6352] <... chdir resumed>) = 0 [pid 6350] <... chdir resumed>) = 0 [pid 6349] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6347] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6349] <... mmap resumed>) = 0x20000000 [pid 6349] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6347] <... futex resumed>) = 0 [pid 6349] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6347] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6349] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6347] <... futex resumed>) = 0 [pid 6349] sendfile(4, 5, NULL, 2147483713 [pid 6347] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6352] ioctl(4, LOOP_CLR_FD [pid 6350] ioctl(4, LOOP_CLR_FD) = 0 [pid 6352] <... ioctl resumed>) = 0 [pid 6350] close(4 [pid 6352] close(4 [pid 6350] <... close resumed>) = 0 [pid 6352] <... close resumed>) = 0 [pid 6350] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6352] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6350] <... futex resumed>) = 1 [pid 6348] <... futex resumed>) = 0 [ 137.427186][ T5608] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 137.443979][ T5608] EXT4-fs (loop1): This should not happen!! Data will be lost [ 137.443979][ T5608] [pid 6352] <... futex resumed>) = 1 [pid 6351] <... futex resumed>) = 0 [pid 6350] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6348] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6352] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6351] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6350] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6348] <... futex resumed>) = 0 [pid 6352] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6352] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6351] <... futex resumed>) = 0 [pid 6350] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6348] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6351] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6352] <... open resumed>) = 4 [pid 6350] <... open resumed>) = 4 [pid 6352] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6350] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6362] <... write resumed>) = 1048576 [pid 6352] <... futex resumed>) = 1 [pid 6351] <... futex resumed>) = 0 [pid 6350] <... futex resumed>) = 1 [pid 6348] <... futex resumed>) = 0 [pid 6352] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6351] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6350] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6348] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6347] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6350] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6348] <... futex resumed>) = 0 [pid 6347] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6351] <... futex resumed>) = 0 [pid 6352] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6350] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6348] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6347] <... futex resumed>) = 0 [pid 6352] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6351] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6347] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c234cf000 [pid 6352] <... write resumed>) = 9 [pid 6347] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 6350] <... write resumed>) = 9 [pid 6347] <... mprotect resumed>) = 0 [pid 6347] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6352] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6350] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6352] <... futex resumed>) = 1 [pid 6351] <... futex resumed>) = 0 [pid 6350] <... futex resumed>) = 1 [pid 6348] <... futex resumed>) = 0 [pid 6347] <... clone resumed>, parent_tid=[6364], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6364 [pid 6352] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6351] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6350] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6348] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6347] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6352] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6351] <... futex resumed>) = 0 [pid 6350] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6348] <... futex resumed>) = 0 [pid 6347] <... futex resumed>) = 0 [pid 6352] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6351] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6350] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6348] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6347] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6362] munmap(0x7f5c233f0000, 1048576 [pid 6352] <... openat resumed>) = 5 ./strace-static-x86_64: Process 6364 attached [pid 6352] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6350] <... openat resumed>) = 5 [pid 6364] set_robust_list(0x7f5c234ef9e0, 24 [pid 6362] <... munmap resumed>) = 0 [pid 6364] <... set_robust_list resumed>) = 0 [pid 6364] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6362] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6362] ioctl(4, LOOP_SET_FD, 3 [pid 6352] <... futex resumed>) = 1 [pid 6351] <... futex resumed>) = 0 [pid 6350] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6352] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6351] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6350] <... futex resumed>) = 1 [pid 6348] <... futex resumed>) = 0 [pid 6352] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6351] <... futex resumed>) = 0 [pid 6350] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6348] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6352] open("./bus", O_RDWR [pid 6351] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6350] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6348] <... futex resumed>) = 0 [pid 6362] <... ioctl resumed>) = 0 [pid 6352] <... open resumed>) = 6 [pid 6348] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6350] open("./bus", O_RDWR [pid 6352] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6362] close(3) = 0 [pid 6362] mkdir("./file0", 0777 [pid 6352] <... futex resumed>) = 1 [pid 6350] <... open resumed>) = 6 [pid 6351] <... futex resumed>) = 0 [pid 6352] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6351] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6350] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6352] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6351] <... futex resumed>) = 0 [pid 6350] <... futex resumed>) = 1 [pid 6348] <... futex resumed>) = 0 [pid 6352] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6351] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6350] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6348] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6348] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6352] <... mmap resumed>) = 0x20000000 [pid 6350] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6352] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6350] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6352] <... futex resumed>) = 1 [pid 6351] <... futex resumed>) = 0 [pid 6362] <... mkdir resumed>) = 0 [pid 6362] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6351] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6350] <... mmap resumed>) = 0x20000000 [pid 6352] sendfile(4, 5, NULL, 2147483713 [pid 6351] <... futex resumed>) = 0 [pid 6350] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6351] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6348] <... futex resumed>) = 0 [pid 6350] <... futex resumed>) = 1 [pid 6350] sendfile(4, 5, NULL, 2147483713 [pid 6348] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 137.470116][ T6349] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 137.514638][ T6362] loop3: detected capacity change from 0 to 2048 [pid 6348] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6363] <... write resumed>) = 1048576 [pid 6347] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6351] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6348] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6363] munmap(0x7f5c233f0000, 1048576 [pid 6351] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6348] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6363] <... munmap resumed>) = 0 [pid 6363] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6351] <... futex resumed>) = 0 [pid 6348] <... futex resumed>) = 0 [pid 6351] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6348] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6363] <... openat resumed>) = 4 [ 137.539837][ T6352] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 137.559971][ T6350] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 137.565615][ T6349] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 6363] ioctl(4, LOOP_SET_FD, 3 [pid 6351] <... mmap resumed>) = 0x7f5c234cf000 [pid 6348] <... mmap resumed>) = 0x7f5c234cf000 [pid 4995] <... umount2 resumed>) = 0 [pid 4995] umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4995] lstat("./43/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6351] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 6348] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] openat(AT_FDCWD, "./43/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6348] <... mprotect resumed>) = 0 [pid 6363] <... ioctl resumed>) = 0 [pid 6362] <... mount resumed>) = 0 [pid 6351] <... mprotect resumed>) = 0 [pid 6348] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4995] <... openat resumed>) = 4 [pid 6362] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 4995] fstat(4, [pid 6362] <... openat resumed>) = 3 [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6363] close(3 [pid 6362] chdir("./file0" [pid 6351] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4995] getdents64(4, [pid 6363] <... close resumed>) = 0 [pid 6362] <... chdir resumed>) = 0 [pid 4995] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 6363] mkdir("./file0", 0777 [pid 6362] ioctl(4, LOOP_CLR_FD [pid 6348] <... clone resumed>, parent_tid=[6367], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6367 [pid 4995] getdents64(4, [pid 6362] <... ioctl resumed>) = 0 [pid 4995] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [ 137.600045][ T6363] loop5: detected capacity change from 0 to 2048 [ 137.616288][ T6352] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 137.620218][ T6350] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 6362] close(4 [pid 4995] close(4./strace-static-x86_64: Process 6368 attached ./strace-static-x86_64: Process 6367 attached [pid 6363] <... mkdir resumed>) = 0 [pid 6362] <... close resumed>) = 0 [pid 6351] <... clone resumed>, parent_tid=[6368], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6368 [pid 6348] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] <... close resumed>) = 0 [pid 6368] set_robust_list(0x7f5c234ef9e0, 24 [pid 6367] set_robust_list(0x7f5c234ef9e0, 24 [pid 6363] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6362] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] rmdir("./43/file0" [pid 6368] <... set_robust_list resumed>) = 0 [pid 6367] <... set_robust_list resumed>) = 0 [pid 6362] <... futex resumed>) = 1 [pid 6357] <... futex resumed>) = 0 [pid 4995] <... rmdir resumed>) = 0 [pid 6368] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6367] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6362] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6357] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] getdents64(3, [pid 6362] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6357] <... futex resumed>) = 0 [pid 4995] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 6362] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6357] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4995] close(3 [pid 6362] <... open resumed>) = 4 [ 137.651749][ T6350] EXT4-fs (loop4): This should not happen!! Data will be lost [ 137.651749][ T6350] [ 137.657049][ T6352] EXT4-fs (loop2): This should not happen!! Data will be lost [ 137.657049][ T6352] [ 137.663269][ T6350] EXT4-fs (loop4): Total free blocks count 0 [ 137.679216][ T6350] EXT4-fs (loop4): Free/Dirty block details [ 137.685184][ T6350] EXT4-fs (loop4): free_blocks=2415919104 [ 137.689026][ T6349] EXT4-fs (loop0): This should not happen!! Data will be lost [ 137.689026][ T6349] [pid 6351] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6348] <... futex resumed>) = 0 [pid 4995] <... close resumed>) = 0 [pid 6362] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] rmdir("./43" [pid 6368] <... futex resumed>) = 0 [pid 6362] <... futex resumed>) = 1 [pid 6357] <... futex resumed>) = 0 [pid 6351] <... futex resumed>) = 1 [pid 6348] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4995] <... rmdir resumed>) = 0 [pid 6368] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6362] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6357] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] mkdir("./44", 0777 [pid 6362] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6357] <... futex resumed>) = 0 [pid 4995] <... mkdir resumed>) = 0 [pid 6362] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6357] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4995] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6367] <... ioctl resumed>) = 0 [pid 6362] <... write resumed>) = 9 [pid 6351] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6350] <... sendfile resumed>) = 63 [pid 4995] <... openat resumed>) = 3 [pid 6367] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6362] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6350] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] ioctl(3, LOOP_CLR_FD [pid 6367] <... futex resumed>) = 1 [pid 6362] <... futex resumed>) = 1 [pid 6357] <... futex resumed>) = 0 [pid 6348] <... futex resumed>) = 0 [pid 4995] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6367] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6362] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6357] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6348] exit_group(0 [pid 4995] close(3 [pid 6367] <... futex resumed>) = ? [pid 6362] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6357] <... futex resumed>) = 0 [pid 6350] <... futex resumed>) = ? [pid 6348] <... exit_group resumed>) = ? [pid 4995] <... close resumed>) = 0 [pid 6367] +++ exited with 0 +++ [pid 6363] <... mount resumed>) = 0 [pid 6362] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6357] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4995] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6363] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6362] <... openat resumed>) = 5 [pid 6363] <... openat resumed>) = 3 [pid 6362] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6371 [ 137.691648][ T6350] EXT4-fs (loop4): dirty_blocks=16 [ 137.707078][ T6350] EXT4-fs (loop4): Block reservation details [ 137.713503][ T6350] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 137.721623][ T6352] EXT4-fs (loop2): Total free blocks count 0 [ 137.728555][ T6352] EXT4-fs (loop2): Free/Dirty block details [ 137.734953][ T6352] EXT4-fs (loop2): free_blocks=2415919104 [ 137.740866][ T6352] EXT4-fs (loop2): dirty_blocks=16 [pid 6363] chdir("./file0" [pid 6362] <... futex resumed>) = 1 [pid 6357] <... futex resumed>) = 0 [pid 6350] +++ exited with 0 +++ [pid 6348] +++ exited with 0 +++ [pid 6363] <... chdir resumed>) = 0 [pid 6362] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6357] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6348, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- ./strace-static-x86_64: Process 6371 attached [pid 6363] ioctl(4, LOOP_CLR_FD [pid 6362] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6357] <... futex resumed>) = 0 [pid 4998] restart_syscall(<... resuming interrupted clone ...> [pid 6371] set_robust_list(0x555556fb95e0, 24 [pid 6363] <... ioctl resumed>) = 0 [pid 6362] open("./bus", O_RDWR [pid 6357] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] <... restart_syscall resumed>) = 0 [pid 6371] <... set_robust_list resumed>) = 0 [pid 6363] close(4 [pid 6362] <... open resumed>) = 6 [pid 6371] chdir("./44" [pid 6363] <... close resumed>) = 0 [pid 6362] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6371] <... chdir resumed>) = 0 [pid 6363] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6362] <... futex resumed>) = 1 [pid 6357] <... futex resumed>) = 0 [pid 4998] umount2("./43", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6371] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6363] <... futex resumed>) = 1 [pid 6362] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6357] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6356] <... futex resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6371] <... prctl resumed>) = 0 [pid 6363] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6362] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6357] <... futex resumed>) = 0 [pid 6356] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] openat(AT_FDCWD, "./43", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6371] setpgid(0, 0 [pid 6363] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6362] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6357] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6356] <... futex resumed>) = 0 [pid 4998] <... openat resumed>) = 3 [pid 6371] <... setpgid resumed>) = 0 [pid 6363] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6362] <... mmap resumed>) = 0x20000000 [pid 6356] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6351] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4998] fstat(3, [pid 6371] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6363] <... open resumed>) = 4 [pid 6362] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6371] <... openat resumed>) = 3 [pid 6363] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6362] <... futex resumed>) = 1 [pid 6357] <... futex resumed>) = 0 [pid 4998] getdents64(3, [pid 6371] write(3, "1000", 4 [pid 6363] <... futex resumed>) = 1 [pid 6362] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6357] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6356] <... futex resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 6371] <... write resumed>) = 4 [pid 6363] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6362] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6357] <... futex resumed>) = 0 [pid 6356] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] umount2("./43/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6371] close(3 [pid 6364] <... ioctl resumed>) = 0 [pid 6363] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 137.749224][ T6352] EXT4-fs (loop2): Block reservation details [ 137.756207][ T6349] EXT4-fs (loop0): Total free blocks count 0 [ 137.762600][ T6349] EXT4-fs (loop0): Free/Dirty block details [ 137.769137][ T6349] EXT4-fs (loop0): free_blocks=2415919104 [ 137.775223][ T6349] EXT4-fs (loop0): dirty_blocks=16 [ 137.781300][ T6349] EXT4-fs (loop0): Block reservation details [ 137.786589][ T6352] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 137.787901][ T6349] EXT4-fs (loop0): i_reserved_data_blocks=1 [pid 6362] sendfile(4, 5, NULL, 2147483713 [pid 6357] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6356] <... futex resumed>) = 0 [pid 6349] <... sendfile resumed>) = 63 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6371] <... close resumed>) = 0 [pid 6364] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6363] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6352] <... sendfile resumed>) = 63 [pid 6349] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6352] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6349] <... futex resumed>) = 0 [pid 6371] symlink("/dev/binderfs", "./binderfs" [pid 6368] <... ioctl resumed>) = 0 [pid 6364] <... futex resumed>) = 0 [pid 6356] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6352] <... futex resumed>) = 0 [pid 6349] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4998] lstat("./43/binderfs", [pid 6371] <... symlink resumed>) = 0 [pid 6368] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6364] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6363] <... write resumed>) = 9 [pid 6352] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6351] exit_group(0 [pid 6371] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6368] <... futex resumed>) = ? [pid 6363] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6352] <... futex resumed>) = ? [pid 6351] <... exit_group resumed>) = ? [pid 6347] exit_group(0 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6371] <... futex resumed>) = 0 [pid 6368] +++ exited with 0 +++ [pid 6364] <... futex resumed>) = ? [pid 6363] <... futex resumed>) = 1 [pid 6356] <... futex resumed>) = 0 [pid 6352] +++ exited with 0 +++ [pid 6351] +++ exited with 0 +++ [pid 6349] <... futex resumed>) = ? [pid 6347] <... exit_group resumed>) = ? [pid 4998] unlink("./43/binderfs" [pid 6371] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6364] +++ exited with 0 +++ [pid 6363] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6356] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6349] +++ exited with 0 +++ [pid 6371] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6363] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6356] <... futex resumed>) = 0 [pid 6347] +++ exited with 0 +++ [pid 4998] <... unlink resumed>) = 0 [pid 6371] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6363] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6356] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6351, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 4994] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6347, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 6371] <... mprotect resumed>) = 0 [pid 6371] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6363] <... openat resumed>) = 5 [pid 4996] restart_syscall(<... resuming interrupted clone ...> [pid 6371] <... clone resumed>, parent_tid=[6372], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6372 [ 137.806451][ T6362] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 137.836309][ T6362] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 137.850578][ T26] kauditd_printk_skb: 102 callbacks suppressed [pid 6371] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6371] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6372 attached [pid 6372] set_robust_list(0x7f5c2b8109e0, 24) = 0 [pid 6372] memfd_create("syzkaller", 0) = 3 [pid 6372] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5c233f0000 [pid 6372] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 6372] munmap(0x7f5c233f0000, 1048576 [pid 6363] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6357] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4996] <... restart_syscall resumed>) = 0 [pid 6363] <... futex resumed>) = 1 [pid 6357] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] umount2("./45", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6363] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6357] <... futex resumed>) = 0 [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6357] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4996] umount2("./45", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] openat(AT_FDCWD, "./45", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6357] <... mmap resumed>) = 0x7f5c234cf000 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] <... openat resumed>) = 3 [pid 6357] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 4996] openat(AT_FDCWD, "./45", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4994] fstat(3, [pid 6357] <... mprotect resumed>) = 0 [pid 6356] <... futex resumed>) = 0 [pid 6357] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4996] <... openat resumed>) = 3 [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] fstat(3, [pid 4994] getdents64(3, [pid 6357] <... clone resumed>, parent_tid=[6373], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6373 [pid 4996] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 6357] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] getdents64(3, [pid 4994] umount2("./45/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6357] <... futex resumed>) = 0 [pid 4996] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6357] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4996] umount2("./45/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] lstat("./45/binderfs", [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4996] lstat("./45/binderfs", [pid 4994] unlink("./45/binderfs"./strace-static-x86_64: Process 6373 attached [pid 6372] <... munmap resumed>) = 0 [pid 6356] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4994] <... unlink resumed>) = 0 [ 137.850598][ T26] audit: type=1804 audit(1687834607.912:1184): pid=6363 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor113" name="/root/syzkaller.drywye/44/file0/bus" dev="loop5" ino=18 res=1 errno=0 [ 137.853072][ T6362] EXT4-fs (loop3): This should not happen!! Data will be lost [ 137.853072][ T6362] [ 137.892911][ T74] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 6372] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 4996] unlink("./45/binderfs" [pid 4994] umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6372] <... openat resumed>) = 4 [pid 4996] <... unlink resumed>) = 0 [pid 6372] ioctl(4, LOOP_SET_FD, 3 [pid 4996] umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6373] set_robust_list(0x7f5c234ef9e0, 24 [pid 6363] <... futex resumed>) = 0 [pid 6356] <... futex resumed>) = 1 [ 137.906248][ T74] EXT4-fs (loop4): This should not happen!! Data will be lost [ 137.906248][ T74] [ 137.911498][ T6372] loop1: detected capacity change from 0 to 2048 [ 137.924747][ T26] audit: type=1804 audit(1687834607.982:1185): pid=6363 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor113" name="/root/syzkaller.drywye/44/file0/bus" dev="loop5" ino=18 res=1 errno=0 [pid 6363] open("./bus", O_RDWR [pid 6373] <... set_robust_list resumed>) = 0 [pid 6363] <... open resumed>) = 6 [pid 6356] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6363] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6363] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6372] <... ioctl resumed>) = 0 [pid 6372] close(3 [pid 6357] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6372] <... close resumed>) = 0 [pid 6372] mkdir("./file0", 0777 [pid 6373] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6372] <... mkdir resumed>) = 0 [pid 6372] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6356] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6356] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6363] <... futex resumed>) = 0 [pid 6356] <... futex resumed>) = 1 [pid 6363] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6363] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6356] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4998] <... umount2 resumed>) = 0 [pid 4996] <... umount2 resumed>) = 0 [pid 6363] <... futex resumed>) = 0 [pid 6356] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6356] <... futex resumed>) = 0 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6363] sendfile(4, 5, NULL, 2147483713 [pid 6356] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4996] lstat("./45/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] openat(AT_FDCWD, "./45/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [ 137.999849][ T26] audit: type=1804 audit(1687834608.052:1186): pid=6363 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor113" name="/root/syzkaller.drywye/44/file0/bus" dev="loop5" ino=18 res=1 errno=0 [ 138.013548][ T5076] EXT4-fs (loop0): This should not happen!! Data will be lost [ 138.013548][ T5076] [pid 4996] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] getdents64(4, 0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4998] umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./43/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./43/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./43/file0") = 0 [pid 4996] getdents64(4, [pid 4998] getdents64(3, 0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4996] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4996] close(4 [pid 4998] rmdir("./43" [pid 4996] <... close resumed>) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 4996] rmdir("./45/file0" [pid 4998] mkdir("./44", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6372] <... mount resumed>) = 0 [pid 6356] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4996] <... rmdir resumed>) = 0 [pid 6372] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6356] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6376 [pid 4996] getdents64(3, [pid 4994] <... umount2 resumed>) = 0 [pid 6372] <... openat resumed>) = 3 [pid 6372] chdir("./file0" [pid 6356] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6376 attached [pid 6372] <... chdir resumed>) = 0 [pid 6356] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4996] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 6376] set_robust_list(0x555556fb95e0, 24 [pid 6372] ioctl(4, LOOP_CLR_FD [pid 6376] <... set_robust_list resumed>) = 0 [pid 6372] <... ioctl resumed>) = 0 [pid 6376] chdir("./44" [pid 6372] close(4 [pid 6376] <... chdir resumed>) = 0 [pid 6372] <... close resumed>) = 0 [pid 6356] <... mmap resumed>) = 0x7f5c234cf000 [pid 4996] close(3 [pid 4994] umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6376] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6372] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6356] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 4996] <... close resumed>) = 0 [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6376] <... prctl resumed>) = 0 [pid 6372] <... futex resumed>) = 1 [pid 6371] <... futex resumed>) = 0 [pid 4994] lstat("./45/file0", [pid 6376] setpgid(0, 0 [pid 6372] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6371] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6356] <... mprotect resumed>) = 0 [pid 4996] rmdir("./45" [pid 4994] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 138.045453][ T6363] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 138.068015][ T6362] EXT4-fs (loop3): free_blocks=2415919104 [ 138.073770][ T6363] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 138.073810][ T6363] EXT4-fs (loop5): This should not happen!! Data will be lost [ 138.073810][ T6363] [pid 6376] <... setpgid resumed>) = 0 [pid 6372] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6371] <... futex resumed>) = 0 [pid 6356] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4994] umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6376] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6372] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6371] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4996] <... rmdir resumed>) = 0 [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6376] <... openat resumed>) = 3 [pid 6372] <... open resumed>) = 4 [pid 4996] mkdir("./46", 0777 [pid 4994] openat(AT_FDCWD, "./45/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6376] write(3, "1000", 4 [pid 6372] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] <... openat resumed>) = 4 [pid 6376] <... write resumed>) = 4 [pid 6372] <... futex resumed>) = 1 [pid 6371] <... futex resumed>) = 0 [pid 4994] fstat(4, [pid 6376] close(3 [pid 6372] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6371] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6376] <... close resumed>) = 0 [pid 6372] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6371] <... futex resumed>) = 0 [pid 4994] getdents64(4, [pid 6376] symlink("/dev/binderfs", "./binderfs" [pid 6372] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6371] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4994] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 6376] <... symlink resumed>) = 0 [pid 6372] <... write resumed>) = 9 [pid 6356] <... clone resumed>, parent_tid=[6377], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6377 [pid 4996] <... mkdir resumed>) = 0 [pid 4994] getdents64(4, [pid 6376] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6372] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6356] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4994] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 6376] <... futex resumed>) = 0 [pid 6372] <... futex resumed>) = 1 [pid 6371] <... futex resumed>) = 0 [pid 6356] <... futex resumed>) = 0 [pid 4996] <... openat resumed>) = 3 [pid 4994] close(4 [pid 6376] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6372] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6371] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [ 138.129298][ T26] audit: type=1804 audit(1687834608.052:1187): pid=6363 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor113" name="/root/syzkaller.drywye/44/file0/bus" dev="loop5" ino=18 res=1 errno=0 [ 138.145598][ T6363] EXT4-fs (loop5): Total free blocks count 0 [pid 6356] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4996] ioctl(3, LOOP_CLR_FD [pid 4994] <... close resumed>) = 0 ./strace-static-x86_64: Process 6377 attached [pid 6376] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6372] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6371] <... futex resumed>) = 0 [pid 4994] rmdir("./45/file0" [pid 6376] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6372] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6371] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4994] <... rmdir resumed>) = 0 [pid 6376] <... mprotect resumed>) = 0 [pid 6372] <... openat resumed>) = 5 [pid 4994] getdents64(3, [pid 6376] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6372] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4994] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 6377] set_robust_list(0x7f5c234ef9e0, 24 [pid 6372] <... futex resumed>) = 1 [pid 6371] <... futex resumed>) = 0 [pid 4996] close(3 [pid 4994] close(3 [pid 6377] <... set_robust_list resumed>) = 0 [pid 6376] <... clone resumed>, parent_tid=[6378], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6378 [pid 6372] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6371] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... close resumed>) = 0 [pid 4994] <... close resumed>) = 0 [pid 6377] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6376] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6372] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6371] <... futex resumed>) = 0 [pid 4996] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4994] rmdir("./45"./strace-static-x86_64: Process 6378 attached [pid 6376] <... futex resumed>) = 0 [pid 6372] open("./bus", O_RDWR [pid 6371] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4994] <... rmdir resumed>) = 0 [pid 6378] set_robust_list(0x7f5c2b8109e0, 24 [pid 6376] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6372] <... open resumed>) = 6 [pid 4994] mkdir("./46", 0777./strace-static-x86_64: Process 6379 attached [pid 6378] <... set_robust_list resumed>) = 0 [pid 6372] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6379 [pid 4994] <... mkdir resumed>) = 0 [ 138.184905][ T6362] EXT4-fs (loop3): dirty_blocks=16 [ 138.193198][ T6363] EXT4-fs (loop5): Free/Dirty block details [ 138.219445][ T6363] EXT4-fs (loop5): free_blocks=2415919104 [ 138.221546][ T6362] EXT4-fs (loop3): Block reservation details [pid 6378] memfd_create("syzkaller", 0 [pid 6372] <... futex resumed>) = 1 [pid 6371] <... futex resumed>) = 0 [pid 4994] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6379] set_robust_list(0x555556fb95e0, 24 [pid 6378] <... memfd_create resumed>) = 3 [pid 6377] <... ioctl resumed>) = 0 [pid 6372] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6371] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6363] <... sendfile resumed>) = 63 [pid 4994] <... openat resumed>) = 3 [pid 6378] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6372] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6371] <... futex resumed>) = 0 [pid 4994] ioctl(3, LOOP_CLR_FD [pid 6378] <... mmap resumed>) = 0x7f5c233f0000 [pid 6372] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6371] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4994] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6378] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6372] <... mmap resumed>) = 0x20000000 [pid 4994] close(3 [pid 6372] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] <... close resumed>) = 0 [pid 6372] <... futex resumed>) = 1 [pid 6371] <... futex resumed>) = 0 [pid 4994] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6372] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6371] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6372] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6371] <... futex resumed>) = 0 [pid 4994] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6380 [ 138.231260][ T6363] EXT4-fs (loop5): dirty_blocks=16 [ 138.231285][ T6363] EXT4-fs (loop5): Block reservation details [ 138.231310][ T6363] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 138.233188][ T26] audit: type=1804 audit(1687834608.262:1188): pid=6372 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor113" name="/root/syzkaller.0rM9bT/44/file0/bus" dev="loop1" ino=18 res=1 errno=0 [pid 6372] sendfile(4, 5, NULL, 2147483713 [pid 6371] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6379] <... set_robust_list resumed>) = 0 [pid 6377] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6363] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6356] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) ./strace-static-x86_64: Process 6380 attached [pid 6379] chdir("./46" [pid 6377] <... futex resumed>) = 0 [pid 6363] <... futex resumed>) = 0 [pid 6356] exit_group(0 [pid 6380] set_robust_list(0x555556fb95e0, 24 [pid 6379] <... chdir resumed>) = 0 [pid 6356] <... exit_group resumed>) = ? [pid 6380] <... set_robust_list resumed>) = 0 [pid 6380] chdir("./46") = 0 [pid 6380] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6379] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6380] <... prctl resumed>) = 0 [pid 6377] +++ exited with 0 +++ [pid 6363] +++ exited with 0 +++ [pid 6380] setpgid(0, 0) = 0 [pid 6380] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6356] +++ exited with 0 +++ [pid 6380] <... openat resumed>) = 3 [pid 6379] <... prctl resumed>) = 0 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6356, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 6380] write(3, "1000", 4 [pid 4999] restart_syscall(<... resuming interrupted clone ...> [pid 6380] <... write resumed>) = 4 [pid 6379] setpgid(0, 0 [pid 4999] <... restart_syscall resumed>) = 0 [pid 6380] close(3 [pid 6379] <... setpgid resumed>) = 0 [pid 6380] <... close resumed>) = 0 [pid 6379] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6380] symlink("/dev/binderfs", "./binderfs" [pid 4999] umount2("./44", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6380] <... symlink resumed>) = 0 [pid 6379] <... openat resumed>) = 3 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6380] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6379] write(3, "1000", 4 [pid 4999] openat(AT_FDCWD, "./44", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6380] <... futex resumed>) = 0 [pid 6379] <... write resumed>) = 4 [pid 4999] <... openat resumed>) = 3 [pid 6380] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6379] close(3 [pid 4999] fstat(3, [pid 6380] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6379] <... close resumed>) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6380] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6379] symlink("/dev/binderfs", "./binderfs" [pid 4999] getdents64(3, [pid 6380] <... mprotect resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 6380] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6379] <... symlink resumed>) = 0 [pid 4999] umount2("./44/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6379] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6380] <... clone resumed>, parent_tid=[6381], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6381 [pid 6379] <... futex resumed>) = 0 [pid 4999] lstat("./44/binderfs", [pid 6380] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6379] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6380] <... futex resumed>) = 0 [pid 6379] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 4999] unlink("./44/binderfs"./strace-static-x86_64: Process 6381 attached [pid 6380] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6379] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 4999] <... unlink resumed>) = 0 [pid 6381] set_robust_list(0x7f5c2b8109e0, 24 [pid 6379] <... mprotect resumed>) = 0 [ 138.264816][ T6372] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 138.277716][ T6362] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 138.320669][ T5076] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 4999] umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6381] <... set_robust_list resumed>) = 0 [pid 6379] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6378] <... write resumed>) = 1048576 [pid 6373] <... ioctl resumed>) = 0 [pid 6362] <... sendfile resumed>) = 63 [pid 6381] memfd_create("syzkaller", 0) = 3 [pid 6381] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5c233f0000 [pid 6371] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6371] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6371] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6373] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6362] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6378] munmap(0x7f5c233f0000, 1048576 [pid 6371] <... mmap resumed>) = 0x7f5c234cf000 [pid 6357] exit_group(0 [pid 6371] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 6357] <... exit_group resumed>) = ? [pid 6371] <... mprotect resumed>) = 0 [pid 6371] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6382 attached , parent_tid=[6383], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6383 [pid 6382] set_robust_list(0x7f5c2b8109e0, 24 [pid 6371] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6382] <... set_robust_list resumed>) = 0 [pid 6371] <... futex resumed>) = 0 [pid 6382] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6371] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6383 attached [pid 6383] set_robust_list(0x7f5c234ef9e0, 24) = 0 [pid 6383] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6379] <... clone resumed>, parent_tid=[6382], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6382 [pid 6378] <... munmap resumed>) = 0 [pid 6373] <... futex resumed>) = ? [pid 6362] <... futex resumed>) = ? [pid 6381] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6379] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6378] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6373] +++ exited with 0 +++ [pid 6362] +++ exited with 0 +++ [pid 6357] +++ exited with 0 +++ [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6357, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 4997] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4997] umount2("./45", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./45", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4997] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(3, 0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4997] umount2("./45/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./45/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [ 138.328309][ T6372] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 138.346639][ T6372] EXT4-fs (loop1): This should not happen!! Data will be lost [ 138.346639][ T6372] [ 138.353377][ T5076] EXT4-fs (loop5): This should not happen!! Data will be lost [ 138.353377][ T5076] [ 138.358509][ T6372] EXT4-fs (loop1): Total free blocks count 0 [ 138.375157][ T6372] EXT4-fs (loop1): Free/Dirty block details [pid 4997] unlink("./45/binderfs" [pid 6382] <... futex resumed>) = 0 [pid 6379] <... futex resumed>) = 1 [pid 6378] <... openat resumed>) = 4 [pid 4997] <... unlink resumed>) = 0 [pid 6381] <... write resumed>) = 1048576 [pid 4997] umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6382] memfd_create("syzkaller", 0 [pid 6379] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6378] ioctl(4, LOOP_SET_FD, 3 [pid 6381] munmap(0x7f5c233f0000, 1048576) = 0 [pid 6381] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6371] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6382] <... memfd_create resumed>) = 3 [pid 6381] <... openat resumed>) = 4 [ 138.383495][ T6372] EXT4-fs (loop1): free_blocks=2415919104 [ 138.390817][ T6372] EXT4-fs (loop1): dirty_blocks=16 [ 138.390879][ T74] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 138.398014][ T6372] EXT4-fs (loop1): Block reservation details [ 138.415819][ T6378] loop4: detected capacity change from 0 to 2048 [ 138.421590][ T6381] loop0: detected capacity change from 0 to 2048 [ 138.422890][ T6372] EXT4-fs (loop1): i_reserved_data_blocks=1 [pid 6381] ioctl(4, LOOP_SET_FD, 3 [pid 6382] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6378] <... ioctl resumed>) = 0 [pid 6382] <... mmap resumed>) = 0x7f5c233f0000 [pid 6378] close(3 [pid 6382] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6378] <... close resumed>) = 0 [pid 6372] <... sendfile resumed>) = 63 [pid 6381] <... ioctl resumed>) = 0 [pid 6383] <... ioctl resumed>) = 0 [pid 6383] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6383] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6381] close(3 [pid 6378] mkdir("./file0", 0777 [pid 6372] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6371] exit_group(0 [pid 6381] <... close resumed>) = 0 [pid 6372] <... futex resumed>) = 0 [pid 6381] mkdir("./file0", 0777 [pid 6378] <... mkdir resumed>) = 0 [pid 6383] <... futex resumed>) = ? [pid 6371] <... exit_group resumed>) = ? [pid 6383] +++ exited with 0 +++ [pid 6381] <... mkdir resumed>) = 0 [pid 6372] +++ exited with 0 +++ [pid 6381] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6378] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6371] +++ exited with 0 +++ [pid 4995] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6371, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=12 /* 0.12 s */} --- [pid 4995] umount2("./44", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... umount2 resumed>) = 0 [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] openat(AT_FDCWD, "./44", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4995] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] getdents64(3, 0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4995] umount2("./44/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4995] lstat("./44/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4995] unlink("./44/binderfs") = 0 [ 138.430560][ T26] audit: type=1804 audit(1687834608.282:1189): pid=6372 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor113" name="/root/syzkaller.0rM9bT/44/file0/bus" dev="loop1" ino=18 res=1 errno=0 [ 138.460198][ T74] EXT4-fs (loop3): This should not happen!! Data will be lost [ 138.460198][ T74] [pid 4995] umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./44/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./44/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4999] close(4) = 0 [pid 4999] rmdir("./44/file0") = 0 [pid 4999] getdents64(3, 0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./44") = 0 [pid 4999] mkdir("./45", 0777) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 138.470190][ T26] audit: type=1804 audit(1687834608.312:1190): pid=6372 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor113" name="/root/syzkaller.0rM9bT/44/file0/bus" dev="loop1" ino=18 res=1 errno=0 [ 138.500529][ T5076] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 4999] close(3 [pid 6382] <... write resumed>) = 1048576 [pid 4999] <... close resumed>) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556fb95d0) = 6386 [pid 6382] munmap(0x7f5c233f0000, 1048576) = 0 [pid 6382] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6382] ioctl(4, LOOP_SET_FD, 3 [pid 6378] <... mount resumed>) = 0 [pid 6381] <... mount resumed>) = 0 ./strace-static-x86_64: Process 6386 attached [pid 6381] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6378] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6382] <... ioctl resumed>) = 0 [pid 6381] <... openat resumed>) = 3 [pid 6386] set_robust_list(0x555556fb95e0, 24 [pid 6382] close(3 [pid 6381] chdir("./file0" [pid 6378] <... openat resumed>) = 3 [pid 4997] <... umount2 resumed>) = 0 [pid 6386] <... set_robust_list resumed>) = 0 [pid 6382] <... close resumed>) = 0 [pid 6381] <... chdir resumed>) = 0 [pid 6378] chdir("./file0" [pid 4997] umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6386] chdir("./45" [pid 6382] mkdir("./file0", 0777 [pid 6381] ioctl(4, LOOP_CLR_FD [pid 6378] <... chdir resumed>) = 0 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6386] <... chdir resumed>) = 0 [pid 6382] <... mkdir resumed>) = 0 [pid 6381] <... ioctl resumed>) = 0 [pid 6378] ioctl(4, LOOP_CLR_FD [pid 4997] lstat("./45/file0", [pid 6386] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6382] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6381] close(4 [pid 6378] <... ioctl resumed>) = 0 [pid 4997] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6386] <... prctl resumed>) = 0 [pid 6381] <... close resumed>) = 0 [pid 6378] close(4 [pid 4997] umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6386] setpgid(0, 0 [pid 6381] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6378] <... close resumed>) = 0 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6386] <... setpgid resumed>) = 0 [pid 6381] <... futex resumed>) = 1 [pid 6380] <... futex resumed>) = 0 [pid 6378] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] openat(AT_FDCWD, "./45/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6386] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6381] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6380] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6378] <... futex resumed>) = 1 [pid 6376] <... futex resumed>) = 0 [pid 4997] <... openat resumed>) = 4 [pid 6386] <... openat resumed>) = 3 [pid 6381] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6380] <... futex resumed>) = 0 [pid 6378] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [ 138.541818][ T26] audit: type=1804 audit(1687834608.312:1191): pid=6372 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor113" name="/root/syzkaller.0rM9bT/44/file0/bus" dev="loop1" ino=18 res=1 errno=0 [ 138.573030][ T6382] loop2: detected capacity change from 0 to 2048 [ 138.587410][ T5076] EXT4-fs (loop1): This should not happen!! Data will be lost [ 138.587410][ T5076] [pid 6376] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] fstat(4, [pid 6386] write(3, "1000", 4 [pid 6381] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6380] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6378] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6376] <... futex resumed>) = 0 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6386] <... write resumed>) = 4 [pid 6381] <... open resumed>) = 4 [pid 6378] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6376] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4997] getdents64(4, [pid 6386] close(3 [pid 6381] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6378] <... open resumed>) = 4 [pid 4997] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 6386] <... close resumed>) = 0 [pid 6381] <... futex resumed>) = 1 [pid 6380] <... futex resumed>) = 0 [pid 6378] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] getdents64(4, [pid 6386] symlink("/dev/binderfs", "./binderfs" [pid 6381] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6380] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6378] <... futex resumed>) = 1 [pid 6376] <... futex resumed>) = 0 [pid 4997] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 6386] <... symlink resumed>) = 0 [pid 6381] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6380] <... futex resumed>) = 0 [pid 6378] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6376] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] close(4 [pid 6386] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6381] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6380] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6378] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6376] <... futex resumed>) = 0 [pid 4997] <... close resumed>) = 0 [pid 4995] <... umount2 resumed>) = 0 [pid 6386] <... futex resumed>) = 0 [pid 6382] <... mount resumed>) = 0 [pid 6381] <... write resumed>) = 9 [pid 6378] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6376] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4997] rmdir("./45/file0" [pid 6386] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6382] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6381] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6386] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6382] <... openat resumed>) = 3 [pid 6381] <... futex resumed>) = 1 [pid 6380] <... futex resumed>) = 0 [pid 6378] <... write resumed>) = 9 [pid 4997] <... rmdir resumed>) = 0 [pid 6386] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6382] chdir("./file0" [pid 6381] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6380] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6378] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] getdents64(3, [pid 6386] <... mprotect resumed>) = 0 [pid 6382] <... chdir resumed>) = 0 [pid 6381] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6380] <... futex resumed>) = 0 [pid 6378] <... futex resumed>) = 1 [pid 6376] <... futex resumed>) = 0 [pid 4997] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 6386] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6382] ioctl(4, LOOP_CLR_FD [pid 6381] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6380] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6378] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6376] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] close(3 [pid 6382] <... ioctl resumed>) = 0 [pid 6381] <... openat resumed>) = 5 [pid 6376] <... futex resumed>) = 0 [pid 6382] close(4 [pid 6381] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6376] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6382] <... close resumed>) = 0 [pid 6381] <... futex resumed>) = 1 [pid 6380] <... futex resumed>) = 0 [pid 6382] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6381] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6380] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6382] <... futex resumed>) = 1 [pid 6381] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6380] <... futex resumed>) = 0 [pid 6379] <... futex resumed>) = 0 [pid 6382] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6381] open("./bus", O_RDWR [pid 6380] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6379] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6391 attached [pid 6382] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6381] <... open resumed>) = 6 [pid 6379] <... futex resumed>) = 0 [pid 6391] set_robust_list(0x7f5c2b8109e0, 24 [pid 6382] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6381] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6379] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6391] <... set_robust_list resumed>) = 0 [pid 6382] <... open resumed>) = 4 [pid 6381] <... futex resumed>) = 1 [pid 6380] <... futex resumed>) = 0 [pid 6391] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6382] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6381] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6380] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6382] <... futex resumed>) = 1 [pid 6381] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6380] <... futex resumed>) = 0 [pid 6379] <... futex resumed>) = 0 [pid 6382] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6381] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6380] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6379] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6382] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6381] <... mmap resumed>) = 0x20000000 [pid 6379] <... futex resumed>) = 0 [pid 6382] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6381] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6379] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6382] <... write resumed>) = 9 [pid 6381] <... futex resumed>) = 1 [pid 6380] <... futex resumed>) = 0 [pid 6382] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6381] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6380] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6382] <... futex resumed>) = 1 [pid 6381] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6380] <... futex resumed>) = 0 [pid 6379] <... futex resumed>) = 0 [pid 6382] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6381] sendfile(4, 5, NULL, 2147483713 [pid 6380] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6379] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6386] <... clone resumed>, parent_tid=[6391], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6391 [pid 6382] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6379] <... futex resumed>) = 0 [pid 6378] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4997] <... close resumed>) = 0 [pid 4995] umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6386] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6382] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6379] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6378] openat(AT_FDCWD, "./bus", O_RDONLY [pid 4997] rmdir("./45" [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6391] <... futex resumed>) = 0 [ 138.660434][ T26] audit: type=1804 audit(1687834608.722:1192): pid=6381 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor113" name="/root/syzkaller.slA38Q/46/file0/bus" dev="loop0" ino=18 res=1 errno=0 [ 138.680058][ T6381] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 6386] <... futex resumed>) = 1 [pid 6382] <... openat resumed>) = 5 [pid 6378] <... openat resumed>) = 5 [pid 6376] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4997] <... rmdir resumed>) = 0 [pid 4995] lstat("./44/file0", [pid 6386] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6378] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] mkdir("./46", 0777 [pid 4995] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6378] <... futex resumed>) = 0 [pid 4997] <... mkdir resumed>) = 0 [pid 4995] umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6378] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4997] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] <... openat resumed>) = 3 [pid 4995] openat(AT_FDCWD, "./44/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] ioctl(3, LOOP_CLR_FD [pid 4995] <... openat resumed>) = 4 [pid 4997] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4995] fstat(4, [pid 4997] close(3 [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] <... close resumed>) = 0 [pid 4995] getdents64(4, [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4995] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4995] getdents64(4, [pid 4997] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6392 [pid 4995] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4995] close(4) = 0 [pid 4995] rmdir("./44/file0") = 0 [pid 4995] getdents64(3, 0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4995] close(3 [pid 6391] memfd_create("syzkaller", 0 [pid 6376] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] <... close resumed>) = 0 [pid 6382] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] rmdir("./44") = 0 [pid 4995] mkdir("./45", 0777) = 0 ./strace-static-x86_64: Process 6392 attached [pid 4995] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6392] set_robust_list(0x555556fb95e0, 24 [pid 4995] <... openat resumed>) = 3 [pid 6392] <... set_robust_list resumed>) = 0 [pid 6391] <... memfd_create resumed>) = 3 [pid 6382] <... futex resumed>) = 1 [pid 6379] <... futex resumed>) = 0 [pid 6378] <... futex resumed>) = 0 [pid 6376] <... futex resumed>) = 1 [pid 4995] ioctl(3, LOOP_CLR_FD [pid 6392] chdir("./46" [pid 6379] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6378] open("./bus", O_RDWR [pid 6376] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4995] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6392] <... chdir resumed>) = 0 [pid 6391] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6382] open("./bus", O_RDWR [pid 6379] <... futex resumed>) = 0 [pid 6378] <... open resumed>) = 6 [pid 4995] close(3 [pid 6392] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6391] <... mmap resumed>) = 0x7f5c233f0000 [pid 6382] <... open resumed>) = 6 [pid 6380] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6379] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6378] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] <... close resumed>) = 0 [pid 6392] <... prctl resumed>) = 0 [pid 4995] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6392] setpgid(0, 0 [pid 6391] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6382] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6380] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6378] <... futex resumed>) = 1 [pid 6376] <... futex resumed>) = 0 [pid 6392] <... setpgid resumed>) = 0 [pid 6382] <... futex resumed>) = 1 [pid 6380] <... futex resumed>) = 0 [pid 6379] <... futex resumed>) = 0 [pid 6378] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6376] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6393 [pid 6392] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6382] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6380] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6379] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6378] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6376] <... futex resumed>) = 0 [pid 6392] <... openat resumed>) = 3 [pid 6382] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6380] <... mmap resumed>) = 0x7f5c234cf000 [pid 6379] <... futex resumed>) = 0 [pid 6378] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6376] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6393 attached [ 138.713934][ T26] audit: type=1804 audit(1687834608.722:1193): pid=6381 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor113" name="/root/syzkaller.slA38Q/46/file0/bus" dev="loop0" ino=18 res=1 errno=0 [pid 6392] write(3, "1000", 4 [pid 6382] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6380] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 6379] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6393] set_robust_list(0x555556fb95e0, 24 [pid 6392] <... write resumed>) = 4 [pid 6382] <... mmap resumed>) = 0x20000000 [pid 6378] <... mmap resumed>) = 0x20000000 [pid 6380] <... mprotect resumed>) = 0 [pid 6380] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6378] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6393] <... set_robust_list resumed>) = 0 [pid 6392] close(3 [pid 6382] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6378] <... futex resumed>) = 1 [pid 6376] <... futex resumed>) = 0 [pid 6382] <... futex resumed>) = 1 [pid 6380] <... clone resumed>, parent_tid=[6394], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6394 [pid 6379] <... futex resumed>) = 0 [pid 6378] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6376] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6382] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6380] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6379] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6378] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6376] <... futex resumed>) = 0 [pid 6382] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6380] <... futex resumed>) = 0 [pid 6379] <... futex resumed>) = 0 [pid 6378] sendfile(4, 5, NULL, 2147483713 [pid 6376] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6382] sendfile(4, 5, NULL, 2147483713 [pid 6380] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6379] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6393] chdir("./45" [pid 6392] <... close resumed>) = 0 [pid 6393] <... chdir resumed>) = 0 [pid 6392] symlink("/dev/binderfs", "./binderfs" [pid 6393] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6392] <... symlink resumed>) = 0 [pid 6393] <... prctl resumed>) = 0 [pid 6392] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6393] setpgid(0, 0 [pid 6392] <... futex resumed>) = 0 [pid 6393] <... setpgid resumed>) = 0 [pid 6392] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6393] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6392] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6393] <... openat resumed>) = 3 [pid 6392] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6393] write(3, "1000", 4 [pid 6392] <... mprotect resumed>) = 0 [pid 6393] <... write resumed>) = 4 [pid 6392] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6393] close(3) = 0 [pid 6392] <... clone resumed>, parent_tid=[6395], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6395 [pid 6393] symlink("/dev/binderfs", "./binderfs" [pid 6392] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6393] <... symlink resumed>) = 0 [pid 6392] <... futex resumed>) = 0 [pid 6393] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6392] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6393] <... futex resumed>) = 0 [pid 6393] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 6395 attached ) = 0x7f5c2b7f0000 [pid 6395] set_robust_list(0x7f5c2b8109e0, 24 [pid 6393] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6380] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6376] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) ./strace-static-x86_64: Process 6394 attached [pid 6395] <... set_robust_list resumed>) = 0 [pid 6393] <... mprotect resumed>) = 0 [pid 6379] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6376] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6395] memfd_create("syzkaller", 0 [pid 6394] set_robust_list(0x7f5c234ef9e0, 24 [pid 6393] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6379] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6376] <... futex resumed>) = 0 [pid 6395] <... memfd_create resumed>) = 3 [pid 6394] <... set_robust_list resumed>) = 0 [pid 6379] <... futex resumed>) = 0 [pid 6376] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6395] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6394] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6393] <... clone resumed>, parent_tid=[6396], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6396 [pid 6379] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6376] <... mmap resumed>) = 0x7f5c234cf000 ./strace-static-x86_64: Process 6396 attached [pid 6395] <... mmap resumed>) = 0x7f5c233f0000 [ 138.776757][ T6381] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 138.788745][ T6378] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 138.816635][ T6382] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 6393] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6379] <... mmap resumed>) = 0x7f5c234cf000 [pid 6376] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 6396] set_robust_list(0x7f5c2b8109e0, 24 [pid 6395] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6393] <... futex resumed>) = 0 [pid 6391] <... write resumed>) = 1048576 [pid 6379] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 6396] <... set_robust_list resumed>) = 0 [pid 6393] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6379] <... mprotect resumed>) = 0 [pid 6376] <... mprotect resumed>) = 0 [pid 6396] memfd_create("syzkaller", 0) = 3 [pid 6396] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5c233f0000 [pid 6379] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6376] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6379] <... clone resumed>, parent_tid=[6397], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6397 [pid 6391] munmap(0x7f5c233f0000, 1048576 [pid 6379] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6376] <... clone resumed>, parent_tid=[6398], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6398 ./strace-static-x86_64: Process 6398 attached [pid 6396] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6391] <... munmap resumed>) = 0 [pid 6379] <... futex resumed>) = 0 [pid 6376] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6391] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6379] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6376] <... futex resumed>) = 0 [ 138.851781][ T6381] EXT4-fs (loop0): This should not happen!! Data will be lost [ 138.851781][ T6381] [pid 6398] set_robust_list(0x7f5c234ef9e0, 24 [pid 6376] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6397 attached [pid 6398] <... set_robust_list resumed>) = 0 [pid 6391] <... openat resumed>) = 4 [pid 6398] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6397] set_robust_list(0x7f5c234ef9e0, 24 [pid 6391] ioctl(4, LOOP_SET_FD, 3 [pid 6397] <... set_robust_list resumed>) = 0 [pid 6397] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6391] <... ioctl resumed>) = 0 [pid 6391] close(3) = 0 [pid 6391] mkdir("./file0", 0777 [pid 6395] <... write resumed>) = 1048576 [ 138.890336][ T6382] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 138.907384][ T6391] loop5: detected capacity change from 0 to 2048 [ 138.917854][ T6381] EXT4-fs (loop0): Total free blocks count 0 [ 138.923907][ T6381] EXT4-fs (loop0): Free/Dirty block details [ 138.925614][ T6378] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 138.942933][ T6382] EXT4-fs (loop2): This should not happen!! Data will be lost [pid 6395] munmap(0x7f5c233f0000, 1048576 [pid 6391] <... mkdir resumed>) = 0 [pid 6379] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6395] <... munmap resumed>) = 0 [pid 6395] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6391] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6376] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6395] <... openat resumed>) = 4 [pid 6395] ioctl(4, LOOP_SET_FD, 3 [pid 6396] <... write resumed>) = 1048576 [pid 6396] munmap(0x7f5c233f0000, 1048576) = 0 [pid 6396] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6395] <... ioctl resumed>) = 0 [pid 6396] ioctl(4, LOOP_SET_FD, 3 [pid 6395] close(3) = 0 [pid 6395] mkdir("./file0", 0777) = 0 [ 138.942933][ T6382] [ 138.954257][ T6382] EXT4-fs (loop2): Total free blocks count 0 [ 138.961115][ T6382] EXT4-fs (loop2): Free/Dirty block details [ 138.965080][ T6395] loop3: detected capacity change from 0 to 2048 [ 138.968132][ T6378] EXT4-fs (loop4): This should not happen!! Data will be lost [ 138.968132][ T6378] [ 138.983682][ T6382] EXT4-fs (loop2): free_blocks=2415919104 [ 138.984325][ T6396] loop1: detected capacity change from 0 to 2048 [ 138.989739][ T6382] EXT4-fs (loop2): dirty_blocks=16 [pid 6395] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6396] <... ioctl resumed>) = 0 [pid 6396] close(3) = 0 [pid 6396] mkdir("./file0", 0777) = 0 [pid 6396] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6397] <... ioctl resumed>) = 0 [pid 6382] <... sendfile resumed>) = 63 [pid 6397] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [ 139.001551][ T6378] EXT4-fs (loop4): Total free blocks count 0 [ 139.007864][ T6382] EXT4-fs (loop2): Block reservation details [ 139.008167][ T6381] EXT4-fs (loop0): free_blocks=2415919104 [ 139.013940][ T6382] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 139.026563][ T6378] EXT4-fs (loop4): Free/Dirty block details [ 139.033806][ T6378] EXT4-fs (loop4): free_blocks=2415919104 [ 139.041426][ T6378] EXT4-fs (loop4): dirty_blocks=16 [ 139.044663][ T6381] EXT4-fs (loop0): dirty_blocks=16 [pid 6382] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6397] <... futex resumed>) = 0 [pid 6395] <... mount resumed>) = 0 [pid 6382] <... futex resumed>) = 0 [pid 6395] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6395] chdir("./file0" [pid 6398] <... ioctl resumed>) = 0 [pid 6397] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6395] <... chdir resumed>) = 0 [pid 6391] <... mount resumed>) = 0 [pid 6382] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6378] <... sendfile resumed>) = 63 [pid 6398] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6395] ioctl(4, LOOP_CLR_FD [pid 6379] exit_group(0 [pid 6378] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6398] <... futex resumed>) = 0 [pid 6397] <... futex resumed>) = ? [pid 6395] <... ioctl resumed>) = 0 [pid 6391] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6382] <... futex resumed>) = ? [pid 6379] <... exit_group resumed>) = ? [pid 6378] <... futex resumed>) = 0 [pid 6398] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6397] +++ exited with 0 +++ [pid 6395] close(4 [pid 6394] <... ioctl resumed>) = 0 [pid 6391] <... openat resumed>) = 3 [pid 6382] +++ exited with 0 +++ [pid 6381] <... sendfile resumed>) = 63 [pid 6394] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6391] chdir("./file0" [pid 6394] <... futex resumed>) = 0 [pid 6391] <... chdir resumed>) = 0 [pid 6381] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6394] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6391] ioctl(4, LOOP_CLR_FD) = 0 [pid 6381] <... futex resumed>) = 0 [pid 6391] close(4 [pid 6381] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6379] +++ exited with 0 +++ [pid 6395] <... close resumed>) = 0 [pid 6391] <... close resumed>) = 0 [pid 6378] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6376] exit_group(0 [pid 4996] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6379, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 6398] <... futex resumed>) = ? [pid 6395] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6391] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6380] exit_group(0 [pid 6378] <... futex resumed>) = ? [pid 6376] <... exit_group resumed>) = ? [pid 6398] +++ exited with 0 +++ [pid 6395] <... futex resumed>) = 1 [pid 6394] <... futex resumed>) = ? [pid 6392] <... futex resumed>) = 0 [pid 6391] <... futex resumed>) = 1 [pid 6386] <... futex resumed>) = 0 [pid 6381] <... futex resumed>) = ? [pid 6380] <... exit_group resumed>) = ? [pid 6378] +++ exited with 0 +++ [pid 6376] +++ exited with 0 +++ [pid 6396] <... mount resumed>) = 0 [pid 6395] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6394] +++ exited with 0 +++ [pid 6392] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6391] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6386] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6381] +++ exited with 0 +++ [pid 6380] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6376, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 4996] umount2("./46", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6396] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6395] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6392] <... futex resumed>) = 0 [pid 6391] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6386] <... futex resumed>) = 0 [pid 4998] restart_syscall(<... resuming interrupted clone ...> [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6380, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 6396] <... openat resumed>) = 3 [pid 6395] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6392] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6391] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6386] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] <... restart_syscall resumed>) = 0 [pid 4996] openat(AT_FDCWD, "./46", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4994] restart_syscall(<... resuming interrupted clone ...> [pid 6396] chdir("./file0" [pid 6391] <... open resumed>) = 4 [pid 4996] <... openat resumed>) = 3 [pid 6395] <... open resumed>) = 4 [pid 4994] <... restart_syscall resumed>) = 0 [pid 6396] <... chdir resumed>) = 0 [pid 4996] fstat(3, [pid 6396] ioctl(4, LOOP_CLR_FD [pid 6395] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6391] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] umount2("./44", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6396] <... ioctl resumed>) = 0 [pid 6395] <... futex resumed>) = 1 [pid 6392] <... futex resumed>) = 0 [pid 6391] <... futex resumed>) = 1 [pid 6386] <... futex resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4996] getdents64(3, [pid 4994] umount2("./46", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6396] close(4 [pid 6395] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6392] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6391] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6386] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] openat(AT_FDCWD, "./44", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4996] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6396] <... close resumed>) = 0 [pid 6395] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6392] <... futex resumed>) = 0 [pid 6391] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6386] <... futex resumed>) = 0 [pid 4998] <... openat resumed>) = 3 [pid 4996] umount2("./46/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] openat(AT_FDCWD, "./46", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6396] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6395] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6392] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6391] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6386] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] fstat(3, [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] <... openat resumed>) = 3 [pid 6396] <... futex resumed>) = 1 [pid 6395] <... write resumed>) = 9 [pid 6393] <... futex resumed>) = 0 [pid 6391] <... write resumed>) = 9 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] lstat("./46/binderfs", [pid 4994] fstat(3, [pid 6396] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6395] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6393] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [ 139.047141][ T6378] EXT4-fs (loop4): Block reservation details [ 139.059182][ T6378] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 139.067368][ T6381] EXT4-fs (loop0): Block reservation details [ 139.073455][ T6381] EXT4-fs (loop0): i_reserved_data_blocks=1 [pid 6391] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] getdents64(3, [pid 4996] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6396] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6395] <... futex resumed>) = 1 [pid 6393] <... futex resumed>) = 0 [pid 6392] <... futex resumed>) = 0 [pid 6391] <... futex resumed>) = 1 [pid 6386] <... futex resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4996] unlink("./46/binderfs" [pid 4994] getdents64(3, [pid 6396] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6395] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6393] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6392] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6391] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6386] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] umount2("./44/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] <... unlink resumed>) = 0 [pid 4994] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 6396] <... open resumed>) = 4 [pid 6395] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6392] <... futex resumed>) = 0 [pid 6391] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6386] <... futex resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4996] umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] umount2("./46/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6396] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6395] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6392] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6391] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6386] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] lstat("./44/binderfs", [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6396] <... futex resumed>) = 1 [pid 6395] <... openat resumed>) = 5 [pid 6393] <... futex resumed>) = 0 [pid 6391] <... openat resumed>) = 5 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4994] lstat("./46/binderfs", [pid 6396] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6395] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6393] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6391] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] unlink("./44/binderfs" [pid 4994] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6396] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4998] <... unlink resumed>) = 0 [pid 4994] unlink("./46/binderfs" [pid 4998] umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] <... unlink resumed>) = 0 [pid 4994] umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6396] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6395] <... futex resumed>) = 1 [pid 6393] <... futex resumed>) = 0 [pid 6392] <... futex resumed>) = 0 [pid 6391] <... futex resumed>) = 1 [pid 6386] <... futex resumed>) = 0 [pid 6396] <... write resumed>) = 9 [pid 6395] open("./bus", O_RDWR [pid 6393] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6392] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6391] open("./bus", O_RDWR [pid 6386] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6396] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6395] <... open resumed>) = 6 [pid 6393] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6392] <... futex resumed>) = 0 [pid 6396] <... futex resumed>) = 0 [pid 6395] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6393] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6392] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6391] <... open resumed>) = 6 [pid 6386] <... futex resumed>) = 0 [pid 6396] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6395] <... futex resumed>) = 0 [pid 6393] <... futex resumed>) = 0 [pid 6392] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6391] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6386] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6396] <... openat resumed>) = 5 [pid 6395] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6393] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6392] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6391] <... futex resumed>) = 0 [pid 6386] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6396] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6395] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6393] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6392] <... futex resumed>) = 0 [pid 6391] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6386] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6396] <... futex resumed>) = 0 [pid 6395] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6393] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6392] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6391] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6386] <... futex resumed>) = 0 [pid 6396] open("./bus", O_RDWR [pid 6395] <... mmap resumed>) = 0x20000000 [pid 6393] <... futex resumed>) = 0 [pid 6391] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6386] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6396] <... open resumed>) = 6 [pid 6393] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6396] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6391] <... mmap resumed>) = 0x20000000 [pid 6393] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6395] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6396] <... futex resumed>) = 0 [pid 6395] <... futex resumed>) = 1 [pid 6393] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6391] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6392] <... futex resumed>) = 0 [pid 6396] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6395] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6393] <... futex resumed>) = 0 [pid 6392] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6391] <... futex resumed>) = 1 [pid 6386] <... futex resumed>) = 0 [pid 6396] <... mmap resumed>) = 0x20000000 [pid 6395] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6393] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6392] <... futex resumed>) = 0 [pid 6391] sendfile(4, 5, NULL, 2147483713 [pid 6386] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [ 139.152893][ T5457] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 139.165846][ T5076] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 139.178436][ T74] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 139.186241][ T5457] EXT4-fs (loop2): This should not happen!! Data will be lost [ 139.186241][ T5457] [pid 6396] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6395] sendfile(4, 5, NULL, 2147483713 [pid 6393] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6392] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6396] <... futex resumed>) = 0 [pid 6386] <... futex resumed>) = 0 [pid 6396] sendfile(4, 5, NULL, 2147483713 [pid 6393] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6386] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6393] <... futex resumed>) = 0 [ 139.219812][ T6391] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 139.226682][ T5076] EXT4-fs (loop4): This should not happen!! Data will be lost [ 139.226682][ T5076] [ 139.238510][ T6391] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 139.245889][ T74] EXT4-fs (loop0): This should not happen!! Data will be lost [ 139.245889][ T74] [pid 6393] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6392] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6393] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6392] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6386] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6393] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6392] <... futex resumed>) = 0 [pid 6386] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6393] <... futex resumed>) = 0 [pid 6386] <... futex resumed>) = 0 [pid 6393] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6392] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6393] <... mmap resumed>) = 0x7f5c234cf000 [pid 6392] <... mmap resumed>) = 0x7f5c234cf000 [pid 6386] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6393] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 6392] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 6393] <... mprotect resumed>) = 0 [pid 6386] <... mmap resumed>) = 0x7f5c234cf000 [pid 6393] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6392] <... mprotect resumed>) = 0 [pid 6386] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 6393] <... clone resumed>, parent_tid=[6405], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6405 [pid 6392] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6386] <... mprotect resumed>) = 0 [pid 4996] <... umount2 resumed>) = 0 [pid 6393] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6386] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6393] <... futex resumed>) = 0 [pid 6392] <... clone resumed>, parent_tid=[6406], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6406 [pid 6393] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6392] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6386] <... clone resumed>, parent_tid=[6407], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6407 [pid 6392] <... futex resumed>) = 0 [pid 6386] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6392] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6386] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6406 attached [pid 6386] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 139.269110][ T6391] EXT4-fs (loop5): This should not happen!! Data will be lost [ 139.269110][ T6391] [ 139.271785][ T6396] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 139.295928][ T6395] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 6406] set_robust_list(0x7f5c234ef9e0, 24) = 0 [pid 4998] <... umount2 resumed>) = 0 [pid 4996] umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6406] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4996] lstat("./46/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 6407 attached ./strace-static-x86_64: Process 6405 attached [pid 4998] umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] <... umount2 resumed>) = 0 [pid 6407] set_robust_list(0x7f5c234ef9e0, 24 [pid 6405] set_robust_list(0x7f5c234ef9e0, 24 [pid 6407] <... set_robust_list resumed>) = 0 [pid 6405] <... set_robust_list resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] openat(AT_FDCWD, "./46/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4996] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] getdents64(4, 0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4996] getdents64(4, 0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4996] close(4) = 0 [pid 4996] rmdir("./46/file0") = 0 [pid 6407] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6405] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 4998] lstat("./44/file0", [pid 4996] getdents64(3, [pid 6393] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4996] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4996] close(3 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] <... close resumed>) = 0 [pid 4996] rmdir("./46") = 0 [ 139.353653][ T6396] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 139.360784][ T6391] EXT4-fs (loop5): Total free blocks count 0 [ 139.373733][ T6395] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 139.375139][ T6396] EXT4-fs (loop1): This should not happen!! Data will be lost [ 139.375139][ T6396] [ 139.397584][ T6396] EXT4-fs (loop1): Total free blocks count 0 [pid 4996] mkdir("./47", 0777 [pid 6392] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6386] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4998] umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] <... mkdir resumed>) = 0 [pid 4994] lstat("./46/file0", [pid 4996] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4996] <... openat resumed>) = 3 [pid 4994] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4996] close(3) = 0 [pid 4996] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556fb95d0) = 6408 [pid 4998] openat(AT_FDCWD, "./44/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4994] umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6408 attached [pid 6408] set_robust_list(0x555556fb95e0, 24 [pid 4998] <... openat resumed>) = 4 [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6408] <... set_robust_list resumed>) = 0 [pid 6408] chdir("./47") = 0 [pid 4998] fstat(4, [pid 4994] openat(AT_FDCWD, "./46/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] <... openat resumed>) = 4 [pid 4998] getdents64(4, [pid 6408] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4994] fstat(4, [pid 6408] <... prctl resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [ 139.410766][ T6396] EXT4-fs (loop1): Free/Dirty block details [ 139.419706][ T6391] EXT4-fs (loop5): Free/Dirty block details [ 139.424606][ T6396] EXT4-fs (loop1): free_blocks=2415919104 [ 139.435937][ T6396] EXT4-fs (loop1): dirty_blocks=16 [ 139.441582][ T6396] EXT4-fs (loop1): Block reservation details [ 139.448826][ T6396] EXT4-fs (loop1): i_reserved_data_blocks=1 [pid 6408] setpgid(0, 0 [pid 6405] <... ioctl resumed>) = 0 [pid 6396] <... sendfile resumed>) = 63 [pid 4998] getdents64(4, [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6408] <... setpgid resumed>) = 0 [pid 6408] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6408] write(3, "1000", 4) = 4 [pid 6408] close(3 [pid 6405] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6396] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4994] getdents64(4, [pid 6408] <... close resumed>) = 0 [pid 6408] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6408] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6408] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c2b7f0000 [pid 6405] <... futex resumed>) = 0 [pid 6396] <... futex resumed>) = 0 [pid 6408] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6393] exit_group(0 [pid 4998] close(4 [pid 4994] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 6408] <... mprotect resumed>) = 0 [pid 6408] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6409], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6409 [pid 6408] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6408] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6393] <... exit_group resumed>) = ? [pid 4998] <... close resumed>) = 0 [pid 4994] getdents64(4, [pid 6396] +++ exited with 0 +++ ./strace-static-x86_64: Process 6409 attached [pid 6409] set_robust_list(0x7f5c2b8109e0, 24 [pid 6405] +++ exited with 0 +++ [pid 6393] +++ exited with 0 +++ [pid 4998] rmdir("./44/file0" [pid 4994] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 6409] <... set_robust_list resumed>) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 4995] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6393, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 4994] close(4 [pid 6409] memfd_create("syzkaller", 0) = 3 [pid 6409] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5c233f0000 [pid 4995] restart_syscall(<... resuming interrupted clone ...> [pid 4994] <... close resumed>) = 0 [ 139.457275][ T6391] EXT4-fs (loop5): free_blocks=2415919104 [ 139.458882][ T6395] EXT4-fs (loop3): This should not happen!! Data will be lost [ 139.458882][ T6395] [ 139.468605][ T6391] EXT4-fs (loop5): dirty_blocks=16 [ 139.473695][ T6395] EXT4-fs (loop3): Total free blocks count 0 [ 139.485017][ T6395] EXT4-fs (loop3): Free/Dirty block details [ 139.495036][ T6395] EXT4-fs (loop3): free_blocks=2415919104 [ 139.502095][ T6395] EXT4-fs (loop3): dirty_blocks=16 [pid 4998] getdents64(3, 0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4995] <... restart_syscall resumed>) = 0 [pid 4994] rmdir("./46/file0" [pid 4998] close(3 [pid 4994] <... rmdir resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 6406] <... ioctl resumed>) = 0 [pid 6395] <... sendfile resumed>) = 63 [pid 4998] rmdir("./44" [pid 4994] getdents64(3, [pid 6406] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6406] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6409] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4998] <... rmdir resumed>) = 0 [pid 4995] umount2("./45", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 6395] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] mkdir("./45", 0777 [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] close(3 [pid 6407] <... ioctl resumed>) = 0 [pid 6395] <... futex resumed>) = 0 [pid 6392] exit_group(0 [pid 6407] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6406] <... futex resumed>) = ? [pid 6392] <... exit_group resumed>) = ? [pid 6391] <... sendfile resumed>) = 63 [pid 4998] <... mkdir resumed>) = 0 [pid 4995] openat(AT_FDCWD, "./45", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4994] <... close resumed>) = 0 [pid 6407] <... futex resumed>) = 0 [pid 6406] +++ exited with 0 +++ [pid 6395] +++ exited with 0 +++ [pid 6392] +++ exited with 0 +++ [pid 4998] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6407] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6391] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... openat resumed>) = 3 [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6392, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 4995] <... openat resumed>) = 3 [pid 4994] rmdir("./46" [pid 6391] <... futex resumed>) = 0 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 4995] fstat(3, [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4994] <... rmdir resumed>) = 0 [pid 6391] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6386] exit_group(0 [pid 4998] close(3 [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] mkdir("./47", 0777 [pid 6409] <... write resumed>) = 1048576 [pid 6407] <... futex resumed>) = ? [pid 6391] <... futex resumed>) = ? [pid 6386] <... exit_group resumed>) = ? [pid 4998] <... close resumed>) = 0 [pid 4995] getdents64(3, [pid 4994] <... mkdir resumed>) = 0 [pid 6409] munmap(0x7f5c233f0000, 1048576 [pid 6407] +++ exited with 0 +++ [pid 6391] +++ exited with 0 +++ [pid 6386] +++ exited with 0 +++ [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4995] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4994] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6409] <... munmap resumed>) = 0 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6386, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 4997] umount2("./46", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] umount2("./45/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] <... openat resumed>) = 3 [pid 6409] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4999] restart_syscall(<... resuming interrupted clone ...> [pid 4998] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6410 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] ioctl(3, LOOP_CLR_FD [pid 6409] <... openat resumed>) = 4 [pid 4999] <... restart_syscall resumed>) = 0 [pid 4997] openat(AT_FDCWD, "./46", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4995] lstat("./45/binderfs", [pid 4994] <... ioctl resumed>) = -1 ENXIO (No such device or address) [ 139.508018][ T6395] EXT4-fs (loop3): Block reservation details [ 139.513085][ T6391] EXT4-fs (loop5): Block reservation details [ 139.514444][ T6395] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 139.528370][ T6391] EXT4-fs (loop5): i_reserved_data_blocks=1 [pid 6409] ioctl(4, LOOP_SET_FD, 3 [pid 4997] <... openat resumed>) = 3 [pid 4995] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4994] close(3 [pid 4997] fstat(3, [pid 4995] unlink("./45/binderfs" [pid 4994] <... close resumed>) = 0 [pid 4999] umount2("./45", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] <... unlink resumed>) = 0 [pid 4994] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] getdents64(3, [pid 4995] umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] openat(AT_FDCWD, "./45", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4994] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6411 [pid 4999] <... openat resumed>) = 3 [pid 4997] umount2("./46/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] fstat(3, [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] lstat("./46/binderfs", [pid 4999] getdents64(3, [pid 4997] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4997] unlink("./46/binderfs" [pid 4999] umount2("./45/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... unlink resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6411 attached [pid 6409] <... ioctl resumed>) = 0 [pid 4999] lstat("./45/binderfs", [pid 6411] set_robust_list(0x555556fb95e0, 24 [pid 6409] close(3 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6411] <... set_robust_list resumed>) = 0 [pid 6409] <... close resumed>) = 0 [pid 4999] unlink("./45/binderfs" [pid 6411] chdir("./47" [pid 6409] mkdir("./file0", 0777 [pid 4999] <... unlink resumed>) = 0 [pid 6411] <... chdir resumed>) = 0 [pid 6409] <... mkdir resumed>) = 0 [pid 4999] umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6411] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6409] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6411] <... prctl resumed>) = 0 [pid 6411] setpgid(0, 0) = 0 [pid 6411] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6411] write(3, "1000", 4) = 4 [pid 6411] close(3) = 0 [pid 6411] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6411] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6411] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c2b7f0000 [pid 6411] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6411] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6412], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6412 [pid 6411] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6411] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6412 attached [pid 6412] set_robust_list(0x7f5c2b8109e0, 24) = 0 [pid 6412] memfd_create("syzkaller", 0) = 3 [pid 6412] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5c233f0000 [ 139.564082][ T6409] loop2: detected capacity change from 0 to 2048 [ 139.580952][ T11] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 139.595083][ T5608] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 ./strace-static-x86_64: Process 6410 attached [pid 6410] set_robust_list(0x555556fb95e0, 24) = 0 [pid 6410] chdir("./45") = 0 [pid 6410] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6410] setpgid(0, 0) = 0 [pid 6410] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6410] write(3, "1000", 4) = 4 [pid 6410] close(3) = 0 [pid 6410] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6410] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6410] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6412] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6409] <... mount resumed>) = 0 [pid 6410] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6409] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6410] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6409] <... openat resumed>) = 3 [pid 6410] <... mprotect resumed>) = 0 [pid 6409] chdir("./file0" [pid 6410] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6409] <... chdir resumed>) = 0 [pid 6409] ioctl(4, LOOP_CLR_FD [pid 6410] <... clone resumed>, parent_tid=[6415], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6415 [pid 6409] <... ioctl resumed>) = 0 [ 139.610181][ T74] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 139.645107][ T74] EXT4-fs (loop5): This should not happen!! Data will be lost [ 139.645107][ T74] [ 139.645725][ T11] EXT4-fs (loop1): This should not happen!! Data will be lost [ 139.645725][ T11] [pid 6409] close(4 [pid 6410] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6409] <... close resumed>) = 0 [pid 6409] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6410] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6409] <... futex resumed>) = 1 [pid 6408] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6415 attached [pid 6415] set_robust_list(0x7f5c2b8109e0, 24) = 0 [pid 6415] memfd_create("syzkaller", 0 [pid 6412] <... write resumed>) = 1048576 [pid 6415] <... memfd_create resumed>) = 3 [pid 6415] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5c233f0000 [pid 6412] munmap(0x7f5c233f0000, 1048576 [pid 6409] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6408] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6408] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6412] <... munmap resumed>) = 0 [pid 6409] <... open resumed>) = 4 [pid 6409] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6408] <... futex resumed>) = 0 [pid 6409] <... futex resumed>) = 1 [pid 6408] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6415] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6412] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6409] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6408] <... futex resumed>) = 0 [pid 6412] <... openat resumed>) = 4 [pid 6408] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6412] ioctl(4, LOOP_SET_FD, 3 [pid 6409] <... write resumed>) = 9 [pid 6412] <... ioctl resumed>) = 0 [pid 6409] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] <... umount2 resumed>) = 0 [pid 6409] <... futex resumed>) = 1 [pid 6408] <... futex resumed>) = 0 [pid 6409] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6408] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6409] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6409] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6408] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6409] <... openat resumed>) = 5 [pid 6409] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... umount2 resumed>) = 0 [ 139.667277][ T5608] EXT4-fs (loop3): This should not happen!! Data will be lost [ 139.667277][ T5608] [ 139.705896][ T6412] loop0: detected capacity change from 0 to 2048 [pid 4999] umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./45/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6409] <... futex resumed>) = 1 [pid 6408] <... futex resumed>) = 0 [pid 4999] umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./45/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, [pid 6412] close(3 [pid 4999] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 6412] <... close resumed>) = 0 [pid 4999] getdents64(4, [pid 6412] mkdir("./file0", 0777 [pid 4999] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 6412] <... mkdir resumed>) = 0 [pid 6409] open("./bus", O_RDWR [pid 6408] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6412] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6409] <... open resumed>) = 6 [pid 6408] <... futex resumed>) = 0 [pid 4999] close(4 [pid 6409] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6408] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6409] <... futex resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 6408] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4997] umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6409] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6408] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] rmdir("./45/file0" [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6409] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6408] <... futex resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 4997] lstat("./46/file0", [pid 6409] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6408] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] getdents64(3, 0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./45" [pid 6409] <... mmap resumed>) = 0x20000000 [pid 4999] <... rmdir resumed>) = 0 [pid 4997] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6409] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] mkdir("./46", 0777 [pid 6415] <... write resumed>) = 1048576 [pid 6409] <... futex resumed>) = 1 [pid 6408] <... futex resumed>) = 0 [pid 4999] <... mkdir resumed>) = 0 [pid 4997] umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] <... umount2 resumed>) = 0 [pid 6415] munmap(0x7f5c233f0000, 1048576 [pid 6409] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6408] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6415] <... munmap resumed>) = 0 [pid 6409] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6408] <... futex resumed>) = 0 [pid 4999] <... openat resumed>) = 3 [pid 4997] openat(AT_FDCWD, "./46/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6415] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6409] sendfile(4, 5, NULL, 2147483713 [pid 6408] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] ioctl(3, LOOP_CLR_FD [pid 4997] <... openat resumed>) = 4 [pid 4995] lstat("./45/file0", [pid 6415] <... openat resumed>) = 4 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 6415] ioctl(4, LOOP_SET_FD, 3 [pid 4997] fstat(4, [pid 4995] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6412] <... mount resumed>) = 0 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6418 [pid 6412] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 4997] getdents64(4, [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6412] <... openat resumed>) = 3 [pid 6412] chdir("./file0" [pid 4997] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4995] openat(AT_FDCWD, "./45/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6412] <... chdir resumed>) = 0 [pid 4997] getdents64(4, ./strace-static-x86_64: Process 6418 attached [pid 6412] ioctl(4, LOOP_CLR_FD [pid 4997] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4995] <... openat resumed>) = 4 [pid 6418] set_robust_list(0x555556fb95e0, 24 [pid 6415] <... ioctl resumed>) = 0 [pid 6412] <... ioctl resumed>) = 0 [pid 4997] close(4 [pid 4995] fstat(4, [pid 6418] <... set_robust_list resumed>) = 0 [pid 6415] close(3 [pid 6412] close(4 [pid 4997] <... close resumed>) = 0 [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6412] <... close resumed>) = 0 [pid 4997] rmdir("./46/file0" [pid 4995] getdents64(4, [pid 6418] chdir("./46" [pid 6415] <... close resumed>) = 0 [pid 6412] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] <... rmdir resumed>) = 0 [pid 4995] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 6412] <... futex resumed>) = 1 [pid 6418] <... chdir resumed>) = 0 [pid 6415] mkdir("./file0", 0777 [pid 6411] <... futex resumed>) = 0 [pid 4997] getdents64(3, [pid 4995] getdents64(4, [pid 6418] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6415] <... mkdir resumed>) = 0 [pid 6412] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6411] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4995] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 6418] <... prctl resumed>) = 0 [pid 6415] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6412] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6411] <... futex resumed>) = 0 [pid 4997] close(3 [pid 4995] close(4 [pid 6418] setpgid(0, 0 [pid 6412] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6411] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4997] <... close resumed>) = 0 [pid 4995] <... close resumed>) = 0 [pid 6418] <... setpgid resumed>) = 0 [pid 6412] <... open resumed>) = 4 [pid 4997] rmdir("./46" [pid 4995] rmdir("./45/file0" [pid 6418] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6412] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] <... rmdir resumed>) = 0 [pid 4995] <... rmdir resumed>) = 0 [pid 6412] <... futex resumed>) = 1 [pid 6411] <... futex resumed>) = 0 [pid 4997] mkdir("./47", 0777 [pid 4995] getdents64(3, [pid 6418] <... openat resumed>) = 3 [pid 6412] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6411] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6408] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4997] <... mkdir resumed>) = 0 [pid 4995] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 6418] write(3, "1000", 4 [pid 6412] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6411] <... futex resumed>) = 0 [pid 6408] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4995] close(3 [pid 6418] <... write resumed>) = 4 [pid 6412] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6411] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6408] <... futex resumed>) = 0 [pid 4997] <... openat resumed>) = 3 [pid 4995] <... close resumed>) = 0 [pid 6418] close(3 [pid 6412] <... write resumed>) = 9 [pid 6408] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4997] ioctl(3, LOOP_CLR_FD [pid 4995] rmdir("./45" [pid 6418] <... close resumed>) = 0 [pid 6412] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6408] <... mmap resumed>) = 0x7f5c234cf000 [pid 4997] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4995] <... rmdir resumed>) = 0 [pid 6418] symlink("/dev/binderfs", "./binderfs" [pid 6412] <... futex resumed>) = 1 [pid 6411] <... futex resumed>) = 0 [pid 6408] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 4997] close(3 [pid 4995] mkdir("./46", 0777 [pid 6418] <... symlink resumed>) = 0 [pid 6412] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6411] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6408] <... mprotect resumed>) = 0 [pid 4997] <... close resumed>) = 0 [pid 4995] <... mkdir resumed>) = 0 [pid 6418] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6412] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 139.794880][ T6409] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 139.814206][ T6415] loop4: detected capacity change from 0 to 2048 [ 139.817660][ T6409] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 6411] <... futex resumed>) = 0 [pid 6408] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4995] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6418] <... futex resumed>) = 0 [pid 6415] <... mount resumed>) = 0 [pid 6412] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6411] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4995] <... openat resumed>) = 3 [pid 6418] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6415] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6412] <... openat resumed>) = 5 [pid 6408] <... clone resumed>, parent_tid=[6421], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6421 [pid 4997] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6422 [pid 4995] ioctl(3, LOOP_CLR_FD [pid 6418] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6415] <... openat resumed>) = 3 [pid 6412] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6408] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6418] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6415] chdir("./file0" [pid 6412] <... futex resumed>) = 1 [pid 6411] <... futex resumed>) = 0 [pid 6408] <... futex resumed>) = 0 [pid 4995] close(3 [pid 6418] <... mprotect resumed>) = 0 [pid 6415] <... chdir resumed>) = 0 [pid 6412] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6411] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6408] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4995] <... close resumed>) = 0 [pid 6418] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6415] ioctl(4, LOOP_CLR_FD [pid 6412] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6411] <... futex resumed>) = 0 [pid 4995] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6423 attached ./strace-static-x86_64: Process 6422 attached ./strace-static-x86_64: Process 6421 attached [pid 6415] <... ioctl resumed>) = 0 [pid 6412] open("./bus", O_RDWR [pid 6411] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6423] set_robust_list(0x7f5c2b8109e0, 24 [pid 6422] set_robust_list(0x555556fb95e0, 24 [pid 6421] set_robust_list(0x7f5c234ef9e0, 24 [pid 6418] <... clone resumed>, parent_tid=[6423], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6423 [pid 6415] close(4 [pid 6412] <... open resumed>) = 6 [pid 4995] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6424 [pid 6423] <... set_robust_list resumed>) = 0 [pid 6422] <... set_robust_list resumed>) = 0 [pid 6421] <... set_robust_list resumed>) = 0 [pid 6418] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6415] <... close resumed>) = 0 [pid 6412] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6423] memfd_create("syzkaller", 0 [pid 6421] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6415] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6412] <... futex resumed>) = 1 [pid 6411] <... futex resumed>) = 0 [pid 6423] <... memfd_create resumed>) = 3 [pid 6422] chdir("./47" [pid 6418] <... futex resumed>) = 0 [pid 6415] <... futex resumed>) = 1 [pid 6412] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6411] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6410] <... futex resumed>) = 0 [pid 6423] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6422] <... chdir resumed>) = 0 [pid 6418] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6415] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6412] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6411] <... futex resumed>) = 0 [pid 6410] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6424 attached [pid 6423] <... mmap resumed>) = 0x7f5c233f0000 [pid 6422] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6415] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6412] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6411] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6410] <... futex resumed>) = 0 [pid 6422] <... prctl resumed>) = 0 [pid 6415] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6412] <... mmap resumed>) = 0x20000000 [pid 6410] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6422] setpgid(0, 0 [pid 6415] <... open resumed>) = 4 [pid 6412] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6422] <... setpgid resumed>) = 0 [pid 6415] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6412] <... futex resumed>) = 1 [pid 6411] <... futex resumed>) = 0 [pid 6424] set_robust_list(0x555556fb95e0, 24 [pid 6422] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6415] <... futex resumed>) = 1 [pid 6412] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6411] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6410] <... futex resumed>) = 0 [pid 6424] <... set_robust_list resumed>) = 0 [pid 6422] <... openat resumed>) = 3 [pid 6415] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6412] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6411] <... futex resumed>) = 0 [pid 6410] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6424] chdir("./46" [pid 6423] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6422] write(3, "1000", 4 [pid 6415] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 139.906514][ T6409] EXT4-fs (loop2): This should not happen!! Data will be lost [ 139.906514][ T6409] [pid 6412] sendfile(4, 5, NULL, 2147483713 [pid 6411] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6410] <... futex resumed>) = 0 [pid 6424] <... chdir resumed>) = 0 [pid 6422] <... write resumed>) = 4 [pid 6415] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6408] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6422] close(3 [pid 6410] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6424] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6422] <... close resumed>) = 0 [pid 6415] <... write resumed>) = 9 [pid 6422] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6423] <... write resumed>) = 1048576 [pid 6422] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6423] munmap(0x7f5c233f0000, 1048576 [pid 6422] <... futex resumed>) = 0 [pid 6423] <... munmap resumed>) = 0 [pid 6422] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6424] <... prctl resumed>) = 0 [pid 6422] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6415] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6423] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6422] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6424] setpgid(0, 0 [pid 6423] <... openat resumed>) = 4 [pid 6422] <... mprotect resumed>) = 0 [pid 6415] <... futex resumed>) = 1 [pid 6410] <... futex resumed>) = 0 [pid 6423] ioctl(4, LOOP_SET_FD, 3 [ 139.951106][ T6412] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 139.959902][ T6409] EXT4-fs (loop2): Total free blocks count 0 [ 139.966644][ T6412] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 139.985221][ T6409] EXT4-fs (loop2): Free/Dirty block details [ 139.986330][ T6412] EXT4-fs (loop0): This should not happen!! Data will be lost [ 139.986330][ T6412] [pid 6422] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6424] <... setpgid resumed>) = 0 [pid 6415] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6410] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6422] <... clone resumed>, parent_tid=[6425], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6425 [pid 6422] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6424] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6422] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6415] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6410] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6425 attached [pid 6425] set_robust_list(0x7f5c2b8109e0, 24 [pid 6424] <... openat resumed>) = 3 [pid 6415] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6411] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6410] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6425] <... set_robust_list resumed>) = 0 [pid 6424] write(3, "1000", 4 [pid 6415] <... openat resumed>) = 5 [pid 6411] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6425] memfd_create("syzkaller", 0) = 3 [pid 6425] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5c233f0000 [ 140.002092][ T6412] EXT4-fs (loop0): Total free blocks count 0 [ 140.008950][ T6412] EXT4-fs (loop0): Free/Dirty block details [ 140.012893][ T6423] loop5: detected capacity change from 0 to 2048 [ 140.015944][ T6412] EXT4-fs (loop0): free_blocks=2415919104 [ 140.026740][ T6409] EXT4-fs (loop2): free_blocks=2415919104 [ 140.028297][ T6412] EXT4-fs (loop0): dirty_blocks=16 [ 140.038806][ T6412] EXT4-fs (loop0): Block reservation details [ 140.045722][ T6412] EXT4-fs (loop0): i_reserved_data_blocks=1 [pid 6424] <... write resumed>) = 4 [pid 6423] <... ioctl resumed>) = 0 [pid 6415] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6412] <... sendfile resumed>) = 63 [pid 6411] <... futex resumed>) = 0 [pid 6424] close(3 [pid 6423] close(3 [pid 6421] <... ioctl resumed>) = 0 [pid 6415] <... futex resumed>) = 1 [pid 6412] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6411] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6410] <... futex resumed>) = 0 [pid 6409] <... sendfile resumed>) = 63 [pid 6424] <... close resumed>) = 0 [pid 6423] <... close resumed>) = 0 [pid 6421] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6415] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6412] <... futex resumed>) = 0 [pid 6411] <... mmap resumed>) = 0x7f5c234cf000 [pid 6410] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6409] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6424] symlink("/dev/binderfs", "./binderfs" [pid 6423] mkdir("./file0", 0777 [pid 6421] <... futex resumed>) = 0 [pid 6415] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6412] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6411] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 6410] <... futex resumed>) = 0 [pid 6409] <... futex resumed>) = 0 [pid 6424] <... symlink resumed>) = 0 [pid 6423] <... mkdir resumed>) = 0 [pid 6421] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6415] open("./bus", O_RDWR [pid 6424] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6423] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6411] <... mprotect resumed>) = 0 [pid 6410] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6409] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6408] exit_group(0 [pid 6424] <... futex resumed>) = 0 [pid 6421] <... futex resumed>) = ? [pid 6415] <... open resumed>) = 6 [pid 6411] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6409] <... futex resumed>) = ? [pid 6408] <... exit_group resumed>) = ? [pid 6425] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6424] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6421] +++ exited with 0 +++ [pid 6415] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6426 attached [pid 6424] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6415] <... futex resumed>) = 1 [pid 6411] <... clone resumed>, parent_tid=[6426], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6426 [pid 6410] <... futex resumed>) = 0 [pid 6409] +++ exited with 0 +++ [pid 6408] +++ exited with 0 +++ [pid 6426] set_robust_list(0x7f5c234ef9e0, 24 [pid 6424] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6415] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6411] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6410] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6426] <... set_robust_list resumed>) = 0 [pid 6424] <... mprotect resumed>) = 0 [pid 6415] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6411] <... futex resumed>) = 0 [pid 6410] <... futex resumed>) = 0 [pid 4996] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6408, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 6426] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6424] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6415] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6411] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6410] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4996] umount2("./47", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6426] <... ioctl resumed>) = 0 [pid 6424] <... clone resumed>, parent_tid=[6428], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6428 [pid 6415] <... mmap resumed>) = 0x20000000 [pid 4996] openat(AT_FDCWD, "./47", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6426] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6424] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6415] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... openat resumed>) = 3 ./strace-static-x86_64: Process 6428 attached [pid 6426] <... futex resumed>) = 1 [pid 6424] <... futex resumed>) = 0 [pid 6415] <... futex resumed>) = 1 [pid 6411] <... futex resumed>) = 0 [pid 6410] <... futex resumed>) = 0 [pid 4996] fstat(3, [pid 6428] set_robust_list(0x7f5c2b8109e0, 24 [pid 6426] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6424] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6423] <... mount resumed>) = 0 [pid 6415] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6411] exit_group(0 [pid 6410] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6428] <... set_robust_list resumed>) = 0 [pid 6426] <... futex resumed>) = ? [pid 6425] <... write resumed>) = 1048576 [pid 6423] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6415] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6412] <... futex resumed>) = ? [pid 6411] <... exit_group resumed>) = ? [pid 6410] <... futex resumed>) = 0 [pid 4996] getdents64(3, [pid 6428] memfd_create("syzkaller", 0 [pid 6426] +++ exited with 0 +++ [pid 6423] <... openat resumed>) = 3 [pid 6415] sendfile(4, 5, NULL, 2147483713 [pid 6412] +++ exited with 0 +++ [pid 6410] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4996] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 6428] <... memfd_create resumed>) = 3 [pid 6423] chdir("./file0" [pid 4996] umount2("./47/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6428] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6423] <... chdir resumed>) = 0 [pid 6411] +++ exited with 0 +++ [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6425] munmap(0x7f5c233f0000, 1048576 [pid 6423] ioctl(4, LOOP_CLR_FD [pid 4996] lstat("./47/binderfs", [pid 4994] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6411, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6423] <... ioctl resumed>) = 0 [pid 6423] close(4 [pid 4996] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6423] <... close resumed>) = 0 [ 140.053080][ T6409] EXT4-fs (loop2): dirty_blocks=16 [ 140.058452][ T6409] EXT4-fs (loop2): Block reservation details [ 140.064472][ T6409] EXT4-fs (loop2): i_reserved_data_blocks=1 [pid 6425] <... munmap resumed>) = 0 [pid 6425] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 4996] unlink("./47/binderfs" [pid 6423] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6425] ioctl(4, LOOP_SET_FD, 3 [pid 4996] <... unlink resumed>) = 0 [pid 6423] <... futex resumed>) = 1 [pid 6418] <... futex resumed>) = 0 [pid 4994] umount2("./47", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6423] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6418] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6428] <... mmap resumed>) = 0x7f5c233f0000 [pid 6423] <... open resumed>) = 4 [pid 6418] <... futex resumed>) = 0 [ 140.117528][ T6415] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 140.118202][ T6425] loop3: detected capacity change from 0 to 2048 [ 140.139345][ T5457] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 140.145978][ T6415] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 4994] openat(AT_FDCWD, "./47", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6428] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6423] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6418] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6410] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4994] <... openat resumed>) = 3 [pid 6410] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6410] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c234cf000 [pid 6410] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6410] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6430], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6430 [pid 6423] <... futex resumed>) = 0 [pid 6418] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4994] fstat(3, [pid 6423] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6410] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6418] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6423] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6418] <... futex resumed>) = 0 [pid 6410] <... futex resumed>) = 0 [pid 4994] getdents64(3, [pid 6423] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6418] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4994] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 6410] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6423] <... write resumed>) = 9 [pid 4994] umount2("./47/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6423] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6423] <... futex resumed>) = 1 [pid 6418] <... futex resumed>) = 0 [pid 4994] lstat("./47/binderfs", [pid 6423] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6418] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6423] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4994] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6423] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6418] <... futex resumed>) = 0 [pid 4994] unlink("./47/binderfs" [pid 6423] <... openat resumed>) = 5 [pid 6418] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4994] <... unlink resumed>) = 0 [pid 6423] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6418] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4994] umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6423] <... futex resumed>) = 0 [pid 6418] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6423] open("./bus", O_RDWR [pid 6418] <... futex resumed>) = 0 [pid 6428] <... write resumed>) = 1048576 [pid 6423] <... open resumed>) = 6 [pid 6418] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6430 attached [pid 6430] set_robust_list(0x7f5c234ef9e0, 24) = 0 [pid 6430] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6428] munmap(0x7f5c233f0000, 1048576 [pid 6423] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6418] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6425] <... ioctl resumed>) = 0 [pid 6425] close(3) = 0 [pid 6425] mkdir("./file0", 0777) = 0 [ 140.157584][ T5457] EXT4-fs (loop2): This should not happen!! Data will be lost [ 140.157584][ T5457] [ 140.172705][ T6415] EXT4-fs (loop4): This should not happen!! Data will be lost [ 140.172705][ T6415] [ 140.200444][ T6415] EXT4-fs (loop4): Total free blocks count 0 [pid 6425] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6423] <... futex resumed>) = 0 [pid 6418] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6423] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6418] <... futex resumed>) = 0 [pid 6428] <... munmap resumed>) = 0 [pid 6418] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6428] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6423] <... mmap resumed>) = 0x20000000 [pid 6428] <... openat resumed>) = 4 [pid 6423] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6428] ioctl(4, LOOP_SET_FD, 3 [pid 6423] <... futex resumed>) = 1 [pid 6418] <... futex resumed>) = 0 [pid 6410] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6428] <... ioctl resumed>) = 0 [pid 6423] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6418] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6423] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6418] <... futex resumed>) = 0 [pid 6423] sendfile(4, 5, NULL, 2147483713 [pid 6418] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6428] close(3) = 0 [ 140.207644][ T5608] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 140.225589][ T6415] EXT4-fs (loop4): Free/Dirty block details [ 140.228254][ T5608] EXT4-fs (loop0): This should not happen!! Data will be lost [ 140.228254][ T5608] [ 140.232137][ T6415] EXT4-fs (loop4): free_blocks=2415919104 [ 140.247646][ T6428] loop1: detected capacity change from 0 to 2048 [ 140.249151][ T6415] EXT4-fs (loop4): dirty_blocks=16 [pid 6428] mkdir("./file0", 0777) = 0 [pid 6428] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6415] <... sendfile resumed>) = 63 [pid 6415] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6430] <... ioctl resumed>) = 0 [pid 6415] <... futex resumed>) = 0 [pid 6415] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6430] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6430] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6410] exit_group(0 [pid 6430] <... futex resumed>) = ? [pid 6410] <... exit_group resumed>) = ? [pid 6430] +++ exited with 0 +++ [pid 6415] <... futex resumed>) = ? [pid 6415] +++ exited with 0 +++ [pid 6410] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6410, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 4998] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4998] umount2("./45", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./45", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./45/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./45/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./45/binderfs") = 0 [pid 4998] umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6418] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6418] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6418] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c234cf000 [pid 6418] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6418] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6435], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6435 [pid 6418] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6418] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6425] <... mount resumed>) = 0 [ 140.267070][ T6415] EXT4-fs (loop4): Block reservation details [ 140.274715][ T6415] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 140.292811][ T6423] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 6425] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 4996] <... umount2 resumed>) = 0 [pid 4996] umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] lstat("./47/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] openat(AT_FDCWD, "./47/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4996] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] getdents64(4, 0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4996] getdents64(4, 0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4996] close(4) = 0 [pid 4996] rmdir("./47/file0" [pid 6428] <... mount resumed>) = 0 [pid 6425] <... openat resumed>) = 3 [pid 4994] <... umount2 resumed>) = 0 [pid 4996] <... rmdir resumed>) = 0 [pid 4996] getdents64(3, 0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4996] close(3) = 0 [pid 4996] rmdir("./47") = 0 [pid 4996] mkdir("./48", 0777) = 0 [pid 4996] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 4996] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4996] close(3) = 0 [pid 4996] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556fb95d0) = 6436 ./strace-static-x86_64: Process 6436 attached ./strace-static-x86_64: Process 6435 attached [pid 6428] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6425] chdir("./file0" [pid 4994] umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6418] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6435] set_robust_list(0x7f5c234ef9e0, 24 [pid 6428] <... openat resumed>) = 3 [pid 6425] <... chdir resumed>) = 0 [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6436] set_robust_list(0x555556fb95e0, 24 [pid 6435] <... set_robust_list resumed>) = 0 [pid 6428] chdir("./file0" [pid 6425] ioctl(4, LOOP_CLR_FD [pid 4994] lstat("./47/file0", [pid 6428] <... chdir resumed>) = 0 [pid 6425] <... ioctl resumed>) = 0 [pid 6428] ioctl(4, LOOP_CLR_FD [pid 6425] close(4 [pid 6435] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 4994] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6428] <... ioctl resumed>) = 0 [pid 6425] <... close resumed>) = 0 [pid 6428] close(4 [ 140.326256][ T6423] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 140.339257][ T5457] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 140.349862][ T6423] EXT4-fs (loop5): This should not happen!! Data will be lost [ 140.349862][ T6423] [ 140.364887][ T6423] EXT4-fs (loop5): Total free blocks count 0 [pid 6425] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6428] <... close resumed>) = 0 [pid 6425] <... futex resumed>) = 1 [pid 6422] <... futex resumed>) = 0 [pid 6422] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6428] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6425] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6422] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6428] <... futex resumed>) = 1 [pid 6424] <... futex resumed>) = 0 [pid 6424] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6428] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6424] <... futex resumed>) = 0 [pid 6424] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6436] <... set_robust_list resumed>) = 0 [pid 6428] <... open resumed>) = 4 [pid 6425] <... open resumed>) = 4 [pid 4994] umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6428] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6425] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6424] <... futex resumed>) = 0 [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6424] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6436] chdir("./48" [pid 6428] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6425] <... futex resumed>) = 1 [pid 6424] <... futex resumed>) = 0 [pid 6422] <... futex resumed>) = 0 [pid 4994] openat(AT_FDCWD, "./47/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6422] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6425] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6424] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6422] <... futex resumed>) = 0 [pid 4994] <... openat resumed>) = 4 [pid 6422] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6428] <... write resumed>) = 9 [pid 6425] <... write resumed>) = 9 [pid 4994] fstat(4, [pid 6428] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6425] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6428] <... futex resumed>) = 1 [pid 6425] <... futex resumed>) = 1 [pid 6424] <... futex resumed>) = 0 [pid 6422] <... futex resumed>) = 0 [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6436] <... chdir resumed>) = 0 [pid 6428] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 6425] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6424] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6422] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] getdents64(4, [pid 6436] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6428] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6425] <... openat resumed>) = 5 [pid 6422] <... futex resumed>) = 0 [pid 6424] <... futex resumed>) = 0 [pid 6428] <... openat resumed>) = 5 [pid 6424] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6422] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6436] <... prctl resumed>) = 0 [pid 6428] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6425] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6424] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6422] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4994] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 6428] <... futex resumed>) = 0 [pid 6425] <... futex resumed>) = 0 [pid 6424] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6422] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] getdents64(4, [pid 6428] open("./bus", O_RDWR [pid 6425] open("./bus", O_RDWR [pid 6424] <... futex resumed>) = 0 [pid 6422] <... futex resumed>) = 0 [pid 4994] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 6428] <... open resumed>) = 6 [pid 6424] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6422] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4994] close(4 [pid 6428] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6425] <... open resumed>) = 6 [pid 4994] <... close resumed>) = 0 [pid 6428] <... futex resumed>) = 1 [pid 6424] <... futex resumed>) = 0 [pid 6428] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6425] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6424] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] rmdir("./47/file0" [pid 6428] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6425] <... futex resumed>) = 1 [pid 6424] <... futex resumed>) = 0 [pid 6422] <... futex resumed>) = 0 [pid 6422] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6428] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6425] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6424] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6422] <... futex resumed>) = 0 [pid 4994] <... rmdir resumed>) = 0 [pid 6436] setpgid(0, 0 [pid 6422] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6423] <... sendfile resumed>) = 63 [pid 6435] <... ioctl resumed>) = 0 [pid 6435] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6423] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6435] <... futex resumed>) = 0 [pid 6428] <... mmap resumed>) = 0x20000000 [pid 6435] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6423] <... futex resumed>) = 0 [pid 6423] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6418] exit_group(0 [pid 6436] <... setpgid resumed>) = 0 [pid 6435] <... futex resumed>) = ? [pid 6428] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6425] <... mmap resumed>) = 0x20000000 [pid 6423] <... futex resumed>) = ? [pid 6418] <... exit_group resumed>) = ? [ 140.374660][ T6423] EXT4-fs (loop5): Free/Dirty block details [ 140.383953][ T6423] EXT4-fs (loop5): free_blocks=2415919104 [ 140.393789][ T6423] EXT4-fs (loop5): dirty_blocks=16 [ 140.400247][ T6423] EXT4-fs (loop5): Block reservation details [ 140.400956][ T5457] EXT4-fs (loop4): This should not happen!! Data will be lost [ 140.400956][ T5457] [ 140.408649][ T6423] EXT4-fs (loop5): i_reserved_data_blocks=1 [pid 4994] getdents64(3, [pid 6436] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6435] +++ exited with 0 +++ [pid 6428] <... futex resumed>) = 1 [pid 6425] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6424] <... futex resumed>) = 0 [pid 6423] +++ exited with 0 +++ [pid 6418] +++ exited with 0 +++ [pid 4994] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 6436] <... openat resumed>) = 3 [pid 6425] <... futex resumed>) = 1 [pid 6424] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6422] <... futex resumed>) = 0 [pid 6428] sendfile(4, 5, NULL, 2147483713 [pid 4994] close(3 [pid 6436] write(3, "1000", 4 [pid 6425] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6424] <... futex resumed>) = 0 [pid 6422] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6418, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 6425] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6424] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6422] <... futex resumed>) = 0 [pid 4999] restart_syscall(<... resuming interrupted clone ...> [pid 4994] <... close resumed>) = 0 [pid 6425] sendfile(4, 5, NULL, 2147483713 [pid 6422] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] <... restart_syscall resumed>) = 0 [pid 4994] rmdir("./47" [pid 4999] umount2("./46", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./46", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4994] <... rmdir resumed>) = 0 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] mkdir("./48", 0777 [pid 4999] getdents64(3, [pid 6436] <... write resumed>) = 4 [pid 4999] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./46/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] <... mkdir resumed>) = 0 [pid 6436] close(3 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 4999] lstat("./46/binderfs", [pid 6436] <... close resumed>) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4994] <... openat resumed>) = 3 [pid 6436] symlink("/dev/binderfs", "./binderfs" [pid 4999] unlink("./46/binderfs" [pid 4994] ioctl(3, LOOP_CLR_FD [pid 6436] <... symlink resumed>) = 0 [pid 4999] <... unlink resumed>) = 0 [pid 4999] umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6436] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] close(3 [pid 6436] <... futex resumed>) = 0 [pid 4994] <... close resumed>) = 0 [pid 6436] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c2b7f0000 [pid 4994] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6436] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 6437 attached [pid 6437] set_robust_list(0x555556fb95e0, 24) = 0 [pid 6437] chdir("./48") = 0 [pid 6437] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6437] setpgid(0, 0) = 0 [pid 6437] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6437] write(3, "1000", 4) = 4 [pid 6437] close(3) = 0 [pid 6437] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6437] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6437] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c2b7f0000 [pid 6437] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6437] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6436] <... mprotect resumed>) = 0 [pid 4994] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6437 [pid 6436] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6437] <... clone resumed>, parent_tid=[6438], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6438 [pid 6437] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6437] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6438 attached [pid 6438] set_robust_list(0x7f5c2b8109e0, 24) = 0 [pid 6438] memfd_create("syzkaller", 0) = 3 [pid 6438] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5c233f0000 [ 140.449790][ T6428] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 140.466271][ T6425] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 140.485014][ T5608] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 6436] <... clone resumed>, parent_tid=[6439], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6439 [pid 6424] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6422] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) ./strace-static-x86_64: Process 6439 attached [pid 6439] set_robust_list(0x7f5c2b8109e0, 24) = 0 [pid 6439] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6436] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6424] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6422] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6436] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6424] <... futex resumed>) = 0 [pid 6422] <... futex resumed>) = 0 [pid 6439] <... futex resumed>) = 0 [pid 6439] memfd_create("syzkaller", 0 [pid 6424] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6422] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6439] <... memfd_create resumed>) = 3 [pid 6439] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6422] <... mmap resumed>) = 0x7f5c234cf000 [pid 6439] <... mmap resumed>) = 0x7f5c233f0000 [pid 6424] <... mmap resumed>) = 0x7f5c234cf000 [pid 6422] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 6438] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6424] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6422] <... mprotect resumed>) = 0 [pid 6424] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [ 140.495682][ T6425] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 140.511103][ T6428] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 6422] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6424] <... clone resumed>, parent_tid=[6440], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6440 [pid 6422] <... clone resumed>, parent_tid=[6441], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6441 [pid 6422] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6422] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 6441 attached ./strace-static-x86_64: Process 6440 attached [pid 6441] set_robust_list(0x7f5c234ef9e0, 24 [ 140.545573][ T6428] EXT4-fs (loop1): This should not happen!! Data will be lost [ 140.545573][ T6428] [ 140.567731][ T6428] EXT4-fs (loop1): Total free blocks count 0 [ 140.572990][ T5608] EXT4-fs (loop5): This should not happen!! Data will be lost [ 140.572990][ T5608] [ 140.573803][ T6428] EXT4-fs (loop1): Free/Dirty block details [pid 6440] set_robust_list(0x7f5c234ef9e0, 24 [pid 6441] <... set_robust_list resumed>) = 0 [pid 6440] <... set_robust_list resumed>) = 0 [pid 6439] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6440] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6441] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6424] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6440] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6424] <... futex resumed>) = 0 [pid 4998] umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6440] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6438] <... write resumed>) = 1048576 [pid 6424] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./45/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./45/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6438] munmap(0x7f5c233f0000, 1048576 [pid 4998] <... openat resumed>) = 4 [pid 4998] fstat(4, [pid 6422] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6438] <... munmap resumed>) = 0 [pid 4998] getdents64(4, [pid 6438] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 4998] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 6438] <... openat resumed>) = 4 [pid 4998] getdents64(4, [pid 6438] ioctl(4, LOOP_SET_FD, 3 [pid 4998] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./45/file0") = 0 [pid 4998] getdents64(3, 0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [ 140.590871][ T6425] EXT4-fs (loop3): This should not happen!! Data will be lost [ 140.590871][ T6425] [ 140.604239][ T6425] EXT4-fs (loop3): Total free blocks count 0 [ 140.610974][ T6425] EXT4-fs (loop3): Free/Dirty block details [ 140.626571][ T6438] loop0: detected capacity change from 0 to 2048 [ 140.637347][ T6428] EXT4-fs (loop1): free_blocks=2415919104 [pid 4998] rmdir("./45") = 0 [pid 4998] mkdir("./46", 0777 [pid 6439] <... write resumed>) = 1048576 [pid 4998] <... mkdir resumed>) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4999] <... umount2 resumed>) = 0 [pid 4998] <... openat resumed>) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556fb95d0) = 6442 [pid 6439] munmap(0x7f5c233f0000, 1048576 [pid 6424] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4999] umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6439] <... munmap resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6439] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4999] lstat("./46/file0", ./strace-static-x86_64: Process 6442 attached [pid 6439] <... openat resumed>) = 4 [pid 6438] <... ioctl resumed>) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6442] set_robust_list(0x555556fb95e0, 24 [pid 6439] ioctl(4, LOOP_SET_FD, 3 [pid 6438] close(3 [pid 4999] umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6442] <... set_robust_list resumed>) = 0 [pid 6438] <... close resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6442] chdir("./46" [pid 6438] mkdir("./file0", 0777 [pid 4999] openat(AT_FDCWD, "./46/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6442] <... chdir resumed>) = 0 [pid 6438] <... mkdir resumed>) = 0 [pid 4999] <... openat resumed>) = 4 [pid 6442] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6438] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 4999] fstat(4, [pid 6442] <... prctl resumed>) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6442] setpgid(0, 0 [pid 4999] getdents64(4, [pid 6442] <... setpgid resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 6442] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4999] getdents64(4, [pid 6442] <... openat resumed>) = 3 [pid 4999] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 6442] write(3, "1000", 4 [pid 4999] close(4 [pid 6442] <... write resumed>) = 4 [pid 4999] <... close resumed>) = 0 [pid 6442] close(3 [pid 4999] rmdir("./46/file0" [pid 6442] <... close resumed>) = 0 [pid 6439] <... ioctl resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 6442] symlink("/dev/binderfs", "./binderfs" [pid 6439] close(3 [pid 4999] getdents64(3, [pid 6442] <... symlink resumed>) = 0 [pid 6439] <... close resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 6442] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6439] mkdir("./file0", 0777 [pid 4999] close(3 [pid 6442] <... futex resumed>) = 0 [pid 6439] <... mkdir resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 6442] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6439] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 4999] rmdir("./46" [pid 6442] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 4999] <... rmdir resumed>) = 0 [pid 6442] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [ 140.644544][ T6425] EXT4-fs (loop3): free_blocks=2415919104 [ 140.651898][ T6428] EXT4-fs (loop1): dirty_blocks=16 [ 140.674319][ T6439] loop2: detected capacity change from 0 to 2048 [ 140.682643][ T6425] EXT4-fs (loop3): dirty_blocks=16 [pid 4999] mkdir("./47", 0777 [pid 6442] <... mprotect resumed>) = 0 [pid 4999] <... mkdir resumed>) = 0 [pid 6442] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4999] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 6442] <... clone resumed>, parent_tid=[6444], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6444 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 6442] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6442] <... futex resumed>) = 0 [pid 4999] close(3 [pid 6442] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4999] <... close resumed>) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556fb95d0) = 6446 ./strace-static-x86_64: Process 6444 attached [pid 6444] set_robust_list(0x7f5c2b8109e0, 24) = 0 [pid 6444] memfd_create("syzkaller", 0) = 3 [pid 6444] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5c233f0000 ./strace-static-x86_64: Process 6446 attached [pid 6438] <... mount resumed>) = 0 [pid 6440] <... ioctl resumed>) = 0 [pid 6446] set_robust_list(0x555556fb95e0, 24 [pid 6438] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6446] <... set_robust_list resumed>) = 0 [pid 6441] <... ioctl resumed>) = 0 [pid 6440] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6438] <... openat resumed>) = 3 [pid 6428] <... sendfile resumed>) = 63 [pid 6425] <... sendfile resumed>) = 63 [pid 6446] chdir("./47" [pid 6438] chdir("./file0" [pid 6446] <... chdir resumed>) = 0 [pid 6438] <... chdir resumed>) = 0 [pid 6446] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6441] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6438] ioctl(4, LOOP_CLR_FD [pid 6440] <... futex resumed>) = 0 [pid 6446] <... prctl resumed>) = 0 [pid 6438] <... ioctl resumed>) = 0 [pid 6428] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6440] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6446] setpgid(0, 0 [pid 6441] <... futex resumed>) = 0 [pid 6438] close(4 [pid 6428] <... futex resumed>) = 0 [pid 6425] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6446] <... setpgid resumed>) = 0 [pid 6444] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6441] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6438] <... close resumed>) = 0 [pid 6428] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6425] <... futex resumed>) = 0 [pid 6424] exit_group(0 [pid 6422] exit_group(0 [pid 6446] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6439] <... mount resumed>) = 0 [pid 6438] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6446] <... openat resumed>) = 3 [pid 6439] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6438] <... futex resumed>) = 1 [pid 6437] <... futex resumed>) = 0 [pid 6446] write(3, "1000", 4 [pid 6439] <... openat resumed>) = 3 [pid 6438] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6437] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6446] <... write resumed>) = 4 [pid 6444] <... write resumed>) = 1048576 [pid 6441] <... futex resumed>) = ? [pid 6440] <... futex resumed>) = ? [pid 6439] chdir("./file0" [pid 6438] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6437] <... futex resumed>) = 0 [pid 6428] <... futex resumed>) = ? [pid 6424] <... exit_group resumed>) = ? [ 140.706122][ T6428] EXT4-fs (loop1): Block reservation details [ 140.713558][ T6425] EXT4-fs (loop3): Block reservation details [ 140.733797][ T6428] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 140.740071][ T6425] EXT4-fs (loop3): i_reserved_data_blocks=1 [pid 6422] <... exit_group resumed>) = ? [pid 6446] close(3 [pid 6444] munmap(0x7f5c233f0000, 1048576 [pid 6441] +++ exited with 0 +++ [pid 6440] +++ exited with 0 +++ [pid 6439] <... chdir resumed>) = 0 [pid 6438] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6437] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6428] +++ exited with 0 +++ [pid 6425] +++ exited with 0 +++ [pid 6424] +++ exited with 0 +++ [pid 6422] +++ exited with 0 +++ [pid 6446] <... close resumed>) = 0 [pid 6444] <... munmap resumed>) = 0 [pid 6439] ioctl(4, LOOP_CLR_FD [pid 6438] <... open resumed>) = 4 [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6422, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 4995] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6424, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 6446] symlink("/dev/binderfs", "./binderfs" [pid 6439] <... ioctl resumed>) = 0 [pid 6438] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6446] <... symlink resumed>) = 0 [pid 6444] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6439] close(4 [pid 6438] <... futex resumed>) = 1 [pid 6437] <... futex resumed>) = 0 [pid 6446] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6444] <... openat resumed>) = 4 [pid 6439] <... close resumed>) = 0 [pid 6438] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6437] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] umount2("./46", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6446] <... futex resumed>) = 0 [pid 6444] ioctl(4, LOOP_SET_FD, 3 [pid 6439] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6438] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6437] <... futex resumed>) = 0 [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6446] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6444] <... ioctl resumed>) = 0 [pid 6439] <... futex resumed>) = 1 [pid 6438] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6437] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6436] <... futex resumed>) = 0 [pid 4995] openat(AT_FDCWD, "./46", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6446] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6439] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6436] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] umount2("./47", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6446] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6439] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6438] <... write resumed>) = 9 [pid 6436] <... futex resumed>) = 0 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] <... openat resumed>) = 3 [pid 6446] <... mprotect resumed>) = 0 [pid 6439] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6438] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6436] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4997] openat(AT_FDCWD, "./47", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4995] fstat(3, [pid 6446] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6438] <... futex resumed>) = 1 [pid 6437] <... futex resumed>) = 0 [pid 4997] <... openat resumed>) = 3 [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6439] <... open resumed>) = 4 [pid 6437] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6444] close(3 [pid 6439] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6438] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6437] <... futex resumed>) = 0 [pid 4997] fstat(3, [pid 4995] getdents64(3, [pid 6446] <... clone resumed>, parent_tid=[6449], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6449 [pid 6444] <... close resumed>) = 0 [pid 6439] <... futex resumed>) = 1 [pid 6438] <... openat resumed>) = 5 [pid 6437] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6436] <... futex resumed>) = 0 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 ./strace-static-x86_64: Process 6449 attached [pid 6446] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6439] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6438] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6437] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6436] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] getdents64(3, [pid 4995] umount2("./46/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6446] <... futex resumed>) = 0 [pid 6444] mkdir("./file0", 0777 [pid 6439] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6438] <... futex resumed>) = 0 [pid 6437] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6436] <... futex resumed>) = 0 [pid 4997] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6449] set_robust_list(0x7f5c2b8109e0, 24 [pid 6446] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6439] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6438] open("./bus", O_RDWR [pid 6437] <... futex resumed>) = 0 [pid 6436] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4997] umount2("./47/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] lstat("./46/binderfs", [pid 6437] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6449] <... set_robust_list resumed>) = 0 [pid 4995] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6449] memfd_create("syzkaller", 0 [pid 6438] <... open resumed>) = 6 [pid 4997] lstat("./47/binderfs", [pid 4995] unlink("./46/binderfs" [pid 6449] <... memfd_create resumed>) = 3 [pid 6439] <... write resumed>) = 9 [pid 6438] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6449] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6438] <... futex resumed>) = 1 [pid 6439] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6437] <... futex resumed>) = 0 [pid 4997] unlink("./47/binderfs" [pid 4995] <... unlink resumed>) = 0 [pid 6449] <... mmap resumed>) = 0x7f5c233f0000 [pid 6444] <... mkdir resumed>) = 0 [pid 6439] <... futex resumed>) = 1 [pid 6438] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6437] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6436] <... futex resumed>) = 0 [pid 6449] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4997] <... unlink resumed>) = 0 [ 140.808696][ T6444] loop4: detected capacity change from 0 to 2048 [pid 4995] umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6444] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6439] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6438] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6437] <... futex resumed>) = 0 [pid 6436] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6439] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6437] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6436] <... futex resumed>) = 0 [pid 6438] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6436] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6439] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6449] <... write resumed>) = 1048576 [pid 6449] munmap(0x7f5c233f0000, 1048576 [pid 6438] <... mmap resumed>) = 0x20000000 [pid 6439] <... openat resumed>) = 5 [pid 6449] <... munmap resumed>) = 0 [pid 6449] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6449] ioctl(4, LOOP_SET_FD, 3 [pid 6439] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6438] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6439] <... futex resumed>) = 1 [pid 6438] <... futex resumed>) = 1 [pid 6437] <... futex resumed>) = 0 [pid 6436] <... futex resumed>) = 0 [pid 6449] <... ioctl resumed>) = 0 [pid 6449] close(3 [pid 6439] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6438] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6437] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6436] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6438] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6437] <... futex resumed>) = 0 [pid 6436] <... futex resumed>) = 0 [pid 6449] <... close resumed>) = 0 [pid 6439] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6438] sendfile(4, 5, NULL, 2147483713 [pid 6449] mkdir("./file0", 0777 [pid 6437] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6439] open("./bus", O_RDWR [pid 6436] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6439] <... open resumed>) = 6 [pid 6439] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6449] <... mkdir resumed>) = 0 [pid 6449] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6439] <... futex resumed>) = 1 [pid 6436] <... futex resumed>) = 0 [pid 6439] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6436] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6439] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6436] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6439] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6444] <... mount resumed>) = 0 [pid 6439] <... futex resumed>) = 1 [pid 6436] <... futex resumed>) = 0 [pid 6439] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6436] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6439] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6436] <... futex resumed>) = 0 [pid 6444] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6439] sendfile(4, 5, NULL, 2147483713 [ 140.894707][ T5457] EXT4-fs (loop3): This should not happen!! Data will be lost [ 140.894707][ T5457] [ 140.908134][ T6438] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 140.939041][ T6438] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 6436] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6444] <... openat resumed>) = 3 [pid 6437] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4997] <... umount2 resumed>) = 0 [pid 6444] chdir("./file0") = 0 [pid 6444] ioctl(4, LOOP_CLR_FD) = 0 [pid 6444] close(4) = 0 [pid 6444] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6442] <... futex resumed>) = 0 [pid 6444] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6442] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6437] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6442] <... futex resumed>) = 0 [pid 6442] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6437] <... futex resumed>) = 0 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6437] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6436] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4997] lstat("./47/file0", [pid 6444] <... open resumed>) = 4 [pid 6437] <... mmap resumed>) = 0x7f5c234cf000 [pid 4997] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6444] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6437] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [ 140.940125][ T6439] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 140.951429][ T6438] EXT4-fs (loop0): This should not happen!! Data will be lost [ 140.951429][ T6438] [ 140.977365][ T6438] EXT4-fs (loop0): Total free blocks count 0 [ 140.983507][ T6438] EXT4-fs (loop0): Free/Dirty block details [ 140.990137][ T6438] EXT4-fs (loop0): free_blocks=2415919104 [ 140.996081][ T6438] EXT4-fs (loop0): dirty_blocks=16 [ 141.001456][ T6438] EXT4-fs (loop0): Block reservation details [pid 6436] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] <... umount2 resumed>) = 0 [pid 6444] <... futex resumed>) = 1 [pid 6442] <... futex resumed>) = 0 [pid 6437] <... mprotect resumed>) = 0 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6444] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6442] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6438] <... sendfile resumed>) = 63 [pid 6437] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6436] <... futex resumed>) = 0 [pid 4997] openat(AT_FDCWD, "./47/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6444] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6442] <... futex resumed>) = 0 [pid 6438] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6436] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4997] <... openat resumed>) = 4 [pid 6444] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6442] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6437] <... clone resumed>, parent_tid=[6453], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6453 [pid 4997] fstat(4, [pid 6444] <... write resumed>) = 9 [pid 6438] <... futex resumed>) = 0 [pid 6437] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6436] <... mmap resumed>) = 0x7f5c234cf000 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 6453 attached [pid 6444] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6437] <... futex resumed>) = 0 [pid 4997] getdents64(4, [pid 6453] set_robust_list(0x7f5c234ef9e0, 24 [pid 6444] <... futex resumed>) = 1 [pid 6442] <... futex resumed>) = 0 [pid 6438] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6437] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6436] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 4997] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 6453] <... set_robust_list resumed>) = 0 [pid 6444] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6442] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] getdents64(4, [ 141.008047][ T6438] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 141.014329][ T6439] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 141.026700][ T6439] EXT4-fs (loop2): This should not happen!! Data will be lost [ 141.026700][ T6439] [ 141.036871][ T6439] EXT4-fs (loop2): Total free blocks count 0 [ 141.043318][ T6439] EXT4-fs (loop2): Free/Dirty block details [ 141.049679][ T6439] EXT4-fs (loop2): free_blocks=2415919104 [pid 4995] umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6453] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6449] <... mount resumed>) = 0 [pid 6444] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6442] <... futex resumed>) = 0 [pid 6436] <... mprotect resumed>) = 0 [pid 4997] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6453] <... ioctl resumed>) = 0 [pid 6449] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6444] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6442] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4997] close(4 [pid 4995] lstat("./46/file0", [pid 6453] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6449] <... openat resumed>) = 3 [pid 6444] <... openat resumed>) = 5 [pid 6436] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4997] <... close resumed>) = 0 [pid 4995] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6453] <... futex resumed>) = 1 [pid 6449] chdir("./file0" [pid 6444] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6439] <... sendfile resumed>) = 63 [pid 6437] <... futex resumed>) = 0 [pid 6449] <... chdir resumed>) = 0 [pid 6444] <... futex resumed>) = 1 [pid 6439] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6436] <... clone resumed>, parent_tid=[6455], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6455 [pid 4997] rmdir("./47/file0" [pid 6437] exit_group(0 [pid 6453] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6449] ioctl(4, LOOP_CLR_FD [pid 6444] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6442] <... futex resumed>) = 0 [pid 6439] <... futex resumed>) = 0 [pid 6436] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6439] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6436] <... futex resumed>) = 0 [pid 6442] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6436] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6444] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4997] <... rmdir resumed>) = 0 [pid 6438] <... futex resumed>) = ? [pid 6437] <... exit_group resumed>) = ? [pid 6449] <... ioctl resumed>) = 0 [pid 6453] <... futex resumed>) = ? [pid 6444] open("./bus", O_RDWR [pid 6442] <... futex resumed>) = 0 [pid 6438] +++ exited with 0 +++ [pid 4997] getdents64(3, [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6449] close(4./strace-static-x86_64: Process 6455 attached [pid 6455] set_robust_list(0x7f5c234ef9e0, 24) = 0 [pid 6455] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040) = 0 [pid 6455] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6436] <... futex resumed>) = 0 [pid 6436] exit_group(0 [pid 6439] <... futex resumed>) = ? [pid 6436] <... exit_group resumed>) = ? [pid 6453] +++ exited with 0 +++ [pid 6439] +++ exited with 0 +++ [pid 6437] +++ exited with 0 +++ [pid 6455] <... futex resumed>) = ? [pid 6444] <... open resumed>) = 6 [pid 6442] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6449] <... close resumed>) = 0 [pid 4994] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6437, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 6449] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6444] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4994] restart_syscall(<... resuming interrupted clone ...> [pid 6449] <... futex resumed>) = 1 [pid 6446] <... futex resumed>) = 0 [pid 6444] <... futex resumed>) = 1 [pid 6442] <... futex resumed>) = 0 [pid 4997] close(3 [pid 4995] openat(AT_FDCWD, "./46/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6449] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6446] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6444] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6442] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] <... close resumed>) = 0 [pid 4994] <... restart_syscall resumed>) = 0 [pid 6449] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6446] <... futex resumed>) = 0 [pid 6455] +++ exited with 0 +++ [pid 6449] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6446] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6444] <... mmap resumed>) = 0x20000000 [pid 6442] <... futex resumed>) = 0 [pid 6436] +++ exited with 0 +++ [pid 4997] rmdir("./47" [pid 4995] <... openat resumed>) = 4 [pid 6449] <... open resumed>) = 4 [pid 6444] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6442] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4997] <... rmdir resumed>) = 0 [pid 4996] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6436, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 4995] fstat(4, [pid 6442] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6442] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] mkdir("./48", 0777 [pid 4994] umount2("./48", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6442] <... futex resumed>) = 0 [pid 6449] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6444] <... futex resumed>) = 0 [pid 6442] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4997] <... mkdir resumed>) = 0 [pid 4996] umount2("./48", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6449] <... futex resumed>) = 1 [pid 6446] <... futex resumed>) = 0 [pid 6444] sendfile(4, 5, NULL, 2147483713 [pid 4997] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] getdents64(4, [pid 4994] openat(AT_FDCWD, "./48", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6449] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6446] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] openat(AT_FDCWD, "./48", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6446] <... futex resumed>) = 0 [pid 4994] <... openat resumed>) = 3 [pid 4996] <... openat resumed>) = 3 [pid 6446] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6449] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4996] fstat(3, [ 141.055945][ T6439] EXT4-fs (loop2): dirty_blocks=16 [ 141.061148][ T6439] EXT4-fs (loop2): Block reservation details [ 141.067395][ T6439] EXT4-fs (loop2): i_reserved_data_blocks=1 [pid 4994] fstat(3, [pid 6449] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 4997] <... openat resumed>) = 3 [pid 4996] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] getdents64(3, [pid 4996] getdents64(3, 0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4994] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4996] umount2("./48/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] umount2("./48/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4996] lstat("./48/binderfs", [pid 4994] lstat("./48/binderfs", [pid 4996] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4994] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6449] <... write resumed>) = 9 [pid 4997] ioctl(3, LOOP_CLR_FD [pid 4996] unlink("./48/binderfs" [pid 4995] getdents64(4, [pid 4994] unlink("./48/binderfs" [pid 6449] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4996] <... unlink resumed>) = 0 [pid 4994] <... unlink resumed>) = 0 [pid 4996] umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6449] <... futex resumed>) = 1 [pid 6446] <... futex resumed>) = 0 [pid 6449] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6446] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] close(3 [pid 4995] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [ 141.104710][ T6444] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 141.139008][ T6444] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 6449] <... openat resumed>) = 5 [pid 6446] <... futex resumed>) = 0 [pid 6442] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4997] <... close resumed>) = 0 [pid 4995] close(4 [pid 6446] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6442] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6442] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c234cf000 [pid 6442] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6442] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6456], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6456 [pid 6442] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6442] <... futex resumed>) = 0 [pid 6442] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4995] <... close resumed>) = 0 [pid 4995] rmdir("./46/file0") = 0 [pid 4997] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6457 [pid 4995] getdents64(3, 0x555556fba620 /* 0 entries */, 32768) = 0 [pid 6449] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] close(3 [pid 6449] <... futex resumed>) = 1 [pid 6446] <... futex resumed>) = 0 [pid 4995] <... close resumed>) = 0 [pid 6449] open("./bus", O_RDWR [pid 6446] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] rmdir("./46" [pid 6446] <... futex resumed>) = 0 [pid 6446] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6449] <... open resumed>) = 6 [pid 4995] <... rmdir resumed>) = 0 [pid 6449] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] mkdir("./47", 0777 [pid 6449] <... futex resumed>) = 1 [pid 6446] <... futex resumed>) = 0 [pid 4995] <... mkdir resumed>) = 0 [ 141.140729][ T74] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 141.151366][ T6444] EXT4-fs (loop4): This should not happen!! Data will be lost [ 141.151366][ T6444] [ 141.173936][ T5457] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 141.174127][ T6444] EXT4-fs (loop4): Total free blocks count 0 [ 141.193061][ T6444] EXT4-fs (loop4): Free/Dirty block details [ 141.199138][ T6444] EXT4-fs (loop4): free_blocks=2415919104 [pid 6449] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6446] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6449] <... mmap resumed>) = 0x20000000 [pid 6446] <... futex resumed>) = 0 [pid 4995] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6446] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4995] <... openat resumed>) = 3 [pid 4995] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 6449] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] close(3./strace-static-x86_64: Process 6457 attached ./strace-static-x86_64: Process 6456 attached [pid 6449] <... futex resumed>) = 1 [pid 6446] <... futex resumed>) = 0 [pid 4995] <... close resumed>) = 0 [pid 6457] set_robust_list(0x555556fb95e0, 24 [pid 6456] set_robust_list(0x7f5c234ef9e0, 24 [pid 6449] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6446] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6457] <... set_robust_list resumed>) = 0 [pid 6456] <... set_robust_list resumed>) = 0 [pid 6449] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6446] <... futex resumed>) = 0 [pid 6457] chdir("./48" [pid 6456] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6449] sendfile(4, 5, NULL, 2147483713 [pid 6446] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6442] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4995] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6458 [pid 6457] <... chdir resumed>) = 0 [pid 6457] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 141.204906][ T6444] EXT4-fs (loop4): dirty_blocks=16 [ 141.210161][ T6444] EXT4-fs (loop4): Block reservation details [ 141.221759][ T5457] EXT4-fs (loop0): This should not happen!! Data will be lost [ 141.221759][ T5457] [ 141.224679][ T6449] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 141.231694][ T6444] EXT4-fs (loop4): i_reserved_data_blocks=1 [pid 6457] setpgid(0, 0) = 0 [pid 6457] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 ./strace-static-x86_64: Process 6458 attached [pid 6457] write(3, "1000", 4 [pid 6458] set_robust_list(0x555556fb95e0, 24 [pid 6457] <... write resumed>) = 4 [pid 6458] <... set_robust_list resumed>) = 0 [pid 6457] close(3 [pid 6458] chdir("./47" [pid 6457] <... close resumed>) = 0 [pid 6458] <... chdir resumed>) = 0 [pid 6457] symlink("/dev/binderfs", "./binderfs" [pid 6458] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6457] <... symlink resumed>) = 0 [pid 6458] <... prctl resumed>) = 0 [pid 6457] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6458] setpgid(0, 0 [pid 6457] <... futex resumed>) = 0 [pid 6458] <... setpgid resumed>) = 0 [pid 6457] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6458] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6457] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6458] <... openat resumed>) = 3 [pid 6457] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6456] <... ioctl resumed>) = 0 [pid 6444] <... sendfile resumed>) = 63 [pid 6458] write(3, "1000", 4 [pid 6457] <... mprotect resumed>) = 0 [pid 6456] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6458] <... write resumed>) = 4 [pid 6457] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6456] <... futex resumed>) = 0 [pid 6444] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] <... umount2 resumed>) = 0 [pid 6458] close(3 [pid 6456] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6446] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6444] <... futex resumed>) = 0 [pid 6458] <... close resumed>) = 0 [pid 6457] <... clone resumed>, parent_tid=[6459], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6459 [pid 6446] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6444] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6442] exit_group(0 [pid 4994] umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6458] symlink("/dev/binderfs", "./binderfs" [pid 6457] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6456] <... futex resumed>) = ? [pid 6446] <... futex resumed>) = 0 [pid 6444] <... futex resumed>) = ? [pid 6442] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 6459 attached [pid 6458] <... symlink resumed>) = 0 [pid 6457] <... futex resumed>) = 0 [pid 6456] +++ exited with 0 +++ [pid 6446] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6444] +++ exited with 0 +++ [pid 6442] +++ exited with 0 +++ [pid 4996] <... umount2 resumed>) = 0 [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6459] set_robust_list(0x7f5c2b8109e0, 24 [pid 6458] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6457] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6446] <... mmap resumed>) = 0x7f5c234cf000 [pid 4994] lstat("./48/file0", [pid 6459] <... set_robust_list resumed>) = 0 [pid 6458] <... futex resumed>) = 0 [pid 6446] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6442, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 4996] umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6459] memfd_create("syzkaller", 0 [pid 6458] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6446] <... mprotect resumed>) = 0 [pid 4998] umount2("./46", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6459] <... memfd_create resumed>) = 3 [ 141.253647][ T74] EXT4-fs (loop2): This should not happen!! Data will be lost [ 141.253647][ T74] [ 141.267614][ T6449] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 6458] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6446] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4996] lstat("./48/file0", [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6459] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6458] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 4998] openat(AT_FDCWD, "./46", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4996] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] openat(AT_FDCWD, "./48/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6459] <... mmap resumed>) = 0x7f5c233f0000 [pid 6458] <... mprotect resumed>) = 0 [pid 6446] <... clone resumed>, parent_tid=[6460], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6460 [pid 4998] <... openat resumed>) = 3 [pid 4996] umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] <... openat resumed>) = 4 [pid 6458] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6446] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] fstat(3, [pid 4994] fstat(4, [pid 6446] <... futex resumed>) = 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6458] <... clone resumed>, parent_tid=[6461], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6461 [pid 6446] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] getdents64(3, [pid 4994] getdents64(4, [pid 6459] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6458] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4994] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 6458] <... futex resumed>) = 0 [pid 4998] umount2("./46/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] getdents64(4, ./strace-static-x86_64: Process 6460 attached [pid 6458] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 6460] set_robust_list(0x7f5c234ef9e0, 24 [pid 4998] lstat("./46/binderfs", [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] close(4 [pid 6460] <... set_robust_list resumed>) = 0 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4994] <... close resumed>) = 0 [pid 6460] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 4998] unlink("./46/binderfs" [pid 4994] rmdir("./48/file0" [pid 4998] <... unlink resumed>) = 0 [pid 4994] <... rmdir resumed>) = 0 [pid 4998] umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] getdents64(3, 0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4994] close(3) = 0 [pid 4994] rmdir("./48" [pid 4996] openat(AT_FDCWD, "./48/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4994] <... rmdir resumed>) = 0 [pid 4996] <... openat resumed>) = 4 [pid 4994] mkdir("./49", 0777./strace-static-x86_64: Process 6461 attached [pid 4996] fstat(4, [pid 4994] <... mkdir resumed>) = 0 [pid 4994] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4994] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4994] close(3) = 0 [pid 4994] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4996] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] getdents64(4, [pid 4994] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6462 [pid 4996] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 6461] set_robust_list(0x7f5c2b8109e0, 24) = 0 [pid 4996] getdents64(4, ./strace-static-x86_64: Process 6462 attached [pid 6462] set_robust_list(0x555556fb95e0, 24 [pid 6461] memfd_create("syzkaller", 0 [pid 4996] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 6462] <... set_robust_list resumed>) = 0 [pid 4996] close(4 [pid 6462] chdir("./49" [pid 6461] <... memfd_create resumed>) = 3 [pid 4996] <... close resumed>) = 0 [pid 6462] <... chdir resumed>) = 0 [pid 6461] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6459] <... write resumed>) = 1048576 [pid 4996] rmdir("./48/file0" [pid 6462] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6461] <... mmap resumed>) = 0x7f5c233f0000 [pid 6462] <... prctl resumed>) = 0 [pid 6446] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4996] <... rmdir resumed>) = 0 [pid 6462] setpgid(0, 0) = 0 [pid 6462] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 141.337014][ T6449] EXT4-fs (loop5): This should not happen!! Data will be lost [ 141.337014][ T6449] [ 141.349302][ T5457] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 4996] getdents64(3, [pid 6462] write(3, "1000", 4 [pid 6461] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4996] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 6462] <... write resumed>) = 4 [pid 6462] close(3) = 0 [pid 6462] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6462] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6459] munmap(0x7f5c233f0000, 1048576 [pid 6462] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c2b7f0000 [pid 6462] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6459] <... munmap resumed>) = 0 [pid 4996] close(3 [pid 6462] <... mprotect resumed>) = 0 [pid 6462] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6459] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4996] <... close resumed>) = 0 [pid 6459] <... openat resumed>) = 4 [pid 6462] <... clone resumed>, parent_tid=[6463], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6463 [pid 6459] ioctl(4, LOOP_SET_FD, 3 [pid 4996] rmdir("./48" [pid 6462] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6462] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6463 attached [pid 6463] set_robust_list(0x7f5c2b8109e0, 24) = 0 [pid 6463] memfd_create("syzkaller", 0 [pid 4996] <... rmdir resumed>) = 0 [pid 6463] <... memfd_create resumed>) = 3 [pid 4996] mkdir("./49", 0777 [pid 6463] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5c233f0000 [pid 4996] <... mkdir resumed>) = 0 [pid 6459] <... ioctl resumed>) = 0 [pid 4996] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 6459] close(3) = 0 [pid 6459] mkdir("./file0", 0777) = 0 [pid 4996] ioctl(3, LOOP_CLR_FD [pid 6459] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 4996] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4996] close(3) = 0 [pid 4996] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6463] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4998] <... umount2 resumed>) = 0 [pid 4996] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6465 ./strace-static-x86_64: Process 6465 attached [ 141.390274][ T5457] EXT4-fs (loop4): This should not happen!! Data will be lost [ 141.390274][ T5457] [ 141.400592][ T6449] EXT4-fs (loop5): Total free blocks count 0 [ 141.415095][ T6459] loop3: detected capacity change from 0 to 2048 [ 141.431887][ T6449] EXT4-fs (loop5): Free/Dirty block details [pid 6463] <... write resumed>) = 1048576 [pid 6465] set_robust_list(0x555556fb95e0, 24 [pid 6463] munmap(0x7f5c233f0000, 1048576 [pid 6465] <... set_robust_list resumed>) = 0 [pid 6463] <... munmap resumed>) = 0 [pid 6465] chdir("./49" [pid 6461] <... write resumed>) = 1048576 [pid 6465] <... chdir resumed>) = 0 [pid 6463] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6461] munmap(0x7f5c233f0000, 1048576 [pid 6465] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6463] <... openat resumed>) = 4 [pid 6465] <... prctl resumed>) = 0 [pid 6463] ioctl(4, LOOP_SET_FD, 3 [pid 6465] setpgid(0, 0 [pid 6461] <... munmap resumed>) = 0 [pid 4998] umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6465] <... setpgid resumed>) = 0 [pid 6465] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6461] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6465] <... openat resumed>) = 3 [pid 6459] <... mount resumed>) = 0 [pid 6465] write(3, "1000", 4 [pid 6459] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6465] <... write resumed>) = 4 [pid 6461] <... openat resumed>) = 4 [pid 6459] <... openat resumed>) = 3 [pid 4998] lstat("./46/file0", [pid 6465] close(3 [pid 6461] ioctl(4, LOOP_SET_FD, 3 [pid 6459] chdir("./file0" [pid 6465] <... close resumed>) = 0 [pid 6463] <... ioctl resumed>) = 0 [pid 6459] <... chdir resumed>) = 0 [pid 6465] symlink("/dev/binderfs", "./binderfs" [pid 6463] close(3 [pid 6459] ioctl(4, LOOP_CLR_FD [pid 6465] <... symlink resumed>) = 0 [pid 6463] <... close resumed>) = 0 [pid 6459] <... ioctl resumed>) = 0 [pid 6465] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6463] mkdir("./file0", 0777 [pid 6459] close(4 [pid 6465] <... futex resumed>) = 0 [pid 6463] <... mkdir resumed>) = 0 [pid 6459] <... close resumed>) = 0 [pid 6465] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6463] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6459] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6465] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6459] <... futex resumed>) = 1 [pid 6457] <... futex resumed>) = 0 [pid 6465] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6459] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6457] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6465] <... mprotect resumed>) = 0 [pid 6459] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6457] <... futex resumed>) = 0 [pid 6465] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6459] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6457] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6459] <... open resumed>) = 4 [pid 6465] <... clone resumed>, parent_tid=[6467], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6467 [ 141.471775][ T6449] EXT4-fs (loop5): free_blocks=2415919104 [ 141.486118][ T6463] loop0: detected capacity change from 0 to 2048 [ 141.502421][ T6449] EXT4-fs (loop5): dirty_blocks=16 [ 141.509924][ T6449] EXT4-fs (loop5): Block reservation details [pid 6459] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6465] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6459] <... futex resumed>) = 1 [pid 6457] <... futex resumed>) = 0 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6465] <... futex resumed>) = 0 [pid 6459] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6457] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6465] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6459] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6457] <... futex resumed>) = 0 [pid 6459] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6457] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6459] <... write resumed>) = 9 [pid 6459] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6457] <... futex resumed>) = 0 [pid 6459] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6457] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6459] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6457] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6467 attached [pid 6459] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6457] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6467] set_robust_list(0x7f5c2b8109e0, 24 [pid 6459] <... openat resumed>) = 5 [pid 6467] <... set_robust_list resumed>) = 0 [pid 6461] <... ioctl resumed>) = 0 [pid 6459] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6467] memfd_create("syzkaller", 0 [pid 6459] <... futex resumed>) = 1 [pid 6457] <... futex resumed>) = 0 [pid 6467] <... memfd_create resumed>) = 3 [pid 6459] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6457] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6467] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6461] close(3 [pid 6459] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6457] <... futex resumed>) = 0 [pid 4998] umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6467] <... mmap resumed>) = 0x7f5c233f0000 [pid 6461] <... close resumed>) = 0 [pid 6459] open("./bus", O_RDWR [pid 6457] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6459] <... open resumed>) = 6 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6461] mkdir("./file0", 0777 [pid 6467] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6461] <... mkdir resumed>) = 0 [pid 6459] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] openat(AT_FDCWD, "./46/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6463] <... mount resumed>) = 0 [pid 6461] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 4998] <... openat resumed>) = 4 [pid 6459] <... futex resumed>) = 1 [pid 6463] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6457] <... futex resumed>) = 0 [pid 4998] fstat(4, [pid 6463] <... openat resumed>) = 3 [pid 6459] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6457] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6463] chdir("./file0" [pid 6459] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6457] <... futex resumed>) = 0 [pid 4998] getdents64(4, [pid 6463] <... chdir resumed>) = 0 [pid 6459] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6457] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 6463] ioctl(4, LOOP_CLR_FD [pid 4998] getdents64(4, [pid 6463] <... ioctl resumed>) = 0 [pid 6460] <... ioctl resumed>) = 0 [pid 6459] <... mmap resumed>) = 0x20000000 [pid 6449] <... sendfile resumed>) = 63 [pid 4998] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 6463] close(4 [pid 6460] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6459] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6449] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] close(4 [pid 6463] <... close resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 4998] rmdir("./46/file0") = 0 [pid 4998] getdents64(3, 0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./46") = 0 [pid 4998] mkdir("./47", 0777 [pid 6463] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6460] <... futex resumed>) = 0 [pid 6459] <... futex resumed>) = 1 [pid 6457] <... futex resumed>) = 0 [pid 6449] <... futex resumed>) = 0 [pid 6446] exit_group(0 [pid 4998] <... mkdir resumed>) = 0 [ 141.526324][ T6461] loop1: detected capacity change from 0 to 2048 [ 141.545699][ T6449] EXT4-fs (loop5): i_reserved_data_blocks=1 [pid 6463] <... futex resumed>) = 1 [pid 6462] <... futex resumed>) = 0 [pid 6459] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6457] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6446] <... exit_group resumed>) = ? [pid 4998] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6463] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6462] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6460] +++ exited with 0 +++ [pid 6459] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6457] <... futex resumed>) = 0 [pid 4998] <... openat resumed>) = 3 [pid 6463] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6462] <... futex resumed>) = 0 [pid 6459] sendfile(4, 5, NULL, 2147483713 [pid 6457] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] ioctl(3, LOOP_CLR_FD [pid 6463] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6462] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6463] <... open resumed>) = 4 [pid 4998] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6471 [pid 6463] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6462] <... futex resumed>) = 0 [pid 6462] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6462] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6463] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9) = 9 [pid 6463] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6462] <... futex resumed>) = 0 [pid 6463] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6462] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6463] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6462] <... futex resumed>) = 0 [pid 6449] +++ exited with 0 +++ [pid 6446] +++ exited with 0 +++ [pid 6463] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6462] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6463] <... openat resumed>) = 5 [pid 6463] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6446, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 6467] <... write resumed>) = 1048576 [pid 6463] <... futex resumed>) = 1 [pid 6462] <... futex resumed>) = 0 [pid 4999] restart_syscall(<... resuming interrupted clone ...> [pid 6463] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6462] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... restart_syscall resumed>) = 0 [pid 6463] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6462] <... futex resumed>) = 0 [pid 6463] open("./bus", O_RDWR [pid 6462] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6471 attached [pid 6467] munmap(0x7f5c233f0000, 1048576 [pid 6463] <... open resumed>) = 6 [pid 4999] umount2("./47", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6463] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6462] <... futex resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6463] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6462] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] openat(AT_FDCWD, "./47", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6467] <... munmap resumed>) = 0 [pid 6463] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6462] <... futex resumed>) = 0 [pid 6471] set_robust_list(0x555556fb95e0, 24 [pid 6467] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6463] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6462] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] <... openat resumed>) = 3 [pid 6457] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6471] <... set_robust_list resumed>) = 0 [pid 6463] <... mmap resumed>) = 0x20000000 [pid 4999] fstat(3, [pid 6467] <... openat resumed>) = 4 [pid 6457] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6463] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6457] <... futex resumed>) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6471] chdir("./47" [pid 6467] ioctl(4, LOOP_SET_FD, 3 [pid 6463] <... futex resumed>) = 1 [pid 6462] <... futex resumed>) = 0 [pid 6457] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6471] <... chdir resumed>) = 0 [pid 6463] sendfile(4, 5, NULL, 2147483713 [pid 6462] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6457] <... mmap resumed>) = 0x7f5c234cf000 [pid 4999] getdents64(3, [pid 6471] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6462] <... futex resumed>) = 0 [pid 6457] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 4999] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 6462] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6457] <... mprotect resumed>) = 0 [pid 4999] umount2("./47/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6471] <... prctl resumed>) = 0 [pid 6457] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6471] setpgid(0, 0 [pid 6461] <... mount resumed>) = 0 [ 141.599221][ T6459] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 4999] lstat("./47/binderfs", [pid 6457] <... clone resumed>, parent_tid=[6473], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6473 [pid 6471] <... setpgid resumed>) = 0 [pid 6461] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 ./strace-static-x86_64: Process 6473 attached [pid 6473] set_robust_list(0x7f5c234ef9e0, 24) = 0 [pid 6473] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4999] unlink("./47/binderfs" [pid 6457] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... unlink resumed>) = 0 [pid 6473] <... futex resumed>) = 0 [pid 6457] <... futex resumed>) = 1 [pid 4999] umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6473] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6461] <... openat resumed>) = 3 [pid 6457] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6461] chdir("./file0") = 0 [ 141.654295][ T6463] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 141.661430][ T6459] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 141.670214][ T6463] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 141.693498][ T6467] loop2: detected capacity change from 0 to 2048 [pid 6471] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6461] ioctl(4, LOOP_CLR_FD) = 0 [pid 6461] close(4 [pid 6471] <... openat resumed>) = 3 [pid 6462] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6461] <... close resumed>) = 0 [pid 6461] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6458] <... futex resumed>) = 0 [pid 6461] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6458] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6471] write(3, "1000", 4 [pid 6462] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6461] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6458] <... futex resumed>) = 0 [pid 6471] <... write resumed>) = 4 [pid 6461] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6458] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6471] close(3 [pid 6462] <... futex resumed>) = 0 [pid 6461] <... open resumed>) = 4 [pid 6457] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6471] <... close resumed>) = 0 [ 141.694163][ T6463] EXT4-fs (loop0): This should not happen!! Data will be lost [ 141.694163][ T6463] [ 141.710203][ T6463] EXT4-fs (loop0): Total free blocks count 0 [ 141.716293][ T6463] EXT4-fs (loop0): Free/Dirty block details [ 141.722482][ T6463] EXT4-fs (loop0): free_blocks=2415919104 [ 141.728972][ T6463] EXT4-fs (loop0): dirty_blocks=16 [ 141.730687][ T5457] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 141.734109][ T6463] EXT4-fs (loop0): Block reservation details [pid 6461] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6471] symlink("/dev/binderfs", "./binderfs" [pid 6463] <... sendfile resumed>) = 63 [pid 6462] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6461] <... futex resumed>) = 1 [pid 6458] <... futex resumed>) = 0 [pid 6471] <... symlink resumed>) = 0 [pid 6461] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6458] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6471] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6467] <... ioctl resumed>) = 0 [pid 6463] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6462] <... mmap resumed>) = 0x7f5c234cf000 [pid 6461] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6458] <... futex resumed>) = 0 [pid 6471] <... futex resumed>) = 0 [pid 6467] close(3 [pid 6463] <... futex resumed>) = 0 [pid 6462] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 6461] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6458] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6471] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6467] <... close resumed>) = 0 [pid 6463] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6462] <... mprotect resumed>) = 0 [pid 6461] <... write resumed>) = 9 [pid 6471] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6467] mkdir("./file0", 0777 [pid 6462] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6461] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6471] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6467] <... mkdir resumed>) = 0 [pid 6461] <... futex resumed>) = 1 [pid 6458] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6474 attached [pid 6471] <... mprotect resumed>) = 0 [pid 6467] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6462] <... clone resumed>, parent_tid=[6474], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6474 [pid 6461] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6458] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6474] set_robust_list(0x7f5c234ef9e0, 24 [ 141.753035][ T6463] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 141.759663][ T6459] EXT4-fs (loop3): This should not happen!! Data will be lost [ 141.759663][ T6459] [ 141.770374][ T6459] EXT4-fs (loop3): Total free blocks count 0 [ 141.777100][ T6459] EXT4-fs (loop3): Free/Dirty block details [ 141.783963][ T6459] EXT4-fs (loop3): free_blocks=2415919104 [ 141.789852][ T6459] EXT4-fs (loop3): dirty_blocks=16 [ 141.795915][ T6459] EXT4-fs (loop3): Block reservation details [pid 6471] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6462] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6461] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6458] <... futex resumed>) = 0 [pid 6474] <... set_robust_list resumed>) = 0 [pid 6473] <... ioctl resumed>) = 0 [pid 6462] <... futex resumed>) = 0 [pid 6461] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6459] <... sendfile resumed>) = 63 [pid 6458] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6471] <... clone resumed>, parent_tid=[6475], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6475 [pid 6462] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6461] <... openat resumed>) = 5 ./strace-static-x86_64: Process 6475 attached [pid 6471] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6461] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6475] set_robust_list(0x7f5c2b8109e0, 24 [pid 6471] <... futex resumed>) = 0 [pid 6461] <... futex resumed>) = 1 [pid 6458] <... futex resumed>) = 0 [pid 6475] <... set_robust_list resumed>) = 0 [pid 6474] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6473] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6471] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6459] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6474] <... ioctl resumed>) = 0 [pid 6473] <... futex resumed>) = 0 [pid 6461] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6459] <... futex resumed>) = 0 [pid 6458] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6457] exit_group(0 [pid 6475] memfd_create("syzkaller", 0 [pid 6474] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6461] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6458] <... futex resumed>) = 0 [pid 6457] <... exit_group resumed>) = ? [pid 6475] <... memfd_create resumed>) = 3 [pid 6474] <... futex resumed>) = 1 [pid 6473] +++ exited with 0 +++ [pid 6462] <... futex resumed>) = 0 [pid 6461] open("./bus", O_RDWR [pid 6459] +++ exited with 0 +++ [pid 6458] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6474] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6462] exit_group(0 [pid 6461] <... open resumed>) = 6 [pid 6457] +++ exited with 0 +++ [pid 6474] <... futex resumed>) = ? [pid 6463] <... futex resumed>) = ? [pid 6462] <... exit_group resumed>) = ? [pid 6461] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6457, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 6475] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6474] +++ exited with 0 +++ [pid 6463] +++ exited with 0 +++ [pid 6462] +++ exited with 0 +++ [pid 6461] <... futex resumed>) = 1 [pid 6458] <... futex resumed>) = 0 [pid 6475] <... mmap resumed>) = 0x7f5c233f0000 [pid 6461] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6458] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6461] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6458] <... futex resumed>) = 0 [pid 4994] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6462, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=11 /* 0.11 s */} --- [pid 6461] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6458] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4997] umount2("./48", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6461] <... mmap resumed>) = 0x20000000 [pid 4999] <... umount2 resumed>) = 0 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6461] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] openat(AT_FDCWD, "./48", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6461] <... futex resumed>) = 1 [pid 6458] <... futex resumed>) = 0 [pid 6458] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] <... openat resumed>) = 3 [pid 6458] <... futex resumed>) = 0 [pid 4994] umount2("./49", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6461] sendfile(4, 5, NULL, 2147483713 [pid 6458] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4997] fstat(3, [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 141.801945][ T6459] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 141.808890][ T5457] EXT4-fs (loop5): This should not happen!! Data will be lost [ 141.808890][ T5457] [pid 6475] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] openat(AT_FDCWD, "./49", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6475] <... write resumed>) = 1048576 [pid 6475] munmap(0x7f5c233f0000, 1048576) = 0 [pid 6475] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6475] ioctl(4, LOOP_SET_FD, 3 [pid 4997] getdents64(3, [pid 4994] <... openat resumed>) = 3 [pid 4997] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4994] fstat(3, [pid 4997] umount2("./48/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] getdents64(3, [pid 4997] lstat("./48/binderfs", [pid 4994] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4997] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4994] umount2("./49/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] unlink("./48/binderfs" [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] <... unlink resumed>) = 0 [pid 4994] lstat("./49/binderfs", [pid 4997] umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6475] <... ioctl resumed>) = 0 [pid 4994] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4994] unlink("./49/binderfs" [pid 6475] close(3) = 0 [pid 6475] mkdir("./file0", 0777) = 0 [pid 4994] <... unlink resumed>) = 0 [pid 6475] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 4999] umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./47/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./47/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4999] close(4) = 0 [pid 4999] rmdir("./47/file0") = 0 [pid 4999] getdents64(3, 0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./47") = 0 [pid 4999] mkdir("./48", 0777) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556fb95d0) = 6478 ./strace-static-x86_64: Process 6478 attached [pid 6478] set_robust_list(0x555556fb95e0, 24) = 0 [pid 6478] chdir("./48") = 0 [pid 6478] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6478] setpgid(0, 0) = 0 [ 141.859715][ T6461] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 141.878282][ T6475] loop4: detected capacity change from 0 to 2048 [ 141.887875][ T74] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 4994] umount2("./49/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6478] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6478] write(3, "1000", 4) = 4 [pid 6478] close(3) = 0 [pid 6478] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6478] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6478] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c2b7f0000 [pid 6478] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6478] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6479], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6479 [pid 6478] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6478] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6479 attached [pid 6479] set_robust_list(0x7f5c2b8109e0, 24) = 0 [pid 6479] memfd_create("syzkaller", 0) = 3 [pid 6479] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5c233f0000 [pid 6458] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6458] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6458] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c234cf000 [pid 6458] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6458] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6480], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6480 [pid 6458] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6458] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6480 attached [pid 6467] <... mount resumed>) = 0 [pid 6480] set_robust_list(0x7f5c234ef9e0, 24 [pid 6467] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6480] <... set_robust_list resumed>) = 0 [pid 6467] <... openat resumed>) = 3 [pid 6480] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6467] chdir("./file0") = 0 [pid 6467] ioctl(4, LOOP_CLR_FD) = 0 [pid 6467] close(4) = 0 [pid 6479] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6467] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6465] <... futex resumed>) = 0 [pid 6467] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6465] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6467] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6465] <... futex resumed>) = 0 [pid 6467] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6465] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6467] <... open resumed>) = 4 [ 141.902617][ T11] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 6467] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6465] <... futex resumed>) = 0 [pid 6479] <... write resumed>) = 1048576 [pid 6479] munmap(0x7f5c233f0000, 1048576 [pid 6465] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6465] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6479] <... munmap resumed>) = 0 [pid 6479] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6479] ioctl(4, LOOP_SET_FD, 3 [pid 6475] <... mount resumed>) = 0 [pid 6467] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6479] <... ioctl resumed>) = 0 [pid 6479] close(3) = 0 [pid 6479] mkdir("./file0", 0777) = 0 [pid 6479] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6458] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 141.941694][ T11] EXT4-fs (loop0): This should not happen!! Data will be lost [ 141.941694][ T11] [ 141.955307][ T6479] loop5: detected capacity change from 0 to 2048 [ 141.956104][ T74] EXT4-fs (loop3): This should not happen!! Data will be lost [ 141.956104][ T74] [ 141.966331][ T6461] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 141.984694][ T6461] EXT4-fs (loop1): This should not happen!! Data will be lost [pid 6475] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6467] <... write resumed>) = 9 [pid 6475] chdir("./file0" [pid 6467] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6475] <... chdir resumed>) = 0 [pid 6467] <... futex resumed>) = 1 [pid 6467] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6465] <... futex resumed>) = 0 [pid 6475] ioctl(4, LOOP_CLR_FD) = 0 [pid 6467] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6465] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6475] close(4 [pid 6467] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6465] <... futex resumed>) = 0 [pid 6475] <... close resumed>) = 0 [pid 6467] <... openat resumed>) = 5 [pid 6465] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6475] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6467] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6475] <... futex resumed>) = 1 [pid 6471] <... futex resumed>) = 0 [pid 6467] <... futex resumed>) = 1 [pid 6465] <... futex resumed>) = 0 [pid 6475] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6471] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6475] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6465] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6471] <... futex resumed>) = 0 [pid 6475] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6467] open("./bus", O_RDWR [pid 6465] <... futex resumed>) = 0 [pid 6471] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6465] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6467] <... open resumed>) = 6 [pid 6467] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6465] <... futex resumed>) = 0 [pid 6465] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6465] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6467] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 0 [pid 6465] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6467] sendfile(4, 5, NULL, 2147483713 [pid 6465] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6475] <... open resumed>) = 4 [pid 6475] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6471] <... futex resumed>) = 0 [pid 6475] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6471] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6475] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6471] <... futex resumed>) = 0 [ 141.984694][ T6461] [ 141.996710][ T6461] EXT4-fs (loop1): Total free blocks count 0 [ 142.005068][ T6461] EXT4-fs (loop1): Free/Dirty block details [ 142.014485][ T6461] EXT4-fs (loop1): free_blocks=2415919104 [ 142.020732][ T6461] EXT4-fs (loop1): dirty_blocks=16 [ 142.026249][ T6461] EXT4-fs (loop1): Block reservation details [ 142.032319][ T6461] EXT4-fs (loop1): i_reserved_data_blocks=1 [pid 6475] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6471] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6480] <... ioctl resumed>) = 0 [pid 6475] <... write resumed>) = 9 [pid 6461] <... sendfile resumed>) = 63 [pid 6480] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6461] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6480] <... futex resumed>) = 0 [pid 6461] <... futex resumed>) = 0 [pid 6480] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6461] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6458] exit_group(0 [pid 6480] <... futex resumed>) = ? [pid 6461] <... futex resumed>) = ? [pid 6458] <... exit_group resumed>) = ? [pid 6480] +++ exited with 0 +++ [pid 6461] +++ exited with 0 +++ [pid 6475] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6465] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6458] +++ exited with 0 +++ [ 142.032853][ T6467] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 142.069266][ T6467] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 142.082877][ T6467] EXT4-fs (loop2): This should not happen!! Data will be lost [ 142.082877][ T6467] [pid 6475] <... futex resumed>) = 1 [pid 6471] <... futex resumed>) = 0 [pid 6465] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6458, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 6471] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6465] <... futex resumed>) = 0 [pid 6475] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6471] <... futex resumed>) = 0 [pid 6465] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6475] <... openat resumed>) = 5 [pid 6471] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6465] <... mmap resumed>) = 0x7f5c234cf000 [pid 4995] umount2("./47", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6465] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6475] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6465] <... mprotect resumed>) = 0 [pid 4995] openat(AT_FDCWD, "./47", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4994] <... umount2 resumed>) = 0 [pid 4995] <... openat resumed>) = 3 [pid 6465] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4995] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6475] <... futex resumed>) = 1 [pid 6471] <... futex resumed>) = 0 [pid 6465] <... clone resumed>, parent_tid=[6484], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6484 [pid 4997] <... umount2 resumed>) = 0 [pid 4995] getdents64(3, [pid 4994] umount2("./49/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6475] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6471] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6465] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 6475] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6471] <... futex resumed>) = 0 [pid 6465] <... futex resumed>) = 0 [pid 4995] umount2("./47/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6475] open("./bus", O_RDWR [pid 6465] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6471] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6479] <... mount resumed>) = 0 [pid 6475] <... open resumed>) = 6 [pid 4997] umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] lstat("./47/binderfs", [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6479] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6479] chdir("./file0") = 0 [pid 6479] ioctl(4, LOOP_CLR_FD) = 0 [pid 6479] close(4) = 0 [pid 6479] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6478] <... futex resumed>) = 0 [pid 6479] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6478] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6479] <... open resumed>) = 4 [pid 6478] <... futex resumed>) = 0 [pid 6479] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6478] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6479] <... futex resumed>) = 0 [pid 6478] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6479] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [ 142.096401][ T6467] EXT4-fs (loop2): Total free blocks count 0 [ 142.135914][ T6467] EXT4-fs (loop2): Free/Dirty block details [pid 6478] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6479] <... write resumed>) = 9 [pid 6478] <... futex resumed>) = 0 [pid 6475] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4994] lstat("./49/file0", [pid 6479] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6478] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6479] <... futex resumed>) = 0 [pid 6478] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6479] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6478] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6479] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6478] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6484 attached [pid 6479] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6478] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6484] set_robust_list(0x7f5c234ef9e0, 24 [pid 6479] <... openat resumed>) = 5 [pid 6484] <... set_robust_list resumed>) = 0 [pid 6479] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6484] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6479] <... futex resumed>) = 1 [pid 6478] <... futex resumed>) = 0 [pid 6475] <... futex resumed>) = 1 [pid 4997] lstat("./48/file0", [pid 4995] unlink("./47/binderfs" [pid 4994] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6479] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6478] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6479] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6478] <... futex resumed>) = 0 [pid 6479] open("./bus", O_RDWR [pid 6478] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6479] <... open resumed>) = 6 [pid 6479] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6478] <... futex resumed>) = 0 [pid 6479] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6478] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6479] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6478] <... futex resumed>) = 0 [pid 6479] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6478] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6479] <... mmap resumed>) = 0x20000000 [pid 6471] <... futex resumed>) = 0 [pid 4997] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] <... unlink resumed>) = 0 [pid 6479] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6475] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4994] umount2("./49/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6479] <... futex resumed>) = 1 [pid 6478] <... futex resumed>) = 0 [pid 6479] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6478] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6479] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6478] <... futex resumed>) = 0 [pid 6479] sendfile(4, 5, NULL, 2147483713 [pid 6478] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6475] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6471] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 142.144497][ T6467] EXT4-fs (loop2): free_blocks=2415919104 [ 142.163823][ T6479] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 142.168811][ T6467] EXT4-fs (loop2): dirty_blocks=16 [ 142.184823][ T6479] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 6475] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6471] <... futex resumed>) = 0 [pid 6465] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] openat(AT_FDCWD, "./49/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6475] <... mmap resumed>) = 0x20000000 [pid 6471] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4997] openat(AT_FDCWD, "./48/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4994] <... openat resumed>) = 4 [pid 6484] <... ioctl resumed>) = 0 [pid 6478] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6475] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6471] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6467] <... sendfile resumed>) = 63 [pid 4997] <... openat resumed>) = 4 [pid 4994] fstat(4, [pid 6484] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6484] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6478] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6478] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c234cf000 [pid 6478] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6478] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6486], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6486 [pid 6478] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6478] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6475] <... futex resumed>) = 0 [pid 6471] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6467] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6465] exit_group(0 [pid 4997] fstat(4, [pid 6484] <... futex resumed>) = ? [pid 6475] sendfile(4, 5, NULL, 2147483713 [pid 6471] <... futex resumed>) = 0 [pid 6467] <... futex resumed>) = ? [pid 6465] <... exit_group resumed>) = ? [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6484] +++ exited with 0 +++ [pid 6471] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6467] +++ exited with 0 +++ [ 142.195345][ T6467] EXT4-fs (loop2): Block reservation details [ 142.199073][ T6479] EXT4-fs (loop5): This should not happen!! Data will be lost [ 142.199073][ T6479] [ 142.206433][ T6467] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 142.214236][ T5076] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 142.220217][ T6479] EXT4-fs (loop5): Total free blocks count 0 [ 142.237901][ T6479] EXT4-fs (loop5): Free/Dirty block details [pid 4997] getdents64(4, [pid 4994] getdents64(4, [pid 6465] +++ exited with 0 +++ ./strace-static-x86_64: Process 6486 attached [pid 6486] set_robust_list(0x7f5c234ef9e0, 24) = 0 [pid 6486] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 4997] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4994] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [ 142.249399][ T6479] EXT4-fs (loop5): free_blocks=2415919104 [ 142.250025][ T6475] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 142.255203][ T6479] EXT4-fs (loop5): dirty_blocks=16 [ 142.271620][ T5076] EXT4-fs (loop1): This should not happen!! Data will be lost [ 142.271620][ T5076] [ 142.276546][ T6479] EXT4-fs (loop5): Block reservation details [pid 4997] getdents64(4, [pid 4996] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6465, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 4994] getdents64(4, [pid 6478] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6479] <... sendfile resumed>) = 63 [pid 6471] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4997] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4996] umount2("./49", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 6471] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] close(4 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] close(4 [pid 6471] <... futex resumed>) = 0 [pid 4997] <... close resumed>) = 0 [pid 4996] openat(AT_FDCWD, "./49", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4994] <... close resumed>) = 0 [pid 6471] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4997] rmdir("./48/file0" [pid 4996] <... openat resumed>) = 3 [pid 4994] rmdir("./49/file0" [pid 6486] <... ioctl resumed>) = 0 [pid 6471] <... mmap resumed>) = 0x7f5c234cf000 [pid 4997] <... rmdir resumed>) = 0 [pid 4996] fstat(3, [pid 4994] <... rmdir resumed>) = 0 [pid 6486] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6471] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 4996] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6486] <... futex resumed>) = 0 [pid 6471] <... mprotect resumed>) = 0 [pid 4997] getdents64(3, [pid 4996] getdents64(3, [pid 4994] getdents64(3, [pid 6486] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6471] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4997] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4996] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4994] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 6487 attached [pid 4997] close(3 [pid 4996] umount2("./49/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] close(3 [pid 6471] <... clone resumed>, parent_tid=[6487], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6487 [pid 4997] <... close resumed>) = 0 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] <... close resumed>) = 0 [pid 6471] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] rmdir("./48" [pid 4996] lstat("./49/binderfs", [pid 4994] rmdir("./49" [pid 6471] <... futex resumed>) = 0 [pid 4997] <... rmdir resumed>) = 0 [pid 4996] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4994] <... rmdir resumed>) = 0 [pid 6487] set_robust_list(0x7f5c234ef9e0, 24 [pid 6479] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6471] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4997] mkdir("./49", 0777 [pid 4996] unlink("./49/binderfs" [pid 4994] mkdir("./50", 0777 [pid 6479] <... futex resumed>) = 0 [pid 4997] <... mkdir resumed>) = 0 [pid 4996] <... unlink resumed>) = 0 [pid 4994] <... mkdir resumed>) = 0 [pid 6479] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6478] exit_group(0 [pid 4997] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4996] umount2("./49/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6487] <... set_robust_list resumed>) = 0 [pid 6486] <... futex resumed>) = ? [pid 6479] <... futex resumed>) = ? [pid 6478] <... exit_group resumed>) = ? [pid 4997] <... openat resumed>) = 3 [pid 4994] <... openat resumed>) = 3 [pid 6487] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6479] +++ exited with 0 +++ [pid 4997] ioctl(3, LOOP_CLR_FD [pid 4994] ioctl(3, LOOP_CLR_FD [pid 4997] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4994] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4997] close(3 [pid 4994] close(3 [pid 6486] +++ exited with 0 +++ [pid 6478] +++ exited with 0 +++ [pid 4997] <... close resumed>) = 0 [pid 4994] <... close resumed>) = 0 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6478, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4994] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4997] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6488 [pid 4994] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6489 [pid 4999] umount2("./48", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./48", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./48/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6489 attached [pid 4999] lstat("./48/binderfs", [pid 6489] set_robust_list(0x555556fb95e0, 24 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6489] <... set_robust_list resumed>) = 0 [pid 4999] unlink("./48/binderfs" [pid 6489] chdir("./50" [pid 4999] <... unlink resumed>) = 0 [pid 6489] <... chdir resumed>) = 0 [ 142.286348][ T6475] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 142.291715][ T6479] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 142.304453][ T6475] EXT4-fs (loop4): This should not happen!! Data will be lost [ 142.304453][ T6475] [ 142.328984][ T6475] EXT4-fs (loop4): Total free blocks count 0 [pid 4999] umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6489] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4995] <... umount2 resumed>) = 0 [pid 6489] <... prctl resumed>) = 0 [pid 4995] umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6489] setpgid(0, 0 [pid 6471] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6489] <... setpgid resumed>) = 0 [pid 6489] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4995] lstat("./47/file0", [pid 6489] <... openat resumed>) = 3 [pid 4995] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6489] write(3, "1000", 4 [pid 4995] umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6489] <... write resumed>) = 4 [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6489] close(3 [pid 4995] openat(AT_FDCWD, "./47/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6489] <... close resumed>) = 0 [pid 4995] <... openat resumed>) = 4 [pid 6489] symlink("/dev/binderfs", "./binderfs" [pid 4995] fstat(4, [pid 6489] <... symlink resumed>) = 0 [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6489] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] getdents64(4, [pid 6489] <... futex resumed>) = 0 [pid 4995] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 6489] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4995] getdents64(4, [pid 6489] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 4995] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 6489] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 4995] close(4 [pid 6489] <... mprotect resumed>) = 0 [pid 4995] <... close resumed>) = 0 [pid 6489] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4995] rmdir("./47/file0") = 0 [pid 6489] <... clone resumed>, parent_tid=[6490], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6490 [pid 4995] getdents64(3, [pid 6489] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 6489] <... futex resumed>) = 0 [pid 4995] close(3 [pid 6489] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4995] <... close resumed>) = 0 [pid 4995] rmdir("./47") = 0 ./strace-static-x86_64: Process 6490 attached ./strace-static-x86_64: Process 6488 attached [pid 4995] mkdir("./48", 0777 [pid 6490] set_robust_list(0x7f5c2b8109e0, 24 [pid 4995] <... mkdir resumed>) = 0 [pid 6490] <... set_robust_list resumed>) = 0 [pid 4995] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6490] memfd_create("syzkaller", 0 [pid 4995] <... openat resumed>) = 3 [pid 6490] <... memfd_create resumed>) = 3 [ 142.335650][ T6475] EXT4-fs (loop4): Free/Dirty block details [ 142.366655][ T5457] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 142.367075][ T11] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 142.372604][ T5457] EXT4-fs (loop2): This should not happen!! Data will be lost [ 142.372604][ T5457] [pid 6488] set_robust_list(0x555556fb95e0, 24 [pid 4995] ioctl(3, LOOP_CLR_FD [pid 6490] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4995] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6490] <... mmap resumed>) = 0x7f5c233f0000 [pid 4995] close(3 [pid 6488] <... set_robust_list resumed>) = 0 [pid 4995] <... close resumed>) = 0 [pid 4995] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6488] chdir("./49" [pid 4995] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6491 [pid 6488] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 6491 attached [pid 6491] set_robust_list(0x555556fb95e0, 24) = 0 [pid 6491] chdir("./48" [pid 6488] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6487] <... ioctl resumed>) = 0 [pid 6491] <... chdir resumed>) = 0 [pid 6491] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6491] setpgid(0, 0) = 0 [pid 6491] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6491] write(3, "1000", 4) = 4 [pid 6490] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6488] <... prctl resumed>) = 0 [pid 6491] close(3 [pid 6488] setpgid(0, 0 [pid 6487] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6491] <... close resumed>) = 0 [pid 6488] <... setpgid resumed>) = 0 [pid 6487] <... futex resumed>) = 0 [pid 6491] symlink("/dev/binderfs", "./binderfs" [pid 6488] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6487] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6491] <... symlink resumed>) = 0 [pid 6491] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6491] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c2b7f0000 [pid 6491] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6491] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6492], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6492 [pid 6491] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6491] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6490] <... write resumed>) = 1048576 [pid 6488] <... openat resumed>) = 3 [ 142.421806][ T6475] EXT4-fs (loop4): free_blocks=2415919104 [ 142.428347][ T6475] EXT4-fs (loop4): dirty_blocks=16 [ 142.432561][ T11] EXT4-fs (loop5): This should not happen!! Data will be lost [ 142.432561][ T11] [ 142.443289][ T6475] EXT4-fs (loop4): Block reservation details [ 142.449835][ T6475] EXT4-fs (loop4): i_reserved_data_blocks=1 [pid 6488] write(3, "1000", 4./strace-static-x86_64: Process 6492 attached ) = 4 [pid 4996] <... umount2 resumed>) = 0 [pid 6492] set_robust_list(0x7f5c2b8109e0, 24 [pid 6488] close(3 [pid 6475] <... sendfile resumed>) = 63 [pid 4999] <... umount2 resumed>) = 0 [pid 4996] umount2("./49/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6492] <... set_robust_list resumed>) = 0 [pid 6488] <... close resumed>) = 0 [pid 6475] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6471] exit_group(0 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6492] memfd_create("syzkaller", 0 [pid 6471] <... exit_group resumed>) = ? [pid 6492] <... memfd_create resumed>) = 3 [pid 6492] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5c233f0000 [pid 6490] munmap(0x7f5c233f0000, 1048576 [pid 6488] symlink("/dev/binderfs", "./binderfs" [pid 6487] <... futex resumed>) = ? [pid 6475] <... futex resumed>) = ? [pid 4996] lstat("./49/file0", [pid 6488] <... symlink resumed>) = 0 [pid 6487] +++ exited with 0 +++ [pid 4999] umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6475] +++ exited with 0 +++ [pid 6471] +++ exited with 0 +++ [pid 4999] lstat("./48/file0", [pid 6488] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6490] <... munmap resumed>) = 0 [pid 6488] <... futex resumed>) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6471, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 4996] umount2("./49/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6490] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6488] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4999] umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6488] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./48/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4996] openat(AT_FDCWD, "./49/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6488] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 4999] fstat(4, [pid 4996] <... openat resumed>) = 4 [pid 6488] <... mprotect resumed>) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./47", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] fstat(4, [pid 6490] <... openat resumed>) = 4 [pid 6488] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4999] getdents64(4, [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4996] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6492] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576./strace-static-x86_64: Process 6493 attached [pid 6490] ioctl(4, LOOP_SET_FD, 3 [pid 4999] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4998] openat(AT_FDCWD, "./47", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4996] getdents64(4, [pid 6493] set_robust_list(0x7f5c2b8109e0, 24 [pid 6490] <... ioctl resumed>) = 0 [pid 6488] <... clone resumed>, parent_tid=[6493], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6493 [pid 4999] getdents64(4, [pid 4998] <... openat resumed>) = 3 [pid 4996] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 6493] <... set_robust_list resumed>) = 0 [pid 6490] close(3 [pid 6488] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4998] fstat(3, [pid 4996] getdents64(4, [pid 6493] memfd_create("syzkaller", 0 [pid 6492] <... write resumed>) = 1048576 [pid 6490] <... close resumed>) = 0 [pid 6488] <... futex resumed>) = 0 [pid 4999] close(4 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 6493] <... memfd_create resumed>) = 3 [pid 6492] munmap(0x7f5c233f0000, 1048576 [pid 6490] mkdir("./file0", 0777 [pid 6488] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4999] <... close resumed>) = 0 [pid 4998] getdents64(3, [pid 4996] close(4 [pid 6493] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6492] <... munmap resumed>) = 0 [pid 6490] <... mkdir resumed>) = 0 [pid 4999] rmdir("./48/file0" [pid 4998] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4996] <... close resumed>) = 0 [pid 6493] <... mmap resumed>) = 0x7f5c233f0000 [pid 6492] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6490] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 4999] <... rmdir resumed>) = 0 [pid 4998] umount2("./47/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] rmdir("./49/file0" [pid 6492] <... openat resumed>) = 4 [pid 4999] getdents64(3, [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6492] ioctl(4, LOOP_SET_FD, 3 [pid 4999] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4998] lstat("./47/binderfs", [pid 4996] <... rmdir resumed>) = 0 [pid 4999] close(3 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4996] getdents64(3, [pid 4999] <... close resumed>) = 0 [pid 4998] unlink("./47/binderfs" [pid 4996] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4999] rmdir("./48" [pid 4998] <... unlink resumed>) = 0 [pid 4996] close(3 [pid 4999] <... rmdir resumed>) = 0 [pid 4998] umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] <... close resumed>) = 0 [pid 4999] mkdir("./49", 0777 [pid 4996] rmdir("./49" [pid 4999] <... mkdir resumed>) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 4996] <... rmdir resumed>) = 0 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 4996] mkdir("./50", 0777 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6493] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6492] <... ioctl resumed>) = 0 [pid 4999] close(3 [pid 4996] <... mkdir resumed>) = 0 [pid 6492] close(3 [pid 4996] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6492] <... close resumed>) = 0 [pid 4996] <... openat resumed>) = 3 [pid 6492] mkdir("./file0", 0777 [pid 4996] ioctl(3, LOOP_CLR_FD [pid 6492] <... mkdir resumed>) = 0 [pid 4996] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6492] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 4996] close(3 [pid 4999] <... close resumed>) = 0 [pid 4996] <... close resumed>) = 0 [ 142.556489][ T6490] loop0: detected capacity change from 0 to 2048 [ 142.573973][ T6492] loop1: detected capacity change from 0 to 2048 [ 142.588810][ T5076] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4996] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6497 [pid 4996] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6496 ./strace-static-x86_64: Process 6497 attached ./strace-static-x86_64: Process 6496 attached [pid 6490] <... mount resumed>) = 0 [pid 6497] set_robust_list(0x555556fb95e0, 24 [pid 6490] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6497] <... set_robust_list resumed>) = 0 [pid 6496] set_robust_list(0x555556fb95e0, 24 [pid 6490] <... openat resumed>) = 3 [pid 6497] chdir("./49" [pid 6496] <... set_robust_list resumed>) = 0 [pid 6493] <... write resumed>) = 1048576 [pid 6490] chdir("./file0" [pid 4998] <... umount2 resumed>) = 0 [ 142.602249][ T5076] EXT4-fs (loop4): This should not happen!! Data will be lost [ 142.602249][ T5076] [pid 6497] <... chdir resumed>) = 0 [pid 6496] chdir("./50" [pid 6493] munmap(0x7f5c233f0000, 1048576 [pid 6490] <... chdir resumed>) = 0 [pid 4998] umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6497] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6496] <... chdir resumed>) = 0 [pid 6493] <... munmap resumed>) = 0 [pid 6490] ioctl(4, LOOP_CLR_FD [pid 6497] <... prctl resumed>) = 0 [pid 6496] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6493] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6490] <... ioctl resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6497] setpgid(0, 0 [pid 6496] <... prctl resumed>) = 0 [pid 6493] <... openat resumed>) = 4 [pid 6492] <... mount resumed>) = 0 [pid 6490] close(4 [pid 4998] lstat("./47/file0", [pid 6497] <... setpgid resumed>) = 0 [pid 6496] setpgid(0, 0 [pid 6493] ioctl(4, LOOP_SET_FD, 3 [pid 6492] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6490] <... close resumed>) = 0 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6497] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6496] <... setpgid resumed>) = 0 [pid 6493] <... ioctl resumed>) = 0 [pid 6490] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6497] <... openat resumed>) = 3 [pid 6496] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6493] close(3 [pid 6490] <... futex resumed>) = 1 [pid 6489] <... futex resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6497] write(3, "1000", 4 [pid 6496] <... openat resumed>) = 3 [pid 6493] <... close resumed>) = 0 [pid 6490] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6489] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] openat(AT_FDCWD, "./47/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6497] <... write resumed>) = 4 [pid 6496] write(3, "1000", 4 [pid 6493] mkdir("./file0", 0777 [pid 6490] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6489] <... futex resumed>) = 0 [pid 4998] <... openat resumed>) = 4 [pid 6497] close(3 [pid 6496] <... write resumed>) = 4 [pid 6493] <... mkdir resumed>) = 0 [pid 6492] <... openat resumed>) = 3 [pid 6490] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6489] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] fstat(4, [pid 6497] <... close resumed>) = 0 [pid 6496] close(3 [pid 6493] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6492] chdir("./file0" [pid 6490] <... open resumed>) = 4 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6497] symlink("/dev/binderfs", "./binderfs" [pid 6496] <... close resumed>) = 0 [pid 6492] <... chdir resumed>) = 0 [pid 6490] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] getdents64(4, [pid 6497] <... symlink resumed>) = 0 [pid 6496] symlink("/dev/binderfs", "./binderfs" [pid 6492] ioctl(4, LOOP_CLR_FD [pid 6490] <... futex resumed>) = 1 [pid 6489] <... futex resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 6497] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6496] <... symlink resumed>) = 0 [pid 6489] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] getdents64(4, [pid 6497] <... futex resumed>) = 0 [pid 6496] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6489] <... futex resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 6497] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6496] <... futex resumed>) = 0 [pid 6489] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] close(4 [pid 6497] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6496] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4998] <... close resumed>) = 0 [pid 6497] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6496] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6492] <... ioctl resumed>) = 0 [pid 6490] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 4998] rmdir("./47/file0" [pid 6497] <... mprotect resumed>) = 0 [pid 6496] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6492] close(4 [pid 6490] <... write resumed>) = 9 [pid 4998] <... rmdir resumed>) = 0 [pid 6497] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6496] <... mprotect resumed>) = 0 [pid 6492] <... close resumed>) = 0 [pid 6490] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] getdents64(3, [pid 6496] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6492] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6490] <... futex resumed>) = 1 [pid 6489] <... futex resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 6497] <... clone resumed>, parent_tid=[6500], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6500 [pid 6492] <... futex resumed>) = 1 [pid 6491] <... futex resumed>) = 0 [pid 6490] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6489] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] close(3 [pid 6497] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6496] <... clone resumed>, parent_tid=[6501], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6501 [pid 6492] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6491] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6490] <... openat resumed>) = 5 [pid 6489] <... futex resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 6497] <... futex resumed>) = 0 [pid 6496] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6492] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6491] <... futex resumed>) = 0 [pid 6490] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6489] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] rmdir("./47" [pid 6497] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6496] <... futex resumed>) = 0 [pid 6492] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6491] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6490] <... futex resumed>) = 0 [pid 6489] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4998] <... rmdir resumed>) = 0 [pid 6496] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6489] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] mkdir("./48", 0777 [pid 6492] <... open resumed>) = 4 [pid 6490] open("./bus", O_RDWR [pid 6489] <... futex resumed>) = 0 [pid 4998] <... mkdir resumed>) = 0 [pid 6492] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6490] <... open resumed>) = 6 [pid 6489] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6492] <... futex resumed>) = 1 [pid 6491] <... futex resumed>) = 0 [pid 6490] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6489] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4998] <... openat resumed>) = 3 [pid 6492] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6491] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6490] <... futex resumed>) = 0 [pid 6489] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 6492] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6491] <... futex resumed>) = 0 [pid 6490] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6489] <... futex resumed>) = 0 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6492] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6491] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6489] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] close(3./strace-static-x86_64: Process 6501 attached ./strace-static-x86_64: Process 6500 attached [pid 6490] <... mmap resumed>) = 0x20000000 [pid 6500] set_robust_list(0x7f5c2b8109e0, 24 [pid 6492] <... write resumed>) = 9 [pid 6490] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6489] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4998] <... close resumed>) = 0 [pid 6492] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6490] <... futex resumed>) = 0 [pid 6492] <... futex resumed>) = 1 [pid 6491] <... futex resumed>) = 0 [pid 6490] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6492] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6491] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6492] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6491] <... futex resumed>) = 0 [pid 6492] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6491] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6500] <... set_robust_list resumed>) = 0 [pid 6489] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6492] <... openat resumed>) = 5 [pid 6500] memfd_create("syzkaller", 0 [pid 6492] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6490] <... futex resumed>) = 0 [pid 6489] <... futex resumed>) = 1 ./strace-static-x86_64: Process 6504 attached [ 142.676532][ T6493] loop3: detected capacity change from 0 to 2048 [pid 6500] <... memfd_create resumed>) = 3 [pid 6492] <... futex resumed>) = 1 [pid 6491] <... futex resumed>) = 0 [pid 6490] sendfile(4, 5, NULL, 2147483713 [pid 6489] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6504 [pid 6501] set_robust_list(0x7f5c2b8109e0, 24 [pid 6500] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6492] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6491] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6501] <... set_robust_list resumed>) = 0 [pid 6500] <... mmap resumed>) = 0x7f5c233f0000 [pid 6492] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6491] <... futex resumed>) = 0 [pid 6501] memfd_create("syzkaller", 0 [pid 6493] <... mount resumed>) = 0 [pid 6492] open("./bus", O_RDWR [pid 6491] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6492] <... open resumed>) = 6 [pid 6492] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6493] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6492] <... futex resumed>) = 1 [pid 6491] <... futex resumed>) = 0 [pid 6492] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6491] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6492] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6491] <... futex resumed>) = 0 [pid 6492] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6491] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6493] <... openat resumed>) = 3 [pid 6492] <... mmap resumed>) = 0x20000000 [pid 6493] chdir("./file0" [pid 6492] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6493] <... chdir resumed>) = 0 [pid 6492] <... futex resumed>) = 1 [pid 6491] <... futex resumed>) = 0 [pid 6493] ioctl(4, LOOP_CLR_FD [pid 6492] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6491] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6501] <... memfd_create resumed>) = 3 [pid 6493] <... ioctl resumed>) = 0 [pid 6492] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6491] <... futex resumed>) = 0 [pid 6501] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6493] close(4 [pid 6492] sendfile(4, 5, NULL, 2147483713 [pid 6491] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6501] <... mmap resumed>) = 0x7f5c233f0000 [pid 6493] <... close resumed>) = 0 [pid 6500] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 6500] munmap(0x7f5c233f0000, 1048576 [pid 6493] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6489] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6489] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6489] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c234cf000 [pid 6489] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6489] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6505], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6505 [pid 6489] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6489] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6493] <... futex resumed>) = 1 [pid 6488] <... futex resumed>) = 0 [pid 6488] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6488] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6493] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000) = 4 [pid 6493] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6505 attached [pid 6504] set_robust_list(0x555556fb95e0, 24 [pid 6488] <... futex resumed>) = 0 [pid 6493] <... futex resumed>) = 1 [pid 6488] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6505] set_robust_list(0x7f5c234ef9e0, 24 [pid 6488] <... futex resumed>) = 0 [pid 6500] <... munmap resumed>) = 0 [pid 6493] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6488] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6500] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6505] <... set_robust_list resumed>) = 0 [pid 6505] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6493] <... write resumed>) = 9 [ 142.740059][ T6490] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 142.770106][ T6492] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 6504] <... set_robust_list resumed>) = 0 [pid 6500] <... openat resumed>) = 4 [pid 6493] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6488] <... futex resumed>) = 0 [pid 6493] <... futex resumed>) = 1 [pid 6488] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6488] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6504] chdir("./48" [pid 6500] ioctl(4, LOOP_SET_FD, 3 [pid 6493] openat(AT_FDCWD, "./bus", O_RDONLY) = 5 [pid 6491] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6491] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6491] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c234cf000 [pid 6491] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 6493] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6491] <... mprotect resumed>) = 0 [pid 6504] <... chdir resumed>) = 0 [pid 6488] <... futex resumed>) = 0 [pid 6493] <... futex resumed>) = 1 [pid 6504] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6488] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6491] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6488] <... futex resumed>) = 0 [pid 6488] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6491] <... clone resumed>, parent_tid=[6506], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6506 [pid 6493] open("./bus", O_RDWR [pid 6504] <... prctl resumed>) = 0 [pid 6491] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6491] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6504] setpgid(0, 0 [pid 6501] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6493] <... open resumed>) = 6 [pid 6493] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6488] <... futex resumed>) = 0 [pid 6493] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6488] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6493] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6488] <... futex resumed>) = 0 [pid 6493] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6488] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6506 attached [pid 6504] <... setpgid resumed>) = 0 [pid 6500] <... ioctl resumed>) = 0 [pid 6493] <... mmap resumed>) = 0x20000000 [pid 6489] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6504] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6493] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6506] set_robust_list(0x7f5c234ef9e0, 24 [pid 6500] close(3 [pid 6493] <... futex resumed>) = 1 [pid 6488] <... futex resumed>) = 0 [pid 6506] <... set_robust_list resumed>) = 0 [pid 6504] <... openat resumed>) = 3 [pid 6500] <... close resumed>) = 0 [pid 6493] sendfile(4, 5, NULL, 2147483713 [pid 6488] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6504] write(3, "1000", 4 [pid 6488] <... futex resumed>) = 0 [pid 6488] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6504] <... write resumed>) = 4 [ 142.809441][ T6500] loop5: detected capacity change from 0 to 2048 [ 142.821163][ T6490] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 142.835997][ T6490] EXT4-fs (loop0): This should not happen!! Data will be lost [ 142.835997][ T6490] [ 142.849459][ T6490] EXT4-fs (loop0): Total free blocks count 0 [pid 6506] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6504] close(3) = 0 [pid 6500] mkdir("./file0", 0777 [pid 6491] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 142.857366][ T6490] EXT4-fs (loop0): Free/Dirty block details [ 142.861781][ T6493] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 142.864204][ T6490] EXT4-fs (loop0): free_blocks=2415919104 [ 142.884726][ T6492] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 142.885416][ T6490] EXT4-fs (loop0): dirty_blocks=16 [ 142.898654][ T6492] EXT4-fs (loop1): This should not happen!! Data will be lost [pid 6504] symlink("/dev/binderfs", "./binderfs" [pid 6500] <... mkdir resumed>) = 0 [pid 6504] <... symlink resumed>) = 0 [pid 6500] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6488] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6488] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6504] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6488] <... futex resumed>) = 0 [pid 6504] <... futex resumed>) = 0 [pid 6504] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6488] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6504] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6488] <... mmap resumed>) = 0x7f5c234cf000 [pid 6501] <... write resumed>) = 1048576 [pid 6504] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6488] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 6501] munmap(0x7f5c233f0000, 1048576 [pid 6504] <... mprotect resumed>) = 0 [pid 6488] <... mprotect resumed>) = 0 [pid 6504] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6488] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6501] <... munmap resumed>) = 0 [pid 6501] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6501] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 6507 attached [pid 6504] <... clone resumed>, parent_tid=[6507], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6507 [pid 6488] <... clone resumed>, parent_tid=[6508], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6508 [pid 6507] set_robust_list(0x7f5c2b8109e0, 24) = 0 ./strace-static-x86_64: Process 6508 attached [pid 6488] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6504] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6507] memfd_create("syzkaller", 0) = 3 [pid 6507] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5c233f0000 [pid 6488] <... futex resumed>) = 0 [pid 6504] <... futex resumed>) = 0 [pid 6504] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [ 142.898654][ T6492] [ 142.904305][ T6490] EXT4-fs (loop0): Block reservation details [ 142.921754][ T6492] EXT4-fs (loop1): Total free blocks count 0 [ 142.938693][ T6501] loop2: detected capacity change from 0 to 2048 [ 142.947758][ T6492] EXT4-fs (loop1): Free/Dirty block details [pid 6488] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6508] set_robust_list(0x7f5c234ef9e0, 24 [pid 6500] <... mount resumed>) = 0 [pid 6500] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6500] chdir("./file0") = 0 [pid 6500] ioctl(4, LOOP_CLR_FD) = 0 [pid 6500] close(4 [pid 6508] <... set_robust_list resumed>) = 0 [pid 6500] <... close resumed>) = 0 [pid 6500] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6497] <... futex resumed>) = 0 [pid 6508] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6500] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6497] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6500] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6497] <... futex resumed>) = 0 [pid 6500] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6497] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6506] <... ioctl resumed>) = 0 [pid 6500] <... open resumed>) = 4 [pid 6492] <... sendfile resumed>) = 63 [pid 6500] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6506] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6500] <... futex resumed>) = 1 [pid 6497] <... futex resumed>) = 0 [pid 6492] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6506] <... futex resumed>) = 0 [pid 6501] <... ioctl resumed>) = 0 [pid 6500] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6497] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6492] <... futex resumed>) = 0 [pid 6506] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6501] close(3 [pid 6500] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6497] <... futex resumed>) = 0 [pid 6492] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6491] exit_group(0 [pid 6506] <... futex resumed>) = ? [pid 6501] <... close resumed>) = 0 [pid 6500] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [ 142.956206][ T6492] EXT4-fs (loop1): free_blocks=2415919104 [ 142.962618][ T6492] EXT4-fs (loop1): dirty_blocks=16 [ 142.968103][ T6492] EXT4-fs (loop1): Block reservation details [ 142.974772][ T6492] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 142.983238][ T6493] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 142.993959][ T6490] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 142.995915][ T6493] EXT4-fs (loop3): This should not happen!! Data will be lost [pid 6497] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6492] <... futex resumed>) = ? [pid 6491] <... exit_group resumed>) = ? [pid 6507] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6506] +++ exited with 0 +++ [pid 6501] mkdir("./file0", 0777 [pid 6500] <... write resumed>) = 9 [pid 6492] +++ exited with 0 +++ [pid 6491] +++ exited with 0 +++ [pid 6488] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6508] <... ioctl resumed>) = 0 [pid 6505] <... ioctl resumed>) = 0 [pid 6501] <... mkdir resumed>) = 0 [pid 6500] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6493] <... sendfile resumed>) = 63 [pid 6490] <... sendfile resumed>) = 63 [pid 6508] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6505] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6501] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6500] <... futex resumed>) = 1 [pid 6497] <... futex resumed>) = 0 [pid 6493] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6490] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6491, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 6508] <... futex resumed>) = 0 [pid 6507] <... write resumed>) = 1048576 [pid 6505] <... futex resumed>) = 0 [pid 6500] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6497] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6493] <... futex resumed>) = 0 [pid 6490] <... futex resumed>) = 0 [pid 6489] exit_group(0 [pid 4995] restart_syscall(<... resuming interrupted clone ...> [pid 6508] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6507] munmap(0x7f5c233f0000, 1048576 [pid 6500] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6497] <... futex resumed>) = 0 [pid 6493] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6489] <... exit_group resumed>) = ? [pid 6488] exit_group(0 [pid 4995] <... restart_syscall resumed>) = 0 [pid 6508] <... futex resumed>) = ? [pid 6507] <... munmap resumed>) = 0 [pid 6505] +++ exited with 0 +++ [pid 6500] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6497] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6493] <... futex resumed>) = ? [ 142.995915][ T6493] [ 143.011050][ T6493] EXT4-fs (loop3): Total free blocks count 0 [ 143.017190][ T6493] EXT4-fs (loop3): Free/Dirty block details [ 143.023131][ T6493] EXT4-fs (loop3): free_blocks=2415919104 [ 143.028971][ T6493] EXT4-fs (loop3): dirty_blocks=16 [ 143.034211][ T6493] EXT4-fs (loop3): Block reservation details [ 143.040337][ T6493] EXT4-fs (loop3): i_reserved_data_blocks=1 [pid 6490] +++ exited with 0 +++ [pid 6488] <... exit_group resumed>) = ? [pid 6508] +++ exited with 0 +++ [pid 6507] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6500] <... openat resumed>) = 5 [pid 6493] +++ exited with 0 +++ [pid 6489] +++ exited with 0 +++ [pid 6488] +++ exited with 0 +++ [pid 6507] <... openat resumed>) = 4 [pid 6507] ioctl(4, LOOP_SET_FD, 3 [pid 6500] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6497] <... futex resumed>) = 0 [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6488, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 4995] umount2("./48", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6489, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=9 /* 0.09 s */} --- [pid 6500] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6497] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] restart_syscall(<... resuming interrupted clone ...> [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] umount2("./50", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6500] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6497] <... futex resumed>) = 0 [pid 4997] <... restart_syscall resumed>) = 0 [pid 4995] openat(AT_FDCWD, "./48", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6500] open("./bus", O_RDWR [pid 6497] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4995] <... openat resumed>) = 3 [pid 4994] openat(AT_FDCWD, "./50", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6507] <... ioctl resumed>) = 0 [pid 6500] <... open resumed>) = 6 [pid 6507] close(3) = 0 [pid 6507] mkdir("./file0", 0777) = 0 [pid 6507] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 4997] umount2("./49", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./49", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4997] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(3, 0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4997] umount2("./49/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./49/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] unlink("./49/binderfs") = 0 [pid 4997] umount2("./49/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] getdents64(3, 0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4995] umount2("./48/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4995] lstat("./48/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [ 143.065619][ T26] kauditd_printk_skb: 98 callbacks suppressed [ 143.065638][ T26] audit: type=1804 audit(1687834613.122:1292): pid=6500 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor113" name="/root/syzkaller.drywye/49/file0/bus" dev="loop5" ino=18 res=1 errno=0 [ 143.067844][ T6507] loop4: detected capacity change from 0 to 2048 [pid 4995] unlink("./48/binderfs") = 0 [pid 4995] umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] <... openat resumed>) = 3 [pid 4994] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] getdents64(3, 0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4994] umount2("./50/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] lstat("./50/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4994] unlink("./50/binderfs") = 0 [pid 4994] umount2("./50/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6500] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6497] <... futex resumed>) = 0 [pid 6500] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6497] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6500] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6497] <... futex resumed>) = 0 [pid 6500] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6497] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6500] <... mmap resumed>) = 0x20000000 [pid 6500] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6497] <... futex resumed>) = 0 [pid 6500] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6497] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6500] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6497] <... futex resumed>) = 0 [pid 6500] sendfile(4, 5, NULL, 2147483713 [ 143.082552][ T26] audit: type=1804 audit(1687834613.142:1293): pid=6500 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor113" name="/root/syzkaller.drywye/49/file0/bus" dev="loop5" ino=18 res=1 errno=0 [ 143.129710][ T5076] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 143.137642][ T26] audit: type=1804 audit(1687834613.192:1294): pid=6500 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor113" name="/root/syzkaller.drywye/49/file0/bus" dev="loop5" ino=18 res=1 errno=0 [pid 6497] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6501] <... mount resumed>) = 0 [pid 6497] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6497] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 143.165801][ T11] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 143.166814][ T26] audit: type=1804 audit(1687834613.192:1295): pid=6500 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor113" name="/root/syzkaller.drywye/49/file0/bus" dev="loop5" ino=18 res=1 errno=0 [ 143.178258][ T5457] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 6497] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c234cf000 [pid 6497] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6497] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6513 attached [pid 6513] set_robust_list(0x7f5c234ef9e0, 24) = 0 [pid 6513] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6501] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6501] chdir("./file0") = 0 [pid 6501] ioctl(4, LOOP_CLR_FD) = 0 [pid 6501] close(4) = 0 [pid 6501] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6501] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6497] <... clone resumed>, parent_tid=[6513], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6513 [pid 6496] <... futex resumed>) = 0 [pid 6497] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6496] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6513] <... futex resumed>) = 0 [pid 6501] <... futex resumed>) = 0 [pid 6497] <... futex resumed>) = 1 [pid 6496] <... futex resumed>) = 1 [pid 6513] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6501] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6497] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6496] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6501] <... open resumed>) = 4 [pid 6501] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6496] <... futex resumed>) = 0 [pid 6496] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 143.178305][ T5457] EXT4-fs (loop1): This should not happen!! Data will be lost [ 143.178305][ T5457] [ 143.210069][ T11] EXT4-fs (loop0): This should not happen!! Data will be lost [ 143.210069][ T11] [ 143.224237][ T6500] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 143.249706][ T5076] EXT4-fs (loop3): This should not happen!! Data will be lost [ 143.249706][ T5076] [pid 6496] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6501] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 4995] <... umount2 resumed>) = 0 [pid 6501] <... write resumed>) = 9 [pid 6501] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6496] <... futex resumed>) = 0 [pid 6501] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6496] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6501] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6496] <... futex resumed>) = 0 [pid 6501] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6496] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6501] <... openat resumed>) = 5 [pid 6501] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6496] <... futex resumed>) = 0 [pid 6501] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6496] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6501] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6496] <... futex resumed>) = 0 [pid 6501] open("./bus", O_RDWR [pid 6496] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6501] <... open resumed>) = 6 [pid 6501] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6496] <... futex resumed>) = 0 [pid 6501] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6496] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6501] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6496] <... futex resumed>) = 0 [pid 6501] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6496] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6501] <... mmap resumed>) = 0x20000000 [pid 4995] umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6501] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6496] <... futex resumed>) = 0 [pid 4994] <... umount2 resumed>) = 0 [pid 6501] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6496] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6501] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6496] <... futex resumed>) = 0 [ 143.273081][ T6500] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 143.285976][ T26] audit: type=1804 audit(1687834613.332:1296): pid=6501 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor113" name="/root/syzkaller.k2b0rY/50/file0/bus" dev="loop2" ino=18 res=1 errno=0 [ 143.311035][ T6500] EXT4-fs (loop5): This should not happen!! Data will be lost [ 143.311035][ T6500] [pid 6501] sendfile(4, 5, NULL, 2147483713 [pid 6496] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6497] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] lstat("./48/file0", [pid 4994] umount2("./50/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6507] <... mount resumed>) = 0 [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] lstat("./50/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] umount2("./50/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] openat(AT_FDCWD, "./48/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] openat(AT_FDCWD, "./50/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4994] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] getdents64(4, 0x555556fc2660 /* 2 entries */, 32768) = 48 [ 143.312508][ T6501] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 143.320931][ T6500] EXT4-fs (loop5): Total free blocks count 0 [ 143.338166][ T26] audit: type=1804 audit(1687834613.332:1297): pid=6501 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor113" name="/root/syzkaller.k2b0rY/50/file0/bus" dev="loop2" ino=18 res=1 errno=0 [ 143.342475][ T6500] EXT4-fs (loop5): Free/Dirty block details [pid 6507] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6496] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4995] <... openat resumed>) = 4 [pid 4994] getdents64(4, [pid 6507] <... openat resumed>) = 3 [pid 4995] fstat(4, [pid 6507] chdir("./file0" [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6507] <... chdir resumed>) = 0 [pid 4995] getdents64(4, [ 143.395616][ T6500] EXT4-fs (loop5): free_blocks=2415919104 [ 143.401510][ T6500] EXT4-fs (loop5): dirty_blocks=16 [ 143.407859][ T6500] EXT4-fs (loop5): Block reservation details [ 143.414254][ T6500] EXT4-fs (loop5): i_reserved_data_blocks=1 [pid 6507] ioctl(4, LOOP_CLR_FD [pid 6496] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4994] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 6513] <... ioctl resumed>) = 0 [pid 6507] <... ioctl resumed>) = 0 [pid 6500] <... sendfile resumed>) = 63 [pid 4995] getdents64(4, [pid 6507] close(4 [pid 4995] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 6507] <... close resumed>) = 0 [pid 4995] close(4 [pid 6507] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] <... close resumed>) = 0 [pid 6507] <... futex resumed>) = 1 [pid 6504] <... futex resumed>) = 0 [pid 4995] rmdir("./48/file0" [pid 6507] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6504] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] <... rmdir resumed>) = 0 [pid 6507] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6504] <... futex resumed>) = 0 [pid 4995] getdents64(3, [pid 6507] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6504] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4995] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 6513] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6507] <... open resumed>) = 4 [pid 6500] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6496] <... futex resumed>) = 0 [pid 4995] close(3 [pid 4994] close(4 [pid 6513] <... futex resumed>) = 0 [pid 6507] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6500] <... futex resumed>) = 0 [pid 6496] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4995] <... close resumed>) = 0 [pid 4994] <... close resumed>) = 0 [pid 6513] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6507] <... futex resumed>) = 1 [pid 6504] <... futex resumed>) = 0 [pid 6500] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6497] exit_group(0 [pid 6496] <... mmap resumed>) = 0x7f5c234cf000 [pid 4995] rmdir("./48" [pid 4994] rmdir("./50/file0" [pid 6513] <... futex resumed>) = ? [pid 6507] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6504] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6500] <... futex resumed>) = ? [ 143.431360][ T26] audit: type=1804 audit(1687834613.352:1298): pid=6501 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor113" name="/root/syzkaller.k2b0rY/50/file0/bus" dev="loop2" ino=18 res=1 errno=0 [ 143.459981][ T6501] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 143.472350][ T6501] EXT4-fs (loop2): This should not happen!! Data will be lost [ 143.472350][ T6501] [ 143.484991][ T6501] EXT4-fs (loop2): Total free blocks count 0 [pid 6497] <... exit_group resumed>) = ? [pid 6496] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 4997] <... umount2 resumed>) = 0 [pid 4995] <... rmdir resumed>) = 0 [pid 4994] <... rmdir resumed>) = 0 [pid 6513] +++ exited with 0 +++ [pid 6507] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6504] <... futex resumed>) = 0 [pid 6500] +++ exited with 0 +++ [pid 6497] +++ exited with 0 +++ [pid 6496] <... mprotect resumed>) = 0 [pid 4995] mkdir("./49", 0777 [pid 4994] getdents64(3, [pid 6507] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6504] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6496] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6497, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 4995] <... mkdir resumed>) = 0 [pid 4994] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 6507] <... write resumed>) = 9 [pid 4997] umount2("./49/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 4994] close(3 [pid 6507] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6496] <... clone resumed>, parent_tid=[6516], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6516 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] <... openat resumed>) = 3 [pid 4994] <... close resumed>) = 0 [pid 6507] <... futex resumed>) = 1 [pid 6504] <... futex resumed>) = 0 [pid 6496] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] lstat("./49/file0", [pid 4995] ioctl(3, LOOP_CLR_FD [pid 4994] rmdir("./50"./strace-static-x86_64: Process 6516 attached [pid 6507] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6504] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6501] <... sendfile resumed>) = 63 [pid 6496] <... futex resumed>) = 0 [pid 4997] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4994] <... rmdir resumed>) = 0 [pid 6507] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6504] <... futex resumed>) = 0 [pid 6496] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] umount2("./49", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] umount2("./49/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] close(3 [pid 4994] mkdir("./51", 0777 [pid 6516] set_robust_list(0x7f5c234ef9e0, 24 [pid 6507] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6504] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6501] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 143.491142][ T6501] EXT4-fs (loop2): Free/Dirty block details [ 143.497105][ T6501] EXT4-fs (loop2): free_blocks=2415919104 [ 143.502860][ T6501] EXT4-fs (loop2): dirty_blocks=16 [ 143.508599][ T6501] EXT4-fs (loop2): Block reservation details [ 143.514634][ T6501] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 143.520907][ T26] audit: type=1804 audit(1687834613.352:1299): pid=6501 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor113" name="/root/syzkaller.k2b0rY/50/file0/bus" dev="loop2" ino=18 res=1 errno=0 [pid 4995] <... close resumed>) = 0 [pid 4994] <... mkdir resumed>) = 0 [pid 6516] <... set_robust_list resumed>) = 0 [pid 6507] <... openat resumed>) = 5 [pid 6501] <... futex resumed>) = 0 [pid 4999] openat(AT_FDCWD, "./49", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] openat(AT_FDCWD, "./49/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4995] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4994] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6507] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... openat resumed>) = 3 [pid 4997] <... openat resumed>) = 4 [pid 4994] <... openat resumed>) = 3 [pid 6507] <... futex resumed>) = 1 [pid 6504] <... futex resumed>) = 0 [pid 4999] fstat(3, [pid 4997] fstat(4, [pid 4995] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6517 [pid 4994] ioctl(3, LOOP_CLR_FD [pid 6507] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6504] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6507] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6504] <... futex resumed>) = 0 [pid 4999] getdents64(3, [pid 4997] getdents64(4, [pid 4994] close(3./strace-static-x86_64: Process 6517 attached [pid 6507] open("./bus", O_RDWR [pid 6504] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4997] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4994] <... close resumed>) = 0 [pid 6517] set_robust_list(0x555556fb95e0, 24 [pid 6507] <... open resumed>) = 6 [pid 4999] umount2("./49/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] getdents64(4, [pid 4994] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6517] <... set_robust_list resumed>) = 0 [pid 6507] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 6517] chdir("./49" [pid 6507] <... futex resumed>) = 1 [pid 6504] <... futex resumed>) = 0 [pid 4999] lstat("./49/binderfs", [pid 4997] close(4 [pid 4994] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6518 [pid 6517] <... chdir resumed>) = 0 [pid 6516] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6507] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6504] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6501] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] <... close resumed>) = 0 ./strace-static-x86_64: Process 6518 attached [pid 6517] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6516] <... ioctl resumed>) = 0 [pid 6507] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6504] <... futex resumed>) = 0 [pid 4999] unlink("./49/binderfs" [pid 4997] rmdir("./49/file0" [pid 6518] set_robust_list(0x555556fb95e0, 24 [pid 6517] <... prctl resumed>) = 0 [pid 6516] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6507] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6504] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] <... unlink resumed>) = 0 [pid 4997] <... rmdir resumed>) = 0 [pid 6518] <... set_robust_list resumed>) = 0 [pid 6517] setpgid(0, 0 [pid 6516] <... futex resumed>) = 1 [pid 6507] <... mmap resumed>) = 0x20000000 [pid 6496] <... futex resumed>) = 0 [pid 4999] umount2("./49/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] getdents64(3, [pid 6518] chdir("./51" [pid 6517] <... setpgid resumed>) = 0 [pid 6516] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6507] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6496] exit_group(0 [pid 4997] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 6518] <... chdir resumed>) = 0 [ 143.556819][ T26] audit: type=1804 audit(1687834613.622:1300): pid=6507 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor113" name="/root/syzkaller.qSu2w6/48/file0/bus" dev="loop4" ino=18 res=1 errno=0 [pid 6517] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6507] <... futex resumed>) = 1 [pid 6504] <... futex resumed>) = 0 [pid 6496] <... exit_group resumed>) = ? [pid 4997] close(3 [pid 6518] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6517] <... openat resumed>) = 3 [pid 6507] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6504] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] <... close resumed>) = 0 [pid 6518] <... prctl resumed>) = 0 [pid 6517] write(3, "1000", 4 [pid 6507] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6504] <... futex resumed>) = 0 [pid 4997] rmdir("./49" [pid 6518] setpgid(0, 0 [pid 6517] <... write resumed>) = 4 [pid 6507] sendfile(4, 5, NULL, 2147483713 [pid 6504] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4997] <... rmdir resumed>) = 0 [pid 6518] <... setpgid resumed>) = 0 [pid 6517] close(3 [pid 6516] <... futex resumed>) = ? [pid 6501] <... futex resumed>) = ? [pid 4997] mkdir("./50", 0777 [pid 6518] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6517] <... close resumed>) = 0 [pid 6516] +++ exited with 0 +++ [pid 4997] <... mkdir resumed>) = 0 [pid 6518] <... openat resumed>) = 3 [pid 6517] symlink("/dev/binderfs", "./binderfs" [pid 6501] +++ exited with 0 +++ [pid 6496] +++ exited with 0 +++ [pid 4997] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6518] write(3, "1000", 4 [pid 6517] <... symlink resumed>) = 0 [pid 4997] <... openat resumed>) = 3 [pid 6518] <... write resumed>) = 4 [pid 6517] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] ioctl(3, LOOP_CLR_FD [pid 4996] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6496, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 6518] close(3 [pid 6517] <... futex resumed>) = 0 [pid 4997] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4996] umount2("./50", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6518] <... close resumed>) = 0 [pid 6517] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4997] close(3 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6518] symlink("/dev/binderfs", "./binderfs" [pid 6517] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 4997] <... close resumed>) = 0 [pid 4996] openat(AT_FDCWD, "./50", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6518] <... symlink resumed>) = 0 [pid 6517] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4996] <... openat resumed>) = 3 [pid 6518] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6517] <... mprotect resumed>) = 0 [ 143.598730][ T5608] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 143.611605][ T6507] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 143.632212][ T5608] EXT4-fs (loop5): This should not happen!! Data will be lost [ 143.632212][ T5608] [pid 4996] fstat(3, [pid 6518] <... futex resumed>) = 0 [pid 6517] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4997] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6519 [pid 4996] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6518] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4996] getdents64(3, [pid 6518] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6517] <... clone resumed>, parent_tid=[6520], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6520 [pid 4996] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 6518] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6517] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] umount2("./50/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6518] <... mprotect resumed>) = 0 [pid 6517] <... futex resumed>) = 0 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6518] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6517] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4996] lstat("./50/binderfs", ./strace-static-x86_64: Process 6520 attached {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6520] set_robust_list(0x7f5c2b8109e0, 24 [pid 6518] <... clone resumed>, parent_tid=[6521], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6521 [pid 4996] unlink("./50/binderfs" [pid 6520] <... set_robust_list resumed>) = 0 [pid 6518] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... unlink resumed>) = 0 [pid 6520] memfd_create("syzkaller", 0 [pid 6518] <... futex resumed>) = 0 [pid 4996] umount2("./50/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6521 attached ./strace-static-x86_64: Process 6519 attached [pid 6520] <... memfd_create resumed>) = 3 [pid 6518] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6504] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6521] set_robust_list(0x7f5c2b8109e0, 24 [pid 6520] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6519] set_robust_list(0x555556fb95e0, 24 [pid 6504] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6521] <... set_robust_list resumed>) = 0 [pid 6520] <... mmap resumed>) = 0x7f5c233f0000 [pid 6519] <... set_robust_list resumed>) = 0 [pid 6504] <... futex resumed>) = 0 [pid 6521] memfd_create("syzkaller", 0 [pid 6519] chdir("./50" [pid 6504] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6521] <... memfd_create resumed>) = 3 [pid 6519] <... chdir resumed>) = 0 [pid 6504] <... mmap resumed>) = 0x7f5c234cf000 [pid 6521] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6519] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6504] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 6521] <... mmap resumed>) = 0x7f5c233f0000 [pid 6519] <... prctl resumed>) = 0 [pid 6504] <... mprotect resumed>) = 0 [pid 4999] <... umount2 resumed>) = 0 [pid 6504] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6522], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6522 [pid 6519] setpgid(0, 0 [pid 6504] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6519] <... setpgid resumed>) = 0 [pid 6504] <... futex resumed>) = 0 [pid 6520] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6519] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6504] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6522 attached [pid 6519] <... openat resumed>) = 3 [pid 4999] umount2("./49/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6522] set_robust_list(0x7f5c234ef9e0, 24 [ 143.642312][ T26] audit: type=1804 audit(1687834613.632:1301): pid=6507 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor113" name="/root/syzkaller.qSu2w6/48/file0/bus" dev="loop4" ino=18 res=1 errno=0 [ 143.669138][ T5457] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 143.682946][ T6507] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 6519] write(3, "1000", 4 [pid 6522] <... set_robust_list resumed>) = 0 [pid 6521] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6519] <... write resumed>) = 4 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6522] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6519] close(3 [pid 4999] lstat("./49/file0", [pid 6519] <... close resumed>) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6519] symlink("/dev/binderfs", "./binderfs" [pid 4999] umount2("./49/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6519] <... symlink resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6519] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] openat(AT_FDCWD, "./49/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6519] <... futex resumed>) = 0 [pid 4999] <... openat resumed>) = 4 [pid 6519] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4999] fstat(4, [pid 6519] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6519] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 4999] getdents64(4, [pid 6519] <... mprotect resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 6519] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4999] getdents64(4, 0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 6519] <... clone resumed>, parent_tid=[6523], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6523 [pid 4999] close(4 [pid 6519] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... close resumed>) = 0 [pid 6519] <... futex resumed>) = 0 [pid 4999] rmdir("./49/file0" [pid 6519] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4999] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 6523 attached [pid 4999] getdents64(3, [pid 6523] set_robust_list(0x7f5c2b8109e0, 24 [pid 4999] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 6523] <... set_robust_list resumed>) = 0 [pid 6521] <... write resumed>) = 1048576 [pid 6504] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4999] close(3 [pid 6523] memfd_create("syzkaller", 0 [pid 6521] munmap(0x7f5c233f0000, 1048576 [pid 6523] <... memfd_create resumed>) = 3 [pid 4999] <... close resumed>) = 0 [pid 6523] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6521] <... munmap resumed>) = 0 [pid 4999] rmdir("./49" [pid 6523] <... mmap resumed>) = 0x7f5c233f0000 [pid 6521] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 4999] <... rmdir resumed>) = 0 [pid 6521] <... openat resumed>) = 4 [ 143.723150][ T5457] EXT4-fs (loop2): This should not happen!! Data will be lost [ 143.723150][ T5457] [ 143.757231][ T6507] EXT4-fs (loop4): This should not happen!! Data will be lost [ 143.757231][ T6507] [pid 4999] mkdir("./50", 0777 [pid 6523] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6521] ioctl(4, LOOP_SET_FD, 3 [pid 6520] <... write resumed>) = 1048576 [pid 4999] <... mkdir resumed>) = 0 [pid 4996] <... umount2 resumed>) = 0 [pid 6520] munmap(0x7f5c233f0000, 1048576) = 0 [pid 6520] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6521] <... ioctl resumed>) = 0 [pid 6520] ioctl(4, LOOP_SET_FD, 3 [pid 4999] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6521] close(3 [pid 4999] <... openat resumed>) = 3 [pid 6521] <... close resumed>) = 0 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 6521] mkdir("./file0", 0777 [pid 4996] umount2("./50/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4996] lstat("./50/file0", [pid 6521] <... mkdir resumed>) = 0 [pid 4999] close(3 [pid 4996] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6521] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 4999] <... close resumed>) = 0 [pid 4996] umount2("./50/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4996] openat(AT_FDCWD, "./50/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6524 [pid 4996] <... openat resumed>) = 4 [pid 6523] <... write resumed>) = 1048576 [pid 4996] fstat(4, [pid 6523] munmap(0x7f5c233f0000, 1048576 [pid 4996] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6520] <... ioctl resumed>) = 0 [pid 4996] getdents64(4, [pid 6523] <... munmap resumed>) = 0 ./strace-static-x86_64: Process 6524 attached [pid 6523] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6520] close(3 [pid 4996] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 6524] set_robust_list(0x555556fb95e0, 24 [pid 6523] <... openat resumed>) = 4 [pid 6520] <... close resumed>) = 0 [pid 4996] getdents64(4, [pid 6524] <... set_robust_list resumed>) = 0 [pid 6523] ioctl(4, LOOP_SET_FD, 3 [pid 6520] mkdir("./file0", 0777 [pid 4996] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 6520] <... mkdir resumed>) = 0 [pid 4996] close(4 [pid 6520] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 4996] <... close resumed>) = 0 [ 143.806628][ T6521] loop0: detected capacity change from 0 to 2048 [ 143.814759][ T6520] loop1: detected capacity change from 0 to 2048 [ 143.833062][ T6507] EXT4-fs (loop4): Total free blocks count 0 [pid 4996] rmdir("./50/file0" [pid 6524] chdir("./50" [pid 6523] <... ioctl resumed>) = 0 [pid 4996] <... rmdir resumed>) = 0 [pid 6524] <... chdir resumed>) = 0 [pid 6523] close(3 [pid 4996] getdents64(3, [pid 6524] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6523] <... close resumed>) = 0 [pid 6521] <... mount resumed>) = 0 [pid 4996] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4996] close(3) = 0 [pid 4996] rmdir("./50") = 0 [pid 6524] <... prctl resumed>) = 0 [pid 6523] mkdir("./file0", 0777 [pid 6521] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 4996] mkdir("./51", 0777) = 0 [pid 4996] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6524] setpgid(0, 0 [pid 6523] <... mkdir resumed>) = 0 [pid 6521] <... openat resumed>) = 3 [pid 4996] <... openat resumed>) = 3 [pid 4996] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4996] close(3 [pid 6524] <... setpgid resumed>) = 0 [pid 6523] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6522] <... ioctl resumed>) = 0 [pid 6521] chdir("./file0" [pid 6507] <... sendfile resumed>) = 63 [pid 4996] <... close resumed>) = 0 [pid 6524] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6522] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6521] <... chdir resumed>) = 0 [pid 6507] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6524] <... openat resumed>) = 3 [pid 6522] <... futex resumed>) = 0 [pid 6521] ioctl(4, LOOP_CLR_FD [pid 6507] <... futex resumed>) = 0 [pid 6504] exit_group(0 [pid 6524] write(3, "1000", 4 [pid 6521] <... ioctl resumed>) = 0 [pid 6504] <... exit_group resumed>) = ? [pid 4996] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6529 ./strace-static-x86_64: Process 6529 attached [pid 6524] <... write resumed>) = 4 [pid 6522] +++ exited with 0 +++ [pid 6521] close(4 [pid 6507] +++ exited with 0 +++ [pid 6504] +++ exited with 0 +++ [pid 6529] set_robust_list(0x555556fb95e0, 24 [pid 6524] close(3 [pid 6521] <... close resumed>) = 0 [pid 6520] <... mount resumed>) = 0 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6504, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 6524] <... close resumed>) = 0 [pid 6521] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6520] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6524] symlink("/dev/binderfs", "./binderfs" [pid 6523] <... mount resumed>) = 0 [pid 6521] <... futex resumed>) = 1 [pid 6520] chdir("./file0" [pid 6518] <... futex resumed>) = 0 [pid 4998] umount2("./48", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6524] <... symlink resumed>) = 0 [pid 6523] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6521] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6520] <... chdir resumed>) = 0 [pid 6518] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6529] <... set_robust_list resumed>) = 0 [pid 6524] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6523] <... openat resumed>) = 3 [pid 6521] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6520] ioctl(4, LOOP_CLR_FD [pid 6518] <... futex resumed>) = 0 [pid 4998] openat(AT_FDCWD, "./48", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6529] chdir("./51" [pid 6524] <... futex resumed>) = 0 [pid 6523] chdir("./file0" [pid 6521] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6520] <... ioctl resumed>) = 0 [pid 6518] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] <... openat resumed>) = 3 [pid 6529] <... chdir resumed>) = 0 [pid 6524] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6523] <... chdir resumed>) = 0 [pid 6520] close(4 [pid 4998] fstat(3, [pid 6524] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6520] <... close resumed>) = 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6529] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6524] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6523] ioctl(4, LOOP_CLR_FD [pid 6521] <... open resumed>) = 4 [pid 6520] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] getdents64(3, [pid 6529] <... prctl resumed>) = 0 [pid 6524] <... mprotect resumed>) = 0 [pid 6523] <... ioctl resumed>) = 0 [pid 6521] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6520] <... futex resumed>) = 1 [pid 6517] <... futex resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 6529] setpgid(0, 0 [pid 6524] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6523] close(4 [pid 6521] <... futex resumed>) = 1 [pid 6520] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6518] <... futex resumed>) = 0 [pid 6517] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] umount2("./48/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6529] <... setpgid resumed>) = 0 [pid 6523] <... close resumed>) = 0 [pid 6521] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6520] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6518] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6517] <... futex resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6532 attached [pid 6529] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6524] <... clone resumed>, parent_tid=[6532], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6532 [pid 6523] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6521] <... write resumed>) = 9 [pid 6520] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6518] <... futex resumed>) = 0 [pid 6517] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] lstat("./48/binderfs", [pid 6532] set_robust_list(0x7f5c2b8109e0, 24 [pid 6529] <... openat resumed>) = 3 [ 143.860531][ T6507] EXT4-fs (loop4): Free/Dirty block details [ 143.864894][ T6523] loop3: detected capacity change from 0 to 2048 [ 143.877235][ T6507] EXT4-fs (loop4): free_blocks=2415919104 [ 143.883191][ T6507] EXT4-fs (loop4): dirty_blocks=16 [ 143.889627][ T6507] EXT4-fs (loop4): Block reservation details [ 143.896201][ T6507] EXT4-fs (loop4): i_reserved_data_blocks=1 [pid 6524] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6523] <... futex resumed>) = 1 [pid 6521] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6520] <... open resumed>) = 4 [pid 6519] <... futex resumed>) = 0 [pid 6518] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6532] <... set_robust_list resumed>) = 0 [pid 6529] write(3, "1000", 4 [pid 6524] <... futex resumed>) = 0 [pid 6523] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6521] <... futex resumed>) = 0 [pid 6520] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6519] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6518] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4998] unlink("./48/binderfs" [pid 6532] memfd_create("syzkaller", 0 [pid 6529] <... write resumed>) = 4 [pid 6524] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6523] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6521] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6520] <... futex resumed>) = 1 [pid 6519] <... futex resumed>) = 0 [pid 6518] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6517] <... futex resumed>) = 0 [pid 6532] <... memfd_create resumed>) = 3 [pid 6529] close(3 [pid 6523] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6521] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6520] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6519] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6518] <... futex resumed>) = 0 [pid 6517] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... unlink resumed>) = 0 [pid 6532] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6529] <... close resumed>) = 0 [pid 6523] <... open resumed>) = 4 [pid 6521] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6520] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6518] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6517] <... futex resumed>) = 0 [pid 4998] umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6532] <... mmap resumed>) = 0x7f5c233f0000 [pid 6529] symlink("/dev/binderfs", "./binderfs" [pid 6523] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6521] <... openat resumed>) = 5 [pid 6520] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6517] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6529] <... symlink resumed>) = 0 [pid 6523] <... futex resumed>) = 1 [pid 6521] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6520] <... write resumed>) = 9 [pid 6519] <... futex resumed>) = 0 [pid 6529] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6523] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6521] <... futex resumed>) = 1 [pid 6520] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6519] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6518] <... futex resumed>) = 0 [pid 6532] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6529] <... futex resumed>) = 0 [pid 6529] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6523] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6521] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6520] <... futex resumed>) = 1 [pid 6519] <... futex resumed>) = 0 [pid 6518] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6517] <... futex resumed>) = 0 [pid 6529] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6523] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6521] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6520] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6519] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6518] <... futex resumed>) = 0 [pid 6517] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6529] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6521] open("./bus", O_RDWR [pid 6520] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6518] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6517] <... futex resumed>) = 0 [pid 6529] <... mprotect resumed>) = 0 [pid 6523] <... write resumed>) = 9 [pid 6517] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6521] <... open resumed>) = 6 [pid 6523] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6520] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6529] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6523] <... futex resumed>) = 1 [pid 6519] <... futex resumed>) = 0 [pid 6520] <... openat resumed>) = 5 [pid 6519] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6523] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6521] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6520] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6519] <... futex resumed>) = 0 [pid 6518] <... futex resumed>) = 0 [pid 6532] <... write resumed>) = 1048576 [pid 6529] <... clone resumed>, parent_tid=[6533], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6533 [pid 6523] <... openat resumed>) = 5 [pid 6521] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6520] <... futex resumed>) = 1 [pid 6519] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6518] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6517] <... futex resumed>) = 0 [pid 6529] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6523] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6521] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6520] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6519] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6518] <... futex resumed>) = 0 [pid 6517] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6532] munmap(0x7f5c233f0000, 1048576 [pid 6529] <... futex resumed>) = 0 [pid 6523] <... futex resumed>) = 0 [pid 6521] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6520] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6519] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6518] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6517] <... futex resumed>) = 0 [pid 6532] <... munmap resumed>) = 0 [pid 6529] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6523] open("./bus", O_RDWR [pid 6521] <... mmap resumed>) = 0x20000000 [pid 6520] open("./bus", O_RDWR [pid 6519] <... futex resumed>) = 0 [pid 6517] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6532] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6523] <... open resumed>) = 6 [pid 6532] <... openat resumed>) = 4 [pid 6523] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6521] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6520] <... open resumed>) = 6 [pid 6519] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6532] ioctl(4, LOOP_SET_FD, 3 [pid 6523] <... futex resumed>) = 0 [pid 6521] <... futex resumed>) = 1 [pid 6520] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6519] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6518] <... futex resumed>) = 0 [pid 6523] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6521] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6520] <... futex resumed>) = 1 [ 143.974031][ T11] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 144.012685][ T6532] loop5: detected capacity change from 0 to 2048 [pid 6519] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6518] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6517] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6533 attached [pid 6523] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6521] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6520] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6519] <... futex resumed>) = 0 [pid 6518] <... futex resumed>) = 0 [pid 6517] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6533] set_robust_list(0x7f5c2b8109e0, 24 [pid 6523] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6521] sendfile(4, 5, NULL, 2147483713 [pid 6520] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6519] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6518] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6517] <... futex resumed>) = 0 [pid 6523] <... mmap resumed>) = 0x20000000 [pid 6520] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6517] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6532] <... ioctl resumed>) = 0 [pid 6532] close(3) = 0 [pid 6532] mkdir("./file0", 0777 [pid 6523] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6520] <... mmap resumed>) = 0x20000000 [pid 6533] <... set_robust_list resumed>) = 0 [pid 6523] <... futex resumed>) = 1 [pid 6520] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6519] <... futex resumed>) = 0 [pid 6533] memfd_create("syzkaller", 0 [pid 6532] <... mkdir resumed>) = 0 [pid 6523] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6520] <... futex resumed>) = 1 [pid 6519] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6517] <... futex resumed>) = 0 [pid 6533] <... memfd_create resumed>) = 3 [pid 6523] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6520] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6519] <... futex resumed>) = 0 [ 144.027790][ T11] EXT4-fs (loop4): This should not happen!! Data will be lost [ 144.027790][ T11] [ 144.029537][ T6521] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 6517] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6533] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6532] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6523] sendfile(4, 5, NULL, 2147483713 [pid 6520] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6519] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6517] <... futex resumed>) = 0 [pid 4998] <... umount2 resumed>) = 0 [pid 6533] <... mmap resumed>) = 0x7f5c233f0000 [ 144.070069][ T6523] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 144.083316][ T6521] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 144.092016][ T6520] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 144.105343][ T6521] EXT4-fs (loop0): This should not happen!! Data will be lost [pid 6520] sendfile(4, 5, NULL, 2147483713 [pid 6518] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6517] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6518] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4998] umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6518] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c234cf000 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6518] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4998] lstat("./48/file0", [pid 6518] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6518] <... clone resumed>, parent_tid=[6534], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6534 [pid 6518] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6518] <... futex resumed>) = 0 [pid 6518] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./48/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 6534 attached [pid 4998] getdents64(4, [pid 6534] set_robust_list(0x7f5c234ef9e0, 24 [pid 4998] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 6534] <... set_robust_list resumed>) = 0 [pid 4998] getdents64(4, [pid 6534] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 4998] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./48/file0") = 0 [pid 4998] getdents64(3, 0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./48") = 0 [pid 4998] mkdir("./49", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 6533] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] close(3 [pid 6533] <... write resumed>) = 1048576 [pid 6532] <... mount resumed>) = 0 [pid 6519] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4998] <... close resumed>) = 0 [pid 6532] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6519] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6532] <... openat resumed>) = 3 [pid 6519] <... futex resumed>) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6532] chdir("./file0" [pid 6519] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6532] <... chdir resumed>) = 0 [pid 6519] <... mmap resumed>) = 0x7f5c234cf000 [pid 6532] ioctl(4, LOOP_CLR_FD [pid 6519] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 4998] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6537 [pid 6532] <... ioctl resumed>) = 0 [pid 6519] <... mprotect resumed>) = 0 [pid 6517] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6532] close(4 [pid 6519] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6517] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6532] <... close resumed>) = 0 [pid 6517] <... futex resumed>) = 0 [pid 6532] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6519] <... clone resumed>, parent_tid=[6538], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6538 [pid 6517] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6532] <... futex resumed>) = 1 [pid 6524] <... futex resumed>) = 0 [pid 6519] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6517] <... mmap resumed>) = 0x7f5c234cf000 [pid 6532] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6524] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6519] <... futex resumed>) = 0 [pid 6517] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 6537 attached [pid 6532] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6524] <... futex resumed>) = 0 [pid 6519] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6517] <... mprotect resumed>) = 0 [pid 6537] set_robust_list(0x555556fb95e0, 24 [pid 6532] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6524] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6517] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6538 attached [pid 6537] <... set_robust_list resumed>) = 0 [pid 6538] set_robust_list(0x7f5c234ef9e0, 24 [pid 6537] chdir("./49" [pid 6532] <... open resumed>) = 4 [pid 6517] <... clone resumed>, parent_tid=[6539], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6539 [pid 6538] <... set_robust_list resumed>) = 0 [pid 6537] <... chdir resumed>) = 0 [pid 6532] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [ 144.105343][ T6521] [ 144.129020][ T6521] EXT4-fs (loop0): Total free blocks count 0 [ 144.136259][ T6521] EXT4-fs (loop0): Free/Dirty block details [ 144.142485][ T6521] EXT4-fs (loop0): free_blocks=2415919104 [ 144.148665][ T6521] EXT4-fs (loop0): dirty_blocks=16 [ 144.153823][ T6521] EXT4-fs (loop0): Block reservation details [pid 6517] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6538] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6537] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6532] <... futex resumed>) = 1 [pid 6524] <... futex resumed>) = 0 [pid 6518] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6517] <... futex resumed>) = 0 [pid 6537] <... prctl resumed>) = 0 [pid 6517] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6537] setpgid(0, 0) = 0 [pid 6537] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6537] write(3, "1000", 4./strace-static-x86_64: Process 6539 attached ) = 4 [pid 6539] set_robust_list(0x7f5c234ef9e0, 24 [pid 6537] close(3 [pid 6539] <... set_robust_list resumed>) = 0 [pid 6537] <... close resumed>) = 0 [pid 6539] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6537] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6537] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6537] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c2b7f0000 [pid 6537] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6532] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6537] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6524] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6532] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6524] <... futex resumed>) = 0 [pid 6537] <... clone resumed>, parent_tid=[6540], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6540 [pid 6532] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6524] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6537] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6537] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6540 attached [pid 6540] set_robust_list(0x7f5c2b8109e0, 24) = 0 [pid 6532] <... write resumed>) = 9 [pid 6532] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6524] <... futex resumed>) = 0 [pid 6532] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6524] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6540] memfd_create("syzkaller", 0 [pid 6532] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6524] <... futex resumed>) = 0 [pid 6540] <... memfd_create resumed>) = 3 [pid 6532] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6524] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6540] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5c233f0000 [pid 6532] <... openat resumed>) = 5 [pid 6532] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6524] <... futex resumed>) = 0 [pid 6519] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6532] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6524] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6532] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 144.179750][ T6523] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 144.201866][ T6521] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 144.209262][ T6520] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 6532] open("./bus", O_RDWR [pid 6524] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6534] <... ioctl resumed>) = 0 [pid 6533] munmap(0x7f5c233f0000, 1048576 [pid 6521] <... sendfile resumed>) = 63 [pid 6534] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6534] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6540] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6532] <... open resumed>) = 6 [pid 6532] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6533] <... munmap resumed>) = 0 [pid 6532] <... futex resumed>) = 1 [pid 6524] <... futex resumed>) = 0 [pid 6532] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6524] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6517] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6540] <... write resumed>) = 1048576 [pid 6533] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6532] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6524] <... futex resumed>) = 0 [pid 6521] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6532] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6524] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6518] exit_group(0 [pid 6534] <... futex resumed>) = ? [pid 6533] <... openat resumed>) = 4 [pid 6532] <... mmap resumed>) = 0x20000000 [pid 6518] <... exit_group resumed>) = ? [pid 6534] +++ exited with 0 +++ [pid 6532] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6524] <... futex resumed>) = 0 [pid 6532] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6524] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6532] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6524] <... futex resumed>) = 0 [pid 6532] sendfile(4, 5, NULL, 2147483713 [pid 6524] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6533] ioctl(4, LOOP_SET_FD, 3 [pid 6521] <... futex resumed>) = ? [ 144.225229][ T6523] EXT4-fs (loop3): This should not happen!! Data will be lost [ 144.225229][ T6523] [ 144.238898][ T6523] EXT4-fs (loop3): Total free blocks count 0 [ 144.245023][ T6523] EXT4-fs (loop3): Free/Dirty block details [ 144.251423][ T6523] EXT4-fs (loop3): free_blocks=2415919104 [ 144.258567][ T6523] EXT4-fs (loop3): dirty_blocks=16 [ 144.265329][ T6533] loop2: detected capacity change from 0 to 2048 [ 144.265862][ T6520] EXT4-fs (loop1): This should not happen!! Data will be lost [pid 6521] +++ exited with 0 +++ [pid 6518] +++ exited with 0 +++ [pid 4994] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6518, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 6540] munmap(0x7f5c233f0000, 1048576 [pid 4994] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4994] umount2("./51", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6540] <... munmap resumed>) = 0 [pid 6540] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 144.265862][ T6520] [ 144.287312][ T6532] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 144.291926][ T6540] loop4: detected capacity change from 0 to 2048 [ 144.308670][ T6523] EXT4-fs (loop3): Block reservation details [ 144.308695][ T6523] EXT4-fs (loop3): i_reserved_data_blocks=1 [pid 6540] ioctl(4, LOOP_SET_FD, 3 [pid 6538] <... ioctl resumed>) = 0 [pid 6533] <... ioctl resumed>) = 0 [pid 6524] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6523] <... sendfile resumed>) = 63 [pid 4994] openat(AT_FDCWD, "./51", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6538] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6524] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6538] <... futex resumed>) = 0 [pid 6524] <... futex resumed>) = 0 [pid 6538] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6524] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c234cf000 [pid 6524] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6524] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6541], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6541 [pid 6524] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6524] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6541 attached [pid 6541] set_robust_list(0x7f5c234ef9e0, 24) = 0 [pid 6541] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6533] close(3 [pid 6523] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] <... openat resumed>) = 3 [pid 6519] exit_group(0 [pid 6538] <... futex resumed>) = ? [pid 6519] <... exit_group resumed>) = ? [pid 6538] +++ exited with 0 +++ [pid 6533] <... close resumed>) = 0 [pid 6523] <... futex resumed>) = ? [pid 4994] fstat(3, [pid 6540] <... ioctl resumed>) = 0 [pid 6540] close(3) = 0 [pid 6540] mkdir("./file0", 0777) = 0 [pid 6540] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6533] mkdir("./file0", 0777 [pid 6523] +++ exited with 0 +++ [pid 6519] +++ exited with 0 +++ [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 144.314806][ T6532] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 144.327715][ T6520] EXT4-fs (loop1): Total free blocks count 0 [ 144.334725][ T6532] EXT4-fs (loop5): This should not happen!! Data will be lost [ 144.334725][ T6532] [ 144.341492][ T6520] EXT4-fs (loop1): Free/Dirty block details [ 144.349679][ T6532] EXT4-fs (loop5): Total free blocks count 0 [ 144.361235][ T6520] EXT4-fs (loop1): free_blocks=2415919104 [ 144.364091][ T6532] EXT4-fs (loop5): Free/Dirty block details [ 144.371059][ T6520] EXT4-fs (loop1): dirty_blocks=16 [pid 6533] <... mkdir resumed>) = 0 [pid 4994] getdents64(3, [pid 6533] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6524] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6519, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 4994] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4997] restart_syscall(<... resuming interrupted clone ...> [pid 4994] umount2("./51/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6539] <... ioctl resumed>) = 0 [pid 6533] <... mount resumed>) = 0 [pid 6520] <... sendfile resumed>) = 63 [pid 4997] <... restart_syscall resumed>) = 0 [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6539] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6520] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6517] exit_group(0 [pid 6539] <... futex resumed>) = ? [pid 6520] <... futex resumed>) = ? [pid 6517] <... exit_group resumed>) = ? [pid 4994] lstat("./51/binderfs", [pid 6539] +++ exited with 0 +++ [pid 6520] +++ exited with 0 +++ [pid 4994] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6533] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6517] +++ exited with 0 +++ [pid 6533] chdir("./file0") = 0 [pid 6533] ioctl(4, LOOP_CLR_FD) = 0 [pid 6533] close(4) = 0 [pid 4997] umount2("./50", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6517, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 4994] unlink("./51/binderfs" [pid 6533] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6529] <... futex resumed>) = 0 [pid 6533] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6529] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6533] <... open resumed>) = 4 [pid 6529] <... futex resumed>) = 0 [pid 6533] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6532] <... sendfile resumed>) = 63 [pid 6529] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6541] <... ioctl resumed>) = 0 [pid 4994] <... unlink resumed>) = 0 [pid 6541] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6540] <... mount resumed>) = 0 [pid 6533] <... futex resumed>) = 0 [pid 6532] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6529] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4997] openat(AT_FDCWD, "./50", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4994] umount2("./51/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6541] <... futex resumed>) = 0 [pid 6540] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6533] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6532] <... futex resumed>) = 0 [pid 6529] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] <... openat resumed>) = 3 [pid 4995] umount2("./49", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] fstat(3, [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6541] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6540] <... openat resumed>) = 3 [pid 6533] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6529] <... futex resumed>) = 0 [pid 6524] exit_group(0 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] openat(AT_FDCWD, "./49", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6541] <... futex resumed>) = ? [pid 6540] chdir("./file0" [pid 6533] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6532] +++ exited with 0 +++ [pid 6529] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6524] <... exit_group resumed>) = ? [pid 4997] getdents64(3, [pid 4995] <... openat resumed>) = 3 [pid 6541] +++ exited with 0 +++ [pid 6540] <... chdir resumed>) = 0 [pid 4997] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4995] fstat(3, [pid 6540] ioctl(4, LOOP_CLR_FD [pid 6533] <... write resumed>) = 9 [pid 6524] +++ exited with 0 +++ [ 144.374940][ T6532] EXT4-fs (loop5): free_blocks=2415919104 [ 144.385940][ T6520] EXT4-fs (loop1): Block reservation details [ 144.392845][ T6520] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 144.394370][ T6532] EXT4-fs (loop5): dirty_blocks=16 [ 144.406728][ T6532] EXT4-fs (loop5): Block reservation details [ 144.413474][ T6532] EXT4-fs (loop5): i_reserved_data_blocks=1 [pid 4997] umount2("./50/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6524, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] getdents64(3, [pid 4997] lstat("./50/binderfs", [pid 4995] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4997] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4995] umount2("./49/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] umount2("./50", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] unlink("./50/binderfs" [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] <... unlink resumed>) = 0 [pid 4995] lstat("./49/binderfs", [pid 4999] openat(AT_FDCWD, "./50", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] umount2("./50/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] <... openat resumed>) = 3 [pid 4995] unlink("./49/binderfs" [pid 6540] <... ioctl resumed>) = 0 [pid 6533] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] fstat(3, [pid 6540] close(4 [pid 6533] <... futex resumed>) = 1 [pid 6529] <... futex resumed>) = 0 [pid 4995] <... unlink resumed>) = 0 [pid 6540] <... close resumed>) = 0 [pid 6533] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6529] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] umount2("./49/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6540] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6533] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6529] <... futex resumed>) = 0 [pid 4999] getdents64(3, [pid 6540] <... futex resumed>) = 1 [pid 6537] <... futex resumed>) = 0 [pid 6533] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6529] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6540] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [ 144.442749][ T5076] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 144.456698][ T11] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 144.457069][ T5076] EXT4-fs (loop0): This should not happen!! Data will be lost [ 144.457069][ T5076] [pid 6537] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6533] <... openat resumed>) = 5 [pid 6540] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6537] <... futex resumed>) = 0 [pid 6533] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6540] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6537] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6533] <... futex resumed>) = 1 [pid 6529] <... futex resumed>) = 0 [pid 6540] <... open resumed>) = 4 [pid 6533] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6529] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4994] <... umount2 resumed>) = 0 [pid 6540] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6533] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6529] <... futex resumed>) = 0 [pid 4999] umount2("./50/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6540] <... futex resumed>) = 1 [pid 6537] <... futex resumed>) = 0 [pid 6533] open("./bus", O_RDWR [pid 6529] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6540] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6537] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6533] <... open resumed>) = 6 [pid 4999] lstat("./50/binderfs", [pid 4994] umount2("./51/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6540] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6537] <... futex resumed>) = 0 [pid 6533] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6540] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6537] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6533] <... futex resumed>) = 1 [pid 6529] <... futex resumed>) = 0 [pid 4999] unlink("./50/binderfs" [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6533] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6529] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... unlink resumed>) = 0 [pid 4994] lstat("./51/file0", [pid 6533] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6529] <... futex resumed>) = 0 [pid 4999] umount2("./50/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6533] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6529] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4997] <... umount2 resumed>) = 0 [pid 4994] umount2("./51/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6533] <... mmap resumed>) = 0x20000000 [ 144.482806][ T11] EXT4-fs (loop3): This should not happen!! Data will be lost [ 144.482806][ T11] [ 144.498982][ T5608] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 4997] umount2("./50/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6540] <... write resumed>) = 9 [ 144.546597][ T5608] EXT4-fs (loop1): This should not happen!! Data will be lost [ 144.546597][ T5608] [ 144.558978][ T5608] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 144.581713][ T5608] EXT4-fs (loop5): This should not happen!! Data will be lost [ 144.581713][ T5608] [pid 6533] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] openat(AT_FDCWD, "./51/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6540] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6533] <... futex resumed>) = 1 [pid 6529] <... futex resumed>) = 0 [pid 6540] <... futex resumed>) = 1 [pid 6537] <... futex resumed>) = 0 [pid 6533] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6529] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6540] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6537] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6533] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6529] <... futex resumed>) = 0 [pid 6540] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6537] <... futex resumed>) = 0 [pid 4994] <... openat resumed>) = 4 [pid 6529] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6540] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6537] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6533] sendfile(4, 5, NULL, 2147483713 [pid 6540] <... openat resumed>) = 5 [pid 4994] fstat(4, [pid 6540] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] lstat("./50/file0", [pid 4995] <... umount2 resumed>) = 0 [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6540] <... futex resumed>) = 1 [pid 6537] <... futex resumed>) = 0 [pid 4994] getdents64(4, [pid 6540] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6537] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6540] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6537] <... futex resumed>) = 0 [pid 4994] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 6540] open("./bus", O_RDWR [pid 6537] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4997] umount2("./50/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] umount2("./49/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] getdents64(4, [pid 6540] <... open resumed>) = 6 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4994] close(4 [pid 4995] lstat("./49/file0", [pid 4997] openat(AT_FDCWD, "./50/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4994] <... close resumed>) = 0 [pid 6540] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6529] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4997] <... openat resumed>) = 4 [pid 4995] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] rmdir("./51/file0" [pid 6540] <... futex resumed>) = 1 [pid 6529] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] fstat(4, [pid 4995] umount2("./49/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] <... rmdir resumed>) = 0 [pid 6537] <... futex resumed>) = 0 [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6529] <... futex resumed>) = 0 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6540] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6537] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6529] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6537] <... futex resumed>) = 0 [ 144.585637][ T6533] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 144.616111][ T6533] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 144.632381][ T6533] EXT4-fs (loop2): This should not happen!! Data will be lost [ 144.632381][ T6533] [pid 6540] <... mmap resumed>) = 0x20000000 [pid 6537] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6529] <... mmap resumed>) = 0x7f5c234cf000 [pid 4999] <... umount2 resumed>) = 0 [pid 4997] getdents64(4, [pid 4995] openat(AT_FDCWD, "./49/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4994] getdents64(3, [pid 6529] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6529] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6546], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6546 [pid 6529] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6529] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] umount2("./50/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./50/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./50/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./50/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6540] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6537] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4997] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4999] fstat(4, [pid 4995] <... openat resumed>) = 4 [pid 4994] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6540] <... futex resumed>) = 0 [pid 6537] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6540] sendfile(4, 5, NULL, 2147483713 [pid 6537] <... futex resumed>) = 0 [pid 4994] close(3 [pid 4997] getdents64(4, [pid 4995] fstat(4, ./strace-static-x86_64: Process 6546 attached [pid 6537] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] getdents64(4, [pid 4997] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] <... close resumed>) = 0 [pid 6546] set_robust_list(0x7f5c234ef9e0, 24 [pid 6533] <... sendfile resumed>) = 63 [pid 4999] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4997] close(4 [pid 4995] getdents64(4, [ 144.647452][ T6533] EXT4-fs (loop2): Total free blocks count 0 [ 144.653493][ T6533] EXT4-fs (loop2): Free/Dirty block details [ 144.659912][ T6533] EXT4-fs (loop2): free_blocks=2415919104 [ 144.666236][ T6533] EXT4-fs (loop2): dirty_blocks=16 [ 144.671395][ T6533] EXT4-fs (loop2): Block reservation details [ 144.680447][ T6533] EXT4-fs (loop2): i_reserved_data_blocks=1 [pid 4994] rmdir("./51" [pid 6546] <... set_robust_list resumed>) = 0 [pid 6533] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] <... close resumed>) = 0 [pid 4995] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4994] <... rmdir resumed>) = 0 [pid 6546] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6533] <... futex resumed>) = 0 [pid 4997] rmdir("./50/file0" [pid 4995] getdents64(4, [pid 4994] mkdir("./52", 0777 [pid 6546] <... ioctl resumed>) = 0 [pid 6533] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4997] <... rmdir resumed>) = 0 [pid 4995] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4994] <... mkdir resumed>) = 0 [pid 6546] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] getdents64(3, [pid 4995] close(4 [pid 4994] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6546] <... futex resumed>) = 1 [pid 4997] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4995] <... close resumed>) = 0 [pid 4994] <... openat resumed>) = 3 [pid 6546] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4997] close(3 [pid 4995] rmdir("./49/file0" [pid 4994] ioctl(3, LOOP_CLR_FD [pid 4999] getdents64(4, [pid 4997] <... close resumed>) = 0 [pid 4995] <... rmdir resumed>) = 0 [pid 4994] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4997] rmdir("./50" [pid 4995] getdents64(3, [pid 4994] close(3 [pid 4999] close(4 [pid 4997] <... rmdir resumed>) = 0 [pid 4995] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4994] <... close resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 4997] mkdir("./51", 0777 [pid 4995] close(3 [pid 4994] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6529] <... futex resumed>) = 0 [pid 4999] rmdir("./50/file0" [pid 4997] <... mkdir resumed>) = 0 [pid 4995] <... close resumed>) = 0 [pid 6529] exit_group(0 [pid 4999] <... rmdir resumed>) = 0 [pid 4997] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4995] rmdir("./49" [pid 4994] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6547 [pid 6546] <... futex resumed>) = ? [pid 6533] <... futex resumed>) = ? [pid 6529] <... exit_group resumed>) = ? [pid 4999] getdents64(3, [pid 4997] <... openat resumed>) = 3 [pid 4995] <... rmdir resumed>) = 0 [pid 6546] +++ exited with 0 +++ [pid 6533] +++ exited with 0 +++ [pid 4999] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4997] ioctl(3, LOOP_CLR_FD [pid 4995] mkdir("./50", 0777 [pid 6529] +++ exited with 0 +++ [pid 4999] close(3 [pid 4997] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4995] <... mkdir resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 4997] close(3 [pid 4996] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6529, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 4995] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 4999] rmdir("./50" [pid 4997] <... close resumed>) = 0 [pid 4995] <... openat resumed>) = 3 [pid 4999] <... rmdir resumed>) = 0 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4995] ioctl(3, LOOP_CLR_FD [pid 6537] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4999] mkdir("./51", 0777 [pid 4996] umount2("./51", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6537] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... mkdir resumed>) = 0 [pid 4997] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6548 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] close(3./strace-static-x86_64: Process 6547 attached [pid 6537] <... futex resumed>) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 4996] openat(AT_FDCWD, "./51", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4995] <... close resumed>) = 0 [pid 6547] set_robust_list(0x555556fb95e0, 24 [pid 6537] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4999] <... openat resumed>) = 3 [pid 4996] <... openat resumed>) = 3 [pid 4995] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6547] <... set_robust_list resumed>) = 0 [pid 6537] <... mmap resumed>) = 0x7f5c234cf000 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 4996] fstat(3, ./strace-static-x86_64: Process 6548 attached [pid 6547] chdir("./52" [ 144.683824][ T6540] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 144.704013][ T6540] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 6537] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4996] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6549 [pid 6548] set_robust_list(0x555556fb95e0, 24 [pid 6547] <... chdir resumed>) = 0 [pid 6537] <... mprotect resumed>) = 0 [pid 4999] close(3 [pid 4996] getdents64(3, [pid 6548] <... set_robust_list resumed>) = 0 [pid 6537] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4999] <... close resumed>) = 0 [pid 4996] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 ./strace-static-x86_64: Process 6549 attached [pid 6548] chdir("./51" [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4996] umount2("./51/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6549] set_robust_list(0x555556fb95e0, 24 [pid 6548] <... chdir resumed>) = 0 [pid 6547] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6537] <... clone resumed>, parent_tid=[6550], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6550 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6549] <... set_robust_list resumed>) = 0 [pid 6548] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6547] <... prctl resumed>) = 0 [pid 6537] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6551 [pid 4996] lstat("./51/binderfs", ./strace-static-x86_64: Process 6550 attached [pid 6549] chdir("./50" [pid 6548] <... prctl resumed>) = 0 [pid 6547] setpgid(0, 0 [pid 6537] <... futex resumed>) = 0 [pid 4996] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6550] set_robust_list(0x7f5c234ef9e0, 24 [pid 6549] <... chdir resumed>) = 0 [pid 6548] setpgid(0, 0 [pid 6547] <... setpgid resumed>) = 0 [pid 6537] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4996] unlink("./51/binderfs"./strace-static-x86_64: Process 6551 attached [pid 6550] <... set_robust_list resumed>) = 0 [pid 6549] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6548] <... setpgid resumed>) = 0 [pid 6547] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4996] <... unlink resumed>) = 0 [pid 6551] set_robust_list(0x555556fb95e0, 24 [pid 6549] <... prctl resumed>) = 0 [pid 6548] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4996] umount2("./51/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6551] <... set_robust_list resumed>) = 0 [pid 6550] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6549] setpgid(0, 0 [pid 6548] <... openat resumed>) = 3 [pid 6547] <... openat resumed>) = 3 [pid 6551] chdir("./51" [pid 6549] <... setpgid resumed>) = 0 [pid 6548] write(3, "1000", 4 [pid 6547] write(3, "1000", 4 [pid 6551] <... chdir resumed>) = 0 [pid 6549] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6548] <... write resumed>) = 4 [pid 6547] <... write resumed>) = 4 [pid 6551] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6549] <... openat resumed>) = 3 [pid 6548] close(3 [pid 6551] <... prctl resumed>) = 0 [pid 6549] write(3, "1000", 4 [pid 6548] <... close resumed>) = 0 [pid 6551] setpgid(0, 0 [pid 6549] <... write resumed>) = 4 [pid 6548] symlink("/dev/binderfs", "./binderfs" [pid 6551] <... setpgid resumed>) = 0 [pid 6549] close(3 [pid 6548] <... symlink resumed>) = 0 [pid 6551] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6549] <... close resumed>) = 0 [pid 6548] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6551] <... openat resumed>) = 3 [pid 6549] symlink("/dev/binderfs", "./binderfs" [pid 6548] <... futex resumed>) = 0 [pid 6551] write(3, "1000", 4 [pid 6549] <... symlink resumed>) = 0 [pid 6548] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6551] <... write resumed>) = 4 [pid 6549] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6548] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6547] close(3 [pid 6551] close(3 [pid 6549] <... futex resumed>) = 0 [pid 6548] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6547] <... close resumed>) = 0 [pid 6551] <... close resumed>) = 0 [pid 6549] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6548] <... mprotect resumed>) = 0 [pid 6547] symlink("/dev/binderfs", "./binderfs" [pid 6551] symlink("/dev/binderfs", "./binderfs" [pid 6549] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6548] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6547] <... symlink resumed>) = 0 [pid 6551] <... symlink resumed>) = 0 [pid 6549] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6547] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6551] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6549] <... mprotect resumed>) = 0 [pid 6548] <... clone resumed>, parent_tid=[6552], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6552 [ 144.747261][ T6540] EXT4-fs (loop4): This should not happen!! Data will be lost [ 144.747261][ T6540] [ 144.774974][ T5608] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 6551] <... futex resumed>) = 0 [pid 6549] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6548] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6551] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6548] <... futex resumed>) = 0 [pid 6551] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6549] <... clone resumed>, parent_tid=[6553], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6553 [pid 6548] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6547] <... futex resumed>) = 0 [pid 6551] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6549] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6547] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 6552 attached [pid 6551] <... mprotect resumed>) = 0 [pid 6549] <... futex resumed>) = 0 [pid 6547] <... mmap resumed>) = 0x7f5c2b7f0000 ./strace-static-x86_64: Process 6553 attached [pid 6552] set_robust_list(0x7f5c2b8109e0, 24 [pid 6551] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6549] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6547] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6552] <... set_robust_list resumed>) = 0 [pid 6552] memfd_create("syzkaller", 0 [pid 6551] <... clone resumed>, parent_tid=[6554], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6554 [pid 6552] <... memfd_create resumed>) = 3 [pid 6551] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6552] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6551] <... futex resumed>) = 0 [pid 6552] <... mmap resumed>) = 0x7f5c233f0000 [pid 6551] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6554 attached [pid 6553] set_robust_list(0x7f5c2b8109e0, 24 [pid 6547] <... mprotect resumed>) = 0 [pid 6537] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6554] set_robust_list(0x7f5c2b8109e0, 24) = 0 [pid 6554] memfd_create("syzkaller", 0) = 3 [pid 6554] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6553] <... set_robust_list resumed>) = 0 [pid 6547] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6554] <... mmap resumed>) = 0x7f5c233f0000 [pid 6553] memfd_create("syzkaller", 0 [pid 6552] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6553] <... memfd_create resumed>) = 3 [pid 6547] <... clone resumed>, parent_tid=[6555], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6555 ./strace-static-x86_64: Process 6555 attached [pid 6553] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6547] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6555] set_robust_list(0x7f5c2b8109e0, 24 [pid 6553] <... mmap resumed>) = 0x7f5c233f0000 [pid 6547] <... futex resumed>) = 0 [pid 6555] <... set_robust_list resumed>) = 0 [pid 6547] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [ 144.796246][ T6540] EXT4-fs (loop4): Total free blocks count 0 [ 144.807441][ T5608] EXT4-fs (loop2): This should not happen!! Data will be lost [ 144.807441][ T5608] [ 144.818046][ T6540] EXT4-fs (loop4): Free/Dirty block details [ 144.827126][ T6540] EXT4-fs (loop4): free_blocks=2415919104 [pid 6555] memfd_create("syzkaller", 0) = 3 [pid 6554] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6555] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6553] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6555] <... mmap resumed>) = 0x7f5c233f0000 [pid 6550] <... ioctl resumed>) = 0 [pid 6553] <... write resumed>) = 1048576 [pid 6550] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6540] <... sendfile resumed>) = 63 [pid 6550] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6552] <... write resumed>) = 1048576 [pid 6540] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6554] <... write resumed>) = 1048576 [pid 6552] munmap(0x7f5c233f0000, 1048576 [pid 6537] exit_group(0 [pid 6552] <... munmap resumed>) = 0 [pid 6550] <... futex resumed>) = ? [pid 6537] <... exit_group resumed>) = ? [pid 6552] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6550] +++ exited with 0 +++ [pid 6540] <... futex resumed>) = ? [pid 6552] <... openat resumed>) = 4 [ 144.848372][ T6540] EXT4-fs (loop4): dirty_blocks=16 [ 144.853978][ T6540] EXT4-fs (loop4): Block reservation details [ 144.866470][ T6540] EXT4-fs (loop4): i_reserved_data_blocks=1 [pid 6552] ioctl(4, LOOP_SET_FD, 3 [pid 6555] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6540] +++ exited with 0 +++ [pid 6537] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6537, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6554] munmap(0x7f5c233f0000, 1048576 [pid 4996] <... umount2 resumed>) = 0 [pid 6554] <... munmap resumed>) = 0 [pid 6553] munmap(0x7f5c233f0000, 1048576 [pid 4998] umount2("./49", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6554] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6553] <... munmap resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4996] umount2("./51/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6554] <... openat resumed>) = 4 [pid 6553] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 4998] openat(AT_FDCWD, "./49", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6554] ioctl(4, LOOP_SET_FD, 3 [pid 4998] <... openat resumed>) = 3 [pid 6555] <... write resumed>) = 1048576 [pid 6553] <... openat resumed>) = 4 [pid 6552] <... ioctl resumed>) = 0 [pid 4998] fstat(3, [pid 4996] lstat("./51/file0", [pid 6555] munmap(0x7f5c233f0000, 1048576 [pid 6553] ioctl(4, LOOP_SET_FD, 3 [pid 6552] close(3 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, [pid 6555] <... munmap resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./49/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./49/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./49/binderfs") = 0 [ 144.909062][ T6552] loop3: detected capacity change from 0 to 2048 [ 144.941148][ T6554] loop5: detected capacity change from 0 to 2048 [ 144.953023][ T6553] loop1: detected capacity change from 0 to 2048 [pid 6552] <... close resumed>) = 0 [pid 4998] umount2("./49/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] umount2("./51/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6555] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6554] <... ioctl resumed>) = 0 [pid 6553] <... ioctl resumed>) = 0 [pid 6552] mkdir("./file0", 0777 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6555] <... openat resumed>) = 4 [pid 6554] close(3 [pid 6553] close(3 [pid 6552] <... mkdir resumed>) = 0 [pid 4996] openat(AT_FDCWD, "./51/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6555] ioctl(4, LOOP_SET_FD, 3 [pid 6554] <... close resumed>) = 0 [pid 6553] <... close resumed>) = 0 [pid 6552] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 4996] <... openat resumed>) = 4 [pid 6554] mkdir("./file0", 0777 [pid 6553] mkdir("./file0", 0777 [pid 4996] fstat(4, [pid 6554] <... mkdir resumed>) = 0 [pid 6553] <... mkdir resumed>) = 0 [pid 4996] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6554] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6553] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 4996] getdents64(4, 0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4996] getdents64(4, 0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4996] close(4) = 0 [pid 4996] rmdir("./51/file0") = 0 [pid 4996] getdents64(3, 0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4996] close(3) = 0 [pid 4996] rmdir("./51") = 0 [pid 4996] mkdir("./52", 0777) = 0 [pid 4996] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 4996] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4996] close(3 [pid 6555] <... ioctl resumed>) = 0 [pid 4996] <... close resumed>) = 0 [pid 6555] close(3) = 0 [pid 6555] mkdir("./file0", 0777) = 0 [pid 4996] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6555] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 4996] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6559 [pid 4998] <... umount2 resumed>) = 0 [pid 4998] umount2("./49/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6559 attached ) = -1 EINVAL (Invalid argument) [pid 6559] set_robust_list(0x555556fb95e0, 24 [pid 6552] <... mount resumed>) = 0 [pid 6552] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 4998] lstat("./49/file0", [pid 6552] <... openat resumed>) = 3 [pid 6559] <... set_robust_list resumed>) = 0 [pid 6552] chdir("./file0" [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6559] chdir("./52" [pid 6552] <... chdir resumed>) = 0 [pid 4998] umount2("./49/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6559] <... chdir resumed>) = 0 [pid 6552] ioctl(4, LOOP_CLR_FD [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6559] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6554] <... mount resumed>) = 0 [pid 6552] <... ioctl resumed>) = 0 [pid 4998] openat(AT_FDCWD, "./49/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6559] <... prctl resumed>) = 0 [pid 6555] <... mount resumed>) = 0 [ 144.960893][ T5608] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 144.966937][ T6555] loop0: detected capacity change from 0 to 2048 [ 144.975172][ T5608] EXT4-fs (loop4): This should not happen!! Data will be lost [ 144.975172][ T5608] [pid 6554] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6553] <... mount resumed>) = 0 [pid 6552] close(4 [pid 4998] <... openat resumed>) = 4 [pid 6559] setpgid(0, 0 [pid 6555] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6554] <... openat resumed>) = 3 [pid 6553] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6552] <... close resumed>) = 0 [pid 4998] fstat(4, [pid 6559] <... setpgid resumed>) = 0 [pid 6555] <... openat resumed>) = 3 [pid 6554] chdir("./file0" [pid 6553] <... openat resumed>) = 3 [pid 6552] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6559] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6555] chdir("./file0" [pid 6554] <... chdir resumed>) = 0 [pid 6553] chdir("./file0" [pid 6552] <... futex resumed>) = 1 [pid 6548] <... futex resumed>) = 0 [pid 4998] getdents64(4, [pid 6559] <... openat resumed>) = 3 [pid 6555] <... chdir resumed>) = 0 [pid 6554] ioctl(4, LOOP_CLR_FD [pid 6553] <... chdir resumed>) = 0 [pid 6552] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6548] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 6559] write(3, "1000", 4 [pid 6555] ioctl(4, LOOP_CLR_FD [pid 6554] <... ioctl resumed>) = 0 [pid 6553] ioctl(4, LOOP_CLR_FD [pid 6548] <... futex resumed>) = 0 [pid 4998] getdents64(4, [pid 6559] <... write resumed>) = 4 [pid 6555] <... ioctl resumed>) = 0 [pid 6554] close(4 [pid 6553] <... ioctl resumed>) = 0 [pid 6552] <... open resumed>) = 4 [pid 6548] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 6559] close(3 [pid 6555] close(4 [pid 6554] <... close resumed>) = 0 [pid 6553] close(4 [pid 6552] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6548] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4998] close(4 [pid 6559] <... close resumed>) = 0 [pid 6555] <... close resumed>) = 0 [pid 6554] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6553] <... close resumed>) = 0 [pid 6552] <... futex resumed>) = 0 [pid 6548] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... close resumed>) = 0 [pid 6559] symlink("/dev/binderfs", "./binderfs" [pid 6555] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6554] <... futex resumed>) = 1 [pid 6553] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6552] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6551] <... futex resumed>) = 0 [pid 6548] <... futex resumed>) = 0 [pid 4998] rmdir("./49/file0" [pid 6559] <... symlink resumed>) = 0 [pid 6555] <... futex resumed>) = 1 [pid 6554] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6553] <... futex resumed>) = 1 [pid 6551] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6549] <... futex resumed>) = 0 [pid 6548] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6547] <... futex resumed>) = 0 [pid 6552] <... write resumed>) = 9 [pid 4998] <... rmdir resumed>) = 0 [pid 6559] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6555] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6554] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6553] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6552] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6551] <... futex resumed>) = 0 [pid 6549] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6547] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] getdents64(3, [pid 6559] <... futex resumed>) = 0 [pid 6555] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6554] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6553] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6552] <... futex resumed>) = 1 [pid 6551] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6549] <... futex resumed>) = 0 [pid 6548] <... futex resumed>) = 0 [pid 6547] <... futex resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 6559] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6555] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6553] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6552] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6549] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6548] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6547] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] close(3 [pid 6559] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 4998] <... close resumed>) = 0 [pid 6559] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 4998] rmdir("./49" [pid 6559] <... mprotect resumed>) = 0 [pid 6554] <... open resumed>) = 4 [pid 4998] <... rmdir resumed>) = 0 [pid 6548] <... futex resumed>) = 0 [pid 6559] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6552] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6548] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] mkdir("./50", 0777 [pid 6552] openat(AT_FDCWD, "./bus", O_RDONLY [pid 4998] <... mkdir resumed>) = 0 [pid 6559] <... clone resumed>, parent_tid=[6565], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6565 [pid 6555] <... open resumed>) = 4 [pid 6553] <... open resumed>) = 4 [pid 4998] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6559] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6555] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6554] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6553] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6552] <... openat resumed>) = 5 [pid 4998] <... openat resumed>) = 3 [pid 6559] <... futex resumed>) = 0 [pid 6555] <... futex resumed>) = 1 [pid 6554] <... futex resumed>) = 1 [pid 6553] <... futex resumed>) = 1 [pid 6552] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6551] <... futex resumed>) = 0 [pid 6549] <... futex resumed>) = 0 [pid 6547] <... futex resumed>) = 0 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 6559] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6555] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6554] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6553] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6552] <... futex resumed>) = 1 [pid 6551] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6549] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6548] <... futex resumed>) = 0 [pid 6547] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6555] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6554] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6553] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6552] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6551] <... futex resumed>) = 0 [pid 6549] <... futex resumed>) = 0 [pid 6548] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6547] <... futex resumed>) = 0 [pid 4998] close(3 [pid 6555] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6554] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6553] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6552] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6551] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6549] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6548] <... futex resumed>) = 0 [pid 6547] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] <... close resumed>) = 0 [pid 6552] open("./bus", O_RDWR [pid 6548] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6555] <... write resumed>) = 9 [pid 6553] <... write resumed>) = 9 [pid 6552] <... open resumed>) = 6 [pid 6555] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6554] <... write resumed>) = 9 [pid 6553] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6552] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6566 [pid 6555] <... futex resumed>) = 1 [pid 6554] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6553] <... futex resumed>) = 1 [pid 6552] <... futex resumed>) = 1 [pid 6549] <... futex resumed>) = 0 [pid 6548] <... futex resumed>) = 0 [pid 6547] <... futex resumed>) = 0 [pid 6555] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6554] <... futex resumed>) = 1 [pid 6553] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6552] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6551] <... futex resumed>) = 0 [pid 6549] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6548] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6547] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6555] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6554] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6553] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6552] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6551] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6549] <... futex resumed>) = 0 [pid 6548] <... futex resumed>) = 0 [pid 6547] <... futex resumed>) = 0 [pid 6555] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6554] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6553] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6552] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6551] <... futex resumed>) = 0 [pid 6549] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6548] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6547] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6555] <... openat resumed>) = 5 [pid 6553] <... openat resumed>) = 5 ./strace-static-x86_64: Process 6565 attached [pid 6565] set_robust_list(0x7f5c2b8109e0, 24) = 0 [pid 6565] memfd_create("syzkaller", 0 [pid 6552] <... mmap resumed>) = 0x20000000 [pid 6551] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6555] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6554] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6553] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6552] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6555] <... futex resumed>) = 1 [pid 6547] <... futex resumed>) = 0 [pid 6554] <... openat resumed>) = 5 [pid 6553] <... futex resumed>) = 1 [pid 6549] <... futex resumed>) = 0 [pid 6547] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6555] open("./bus", O_RDWR [pid 6552] <... futex resumed>) = 1 [pid 6548] <... futex resumed>) = 0 [pid 6565] <... memfd_create resumed>) = 3 [pid 6555] <... open resumed>) = 6 [pid 6554] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6553] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6549] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6547] <... futex resumed>) = 0 [pid 6548] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6565] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6555] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6554] <... futex resumed>) = 1 [pid 6553] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6552] sendfile(4, 5, NULL, 2147483713 [pid 6551] <... futex resumed>) = 0 [pid 6549] <... futex resumed>) = 0 [pid 6548] <... futex resumed>) = 0 [pid 6547] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6566 attached [pid 6565] <... mmap resumed>) = 0x7f5c233f0000 [pid 6555] <... futex resumed>) = 0 [pid 6554] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6553] open("./bus", O_RDWR [pid 6551] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6549] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6548] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6547] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6555] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6554] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6553] <... open resumed>) = 6 [pid 6551] <... futex resumed>) = 0 [pid 6547] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6555] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6554] open("./bus", O_RDWR [pid 6553] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6551] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6547] <... futex resumed>) = 0 [ 145.099102][ T6552] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 145.132341][ T6552] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 6566] set_robust_list(0x555556fb95e0, 24 [pid 6565] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6555] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6554] <... open resumed>) = 6 [pid 6553] <... futex resumed>) = 1 [pid 6549] <... futex resumed>) = 0 [pid 6547] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6566] <... set_robust_list resumed>) = 0 [pid 6555] <... mmap resumed>) = 0x20000000 [pid 6554] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6553] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6549] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6566] chdir("./50" [pid 6555] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6554] <... futex resumed>) = 1 [pid 6553] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6551] <... futex resumed>) = 0 [pid 6549] <... futex resumed>) = 0 [pid 6566] <... chdir resumed>) = 0 [pid 6555] <... futex resumed>) = 1 [pid 6554] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6553] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6551] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6549] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6547] <... futex resumed>) = 0 [pid 6566] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6565] <... write resumed>) = 1048576 [pid 6555] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6554] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6553] <... mmap resumed>) = 0x20000000 [pid 6551] <... futex resumed>) = 0 [pid 6547] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6566] <... prctl resumed>) = 0 [pid 6565] munmap(0x7f5c233f0000, 1048576 [pid 6555] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6554] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6553] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6551] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6547] <... futex resumed>) = 0 [ 145.144673][ T6552] EXT4-fs (loop3): This should not happen!! Data will be lost [ 145.144673][ T6552] [pid 6566] setpgid(0, 0 [pid 6565] <... munmap resumed>) = 0 [pid 6555] sendfile(4, 5, NULL, 2147483713 [pid 6554] <... mmap resumed>) = 0x20000000 [pid 6553] <... futex resumed>) = 1 [pid 6549] <... futex resumed>) = 0 [pid 6548] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6547] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6566] <... setpgid resumed>) = 0 [pid 6565] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6554] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6553] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6549] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6548] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6566] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6565] <... openat resumed>) = 4 [pid 6554] <... futex resumed>) = 1 [pid 6553] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6551] <... futex resumed>) = 0 [pid 6549] <... futex resumed>) = 0 [pid 6548] <... futex resumed>) = 0 [pid 6566] <... openat resumed>) = 3 [pid 6565] ioctl(4, LOOP_SET_FD, 3 [pid 6554] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6553] sendfile(4, 5, NULL, 2147483713 [pid 6551] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6549] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6548] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6566] write(3, "1000", 4 [pid 6554] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6551] <... futex resumed>) = 0 [pid 6548] <... mmap resumed>) = 0x7f5c234cf000 [pid 6566] <... write resumed>) = 4 [pid 6554] sendfile(4, 5, NULL, 2147483713 [pid 6551] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6548] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE) = 0 [ 145.178903][ T6555] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 145.213581][ T6565] loop2: detected capacity change from 0 to 2048 [ 145.216605][ T6552] EXT4-fs (loop3): Total free blocks count 0 [pid 6548] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6567], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6567 [pid 6548] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6548] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6567 attached [pid 6567] set_robust_list(0x7f5c234ef9e0, 24) = 0 [pid 6567] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6566] close(3) = 0 [pid 6547] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6566] symlink("/dev/binderfs", "./binderfs" [pid 6547] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6566] <... symlink resumed>) = 0 [pid 6547] <... futex resumed>) = 0 [pid 6566] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6565] <... ioctl resumed>) = 0 [pid 6549] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6547] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6566] <... futex resumed>) = 0 [pid 6565] close(3 [pid 6551] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6549] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6547] <... mmap resumed>) = 0x7f5c234cf000 [pid 6566] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6565] <... close resumed>) = 0 [pid 6551] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6549] <... futex resumed>) = 0 [ 145.224745][ T6553] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 145.246323][ T6554] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 145.265088][ T6555] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 6547] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 6566] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6565] mkdir("./file0", 0777 [pid 6551] <... futex resumed>) = 0 [pid 6549] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6548] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6547] <... mprotect resumed>) = 0 [pid 6565] <... mkdir resumed>) = 0 [pid 6551] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6549] <... mmap resumed>) = 0x7f5c234cf000 [pid 6547] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6565] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6551] <... mmap resumed>) = 0x7f5c234cf000 [pid 6549] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 6551] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 6549] <... mprotect resumed>) = 0 [pid 6547] <... clone resumed>, parent_tid=[6568], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6568 [pid 6566] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6551] <... mprotect resumed>) = 0 [pid 6549] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6547] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6566] <... mprotect resumed>) = 0 [pid 6551] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6547] <... futex resumed>) = 0 [pid 6566] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6549] <... clone resumed>, parent_tid=[6569], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6569 [pid 6547] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6551] <... clone resumed>, parent_tid=[6570], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6570 [pid 6549] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6566] <... clone resumed>, parent_tid=[6572], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6572 [pid 6551] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6549] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6572 attached ./strace-static-x86_64: Process 6570 attached ./strace-static-x86_64: Process 6569 attached ./strace-static-x86_64: Process 6568 attached [pid 6566] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6551] <... futex resumed>) = 0 [pid 6549] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6570] set_robust_list(0x7f5c234ef9e0, 24 [ 145.284316][ T6552] EXT4-fs (loop3): Free/Dirty block details [ 145.285577][ T6553] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 145.310184][ T6552] EXT4-fs (loop3): free_blocks=2415919104 [ 145.311072][ T6553] EXT4-fs (loop1): This should not happen!! Data will be lost [ 145.311072][ T6553] [pid 6569] set_robust_list(0x7f5c234ef9e0, 24 [pid 6551] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6572] set_robust_list(0x7f5c2b8109e0, 24 [pid 6570] <... set_robust_list resumed>) = 0 [pid 6569] <... set_robust_list resumed>) = 0 [pid 6568] set_robust_list(0x7f5c234ef9e0, 24 [pid 6566] <... futex resumed>) = 0 [pid 6565] <... mount resumed>) = 0 [pid 6570] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6569] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6572] <... set_robust_list resumed>) = 0 [pid 6568] <... set_robust_list resumed>) = 0 [pid 6566] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6565] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6547] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6572] memfd_create("syzkaller", 0 [pid 6568] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6565] <... openat resumed>) = 3 [pid 6549] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6572] <... memfd_create resumed>) = 3 [ 145.322022][ T6554] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 145.330155][ T6553] EXT4-fs (loop1): Total free blocks count 0 [ 145.344349][ T6555] EXT4-fs (loop0): This should not happen!! Data will be lost [ 145.344349][ T6555] [ 145.346392][ T6553] EXT4-fs (loop1): Free/Dirty block details [ 145.360383][ T6552] EXT4-fs (loop3): dirty_blocks=16 [ 145.362563][ T6553] EXT4-fs (loop1): free_blocks=2415919104 [ 145.371661][ T6552] EXT4-fs (loop3): Block reservation details [ 145.372651][ T6553] EXT4-fs (loop1): dirty_blocks=16 [pid 6565] chdir("./file0" [pid 6572] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6565] <... chdir resumed>) = 0 [pid 6551] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6572] <... mmap resumed>) = 0x7f5c233f0000 [pid 6565] ioctl(4, LOOP_CLR_FD) = 0 [pid 6565] close(4) = 0 [pid 6565] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6559] <... futex resumed>) = 0 [pid 6565] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6559] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6565] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6559] <... futex resumed>) = 0 [pid 6572] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6565] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6559] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6569] <... ioctl resumed>) = 0 [pid 6569] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 145.381896][ T6555] EXT4-fs (loop0): Total free blocks count 0 [ 145.383194][ T6553] EXT4-fs (loop1): Block reservation details [ 145.393756][ T6552] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 145.401402][ T6554] EXT4-fs (loop5): This should not happen!! Data will be lost [ 145.401402][ T6554] [ 145.419694][ T6554] EXT4-fs (loop5): Total free blocks count 0 [ 145.426926][ T6553] EXT4-fs (loop1): i_reserved_data_blocks=1 [pid 6569] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6565] <... open resumed>) = 4 [pid 6565] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6572] <... write resumed>) = 1048576 [pid 6567] <... ioctl resumed>) = 0 [pid 6565] <... futex resumed>) = 1 [pid 6559] <... futex resumed>) = 0 [pid 6552] <... sendfile resumed>) = 63 [pid 6572] munmap(0x7f5c233f0000, 1048576 [pid 6567] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6565] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6559] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6553] <... sendfile resumed>) = 63 [pid 6552] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6548] exit_group(0 [pid 6572] <... munmap resumed>) = 0 [pid 6567] <... futex resumed>) = ? [pid 6565] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6559] <... futex resumed>) = 0 [pid 6553] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6552] <... futex resumed>) = ? [pid 6548] <... exit_group resumed>) = ? [ 145.436448][ T6555] EXT4-fs (loop0): Free/Dirty block details [ 145.442889][ T6555] EXT4-fs (loop0): free_blocks=2415919104 [ 145.448817][ T6555] EXT4-fs (loop0): dirty_blocks=16 [ 145.454058][ T6555] EXT4-fs (loop0): Block reservation details [ 145.463659][ T6554] EXT4-fs (loop5): Free/Dirty block details [ 145.476400][ T6555] EXT4-fs (loop0): i_reserved_data_blocks=1 [pid 6572] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6568] <... ioctl resumed>) = 0 [pid 6567] +++ exited with 0 +++ [pid 6565] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6559] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6555] <... sendfile resumed>) = 63 [pid 6553] <... futex resumed>) = 0 [pid 6552] +++ exited with 0 +++ [pid 6549] exit_group(0 [pid 6548] +++ exited with 0 +++ [pid 6572] <... openat resumed>) = 4 [pid 6569] <... futex resumed>) = ? [pid 6565] <... write resumed>) = 9 [pid 6549] <... exit_group resumed>) = ? [pid 6572] ioctl(4, LOOP_SET_FD, 3 [pid 6569] +++ exited with 0 +++ [pid 6568] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6565] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6555] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6553] +++ exited with 0 +++ [pid 6549] +++ exited with 0 +++ [pid 6547] exit_group(0 [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6548, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 6565] <... futex resumed>) = 1 [pid 6559] <... futex resumed>) = 0 [pid 6547] <... exit_group resumed>) = ? [pid 4997] restart_syscall(<... resuming interrupted clone ...> [pid 4995] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6549, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 6565] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6559] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] <... restart_syscall resumed>) = 0 [pid 6572] <... ioctl resumed>) = 0 [pid 6568] <... futex resumed>) = ? [pid 6565] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6559] <... futex resumed>) = 0 [pid 6555] <... futex resumed>) = ? [pid 6554] <... sendfile resumed>) = 63 [pid 6570] <... ioctl resumed>) = 0 [pid 6572] close(3 [pid 6570] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6568] +++ exited with 0 +++ [pid 6565] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6559] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4995] umount2("./50", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6572] <... close resumed>) = 0 [pid 6570] <... futex resumed>) = 0 [pid 6565] <... openat resumed>) = 5 [pid 6555] +++ exited with 0 +++ [pid 6554] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6547] +++ exited with 0 +++ [pid 4997] umount2("./51", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6572] mkdir("./file0", 0777 [pid 6570] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6565] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6554] <... futex resumed>) = 0 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] openat(AT_FDCWD, "./50", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4994] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6547, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 6572] <... mkdir resumed>) = 0 [pid 6565] <... futex resumed>) = 1 [pid 6559] <... futex resumed>) = 0 [pid 6554] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6551] exit_group(0 [pid 4997] openat(AT_FDCWD, "./51", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4995] <... openat resumed>) = 3 [pid 6572] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6570] <... futex resumed>) = ? [pid 6565] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6559] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6554] <... futex resumed>) = ? [pid 6551] <... exit_group resumed>) = ? [pid 4997] <... openat resumed>) = 3 [pid 4995] fstat(3, [pid 6570] +++ exited with 0 +++ [pid 6565] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6559] <... futex resumed>) = 0 [pid 6554] +++ exited with 0 +++ [pid 6551] +++ exited with 0 +++ [pid 4997] fstat(3, [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6565] open("./bus", O_RDWR [pid 6559] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] umount2("./52", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6565] <... open resumed>) = 6 [pid 4995] getdents64(3, [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] getdents64(3, [pid 4995] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4994] openat(AT_FDCWD, "./52", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 6565] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6551, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 4997] umount2("./51/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] umount2("./50/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] <... openat resumed>) = 3 [pid 6565] <... futex resumed>) = 1 [pid 6559] <... futex resumed>) = 0 [pid 4999] umount2("./51", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] fstat(3, [pid 6565] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6559] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./51/binderfs", [pid 4995] lstat("./50/binderfs", [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6565] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6559] <... futex resumed>) = 0 [pid 4999] openat(AT_FDCWD, "./51", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4995] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4994] getdents64(3, [pid 6565] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6559] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] <... openat resumed>) = 3 [pid 4997] unlink("./51/binderfs" [pid 4995] unlink("./50/binderfs" [pid 4994] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 6565] <... mmap resumed>) = 0x20000000 [pid 4999] fstat(3, [pid 4997] <... unlink resumed>) = 0 [pid 4995] <... unlink resumed>) = 0 [pid 4994] umount2("./52/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6565] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./51/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] umount2("./50/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6565] <... futex resumed>) = 1 [pid 6559] <... futex resumed>) = 0 [pid 4999] getdents64(3, [pid 4994] lstat("./52/binderfs", [pid 6565] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6559] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4994] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6565] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6559] <... futex resumed>) = 0 [pid 4999] umount2("./51/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [ 145.483360][ T6554] EXT4-fs (loop5): free_blocks=2415919104 [ 145.489713][ T6554] EXT4-fs (loop5): dirty_blocks=16 [ 145.495703][ T6554] EXT4-fs (loop5): Block reservation details [ 145.500692][ T6572] loop4: detected capacity change from 0 to 2048 [ 145.502046][ T6554] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 145.544928][ T5457] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 145.548142][ T5076] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 145.562371][ T6565] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 145.570370][ T5076] EXT4-fs (loop1): This should not happen!! Data will be lost [ 145.570370][ T5076] [pid 4994] unlink("./52/binderfs" [pid 6565] sendfile(4, 5, NULL, 2147483713 [pid 6559] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] <... unlink resumed>) = 0 [pid 4999] lstat("./51/binderfs", [pid 4994] umount2("./52/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./51/binderfs") = 0 [pid 4999] umount2("./51/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6572] <... mount resumed>) = 0 [pid 6559] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6559] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6559] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6572] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6559] <... mmap resumed>) = 0x7f5c234cf000 [pid 6572] <... openat resumed>) = 3 [pid 6559] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 6572] chdir("./file0" [pid 6559] <... mprotect resumed>) = 0 [pid 6559] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6576], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6576 [pid 6572] <... chdir resumed>) = 0 [pid 6559] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6572] ioctl(4, LOOP_CLR_FD [pid 6559] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6572] <... ioctl resumed>) = 0 [pid 6572] close(4) = 0 [pid 6572] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6566] <... futex resumed>) = 0 [pid 6566] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6566] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6572] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000) = 4 [pid 6572] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6566] <... futex resumed>) = 0 [pid 6566] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6566] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6572] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9) = 9 [pid 6572] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6566] <... futex resumed>) = 0 [pid 6566] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6566] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6572] openat(AT_FDCWD, "./bus", O_RDONLY) = 5 [pid 6572] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6566] <... futex resumed>) = 0 [pid 6566] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6572] open("./bus", O_RDWR [pid 6566] <... futex resumed>) = 0 [pid 6572] <... open resumed>) = 6 [pid 6566] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6572] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6566] <... futex resumed>) = 0 [pid 6572] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6566] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6572] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6566] <... futex resumed>) = 0 [pid 6572] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6566] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6572] <... mmap resumed>) = 0x20000000 [pid 6572] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6566] <... futex resumed>) = 0 [pid 6572] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6566] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6576 attached [pid 6572] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6566] <... futex resumed>) = 0 [pid 6576] set_robust_list(0x7f5c234ef9e0, 24 [ 145.585143][ T5608] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 145.608160][ T11] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 6572] sendfile(4, 5, NULL, 2147483713 [pid 6566] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6576] <... set_robust_list resumed>) = 0 [pid 6559] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4995] <... umount2 resumed>) = 0 [pid 4995] umount2("./50/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6576] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 145.645881][ T6572] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 145.649969][ T5457] EXT4-fs (loop3): This should not happen!! Data will be lost [ 145.649969][ T5457] [ 145.681335][ T6565] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 4995] lstat("./50/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] umount2("./50/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4995] openat(AT_FDCWD, "./50/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6566] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6566] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6566] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c234cf000 [pid 4995] <... openat resumed>) = 4 [pid 6566] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6566] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6577], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6577 [pid 6566] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6566] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4995] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 145.685812][ T11] EXT4-fs (loop5): This should not happen!! Data will be lost [ 145.685812][ T11] [ 145.694374][ T6565] EXT4-fs (loop2): This should not happen!! Data will be lost [ 145.694374][ T6565] [ 145.714380][ T6565] EXT4-fs (loop2): Total free blocks count 0 [ 145.722142][ T6565] EXT4-fs (loop2): Free/Dirty block details [ 145.728960][ T6565] EXT4-fs (loop2): free_blocks=2415919104 [ 145.739903][ T6565] EXT4-fs (loop2): dirty_blocks=16 ./strace-static-x86_64: Process 6577 attached [pid 4995] getdents64(4, [pid 6577] set_robust_list(0x7f5c234ef9e0, 24 [pid 6576] <... ioctl resumed>) = 0 [pid 6565] <... sendfile resumed>) = 63 [pid 4997] <... umount2 resumed>) = 0 [pid 4995] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 6576] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6576] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6577] <... set_robust_list resumed>) = 0 [pid 6566] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6565] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] umount2("./51/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] getdents64(4, [pid 6577] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6565] <... futex resumed>) = 0 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 6565] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6559] exit_group(0 [pid 4997] lstat("./51/file0", [pid 4995] close(4 [pid 6576] <... futex resumed>) = ? [pid 6565] <... futex resumed>) = ? [pid 6559] <... exit_group resumed>) = ? [pid 4997] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] <... close resumed>) = 0 [pid 6576] +++ exited with 0 +++ [pid 6565] +++ exited with 0 +++ [pid 4997] umount2("./51/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6559] +++ exited with 0 +++ [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4996] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6559, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 4995] rmdir("./50/file0" [pid 4997] openat(AT_FDCWD, "./51/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [ 145.745746][ T6565] EXT4-fs (loop2): Block reservation details [ 145.746623][ T5608] EXT4-fs (loop0): This should not happen!! Data will be lost [ 145.746623][ T5608] [ 145.759631][ T6565] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 145.768332][ T6572] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 4996] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4995] <... rmdir resumed>) = 0 [pid 4997] <... openat resumed>) = 4 [pid 4996] umount2("./52", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] openat(AT_FDCWD, "./52", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4996] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] getdents64(3, 0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4996] umount2("./52/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] lstat("./52/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4996] unlink("./52/binderfs") = 0 [pid 4996] umount2("./52/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] getdents64(3, [pid 4997] getdents64(4, [pid 4995] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4997] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4995] close(3 [pid 4997] getdents64(4, [pid 4995] <... close resumed>) = 0 [pid 4997] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4997] close(4 [pid 4995] rmdir("./50") = 0 [pid 4997] <... close resumed>) = 0 [pid 4997] rmdir("./51/file0" [pid 4995] mkdir("./51", 0777 [pid 4997] <... rmdir resumed>) = 0 [pid 4997] getdents64(3, [pid 4995] <... mkdir resumed>) = 0 [pid 4997] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4997] close(3 [pid 4995] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 4997] <... close resumed>) = 0 [pid 4995] <... openat resumed>) = 3 [pid 4997] rmdir("./51" [ 145.790096][ T6572] EXT4-fs (loop4): This should not happen!! Data will be lost [ 145.790096][ T6572] [ 145.802360][ T5608] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 145.808989][ T6572] EXT4-fs (loop4): Total free blocks count 0 [pid 4995] ioctl(3, LOOP_CLR_FD [pid 4997] <... rmdir resumed>) = 0 [pid 4995] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] <... umount2 resumed>) = 0 [pid 4994] <... umount2 resumed>) = 0 [pid 4999] umount2("./51/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] mkdir("./52", 0777 [pid 4995] close(3 [pid 4994] umount2("./52/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./51/file0", [pid 4997] <... mkdir resumed>) = 0 [pid 4995] <... close resumed>) = 0 [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4995] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4994] lstat("./52/file0", [pid 4997] <... openat resumed>) = 3 [pid 4994] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 6578 attached [pid 4999] umount2("./51/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] ioctl(3, LOOP_CLR_FD [pid 4995] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6578 [pid 4994] umount2("./52/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./51/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] close(3 [pid 4994] openat(AT_FDCWD, "./52/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4997] <... close resumed>) = 0 [pid 4999] <... openat resumed>) = 4 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4994] fstat(4, [pid 6578] set_robust_list(0x555556fb95e0, 24 [pid 4999] fstat(4, [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 6579 attached [pid 6578] <... set_robust_list resumed>) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6579 [pid 4994] getdents64(4, [pid 6577] <... ioctl resumed>) = 0 [pid 6578] chdir("./51" [pid 4999] getdents64(4, [pid 6577] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4994] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 6578] <... chdir resumed>) = 0 [pid 6577] <... futex resumed>) = 0 [ 145.852552][ T6572] EXT4-fs (loop4): Free/Dirty block details [ 145.859288][ T6572] EXT4-fs (loop4): free_blocks=2415919104 [ 145.866821][ T6572] EXT4-fs (loop4): dirty_blocks=16 [ 145.871992][ T6572] EXT4-fs (loop4): Block reservation details [ 145.882215][ T6572] EXT4-fs (loop4): i_reserved_data_blocks=1 [pid 6579] set_robust_list(0x555556fb95e0, 24 [pid 6578] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6572] <... sendfile resumed>) = 63 [pid 4999] getdents64(4, [pid 4994] getdents64(4, [pid 6578] <... prctl resumed>) = 0 [pid 6577] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6572] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4994] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 6579] <... set_robust_list resumed>) = 0 [pid 6578] setpgid(0, 0 [pid 6572] <... futex resumed>) = 0 [pid 6566] exit_group(0 [pid 4999] close(4 [pid 4994] close(4 [pid 6579] chdir("./52" [pid 6578] <... setpgid resumed>) = 0 [pid 6577] <... futex resumed>) = ? [pid 6566] <... exit_group resumed>) = ? [pid 4999] <... close resumed>) = 0 [pid 4994] <... close resumed>) = 0 [pid 6579] <... chdir resumed>) = 0 [pid 6578] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6577] +++ exited with 0 +++ [pid 6572] +++ exited with 0 +++ [pid 4999] rmdir("./51/file0" [pid 4994] rmdir("./52/file0" [pid 6579] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6578] <... openat resumed>) = 3 [pid 6566] +++ exited with 0 +++ [pid 4999] <... rmdir resumed>) = 0 [pid 4994] <... rmdir resumed>) = 0 [pid 6579] <... prctl resumed>) = 0 [pid 6578] write(3, "1000", 4 [pid 4999] getdents64(3, [pid 4994] getdents64(3, [pid 6579] setpgid(0, 0 [pid 6578] <... write resumed>) = 4 [pid 4999] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6566, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 4994] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 6579] <... setpgid resumed>) = 0 [pid 6578] close(3 [pid 4999] close(3 [pid 4994] close(3 [pid 6579] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6578] <... close resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 4998] restart_syscall(<... resuming interrupted clone ...> [pid 4994] <... close resumed>) = 0 [pid 6579] <... openat resumed>) = 3 [pid 6578] symlink("/dev/binderfs", "./binderfs" [pid 4999] rmdir("./51" [pid 4998] <... restart_syscall resumed>) = 0 [pid 4994] rmdir("./52" [pid 6579] write(3, "1000", 4 [pid 6578] <... symlink resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 4994] <... rmdir resumed>) = 0 [pid 6578] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] mkdir("./52", 0777 [pid 4994] mkdir("./53", 0777 [pid 6579] <... write resumed>) = 4 [pid 6578] <... futex resumed>) = 0 [pid 4999] <... mkdir resumed>) = 0 [pid 6579] close(3 [pid 6578] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4999] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 4994] <... mkdir resumed>) = 0 [pid 6579] <... close resumed>) = 0 [pid 6578] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 4999] <... openat resumed>) = 3 [pid 4994] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6579] symlink("/dev/binderfs", "./binderfs" [pid 6578] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 4999] ioctl(3, LOOP_CLR_FD [pid 4994] <... openat resumed>) = 3 [pid 6579] <... symlink resumed>) = 0 [pid 6578] <... mprotect resumed>) = 0 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] umount2("./50", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] ioctl(3, LOOP_CLR_FD [pid 6579] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6578] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4999] close(3 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6579] <... futex resumed>) = 0 [ 145.906069][ T5608] EXT4-fs (loop2): This should not happen!! Data will be lost [ 145.906069][ T5608] [pid 4999] <... close resumed>) = 0 [pid 4998] openat(AT_FDCWD, "./50", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4994] close(3 [pid 6579] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6578] <... clone resumed>, parent_tid=[6580], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6580 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] <... openat resumed>) = 3 [pid 4996] <... umount2 resumed>) = 0 [pid 4994] <... close resumed>) = 0 [pid 6579] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6578] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] fstat(3, [pid 4994] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6579] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6578] <... futex resumed>) = 0 [pid 4999] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6581 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6579] <... mprotect resumed>) = 0 [pid 6578] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4998] getdents64(3, [pid 4994] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6582 ./strace-static-x86_64: Process 6582 attached ./strace-static-x86_64: Process 6580 attached [pid 6579] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4998] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 6582] set_robust_list(0x555556fb95e0, 24 [pid 6580] set_robust_list(0x7f5c2b8109e0, 24 [pid 4998] umount2("./50/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6581 attached [pid 6582] <... set_robust_list resumed>) = 0 [pid 6580] <... set_robust_list resumed>) = 0 [pid 6579] <... clone resumed>, parent_tid=[6583], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6583 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6582] chdir("./53" [pid 6581] set_robust_list(0x555556fb95e0, 24 [pid 6580] memfd_create("syzkaller", 0 [pid 6579] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] lstat("./50/binderfs", [pid 4996] umount2("./52/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6581] <... set_robust_list resumed>) = 0 [pid 6580] <... memfd_create resumed>) = 3 [pid 6579] <... futex resumed>) = 0 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6582] <... chdir resumed>) = 0 [pid 6581] chdir("./52" [pid 6580] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6579] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4998] unlink("./50/binderfs" [pid 4996] lstat("./52/file0", [pid 6582] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6581] <... chdir resumed>) = 0 [pid 6580] <... mmap resumed>) = 0x7f5c233f0000 [pid 4998] <... unlink resumed>) = 0 [pid 4996] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 6583 attached [pid 6582] <... prctl resumed>) = 0 [pid 6581] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6580] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4998] umount2("./50/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] umount2("./52/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6583] set_robust_list(0x7f5c2b8109e0, 24 [pid 6582] setpgid(0, 0 [pid 6581] <... prctl resumed>) = 0 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6581] setpgid(0, 0 [pid 4996] openat(AT_FDCWD, "./52/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6581] <... setpgid resumed>) = 0 [pid 4996] <... openat resumed>) = 4 [pid 6581] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4996] fstat(4, [pid 6581] <... openat resumed>) = 3 [pid 4996] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6581] write(3, "1000", 4 [pid 4996] getdents64(4, [pid 6581] <... write resumed>) = 4 [pid 4996] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 6581] close(3 [pid 4996] getdents64(4, [pid 6581] <... close resumed>) = 0 [pid 4996] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 6581] symlink("/dev/binderfs", "./binderfs" [pid 4996] close(4 [pid 6583] <... set_robust_list resumed>) = 0 [pid 6582] <... setpgid resumed>) = 0 [pid 6581] <... symlink resumed>) = 0 [pid 4996] <... close resumed>) = 0 [pid 6583] memfd_create("syzkaller", 0 [pid 6581] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] rmdir("./52/file0" [pid 6583] <... memfd_create resumed>) = 3 [pid 6582] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6581] <... futex resumed>) = 0 [pid 4996] <... rmdir resumed>) = 0 [pid 6583] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6582] <... openat resumed>) = 3 [pid 6581] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4996] getdents64(3, [pid 6583] <... mmap resumed>) = 0x7f5c233f0000 [pid 6582] write(3, "1000", 4 [pid 6581] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 4996] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 6581] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 4996] close(3 [pid 6581] <... mprotect resumed>) = 0 [pid 4996] <... close resumed>) = 0 [pid 6581] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4996] rmdir("./52") = 0 [pid 6583] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6582] <... write resumed>) = 4 [pid 6581] <... clone resumed>, parent_tid=[6584], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6584 [pid 4996] mkdir("./53", 0777./strace-static-x86_64: Process 6584 attached [pid 6582] close(3 [pid 6581] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6580] <... write resumed>) = 1048576 [pid 4996] <... mkdir resumed>) = 0 [pid 6581] <... futex resumed>) = 0 [pid 4996] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6582] <... close resumed>) = 0 [pid 6581] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4996] <... openat resumed>) = 3 [pid 6582] symlink("/dev/binderfs", "./binderfs" [pid 4996] ioctl(3, LOOP_CLR_FD [pid 6584] set_robust_list(0x7f5c2b8109e0, 24 [pid 6582] <... symlink resumed>) = 0 [pid 6584] <... set_robust_list resumed>) = 0 [pid 4996] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6584] memfd_create("syzkaller", 0 [pid 6582] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] close(3 [pid 6584] <... memfd_create resumed>) = 3 [pid 6582] <... futex resumed>) = 0 [pid 4996] <... close resumed>) = 0 [pid 6584] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6582] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4996] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6584] <... mmap resumed>) = 0x7f5c233f0000 [pid 6582] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6582] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 4996] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6585 [pid 6582] <... mprotect resumed>) = 0 [pid 6582] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6580] munmap(0x7f5c233f0000, 1048576 [pid 6582] <... clone resumed>, parent_tid=[6586], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6586 [pid 6580] <... munmap resumed>) = 0 ./strace-static-x86_64: Process 6585 attached [pid 6582] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6585] set_robust_list(0x555556fb95e0, 24 [pid 6582] <... futex resumed>) = 0 [pid 6580] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6585] <... set_robust_list resumed>) = 0 [pid 6582] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6580] <... openat resumed>) = 4 [ 146.004608][ T5608] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 146.043319][ T5608] EXT4-fs (loop4): This should not happen!! Data will be lost [ 146.043319][ T5608] [pid 6585] chdir("./53" [pid 6580] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 6586 attached [pid 6585] <... chdir resumed>) = 0 [pid 6584] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6586] set_robust_list(0x7f5c2b8109e0, 24 [pid 6585] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6586] <... set_robust_list resumed>) = 0 [pid 6585] <... prctl resumed>) = 0 [pid 6586] memfd_create("syzkaller", 0 [pid 6585] setpgid(0, 0 [pid 6586] <... memfd_create resumed>) = 3 [pid 6585] <... setpgid resumed>) = 0 [pid 6586] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6585] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6586] <... mmap resumed>) = 0x7f5c233f0000 [pid 6585] <... openat resumed>) = 3 [pid 6585] write(3, "1000", 4) = 4 [pid 6585] close(3) = 0 [pid 6585] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6585] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6585] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c2b7f0000 [pid 6583] <... write resumed>) = 1048576 [pid 6585] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6580] <... ioctl resumed>) = 0 [pid 6585] <... mprotect resumed>) = 0 [pid 6580] close(3 [pid 6585] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6580] <... close resumed>) = 0 [pid 6580] mkdir("./file0", 0777 [pid 6585] <... clone resumed>, parent_tid=[6587], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6587 [pid 6580] <... mkdir resumed>) = 0 [pid 6585] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6580] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6585] <... futex resumed>) = 0 [pid 6583] munmap(0x7f5c233f0000, 1048576 [pid 6585] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6587 attached [pid 6583] <... munmap resumed>) = 0 [pid 6586] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6584] <... write resumed>) = 1048576 [pid 6583] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6587] set_robust_list(0x7f5c2b8109e0, 24 [pid 6583] <... openat resumed>) = 4 [pid 4998] <... umount2 resumed>) = 0 [pid 6587] <... set_robust_list resumed>) = 0 [pid 6584] munmap(0x7f5c233f0000, 1048576 [ 146.073529][ T6580] loop1: detected capacity change from 0 to 2048 [pid 6583] ioctl(4, LOOP_SET_FD, 3 [pid 6587] memfd_create("syzkaller", 0 [pid 6584] <... munmap resumed>) = 0 [pid 6584] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6587] <... memfd_create resumed>) = 3 [pid 6583] <... ioctl resumed>) = 0 [pid 6584] <... openat resumed>) = 4 [pid 6583] close(3 [pid 6587] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6584] ioctl(4, LOOP_SET_FD, 3 [pid 6583] <... close resumed>) = 0 [pid 6587] <... mmap resumed>) = 0x7f5c233f0000 [pid 6586] <... write resumed>) = 1048576 [pid 6583] mkdir("./file0", 0777 [pid 4998] umount2("./50/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6583] <... mkdir resumed>) = 0 [pid 6583] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./50/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./50/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./50/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./50/file0") = 0 [pid 4998] getdents64(3, 0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4998] close(3 [pid 6587] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4998] <... close resumed>) = 0 [pid 4998] rmdir("./50") = 0 [pid 6586] munmap(0x7f5c233f0000, 1048576 [pid 4998] mkdir("./51", 0777 [pid 6586] <... munmap resumed>) = 0 [pid 6580] <... mount resumed>) = 0 [pid 4998] <... mkdir resumed>) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 6580] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6586] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 4998] ioctl(3, LOOP_CLR_FD [pid 6580] <... openat resumed>) = 3 [ 146.133510][ T6583] loop3: detected capacity change from 0 to 2048 [ 146.144046][ T6584] loop5: detected capacity change from 0 to 2048 [pid 6580] chdir("./file0" [pid 6586] <... openat resumed>) = 4 [pid 6584] <... ioctl resumed>) = 0 [pid 6580] <... chdir resumed>) = 0 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6586] ioctl(4, LOOP_SET_FD, 3 [pid 6584] close(3 [pid 4998] close(3 [pid 6584] <... close resumed>) = 0 [pid 6580] ioctl(4, LOOP_CLR_FD [pid 4998] <... close resumed>) = 0 [pid 6584] mkdir("./file0", 0777 [pid 6580] <... ioctl resumed>) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6584] <... mkdir resumed>) = 0 [pid 6580] close(4 [pid 6584] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6580] <... close resumed>) = 0 [pid 4998] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6591 ./strace-static-x86_64: Process 6591 attached [pid 6586] <... ioctl resumed>) = 0 [pid 6580] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6591] set_robust_list(0x555556fb95e0, 24 [pid 6586] close(3 [pid 6580] <... futex resumed>) = 1 [pid 6578] <... futex resumed>) = 0 [pid 6591] <... set_robust_list resumed>) = 0 [pid 6586] <... close resumed>) = 0 [pid 6580] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6578] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6591] chdir("./51" [pid 6586] mkdir("./file0", 0777 [pid 6580] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6578] <... futex resumed>) = 0 [pid 6591] <... chdir resumed>) = 0 [pid 6586] <... mkdir resumed>) = 0 [pid 6583] <... mount resumed>) = 0 [pid 6580] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6578] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6591] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6586] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6591] <... prctl resumed>) = 0 [pid 6591] setpgid(0, 0 [pid 6580] <... open resumed>) = 4 [pid 6591] <... setpgid resumed>) = 0 [pid 6591] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6583] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6580] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6591] write(3, "1000", 4) = 4 [pid 6591] close(3) = 0 [pid 6583] <... openat resumed>) = 3 [pid 6580] <... futex resumed>) = 1 [pid 6578] <... futex resumed>) = 0 [pid 6591] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6583] chdir("./file0" [pid 6580] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6578] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6591] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6587] <... write resumed>) = 1048576 [pid 6591] <... futex resumed>) = 0 [pid 6587] munmap(0x7f5c233f0000, 1048576 [pid 6578] <... futex resumed>) = 0 [pid 6583] <... chdir resumed>) = 0 [pid 6591] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6587] <... munmap resumed>) = 0 [pid 6583] ioctl(4, LOOP_CLR_FD [pid 6580] <... write resumed>) = 9 [pid 6578] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6591] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6587] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6583] <... ioctl resumed>) = 0 [pid 6580] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6591] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6583] close(4 [pid 6580] <... futex resumed>) = 1 [pid 6578] <... futex resumed>) = 0 [pid 6591] <... mprotect resumed>) = 0 [pid 6587] <... openat resumed>) = 4 [pid 6583] <... close resumed>) = 0 [pid 6580] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6578] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6591] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [ 146.173796][ T6586] loop0: detected capacity change from 0 to 2048 [pid 6587] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6584] <... mount resumed>) = 0 [pid 6583] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6580] <... openat resumed>) = 5 [pid 6578] <... futex resumed>) = 0 [pid 6591] <... clone resumed>, parent_tid=[6597], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6597 [pid 6587] close(3 [pid 6584] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6583] <... futex resumed>) = 1 [pid 6580] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6579] <... futex resumed>) = 0 [pid 6578] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6591] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6584] <... openat resumed>) = 3 [pid 6583] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6580] <... futex resumed>) = 0 [pid 6579] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6578] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6591] <... futex resumed>) = 0 [pid 6583] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6580] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6579] <... futex resumed>) = 0 [pid 6578] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6591] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6587] <... close resumed>) = 0 [pid 6586] <... mount resumed>) = 0 [pid 6584] chdir("./file0" [pid 6583] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6580] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6579] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6578] <... futex resumed>) = 0 [pid 6587] mkdir("./file0", 0777 [pid 6584] <... chdir resumed>) = 0 [pid 6587] <... mkdir resumed>) = 0 [pid 6586] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6580] open("./bus", O_RDWR [pid 6578] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6584] ioctl(4, LOOP_CLR_FD [pid 6587] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6586] <... openat resumed>) = 3 [pid 6583] <... open resumed>) = 4 [pid 6580] <... open resumed>) = 6 ./strace-static-x86_64: Process 6597 attached [pid 6586] chdir("./file0" [pid 6584] <... ioctl resumed>) = 0 [pid 6583] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6580] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6597] set_robust_list(0x7f5c2b8109e0, 24 [pid 6586] <... chdir resumed>) = 0 [pid 6584] close(4 [pid 6583] <... futex resumed>) = 1 [pid 6580] <... futex resumed>) = 1 [pid 6579] <... futex resumed>) = 0 [pid 6578] <... futex resumed>) = 0 [pid 6597] <... set_robust_list resumed>) = 0 [pid 6586] ioctl(4, LOOP_CLR_FD [pid 6584] <... close resumed>) = 0 [pid 6583] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6580] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6579] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6578] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6597] memfd_create("syzkaller", 0 [pid 6586] <... ioctl resumed>) = 0 [pid 6584] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6583] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6580] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6579] <... futex resumed>) = 0 [pid 6578] <... futex resumed>) = 0 [pid 6597] <... memfd_create resumed>) = 3 [pid 6586] close(4 [pid 6584] <... futex resumed>) = 1 [pid 6583] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6581] <... futex resumed>) = 0 [pid 6580] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6579] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6578] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6597] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6586] <... close resumed>) = 0 [pid 6584] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6583] <... write resumed>) = 9 [pid 6581] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6580] <... mmap resumed>) = 0x20000000 [pid 6597] <... mmap resumed>) = 0x7f5c233f0000 [pid 6586] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6583] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6587] <... mount resumed>) = 0 [pid 6584] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6583] <... futex resumed>) = 1 [pid 6581] <... futex resumed>) = 0 [pid 6580] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6579] <... futex resumed>) = 0 [pid 6586] <... futex resumed>) = 1 [pid 6583] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6582] <... futex resumed>) = 0 [ 146.226830][ T6587] loop2: detected capacity change from 0 to 2048 [pid 6579] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6584] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6581] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6580] <... futex resumed>) = 1 [pid 6587] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6578] <... futex resumed>) = 0 [pid 6586] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6583] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6582] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6580] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6579] <... futex resumed>) = 0 [pid 6597] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6583] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6582] <... futex resumed>) = 0 [pid 6580] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6579] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6578] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6597] <... write resumed>) = 1048576 [pid 6587] <... openat resumed>) = 3 [pid 6586] <... open resumed>) = 4 [pid 6584] <... open resumed>) = 4 [pid 6583] <... openat resumed>) = 5 [pid 6582] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6580] sendfile(4, 5, NULL, 2147483713 [pid 6578] <... futex resumed>) = 0 [pid 6587] chdir("./file0" [pid 6586] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6584] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6583] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6578] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6587] <... chdir resumed>) = 0 [pid 6586] <... futex resumed>) = 1 [pid 6584] <... futex resumed>) = 1 [pid 6583] <... futex resumed>) = 1 [pid 6582] <... futex resumed>) = 0 [pid 6581] <... futex resumed>) = 0 [pid 6579] <... futex resumed>) = 0 [pid 6587] ioctl(4, LOOP_CLR_FD [pid 6586] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6584] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6583] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6582] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6581] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6579] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6587] <... ioctl resumed>) = 0 [pid 6586] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6584] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6583] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6582] <... futex resumed>) = 0 [pid 6581] <... futex resumed>) = 0 [pid 6579] <... futex resumed>) = 0 [pid 6587] close(4 [pid 6586] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6584] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6583] open("./bus", O_RDWR [pid 6582] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6581] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6579] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6583] <... open resumed>) = 6 [pid 6586] <... write resumed>) = 9 [pid 6584] <... write resumed>) = 9 [pid 6583] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6587] <... close resumed>) = 0 [pid 6583] <... futex resumed>) = 1 [pid 6579] <... futex resumed>) = 0 [pid 6587] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6586] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6584] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6583] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6579] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6587] <... futex resumed>) = 1 [pid 6586] <... futex resumed>) = 1 [pid 6585] <... futex resumed>) = 0 [pid 6584] <... futex resumed>) = 1 [pid 6583] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6582] <... futex resumed>) = 0 [pid 6581] <... futex resumed>) = 0 [pid 6579] <... futex resumed>) = 0 [pid 6587] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6586] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6585] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6584] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6583] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6582] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6581] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6579] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6585] <... futex resumed>) = 0 [pid 6583] <... mmap resumed>) = 0x20000000 [pid 6583] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6579] <... futex resumed>) = 0 [pid 6583] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6579] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6583] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6579] <... futex resumed>) = 0 [pid 6583] sendfile(4, 5, NULL, 2147483713 [pid 6579] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6586] <... openat resumed>) = 5 [pid 6585] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6584] <... openat resumed>) = 5 [pid 6582] <... futex resumed>) = 0 [pid 6581] <... futex resumed>) = 0 [pid 6597] munmap(0x7f5c233f0000, 1048576) = 0 [pid 6587] <... open resumed>) = 4 [pid 6586] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6584] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6582] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6581] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6597] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6586] <... futex resumed>) = 0 [pid 6584] <... futex resumed>) = 0 [pid 6582] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6581] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6597] <... openat resumed>) = 4 [pid 6586] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6584] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6582] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [ 146.312833][ T6580] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 146.319412][ T6583] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 6581] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6597] ioctl(4, LOOP_SET_FD, 3 [pid 6587] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6586] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6584] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6582] <... futex resumed>) = 0 [pid 6581] <... futex resumed>) = 0 [pid 6578] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6587] <... futex resumed>) = 1 [pid 6586] open("./bus", O_RDWR [pid 6585] <... futex resumed>) = 0 [pid 6584] open("./bus", O_RDWR [pid 6582] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6581] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6578] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6587] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6586] <... open resumed>) = 6 [pid 6585] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6584] <... open resumed>) = 6 [pid 6578] <... futex resumed>) = 0 [pid 6585] <... futex resumed>) = 0 [pid 6578] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6586] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6584] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6585] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6578] <... mmap resumed>) = 0x7f5c234cf000 [pid 6586] <... futex resumed>) = 1 [pid 6582] <... futex resumed>) = 0 [pid 6587] <... write resumed>) = 9 [pid 6586] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6584] <... futex resumed>) = 1 [pid 6582] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6581] <... futex resumed>) = 0 [pid 6578] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 6587] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6586] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6584] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6582] <... futex resumed>) = 0 [pid 6581] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6578] <... mprotect resumed>) = 0 [pid 6586] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6587] <... futex resumed>) = 1 [pid 6585] <... futex resumed>) = 0 [pid 6581] <... futex resumed>) = 0 [pid 6584] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6597] <... ioctl resumed>) = 0 [pid 6582] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6578] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6597] close(3 [pid 6587] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6586] <... mmap resumed>) = 0x20000000 [pid 6585] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6584] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6581] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6597] <... close resumed>) = 0 [pid 6587] <... openat resumed>) = 5 [pid 6586] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6585] <... futex resumed>) = 0 [pid 6597] mkdir("./file0", 0777) = 0 [pid 6584] <... mmap resumed>) = 0x20000000 [pid 6579] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6597] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [ 146.351506][ T6580] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 146.364914][ T6597] loop4: detected capacity change from 0 to 2048 [ 146.382251][ T6580] EXT4-fs (loop1): This should not happen!! Data will be lost [ 146.382251][ T6580] [pid 6579] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6600 attached [pid 6587] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6586] <... futex resumed>) = 1 [pid 6585] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6584] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6582] <... futex resumed>) = 0 [pid 6579] <... futex resumed>) = 0 [pid 6578] <... clone resumed>, parent_tid=[6600], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6600 [pid 6579] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6600] set_robust_list(0x7f5c234ef9e0, 24 [pid 6587] <... futex resumed>) = 0 [pid 6586] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6585] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6584] <... futex resumed>) = 1 [pid 6582] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6581] <... futex resumed>) = 0 [pid 6579] <... mmap resumed>) = 0x7f5c234cf000 [pid 6578] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6600] <... set_robust_list resumed>) = 0 [pid 6587] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6586] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6585] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6584] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6582] <... futex resumed>) = 0 [pid 6581] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6579] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 6578] <... futex resumed>) = 0 [pid 6581] <... futex resumed>) = 0 [pid 6579] <... mprotect resumed>) = 0 [pid 6581] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6579] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6601], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6601 [pid 6579] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6579] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6601 attached [pid 6601] set_robust_list(0x7f5c234ef9e0, 24) = 0 [pid 6601] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6600] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6587] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6586] sendfile(4, 5, NULL, 2147483713 [pid 6585] <... futex resumed>) = 0 [pid 6584] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6582] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6578] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6585] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 146.403669][ T6583] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 146.419437][ T6583] EXT4-fs (loop3): This should not happen!! Data will be lost [ 146.419437][ T6583] [ 146.432412][ T6583] EXT4-fs (loop3): Total free blocks count 0 [ 146.437546][ T6584] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 146.438554][ T6583] EXT4-fs (loop3): Free/Dirty block details [pid 6584] sendfile(4, 5, NULL, 2147483713 [pid 6587] open("./bus", O_RDWR [pid 6581] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6579] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6578] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6581] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6581] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c234cf000 [pid 6581] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6581] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6587] <... open resumed>) = 6 [pid 6585] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6582] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6587] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6585] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6582] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6581] <... clone resumed>, parent_tid=[6602], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6602 [pid 6587] <... futex resumed>) = 0 [pid 6585] <... futex resumed>) = 0 [pid 6582] <... futex resumed>) = 0 [pid 6581] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6587] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6585] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6582] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6581] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6602 attached [pid 6581] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6602] set_robust_list(0x7f5c234ef9e0, 24) = 0 [pid 6602] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6587] <... mmap resumed>) = 0x20000000 [pid 6582] <... mmap resumed>) = 0x7f5c234cf000 [ 146.454957][ T6586] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 146.459636][ T6583] EXT4-fs (loop3): free_blocks=2415919104 [ 146.488113][ T6583] EXT4-fs (loop3): dirty_blocks=16 [ 146.490191][ T6584] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 146.495730][ T6580] EXT4-fs (loop1): Total free blocks count 0 [pid 6587] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6582] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 6587] <... futex resumed>) = 1 [pid 6585] <... futex resumed>) = 0 [pid 6582] <... mprotect resumed>) = 0 [pid 6581] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6587] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6585] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [ 146.507532][ T6586] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 146.512830][ T6583] EXT4-fs (loop3): Block reservation details [ 146.525645][ T6584] EXT4-fs (loop5): This should not happen!! Data will be lost [ 146.525645][ T6584] [ 146.531793][ T6580] EXT4-fs (loop1): Free/Dirty block details [ 146.542126][ T6586] EXT4-fs (loop0): This should not happen!! Data will be lost [ 146.542126][ T6586] [ 146.546296][ T6583] EXT4-fs (loop3): i_reserved_data_blocks=1 [pid 6582] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6597] <... mount resumed>) = 0 [pid 6587] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6585] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6605 attached [pid 6601] <... ioctl resumed>) = 0 [pid 6597] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6587] sendfile(4, 5, NULL, 2147483713 [pid 6585] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6583] <... sendfile resumed>) = 63 [pid 6582] <... clone resumed>, parent_tid=[6605], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6605 [pid 6601] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6601] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6583] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6583] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6579] exit_group(0 [pid 6601] <... futex resumed>) = ? [pid 6579] <... exit_group resumed>) = ? [pid 6601] +++ exited with 0 +++ [pid 6583] <... futex resumed>) = ? [pid 6605] set_robust_list(0x7f5c234ef9e0, 24 [pid 6597] <... openat resumed>) = 3 [pid 6582] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6605] <... set_robust_list resumed>) = 0 [pid 6582] <... futex resumed>) = 0 [pid 6597] chdir("./file0" [pid 6605] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6582] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6597] <... chdir resumed>) = 0 [pid 6597] ioctl(4, LOOP_CLR_FD) = 0 [pid 6597] close(4) = 0 [pid 6583] +++ exited with 0 +++ [pid 6579] +++ exited with 0 +++ [pid 6597] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6591] <... futex resumed>) = 0 [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6579, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 6591] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [ 146.557688][ T6584] EXT4-fs (loop5): Total free blocks count 0 [ 146.564959][ T6580] EXT4-fs (loop1): free_blocks=2415919104 [ 146.569555][ T6586] EXT4-fs (loop0): Total free blocks count 0 [ 146.573832][ T6580] EXT4-fs (loop1): dirty_blocks=16 [ 146.590852][ T6586] EXT4-fs (loop0): Free/Dirty block details [ 146.599600][ T6586] EXT4-fs (loop0): free_blocks=2415919104 [pid 6597] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6591] <... futex resumed>) = 0 [pid 6597] <... open resumed>) = 4 [pid 6591] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4997] umount2("./52", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6597] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./52", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 6597] <... futex resumed>) = 1 [pid 6591] <... futex resumed>) = 0 [pid 4997] fstat(3, [pid 6597] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6591] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6591] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6597] <... write resumed>) = 9 [pid 6585] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6582] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4997] getdents64(3, [pid 6597] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6585] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 6597] <... futex resumed>) = 1 [pid 6591] <... futex resumed>) = 0 [pid 6585] <... futex resumed>) = 0 [pid 4997] umount2("./52/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6602] <... ioctl resumed>) = 0 [pid 6602] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6602] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6584] <... sendfile resumed>) = 63 [pid 6584] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 146.602055][ T6587] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 146.606098][ T6584] EXT4-fs (loop5): Free/Dirty block details [ 146.627992][ T6584] EXT4-fs (loop5): free_blocks=2415919104 [ 146.635230][ T6584] EXT4-fs (loop5): dirty_blocks=16 [ 146.640854][ T6580] EXT4-fs (loop1): Block reservation details [ 146.641476][ T6584] EXT4-fs (loop5): Block reservation details [ 146.654091][ T6584] EXT4-fs (loop5): i_reserved_data_blocks=1 [pid 6584] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6597] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6591] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6585] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6581] exit_group(0 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6602] <... futex resumed>) = ? [pid 6597] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6591] <... futex resumed>) = 0 [pid 6585] <... mmap resumed>) = 0x7f5c234cf000 [pid 6581] <... exit_group resumed>) = ? [pid 4997] lstat("./52/binderfs", [pid 6584] <... futex resumed>) = ? [pid 6584] +++ exited with 0 +++ [pid 6602] +++ exited with 0 +++ [pid 6600] <... ioctl resumed>) = 0 [pid 6597] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6591] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6585] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 6581] +++ exited with 0 +++ [pid 6580] <... sendfile resumed>) = 63 [pid 4997] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6600] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6597] <... openat resumed>) = 5 [pid 6600] <... futex resumed>) = 0 [pid 6597] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6585] <... mprotect resumed>) = 0 [pid 6580] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6581, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [ 146.658398][ T6586] EXT4-fs (loop0): dirty_blocks=16 [ 146.662869][ T6587] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 146.675654][ T6580] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 146.678355][ T6587] EXT4-fs (loop2): This should not happen!! Data will be lost [ 146.678355][ T6587] [ 146.684500][ T6586] EXT4-fs (loop0): Block reservation details [ 146.694273][ T6587] EXT4-fs (loop2): Total free blocks count 0 [ 146.706481][ T6587] EXT4-fs (loop2): Free/Dirty block details [pid 4997] unlink("./52/binderfs" [pid 6605] <... ioctl resumed>) = 0 [pid 6600] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6597] <... futex resumed>) = 1 [pid 6591] <... futex resumed>) = 0 [pid 6586] <... sendfile resumed>) = 63 [pid 6585] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6580] <... futex resumed>) = 0 [pid 4997] <... unlink resumed>) = 0 [pid 6605] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6597] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6591] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6586] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6582] exit_group(0 [pid 6580] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6578] exit_group(0 [pid 4997] umount2("./52/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6606 attached [pid 6605] <... futex resumed>) = ? [pid 6600] <... futex resumed>) = ? [pid 6597] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6591] <... futex resumed>) = 0 [pid 6587] <... sendfile resumed>) = 63 [pid 6586] <... futex resumed>) = ? [pid 6585] <... clone resumed>, parent_tid=[6606], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6606 [pid 6582] <... exit_group resumed>) = ? [pid 6580] <... futex resumed>) = ? [pid 6578] <... exit_group resumed>) = ? [pid 6606] set_robust_list(0x7f5c234ef9e0, 24 [pid 6605] +++ exited with 0 +++ [pid 6600] +++ exited with 0 +++ [pid 6597] open("./bus", O_RDWR [pid 6591] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6587] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6586] +++ exited with 0 +++ [pid 6585] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6582] +++ exited with 0 +++ [pid 6580] +++ exited with 0 +++ [pid 6578] +++ exited with 0 +++ [pid 6606] <... set_robust_list resumed>) = 0 [pid 6597] <... open resumed>) = 6 [pid 6587] <... futex resumed>) = 0 [pid 6585] <... futex resumed>) = 0 [pid 6606] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6597] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6587] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6585] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 146.713577][ T6587] EXT4-fs (loop2): free_blocks=2415919104 [ 146.716300][ T6586] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 146.719818][ T6587] EXT4-fs (loop2): dirty_blocks=16 [ 146.731163][ T6587] EXT4-fs (loop2): Block reservation details [ 146.737833][ T6587] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 146.737904][ T5608] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 146.756969][ T5608] EXT4-fs (loop3): This should not happen!! Data will be lost [pid 4999] umount2("./52", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6578, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 4994] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6582, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 6606] <... ioctl resumed>) = 0 [pid 6597] <... futex resumed>) = 1 [pid 6591] <... futex resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] umount2("./51", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] umount2("./53", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6606] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6597] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6591] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] openat(AT_FDCWD, "./52", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6606] <... futex resumed>) = 1 [pid 6597] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6591] <... futex resumed>) = 0 [pid 6585] <... futex resumed>) = 0 [pid 4999] <... openat resumed>) = 3 [pid 4995] openat(AT_FDCWD, "./51", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4994] openat(AT_FDCWD, "./53", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6606] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6597] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6591] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6585] exit_group(0 [pid 4999] fstat(3, [pid 4995] <... openat resumed>) = 3 [pid 4994] <... openat resumed>) = 3 [pid 6606] <... futex resumed>) = ? [pid 6597] <... mmap resumed>) = 0x20000000 [pid 6587] <... futex resumed>) = ? [pid 6585] <... exit_group resumed>) = ? [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] <... umount2 resumed>) = 0 [pid 4995] fstat(3, [pid 4994] fstat(3, [pid 6606] +++ exited with 0 +++ [pid 6587] +++ exited with 0 +++ [pid 4997] umount2("./52/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./52/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./52/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./52/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4997] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6585] +++ exited with 0 +++ [pid 4997] getdents64(4, [pid 4999] getdents64(3, [pid 4997] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [ 146.756969][ T5608] [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6597] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4996] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6585, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] getdents64(3, [pid 6597] <... futex resumed>) = 1 [pid 6591] <... futex resumed>) = 0 [pid 4999] umount2("./52/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6591] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] getdents64(3, [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 6591] <... futex resumed>) = 0 [pid 6591] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4997] getdents64(4, [pid 4999] lstat("./52/binderfs", [pid 4995] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 6597] sendfile(4, 5, NULL, 2147483713 [pid 4996] umount2("./53", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] umount2("./53/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4995] umount2("./51/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4997] close(4) = 0 [pid 4997] rmdir("./52/file0") = 0 [pid 4997] getdents64(3, 0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4997] close(3) = 0 [pid 4997] rmdir("./52" [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] unlink("./52/binderfs" [pid 4997] <... rmdir resumed>) = 0 [pid 4996] openat(AT_FDCWD, "./53", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] lstat("./53/binderfs", [pid 4997] mkdir("./53", 0777 [pid 4999] <... unlink resumed>) = 0 [pid 4997] <... mkdir resumed>) = 0 [pid 4996] <... openat resumed>) = 3 [pid 4995] lstat("./51/binderfs", [pid 4994] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4996] fstat(3, [pid 4995] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4994] unlink("./53/binderfs" [pid 4999] umount2("./52/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] unlink("./51/binderfs" [pid 4997] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4994] <... unlink resumed>) = 0 [pid 4997] <... openat resumed>) = 3 [pid 4995] <... unlink resumed>) = 0 [pid 4997] ioctl(3, LOOP_CLR_FD [pid 4996] getdents64(3, [pid 4997] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4995] umount2("./51/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] umount2("./53/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] close(3) = 0 [pid 4996] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [ 146.807854][ T5608] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 146.823392][ T5608] EXT4-fs (loop5): This should not happen!! Data will be lost [ 146.823392][ T5608] [ 146.824679][ T6597] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6607 attached [pid 6591] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4996] umount2("./53/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6607] set_robust_list(0x555556fb95e0, 24 [pid 6591] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6607] <... set_robust_list resumed>) = 0 [pid 6591] <... futex resumed>) = 0 [pid 4996] lstat("./53/binderfs", [pid 6607] chdir("./53" [pid 6591] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4996] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [ 146.848733][ T5608] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 146.861705][ T40] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 146.875652][ T40] EXT4-fs (loop0): This should not happen!! Data will be lost [ 146.875652][ T40] [ 146.885715][ T5608] EXT4-fs (loop1): This should not happen!! Data will be lost [ 146.885715][ T5608] [pid 6607] <... chdir resumed>) = 0 [pid 6591] <... mmap resumed>) = 0x7f5c234cf000 [pid 4997] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6607 [pid 4996] unlink("./53/binderfs" [pid 4995] <... umount2 resumed>) = 0 [ 146.896542][ T6597] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 146.908958][ T6597] EXT4-fs (loop4): This should not happen!! Data will be lost [ 146.908958][ T6597] [ 146.918954][ T6597] EXT4-fs (loop4): Total free blocks count 0 [ 146.924981][ T6597] EXT4-fs (loop4): Free/Dirty block details [ 146.931035][ T6597] EXT4-fs (loop4): free_blocks=2415919104 [ 146.945613][ T6597] EXT4-fs (loop4): dirty_blocks=16 [ 146.950859][ T6597] EXT4-fs (loop4): Block reservation details [pid 6607] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6591] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 4996] <... unlink resumed>) = 0 [pid 6607] <... prctl resumed>) = 0 [pid 6591] <... mprotect resumed>) = 0 [pid 4996] umount2("./53/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6607] setpgid(0, 0 [pid 6597] <... sendfile resumed>) = 63 [pid 6591] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4999] <... umount2 resumed>) = 0 [pid 4995] umount2("./51/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6607] <... setpgid resumed>) = 0 [pid 6597] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] umount2("./52/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6597] <... futex resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] lstat("./51/file0", [pid 6597] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4999] lstat("./52/file0", [pid 4995] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] umount2("./51/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] umount2("./52/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] openat(AT_FDCWD, "./51/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] openat(AT_FDCWD, "./52/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4995] <... openat resumed>) = 4 [pid 4999] <... openat resumed>) = 4 [pid 4995] fstat(4, [pid 4999] fstat(4, [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] getdents64(4, [pid 4999] getdents64(4, [pid 4995] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4999] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4995] getdents64(4, [pid 4999] getdents64(4, [pid 4995] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4999] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4995] close(4 [pid 4999] close(4 [pid 4995] <... close resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 4995] rmdir("./51/file0" [pid 4999] rmdir("./52/file0" [pid 4995] <... rmdir resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 4995] getdents64(3, [pid 4999] getdents64(3, [pid 4995] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4999] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4995] close(3 [pid 4999] close(3 [pid 4995] <... close resumed>) = 0 [pid 6607] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6591] <... clone resumed>, parent_tid=[6609], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6609 [pid 4999] <... close resumed>) = 0 [pid 4995] rmdir("./51" [pid 6591] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] rmdir("./52" [pid 6591] <... futex resumed>) = 0 [pid 6607] <... openat resumed>) = 3 [pid 6591] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6607] write(3, "1000", 4) = 4 [pid 6607] close(3 [pid 4995] <... rmdir resumed>) = 0 [pid 6607] <... close resumed>) = 0 [pid 6607] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 6609 attached ) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 6607] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4999] mkdir("./53", 0777 [pid 4995] mkdir("./52", 0777 [pid 6607] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6609] set_robust_list(0x7f5c234ef9e0, 24 [pid 6607] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 4999] <... mkdir resumed>) = 0 [pid 4995] <... mkdir resumed>) = 0 [pid 6607] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 4999] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 4995] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6607] <... mprotect resumed>) = 0 [pid 6607] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4999] <... openat resumed>) = 3 [pid 4995] <... openat resumed>) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 4995] ioctl(3, LOOP_CLR_FD [pid 6607] <... clone resumed>, parent_tid=[6610], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6610 [pid 6609] <... set_robust_list resumed>) = 0 [pid 6607] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4995] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6609] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6607] <... futex resumed>) = 0 [pid 6607] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4999] close(3 [pid 4995] close(3 [pid 6609] <... ioctl resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4995] <... close resumed>) = 0 [pid 6609] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4995] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6609] <... futex resumed>) = 1 [pid 6591] <... futex resumed>) = 0 [pid 6609] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6591] exit_group(0 [pid 4999] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6611 [pid 6609] <... futex resumed>) = ? [pid 6597] <... futex resumed>) = ? [pid 6591] <... exit_group resumed>) = ? [pid 4995] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6612 [pid 6597] +++ exited with 0 +++ ./strace-static-x86_64: Process 6612 attached ./strace-static-x86_64: Process 6610 attached [pid 6609] +++ exited with 0 +++ [pid 6591] +++ exited with 0 +++ [pid 6610] set_robust_list(0x7f5c2b8109e0, 24 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6591, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 4996] <... umount2 resumed>) = 0 [pid 4994] <... umount2 resumed>) = 0 [pid 6610] <... set_robust_list resumed>) = 0 [ 146.957386][ T6597] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 146.967443][ T5457] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 146.982865][ T5457] EXT4-fs (loop2): This should not happen!! Data will be lost [ 146.982865][ T5457] [pid 6612] set_robust_list(0x555556fb95e0, 24 [pid 4996] umount2("./53/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6611 attached [pid 6612] <... set_robust_list resumed>) = 0 [pid 6610] memfd_create("syzkaller", 0 [pid 4994] umount2("./53/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6612] chdir("./52" [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6612] <... chdir resumed>) = 0 [pid 4996] lstat("./53/file0", [pid 6612] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4996] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6612] <... prctl resumed>) = 0 [pid 4996] umount2("./53/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6612] setpgid(0, 0 [pid 6610] <... memfd_create resumed>) = 3 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6611] set_robust_list(0x555556fb95e0, 24 [pid 6610] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6611] <... set_robust_list resumed>) = 0 [pid 4994] lstat("./53/file0", [pid 6612] <... setpgid resumed>) = 0 [pid 6610] <... mmap resumed>) = 0x7f5c233f0000 [pid 4998] umount2("./51", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] openat(AT_FDCWD, "./53/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6612] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6611] chdir("./53" [pid 4996] <... openat resumed>) = 4 [pid 4994] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6612] <... openat resumed>) = 3 [pid 4996] fstat(4, [pid 6612] write(3, "1000", 4 [pid 4996] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6612] <... write resumed>) = 4 [pid 4996] getdents64(4, [pid 6612] close(3 [pid 4996] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 6612] <... close resumed>) = 0 [pid 4996] getdents64(4, [pid 6612] symlink("/dev/binderfs", "./binderfs" [pid 4996] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 6612] <... symlink resumed>) = 0 [pid 6611] <... chdir resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4996] close(4 [pid 4994] umount2("./53/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6612] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6611] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4998] openat(AT_FDCWD, "./51", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4996] <... close resumed>) = 0 [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6612] <... futex resumed>) = 0 [pid 6611] <... prctl resumed>) = 0 [pid 6610] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4998] <... openat resumed>) = 3 [pid 4996] rmdir("./53/file0" [pid 4994] openat(AT_FDCWD, "./53/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6612] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6611] setpgid(0, 0 [pid 4998] fstat(3, [pid 4996] <... rmdir resumed>) = 0 [pid 6612] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6611] <... setpgid resumed>) = 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] getdents64(3, [pid 4994] <... openat resumed>) = 4 [pid 6612] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6611] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4998] getdents64(3, [pid 4996] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4994] fstat(4, [pid 6612] <... mprotect resumed>) = 0 [pid 6611] <... openat resumed>) = 3 [pid 4996] close(3 [pid 6612] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6611] write(3, "1000", 4 [pid 4998] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4996] <... close resumed>) = 0 [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6611] <... write resumed>) = 4 [pid 4998] umount2("./51/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] rmdir("./53" [pid 4994] getdents64(4, [pid 6612] <... clone resumed>, parent_tid=[6613], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6613 [pid 6611] close(3 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4996] <... rmdir resumed>) = 0 [pid 6612] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6611] <... close resumed>) = 0 [pid 4998] lstat("./51/binderfs", [pid 4996] mkdir("./54", 0777 [pid 4994] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 6612] <... futex resumed>) = 0 [pid 6611] symlink("/dev/binderfs", "./binderfs" [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4996] <... mkdir resumed>) = 0 [pid 4994] getdents64(4, [pid 6612] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6611] <... symlink resumed>) = 0 [pid 4998] unlink("./51/binderfs" [pid 4996] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4994] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 6611] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... unlink resumed>) = 0 [pid 4996] <... openat resumed>) = 3 [pid 4994] close(4 [pid 6611] <... futex resumed>) = 0 [pid 4998] umount2("./51/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] ioctl(3, LOOP_CLR_FD [pid 4994] <... close resumed>) = 0 [pid 6611] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4996] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4994] rmdir("./53/file0" [pid 4996] close(3) = 0 [pid 4996] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6611] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 4994] <... rmdir resumed>) = 0 [pid 6611] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 4996] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6614 [pid 4994] getdents64(3, [pid 6611] <... mprotect resumed>) = 0 [pid 4994] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 6611] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4994] close(3 [pid 6611] <... clone resumed>, parent_tid=[6615], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6615 [pid 4994] <... close resumed>) = 0 [pid 6611] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] rmdir("./53" [pid 6611] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6614 attached [pid 6614] set_robust_list(0x555556fb95e0, 24 [pid 6611] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4994] <... rmdir resumed>) = 0 [pid 6614] <... set_robust_list resumed>) = 0 [pid 4994] mkdir("./54", 0777./strace-static-x86_64: Process 6615 attached [pid 6614] chdir("./54" [pid 6615] set_robust_list(0x7f5c2b8109e0, 24 [pid 6614] <... chdir resumed>) = 0 [pid 6615] <... set_robust_list resumed>) = 0 [pid 6614] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4994] <... mkdir resumed>) = 0 [pid 6615] memfd_create("syzkaller", 0 [pid 6614] <... prctl resumed>) = 0 [pid 4994] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6615] <... memfd_create resumed>) = 3 [pid 6614] setpgid(0, 0 [pid 6615] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6614] <... setpgid resumed>) = 0 [pid 4994] <... openat resumed>) = 3 ./strace-static-x86_64: Process 6613 attached [pid 6615] <... mmap resumed>) = 0x7f5c233f0000 [pid 6614] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6610] <... write resumed>) = 1048576 [pid 4994] ioctl(3, LOOP_CLR_FD [pid 6614] <... openat resumed>) = 3 [pid 6614] write(3, "1000", 4) = 4 [pid 6614] close(3) = 0 [pid 6614] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6614] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6614] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c2b7f0000 [pid 6614] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6614] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6616], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6616 [pid 6614] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6614] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6613] set_robust_list(0x7f5c2b8109e0, 24 [pid 6610] munmap(0x7f5c233f0000, 1048576 [pid 4994] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6613] <... set_robust_list resumed>) = 0 [pid 6610] <... munmap resumed>) = 0 [pid 6613] memfd_create("syzkaller", 0 [pid 4994] close(3./strace-static-x86_64: Process 6616 attached [pid 6615] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6613] <... memfd_create resumed>) = 3 [pid 6610] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4994] <... close resumed>) = 0 [pid 6616] set_robust_list(0x7f5c2b8109e0, 24 [pid 6613] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6610] <... openat resumed>) = 4 [pid 6616] <... set_robust_list resumed>) = 0 [pid 6616] memfd_create("syzkaller", 0) = 3 [pid 6616] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5c233f0000 [pid 6613] <... mmap resumed>) = 0x7f5c233f0000 [ 147.100410][ T11] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 147.130353][ T11] EXT4-fs (loop4): This should not happen!! Data will be lost [ 147.130353][ T11] [pid 6610] ioctl(4, LOOP_SET_FD, 3 [pid 4994] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6616] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4998] <... umount2 resumed>) = 0 [pid 4998] umount2("./51/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./51/file0", [pid 4994] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6617 [pid 6610] <... ioctl resumed>) = 0 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./51/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./51/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6615] <... write resumed>) = 1048576 [pid 4998] <... openat resumed>) = 4 [pid 4998] fstat(4, ./strace-static-x86_64: Process 6617 attached {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6617] set_robust_list(0x555556fb95e0, 24 [pid 4998] getdents64(4, [pid 6617] <... set_robust_list resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 6617] chdir("./54" [pid 6613] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6610] close(3 [pid 4998] getdents64(4, [pid 6617] <... chdir resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 6617] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4998] close(4 [pid 6617] <... prctl resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 6617] setpgid(0, 0 [pid 4998] rmdir("./51/file0" [pid 6617] <... setpgid resumed>) = 0 [pid 6615] munmap(0x7f5c233f0000, 1048576 [pid 6610] <... close resumed>) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 6617] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6615] <... munmap resumed>) = 0 [pid 6610] mkdir("./file0", 0777 [pid 4998] getdents64(3, [pid 6617] <... openat resumed>) = 3 [pid 6615] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 4998] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 6617] write(3, "1000", 4 [pid 6615] <... openat resumed>) = 4 [pid 6610] <... mkdir resumed>) = 0 [pid 4998] close(3 [pid 6617] <... write resumed>) = 4 [pid 6615] ioctl(4, LOOP_SET_FD, 3 [pid 4998] <... close resumed>) = 0 [pid 6617] close(3 [pid 6610] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 4998] rmdir("./51" [pid 6617] <... close resumed>) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 6617] symlink("/dev/binderfs", "./binderfs" [pid 4998] mkdir("./52", 0777 [pid 6617] <... symlink resumed>) = 0 [pid 4998] <... mkdir resumed>) = 0 [pid 6617] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6617] <... futex resumed>) = 0 [pid 4998] <... openat resumed>) = 3 [pid 6617] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 6617] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6616] <... write resumed>) = 1048576 [pid 6613] <... write resumed>) = 1048576 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6617] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 4998] close(3 [pid 6617] <... mprotect resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 6617] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6617] <... clone resumed>, parent_tid=[6619], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6619 [pid 4998] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6620 [pid 6617] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6616] munmap(0x7f5c233f0000, 1048576 [pid 6615] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 6620 attached [pid 6617] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6616] <... munmap resumed>) = 0 [pid 6615] close(3 [pid 6620] set_robust_list(0x555556fb95e0, 24 [pid 6615] <... close resumed>) = 0 ./strace-static-x86_64: Process 6619 attached [pid 6620] <... set_robust_list resumed>) = 0 [pid 6616] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6615] mkdir("./file0", 0777 [pid 6620] chdir("./52" [pid 6619] set_robust_list(0x7f5c2b8109e0, 24 [pid 6616] <... openat resumed>) = 4 [pid 6615] <... mkdir resumed>) = 0 [pid 6613] munmap(0x7f5c233f0000, 1048576 [pid 6620] <... chdir resumed>) = 0 [pid 6619] <... set_robust_list resumed>) = 0 [pid 6616] ioctl(4, LOOP_SET_FD, 3 [ 147.175762][ T6610] loop3: detected capacity change from 0 to 2048 [ 147.214734][ T6615] loop5: detected capacity change from 0 to 2048 [pid 6615] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6620] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6619] memfd_create("syzkaller", 0 [pid 6616] <... ioctl resumed>) = 0 [pid 6613] <... munmap resumed>) = 0 [pid 6610] <... mount resumed>) = 0 [pid 6620] <... prctl resumed>) = 0 [pid 6619] <... memfd_create resumed>) = 3 [pid 6613] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6610] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6620] setpgid(0, 0 [pid 6619] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6620] <... setpgid resumed>) = 0 [pid 6619] <... mmap resumed>) = 0x7f5c233f0000 [pid 6620] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6613] <... openat resumed>) = 4 [pid 6610] <... openat resumed>) = 3 [pid 6620] <... openat resumed>) = 3 [pid 6613] ioctl(4, LOOP_SET_FD, 3 [pid 6610] chdir("./file0" [pid 6620] write(3, "1000", 4 [pid 6610] <... chdir resumed>) = 0 [pid 6620] <... write resumed>) = 4 [pid 6620] close(3 [pid 6619] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6620] <... close resumed>) = 0 [pid 6620] symlink("/dev/binderfs", "./binderfs" [pid 6616] close(3 [pid 6620] <... symlink resumed>) = 0 [pid 6616] <... close resumed>) = 0 [pid 6620] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6616] mkdir("./file0", 0777 [pid 6613] <... ioctl resumed>) = 0 [pid 6610] ioctl(4, LOOP_CLR_FD [pid 6620] <... futex resumed>) = 0 [pid 6616] <... mkdir resumed>) = 0 [pid 6613] close(3 [pid 6610] <... ioctl resumed>) = 0 [pid 6620] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6616] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6613] <... close resumed>) = 0 [pid 6610] close(4 [pid 6620] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6615] <... mount resumed>) = 0 [pid 6610] <... close resumed>) = 0 [pid 6620] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6615] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6613] mkdir("./file0", 0777 [pid 6610] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6620] <... mprotect resumed>) = 0 [pid 6615] <... openat resumed>) = 3 [pid 6610] <... futex resumed>) = 1 [pid 6607] <... futex resumed>) = 0 [pid 6620] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6615] chdir("./file0" [pid 6610] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6607] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6615] <... chdir resumed>) = 0 [pid 6613] <... mkdir resumed>) = 0 [pid 6610] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6607] <... futex resumed>) = 0 [pid 6620] <... clone resumed>, parent_tid=[6624], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6624 [pid 6615] ioctl(4, LOOP_CLR_FD [pid 6613] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6610] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6607] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6620] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6615] <... ioctl resumed>) = 0 [pid 6620] <... futex resumed>) = 0 [pid 6620] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6615] close(4./strace-static-x86_64: Process 6624 attached ) = 0 [pid 6624] set_robust_list(0x7f5c2b8109e0, 24 [pid 6615] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6624] <... set_robust_list resumed>) = 0 [pid 6615] <... futex resumed>) = 1 [pid 6611] <... futex resumed>) = 0 [pid 6624] memfd_create("syzkaller", 0 [pid 6615] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6611] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6610] <... open resumed>) = 4 [pid 6624] <... memfd_create resumed>) = 3 [pid 6611] <... futex resumed>) = 0 [pid 6624] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6611] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6624] <... mmap resumed>) = 0x7f5c233f0000 [pid 6616] <... mount resumed>) = 0 [pid 6615] <... open resumed>) = 4 [pid 6610] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6616] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6615] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6610] <... futex resumed>) = 1 [pid 6607] <... futex resumed>) = 0 [pid 6616] <... openat resumed>) = 3 [pid 6615] <... futex resumed>) = 1 [pid 6611] <... futex resumed>) = 0 [pid 6610] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6607] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6624] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6619] <... write resumed>) = 1048576 [ 147.256493][ T6616] loop2: detected capacity change from 0 to 2048 [ 147.276008][ T6613] loop1: detected capacity change from 0 to 2048 [pid 6616] chdir("./file0" [pid 6615] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6611] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6610] <... write resumed>) = 9 [pid 6607] <... futex resumed>) = 0 [pid 6610] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6610] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6619] munmap(0x7f5c233f0000, 1048576 [pid 6611] <... futex resumed>) = 0 [pid 6615] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6616] <... chdir resumed>) = 0 [pid 6607] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 6619] <... munmap resumed>) = 0 [pid 6616] ioctl(4, LOOP_CLR_FD [pid 6615] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6613] <... mount resumed>) = 0 [pid 6611] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6607] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6619] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6616] <... ioctl resumed>) = 0 [pid 6615] <... write resumed>) = 9 [pid 6613] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6610] <... futex resumed>) = 0 [pid 6607] <... futex resumed>) = 1 [pid 6619] <... openat resumed>) = 4 [pid 6616] close(4 [pid 6615] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6613] <... openat resumed>) = 3 [pid 6610] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6607] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6619] ioctl(4, LOOP_SET_FD, 3 [pid 6616] <... close resumed>) = 0 [pid 6615] <... futex resumed>) = 1 [pid 6613] chdir("./file0" [pid 6611] <... futex resumed>) = 0 [pid 6610] <... openat resumed>) = 5 [pid 6613] <... chdir resumed>) = 0 [pid 6613] ioctl(4, LOOP_CLR_FD) = 0 [pid 6613] close(4) = 0 [pid 6613] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6612] <... futex resumed>) = 0 [pid 6613] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6612] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6613] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6612] <... futex resumed>) = 0 [pid 6613] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6612] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6616] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6615] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6611] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6616] <... futex resumed>) = 1 [pid 6615] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6614] <... futex resumed>) = 0 [pid 6611] <... futex resumed>) = 0 [pid 6616] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6615] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6614] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6611] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6610] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6613] <... open resumed>) = 4 [pid 6624] <... write resumed>) = 1048576 [pid 6616] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6615] <... openat resumed>) = 5 [pid 6614] <... futex resumed>) = 0 [pid 6613] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6610] <... futex resumed>) = 1 [pid 6607] <... futex resumed>) = 0 [pid 6624] munmap(0x7f5c233f0000, 1048576 [pid 6619] <... ioctl resumed>) = 0 [pid 6616] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6615] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6614] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6613] <... futex resumed>) = 1 [pid 6612] <... futex resumed>) = 0 [pid 6610] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6607] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6624] <... munmap resumed>) = 0 [pid 6619] close(3 [pid 6616] <... open resumed>) = 4 [pid 6615] <... futex resumed>) = 1 [pid 6613] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6612] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6611] <... futex resumed>) = 0 [pid 6610] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6607] <... futex resumed>) = 0 [pid 6624] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6619] <... close resumed>) = 0 [pid 6624] <... openat resumed>) = 4 [pid 6619] mkdir("./file0", 0777 [pid 6624] ioctl(4, LOOP_SET_FD, 3 [pid 6619] <... mkdir resumed>) = 0 [pid 6616] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6615] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6613] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6612] <... futex resumed>) = 0 [pid 6611] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6610] open("./bus", O_RDWR [pid 6607] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6619] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6616] <... futex resumed>) = 1 [pid 6615] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6614] <... futex resumed>) = 0 [pid 6613] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6612] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6611] <... futex resumed>) = 0 [pid 6610] <... open resumed>) = 6 [pid 6616] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6615] open("./bus", O_RDWR [pid 6614] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6613] <... write resumed>) = 9 [pid 6611] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6610] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6616] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6615] <... open resumed>) = 6 [pid 6614] <... futex resumed>) = 0 [pid 6610] <... futex resumed>) = 1 [pid 6607] <... futex resumed>) = 0 [pid 6613] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6616] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6615] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6614] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6613] <... futex resumed>) = 1 [pid 6612] <... futex resumed>) = 0 [pid 6610] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6607] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6615] <... futex resumed>) = 1 [pid 6613] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6612] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6611] <... futex resumed>) = 0 [pid 6610] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6616] <... write resumed>) = 9 [pid 6615] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6607] <... futex resumed>) = 0 [pid 6616] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6615] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6613] <... openat resumed>) = 5 [pid 6612] <... futex resumed>) = 0 [pid 6611] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6610] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6607] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6624] <... ioctl resumed>) = 0 [pid 6616] <... futex resumed>) = 1 [pid 6615] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6614] <... futex resumed>) = 0 [pid 6613] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6612] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6611] <... futex resumed>) = 0 [pid 6624] close(3 [pid 6610] <... mmap resumed>) = 0x20000000 [pid 6614] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6611] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6624] <... close resumed>) = 0 [pid 6615] <... mmap resumed>) = 0x20000000 [pid 6612] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6614] <... futex resumed>) = 0 [pid 6613] <... futex resumed>) = 0 [pid 6616] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6615] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6614] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6612] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6610] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6613] open("./bus", O_RDWR [pid 6616] <... openat resumed>) = 5 [pid 6612] <... futex resumed>) = 0 [pid 6624] mkdir("./file0", 0777) = 0 [pid 6616] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6615] <... futex resumed>) = 1 [pid 6613] <... open resumed>) = 6 [pid 6612] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6611] <... futex resumed>) = 0 [pid 6610] <... futex resumed>) = 1 [pid 6607] <... futex resumed>) = 0 [pid 6624] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6616] <... futex resumed>) = 1 [pid 6615] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6614] <... futex resumed>) = 0 [pid 6613] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6612] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6611] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6610] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6607] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6616] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6615] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6614] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6613] <... futex resumed>) = 0 [pid 6612] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6611] <... futex resumed>) = 0 [pid 6610] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6607] <... futex resumed>) = 0 [ 147.352890][ T6619] loop0: detected capacity change from 0 to 2048 [ 147.374735][ T6624] loop4: detected capacity change from 0 to 2048 [pid 6616] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6615] sendfile(4, 5, NULL, 2147483713 [pid 6614] <... futex resumed>) = 0 [pid 6613] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6612] <... futex resumed>) = 0 [pid 6611] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6610] sendfile(4, 5, NULL, 2147483713 [pid 6607] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6616] open("./bus", O_RDWR [pid 6614] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6612] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6613] <... mmap resumed>) = 0x20000000 [pid 6616] <... open resumed>) = 6 [pid 6616] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6614] <... futex resumed>) = 0 [pid 6613] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6616] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6614] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6613] <... futex resumed>) = 1 [pid 6612] <... futex resumed>) = 0 [pid 6616] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6614] <... futex resumed>) = 0 [pid 6613] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6612] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6614] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6616] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6613] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6612] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6611] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6607] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6611] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6607] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6611] <... futex resumed>) = 0 [pid 6607] <... futex resumed>) = 0 [pid 6611] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6607] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c234cf000 [pid 6611] <... mmap resumed>) = 0x7f5c234cf000 [pid 6611] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6611] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6632], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6632 [pid 6611] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6616] <... mmap resumed>) = 0x20000000 [pid 6611] <... futex resumed>) = 0 [pid 6611] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6632 attached [pid 6632] set_robust_list(0x7f5c234ef9e0, 24 [pid 6613] sendfile(4, 5, NULL, 2147483713 [pid 6607] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 6632] <... set_robust_list resumed>) = 0 [pid 6632] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6607] <... mprotect resumed>) = 0 [ 147.410746][ T6610] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 147.427293][ T6615] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 147.431553][ T6610] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 6616] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6607] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6614] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6612] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6612] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6614] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6612] <... futex resumed>) = 0 [pid 6607] <... clone resumed>, parent_tid=[6634], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6634 [pid 6616] <... futex resumed>) = 0 [pid 6614] <... futex resumed>) = 0 [pid 6612] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6614] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6612] <... mmap resumed>) = 0x7f5c234cf000 [pid 6612] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 6634 attached [pid 6624] <... mount resumed>) = 0 [pid 6616] sendfile(4, 5, NULL, 2147483713 [pid 6612] <... mprotect resumed>) = 0 [pid 6607] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6624] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6612] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6611] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6607] <... futex resumed>) = 0 [pid 6624] <... openat resumed>) = 3 [ 147.476249][ T6613] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 147.489740][ T6615] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 147.505386][ T6615] EXT4-fs (loop5): This should not happen!! Data will be lost [ 147.505386][ T6615] [pid 6607] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6634] set_robust_list(0x7f5c234ef9e0, 24 [pid 6624] chdir("./file0" [pid 6619] <... mount resumed>) = 0 [pid 6619] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6619] chdir("./file0") = 0 [pid 6619] ioctl(4, LOOP_CLR_FD) = 0 [pid 6619] close(4 [pid 6634] <... set_robust_list resumed>) = 0 [pid 6624] <... chdir resumed>) = 0 [pid 6619] <... close resumed>) = 0 [pid 6614] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 147.522990][ T6610] EXT4-fs (loop3): This should not happen!! Data will be lost [ 147.522990][ T6610] [ 147.533450][ T6613] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 147.537832][ T6616] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 147.545915][ T6610] EXT4-fs (loop3): Total free blocks count 0 [ 147.566721][ T6610] EXT4-fs (loop3): Free/Dirty block details [pid 6612] <... clone resumed>, parent_tid=[6635], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6635 [pid 6607] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6634] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6624] ioctl(4, LOOP_CLR_FD [pid 6619] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6614] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6612] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6624] <... ioctl resumed>) = 0 [pid 6619] <... futex resumed>) = 1 [pid 6617] <... futex resumed>) = 0 [pid 6614] <... futex resumed>) = 0 [pid 6612] <... futex resumed>) = 0 [pid 6624] close(4 [pid 6619] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6617] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6614] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6612] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6624] <... close resumed>) = 0 [pid 6619] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6617] <... futex resumed>) = 0 [pid 6614] <... mmap resumed>) = 0x7f5c234cf000 ./strace-static-x86_64: Process 6635 attached [pid 6624] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6619] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6617] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6614] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 6635] set_robust_list(0x7f5c234ef9e0, 24 [pid 6634] <... ioctl resumed>) = 0 [pid 6624] <... futex resumed>) = 1 [pid 6620] <... futex resumed>) = 0 [pid 6619] <... open resumed>) = 4 [pid 6614] <... mprotect resumed>) = 0 [pid 6610] <... sendfile resumed>) = 63 [pid 6635] <... set_robust_list resumed>) = 0 [pid 6634] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6624] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6620] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6619] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6614] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6635] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6634] <... futex resumed>) = 0 [ 147.572744][ T6610] EXT4-fs (loop3): free_blocks=2415919104 [ 147.578794][ T6610] EXT4-fs (loop3): dirty_blocks=16 [ 147.584093][ T6610] EXT4-fs (loop3): Block reservation details [ 147.588546][ T6613] EXT4-fs (loop1): This should not happen!! Data will be lost [ 147.588546][ T6613] [ 147.590197][ T6610] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 147.606087][ T6615] EXT4-fs (loop5): Total free blocks count 0 [ 147.612113][ T6615] EXT4-fs (loop5): Free/Dirty block details [ 147.618201][ T6615] EXT4-fs (loop5): free_blocks=2415919104 [pid 6624] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6620] <... futex resumed>) = 0 [pid 6619] <... futex resumed>) = 1 [pid 6617] <... futex resumed>) = 0 [pid 6610] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6636 attached [pid 6634] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6632] <... ioctl resumed>) = 0 [pid 6624] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6620] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6619] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6617] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6615] <... sendfile resumed>) = 63 [pid 6614] <... clone resumed>, parent_tid=[6636], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6636 [pid 6612] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6610] <... futex resumed>) = 0 [pid 6636] set_robust_list(0x7f5c234ef9e0, 24 [pid 6632] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6624] <... open resumed>) = 4 [pid 6619] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6617] <... futex resumed>) = 0 [pid 6615] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6614] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6610] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6607] exit_group(0 [pid 6636] <... set_robust_list resumed>) = 0 [pid 6634] <... futex resumed>) = ? [pid 6632] <... futex resumed>) = 0 [ 147.623966][ T6615] EXT4-fs (loop5): dirty_blocks=16 [ 147.629258][ T6615] EXT4-fs (loop5): Block reservation details [ 147.635273][ T6615] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 147.642311][ T6616] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 147.654635][ T6616] EXT4-fs (loop2): This should not happen!! Data will be lost [ 147.654635][ T6616] [ 147.664412][ T6616] EXT4-fs (loop2): Total free blocks count 0 [ 147.670608][ T6616] EXT4-fs (loop2): Free/Dirty block details [pid 6624] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6619] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6617] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6614] <... futex resumed>) = 0 [pid 6607] <... exit_group resumed>) = ? [pid 6636] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6634] +++ exited with 0 +++ [pid 6632] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6624] <... futex resumed>) = 1 [pid 6620] <... futex resumed>) = 0 [pid 6619] <... write resumed>) = 9 [pid 6615] <... futex resumed>) = 0 [pid 6614] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6611] exit_group(0 [pid 6610] <... futex resumed>) = ? [pid 6616] <... sendfile resumed>) = 63 [pid 6615] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6610] +++ exited with 0 +++ [pid 6607] +++ exited with 0 +++ [pid 6616] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6624] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6620] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6619] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6616] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6615] <... futex resumed>) = ? [pid 6611] <... exit_group resumed>) = ? [pid 6632] <... futex resumed>) = ? [pid 6620] <... futex resumed>) = 0 [pid 6619] <... futex resumed>) = 1 [pid 6617] <... futex resumed>) = 0 [pid 6615] +++ exited with 0 +++ [pid 6624] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6632] +++ exited with 0 +++ [pid 6624] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6620] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6619] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6617] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6611] +++ exited with 0 +++ [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6607, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 6617] <... futex resumed>) = 0 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6611, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 4997] restart_syscall(<... resuming interrupted clone ...> [pid 6619] <... openat resumed>) = 5 [pid 6617] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4997] <... restart_syscall resumed>) = 0 [ 147.676674][ T6616] EXT4-fs (loop2): free_blocks=2415919104 [ 147.682459][ T6616] EXT4-fs (loop2): dirty_blocks=16 [ 147.683186][ T6613] EXT4-fs (loop1): Total free blocks count 0 [ 147.687705][ T6616] EXT4-fs (loop2): Block reservation details [ 147.687728][ T6616] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 147.708141][ T6613] EXT4-fs (loop1): Free/Dirty block details [ 147.715456][ T6613] EXT4-fs (loop1): free_blocks=2415919104 [ 147.722401][ T6613] EXT4-fs (loop1): dirty_blocks=16 [pid 4999] umount2("./53", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6636] <... ioctl resumed>) = 0 [pid 6624] <... write resumed>) = 9 [pid 6619] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6636] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6624] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6619] <... futex resumed>) = 1 [pid 6617] <... futex resumed>) = 0 [pid 4999] openat(AT_FDCWD, "./53", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] umount2("./53", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6636] <... futex resumed>) = 1 [pid 6624] <... futex resumed>) = 1 [pid 6620] <... futex resumed>) = 0 [pid 6619] open("./bus", O_RDWR [pid 6617] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6614] <... futex resumed>) = 0 [pid 4999] <... openat resumed>) = 3 [pid 6636] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6624] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6620] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6619] <... open resumed>) = 6 [pid 6614] exit_group(0 [pid 6620] <... futex resumed>) = 0 [pid 6617] <... futex resumed>) = 0 [pid 4997] openat(AT_FDCWD, "./53", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6636] <... futex resumed>) = ? [pid 6624] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6620] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6619] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6617] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6616] <... futex resumed>) = ? [pid 6614] <... exit_group resumed>) = ? [pid 4999] fstat(3, [pid 6636] +++ exited with 0 +++ [pid 6624] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6619] <... futex resumed>) = 0 [pid 6617] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6616] +++ exited with 0 +++ [pid 4997] <... openat resumed>) = 3 [pid 6624] <... openat resumed>) = 5 [pid 6619] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6617] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6614] +++ exited with 0 +++ [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] fstat(3, [pid 6624] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6619] <... mmap resumed>) = 0x20000000 [pid 6617] <... futex resumed>) = 0 [pid 4999] getdents64(3, [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6624] <... futex resumed>) = 1 [pid 6620] <... futex resumed>) = 0 [pid 6619] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6617] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4997] getdents64(3, [pid 4996] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6614, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6624] open("./bus", O_RDWR [pid 6620] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6619] <... futex resumed>) = 0 [pid 6617] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6613] <... sendfile resumed>) = 63 [pid 4999] umount2("./53/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4996] umount2("./54", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6635] <... ioctl resumed>) = 0 [pid 6624] <... open resumed>) = 6 [pid 6620] <... futex resumed>) = 0 [pid 6619] sendfile(4, 5, NULL, 2147483713 [pid 6617] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6613] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] umount2("./53/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6635] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6624] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6620] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6617] <... futex resumed>) = 0 [pid 4999] lstat("./53/binderfs", [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4996] openat(AT_FDCWD, "./54", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6635] <... futex resumed>) = 0 [pid 6624] <... futex resumed>) = 0 [pid 6620] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6617] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6613] <... futex resumed>) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] lstat("./53/binderfs", [pid 4996] <... openat resumed>) = 3 [pid 6635] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6624] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6620] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6612] exit_group(0 [pid 4999] unlink("./53/binderfs" [pid 4997] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4996] fstat(3, [pid 6635] <... futex resumed>) = ? [pid 6624] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6620] <... futex resumed>) = 0 [pid 6612] <... exit_group resumed>) = ? [pid 4999] <... unlink resumed>) = 0 [pid 4997] unlink("./53/binderfs" [pid 4996] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6624] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6620] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] umount2("./53/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... unlink resumed>) = 0 [pid 4996] getdents64(3, [pid 6624] <... mmap resumed>) = 0x20000000 [pid 4997] umount2("./53/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 6624] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] umount2("./54/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6624] <... futex resumed>) = 1 [pid 6620] <... futex resumed>) = 0 [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6624] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6620] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4996] lstat("./54/binderfs", [pid 6624] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6620] <... futex resumed>) = 0 [pid 4996] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6624] sendfile(4, 5, NULL, 2147483713 [pid 6620] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4996] unlink("./54/binderfs") = 0 [pid 4996] umount2("./54/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6613] +++ exited with 0 +++ [pid 6635] +++ exited with 0 +++ [pid 6612] +++ exited with 0 +++ [pid 4995] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6612, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 4995] umount2("./52", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4995] openat(AT_FDCWD, "./52", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4995] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] getdents64(3, 0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4995] umount2("./52/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4995] lstat("./52/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4995] unlink("./52/binderfs") = 0 [ 147.728450][ T6613] EXT4-fs (loop1): Block reservation details [ 147.739677][ T6613] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 147.754708][ T6619] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 147.770802][ T40] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 4995] umount2("./52/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6620] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6617] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6620] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6617] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6620] <... futex resumed>) = 0 [pid 6617] <... futex resumed>) = 0 [pid 6620] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6617] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6620] <... mmap resumed>) = 0x7f5c234cf000 [pid 6617] <... mmap resumed>) = 0x7f5c234cf000 [pid 6620] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 6617] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 6620] <... mprotect resumed>) = 0 [pid 6617] <... mprotect resumed>) = 0 [pid 6620] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6617] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6620] <... clone resumed>, parent_tid=[6637], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6637 [pid 6617] <... clone resumed>, parent_tid=[6638], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6638 [pid 6620] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6617] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6620] <... futex resumed>) = 0 [pid 6617] <... futex resumed>) = 0 [pid 6620] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6617] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6637 attached [pid 6637] set_robust_list(0x7f5c234ef9e0, 24) = 0 [ 147.781736][ T6619] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 147.783300][ T11] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 147.796490][ T6619] EXT4-fs (loop0): This should not happen!! Data will be lost [ 147.796490][ T6619] [ 147.807728][ T5457] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 6637] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040./strace-static-x86_64: Process 6638 attached [pid 6638] set_robust_list(0x7f5c234ef9e0, 24 [pid 6620] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6617] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 147.829840][ T5608] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 147.834056][ T6637] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 147.857057][ T5608] EXT4-fs (loop1): This should not happen!! Data will be lost [ 147.857057][ T5608] [ 147.857418][ T40] EXT4-fs (loop5): This should not happen!! Data will be lost [ 147.857418][ T40] [pid 6638] <... set_robust_list resumed>) = 0 [pid 6638] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6637] <... ioctl resumed>) = -1 EFAULT (Bad address) [pid 6637] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 147.878604][ T5457] EXT4-fs (loop3): This should not happen!! Data will be lost [ 147.878604][ T5457] [ 147.880972][ T6619] EXT4-fs (loop0): Total free blocks count 0 [ 147.888768][ T11] EXT4-fs (loop2): This should not happen!! Data will be lost [ 147.888768][ T11] [ 147.904966][ T6619] EXT4-fs (loop0): Free/Dirty block details [ 147.912624][ T6624] ------------[ cut here ]------------ [ 147.913180][ T6619] EXT4-fs (loop0): free_blocks=2415919104 [ 147.918455][ T6624] kernel BUG at fs/ext4/ext4_jbd2.c:53! [pid 6637] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4995] <... umount2 resumed>) = 0 [pid 4995] umount2("./52/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4995] lstat("./52/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] umount2("./52/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 147.921701][ T4996] EXT4-fs unmount: 259 callbacks suppressed [ 147.974583][ T6624] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 147.980715][ T6624] CPU: 1 PID: 6624 Comm: syz-executor113 Not tainted 6.4.0-syzkaller-00082-gc0a572d9d32f #0 [ 147.987043][ T6619] EXT4-fs (loop0): dirty_blocks=16 [ 147.990793][ T6624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 147.996236][ T6619] EXT4-fs (loop0): Block reservation details [ 148.005976][ T6624] RIP: 0010:__ext4_journal_stop+0x1b7/0x1f0 [ 148.012140][ T6619] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 148.017863][ T6624] Code: 0f c9 1a 00 31 ff 89 de 41 89 c4 e8 93 24 5f ff 85 db 44 0f 45 e3 e9 5e ff ff ff e8 13 04 b1 ff e9 ae fe ff ff e8 59 28 5f ff <0f> 0b 4c 89 e7 e8 1f 04 b1 ff e9 e5 fe ff ff 48 89 ef e8 12 04 b1 [ 148.017895][ T6624] RSP: 0018:ffffc90006b6f3f8 EFLAGS: 00010293 [ 148.049766][ T6624] RAX: 0000000000000000 RBX: 000000000000001b RCX: 0000000000000000 [ 148.057786][ T6624] RDX: ffff88802dc3c140 RSI: ffffffff82244417 RDI: 0000000000000007 [ 148.065893][ T6624] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000fff [ 148.073901][ T6624] R10: 0000000000000000 R11: ffffffff81d527bf R12: ffff88806dc79740 [ 148.081912][ T6624] R13: ffffffff8a62bf20 R14: 000000000000032a R15: 0000000000000005 [ 148.090009][ T6624] FS: 00007f5c2b810700(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 148.098991][ T6624] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 148.105613][ T6624] CR2: 0000000020000040 CR3: 000000002b86c000 CR4: 00000000003506e0 [ 148.113625][ T6624] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 148.121635][ T6624] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 148.129642][ T6624] Call Trace: [ 148.132940][ T6624] [ 148.135896][ T6624] ? die+0x32/0x90 [ 148.139680][ T6624] ? do_trap+0x1b2/0x3f0 [ 148.143968][ T6624] ? __ext4_journal_stop+0x1b7/0x1f0 [ 148.149330][ T6624] ? __ext4_journal_stop+0x1b7/0x1f0 [ 148.154671][ T6624] ? do_error_trap+0xb1/0x170 [ 148.155033][ T6644] loop2: detected capacity change from 0 to 2048 [ 148.159453][ T6624] ? __ext4_journal_stop+0x1b7/0x1f0 [pid 6619] <... sendfile resumed>) = 63 [pid 4999] <... umount2 resumed>) = 0 [pid 4997] <... umount2 resumed>) = 0 [pid 4996] <... umount2 resumed>) = 0 [pid 4995] openat(AT_FDCWD, "./52/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6619] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] umount2("./53/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] umount2("./53/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] umount2("./54/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] <... openat resumed>) = 4 [pid 6619] <... futex resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] fstat(4, [pid 6619] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4999] lstat("./53/file0", [pid 4997] lstat("./53/file0", [pid 4996] lstat("./54/file0", [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] getdents64(4, [pid 4999] umount2("./53/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] umount2("./53/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4996] umount2("./54/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4996] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] getdents64(4, [pid 4999] openat(AT_FDCWD, "./53/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] openat(AT_FDCWD, "./53/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4996] openat(AT_FDCWD, "./54/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4995] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4999] <... openat resumed>) = 4 [pid 4997] <... openat resumed>) = 4 [pid 4996] <... openat resumed>) = 4 [pid 4995] close(4 [pid 4999] fstat(4, [pid 4997] fstat(4, [pid 4996] fstat(4, [pid 4995] <... close resumed>) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] rmdir("./52/file0" [pid 4999] getdents64(4, [pid 4997] getdents64(4, [pid 4996] getdents64(4, [pid 4995] <... rmdir resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4997] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4996] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4995] getdents64(3, [pid 4999] getdents64(4, [pid 4997] getdents64(4, [pid 4996] getdents64(4, [pid 4995] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4999] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4997] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4996] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4995] close(3 [pid 4999] close(4 [pid 4997] close(4 [pid 4996] close(4 [pid 4995] <... close resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 4997] <... close resumed>) = 0 [pid 4996] <... close resumed>) = 0 [pid 4995] rmdir("./52" [pid 4999] rmdir("./53/file0" [pid 4997] rmdir("./53/file0" [pid 4996] rmdir("./54/file0" [pid 4995] <... rmdir resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 4997] <... rmdir resumed>) = 0 [pid 4996] <... rmdir resumed>) = 0 [pid 4995] mkdir("./53", 0777 [pid 4999] getdents64(3, [pid 4997] getdents64(3, [pid 4996] getdents64(3, [pid 4995] <... mkdir resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4997] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4996] <... getdents64 resumed>0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4995] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 4999] close(3 [pid 4997] close(3 [pid 4996] close(3 [pid 4995] <... openat resumed>) = 3 [pid 4999] <... close resumed>) = 0 [pid 4997] <... close resumed>) = 0 [pid 4996] <... close resumed>) = 0 [pid 4995] ioctl(3, LOOP_CLR_FD [pid 4999] rmdir("./53" [pid 4997] rmdir("./53" [pid 4996] rmdir("./54" [pid 4995] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] <... rmdir resumed>) = 0 [pid 4997] <... rmdir resumed>) = 0 [pid 4996] <... rmdir resumed>) = 0 [pid 4995] close(3 [pid 4999] mkdir("./54", 0777 [pid 4997] mkdir("./54", 0777 [pid 4996] mkdir("./55", 0777 [pid 4995] <... close resumed>) = 0 [pid 4999] <... mkdir resumed>) = 0 [pid 4997] <... mkdir resumed>) = 0 [pid 4996] <... mkdir resumed>) = 0 [pid 4995] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 4997] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4996] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4999] <... openat resumed>) = 3 [pid 4997] <... openat resumed>) = 3 [pid 4996] <... openat resumed>) = 3 [pid 4995] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6639 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 4997] ioctl(3, LOOP_CLR_FD [pid 4996] ioctl(3, LOOP_CLR_FD [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4997] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4996] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] close(3 [pid 4997] close(3 [pid 4996] close(3 [pid 4999] <... close resumed>) = 0 [pid 4997] <... close resumed>) = 0 [pid 4996] <... close resumed>) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4996] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6640 [pid 4997] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6641 [pid 4996] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6642 ./strace-static-x86_64: Process 6640 attached [pid 6640] set_robust_list(0x555556fb95e0, 24./strace-static-x86_64: Process 6642 attached [pid 6642] set_robust_list(0x555556fb95e0, 24 [pid 6640] <... set_robust_list resumed>) = 0 [pid 6642] <... set_robust_list resumed>) = 0 [pid 6640] chdir("./54" [pid 6642] chdir("./55" [pid 6640] <... chdir resumed>) = 0 [pid 6642] <... chdir resumed>) = 0 [pid 6640] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6642] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6640] <... prctl resumed>) = 0 [pid 6642] <... prctl resumed>) = 0 [pid 6640] setpgid(0, 0 [pid 6642] setpgid(0, 0 [pid 6640] <... setpgid resumed>) = 0 [pid 6642] <... setpgid resumed>) = 0 [pid 6640] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6642] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6640] <... openat resumed>) = 3 [pid 6642] <... openat resumed>) = 3 [pid 6640] write(3, "1000", 4 [pid 6642] write(3, "1000", 4 [pid 6640] <... write resumed>) = 4 [pid 6642] <... write resumed>) = 4 [pid 6640] close(3 [pid 6642] close(3 [pid 6640] <... close resumed>) = 0 [pid 6642] <... close resumed>) = 0 [pid 6640] symlink("/dev/binderfs", "./binderfs" [pid 6642] symlink("/dev/binderfs", "./binderfs" [pid 6640] <... symlink resumed>) = 0 [pid 6642] <... symlink resumed>) = 0 [pid 6640] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6642] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6640] <... futex resumed>) = 0 [pid 6642] <... futex resumed>) = 0 [pid 6640] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6642] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6640] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6642] <... mmap resumed>) = 0x7f5c2b7f0000 [pid 6640] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6642] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE [pid 6640] <... mprotect resumed>) = 0 [pid 6642] <... mprotect resumed>) = 0 [pid 6640] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6642] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6640] <... clone resumed>, parent_tid=[6643], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6643 [pid 6642] <... clone resumed>, parent_tid=[6644], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6644 [pid 6640] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6642] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6640] <... futex resumed>) = 0 [pid 6642] <... futex resumed>) = 0 [pid 6640] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6642] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6644 attached [pid 6644] set_robust_list(0x7f5c2b8109e0, 24) = 0 [pid 6644] memfd_create("syzkaller", 0) = 3 [pid 6644] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5c233f0000 ./strace-static-x86_64: Process 6643 attached [pid 6643] set_robust_list(0x7f5c2b8109e0, 24) = 0 [pid 6643] memfd_create("syzkaller", 0) = 3 [pid 6643] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5c233f0000 [pid 6643] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6644] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 6644] munmap(0x7f5c233f0000, 1048576 [pid 6643] <... write resumed>) = 1048576 [pid 6644] <... munmap resumed>) = 0 [pid 6643] munmap(0x7f5c233f0000, 1048576 [pid 6644] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6644] ioctl(4, LOOP_SET_FD, 3 [pid 6643] <... munmap resumed>) = 0 [pid 6643] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6643] ioctl(4, LOOP_SET_FD, 3 [pid 6638] <... ioctl resumed>) = 0 [pid 6638] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6638] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6617] exit_group(0 [pid 6638] <... futex resumed>) = ? [pid 6619] <... futex resumed>) = ? [pid 6617] <... exit_group resumed>) = ? [pid 6638] +++ exited with 0 +++ [pid 6619] +++ exited with 0 +++ [pid 6617] +++ exited with 0 +++ [pid 6643] <... ioctl resumed>) = 0 [pid 6643] close(3) = 0 [pid 6643] mkdir("./file0", 0777) = 0 [ 148.170145][ T6643] loop5: detected capacity change from 0 to 2048 [ 148.171083][ T6624] ? handle_invalid_op+0x2c/0x30 [ 148.182407][ T6624] ? __ext4_journal_stop+0x1b7/0x1f0 [ 148.187774][ T6624] ? exc_invalid_op+0x2f/0x50 [ 148.192515][ T6624] ? asm_exc_invalid_op+0x1a/0x20 [ 148.197586][ T6624] ? __kasan_slab_alloc+0x7f/0x90 [ 148.202656][ T6624] ? __ext4_journal_stop+0x1b7/0x1f0 [ 148.208003][ T6624] ? __ext4_journal_stop+0x1b7/0x1f0 [ 148.213349][ T6624] ? __ext4_journal_stop+0x1b7/0x1f0 [ 148.218702][ T6624] ext4_write_inline_data_end+0x4cf/0xd20 [pid 6643] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6644] <... ioctl resumed>) = 0 [pid 6644] close(3) = 0 [pid 6644] mkdir("./file0", 0777) = 0 [pid 6644] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 6620] exit_group(0) = ? [ 148.224481][ T6624] ? ext4_try_to_write_inline_data+0x1340/0x1340 [ 148.230870][ T6624] ? ext4_da_write_begin+0x22b/0x8c0 [ 148.236217][ T6624] ? csum_and_copy_from_iter+0x1460/0x1460 [ 148.242071][ T6624] ext4_da_write_end+0x3d0/0xad0 [ 148.247078][ T6624] ? do_raw_spin_unlock+0x175/0x230 [ 148.252343][ T6624] generic_perform_write+0x316/0x570 [ 148.257719][ T6624] ? generic_file_readonly_mmap+0x190/0x190 [ 148.263693][ T6624] ? iunique+0x370/0x370 [ 148.268010][ T6624] ext4_buffered_write_iter+0x161/0x470 ./strace-static-x86_64: Process 6639 attached [pid 6639] set_robust_list(0x555556fb95e0, 24) = 0 [pid 6639] chdir("./53") = 0 [pid 6639] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6639] setpgid(0, 0) = 0 [pid 6639] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6639] write(3, "1000", 4) = 4 [pid 6639] close(3) = 0 [pid 6639] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6639] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6639] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c2b7f0000 [pid 6639] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6639] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6645], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6645 [pid 6639] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6639] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6645 attached [pid 6645] set_robust_list(0x7f5c2b8109e0, 24) = 0 [pid 6645] memfd_create("syzkaller", 0) = 3 [pid 6645] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5c233f0000 [ 148.273610][ T6624] ext4_file_write_iter+0xbfe/0x1760 [ 148.278955][ T6624] ? iter_file_splice_write+0x16c/0xc80 [ 148.284548][ T6624] ? kasan_save_stack+0x32/0x40 [ 148.289460][ T6624] ? kasan_save_stack+0x22/0x40 [ 148.294353][ T6624] ? kasan_set_track+0x25/0x30 [ 148.299164][ T6624] ? __kmalloc+0x5e/0x190 [ 148.303541][ T6624] ? iter_file_splice_write+0x16c/0xc80 [ 148.309137][ T6624] ? ext4_file_mmap+0x6e0/0x6e0 [ 148.314037][ T6624] do_iter_readv_writev+0x211/0x3b0 [ 148.319281][ T6624] ? generic_copy_file_range+0x1d0/0x1d0 [pid 6645] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 6645] munmap(0x7f5c233f0000, 1048576) = 0 [pid 6645] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6645] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6645] close(3) = 0 [pid 6645] mkdir("./file0", 0777) = 0 [pid 6645] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue"./strace-static-x86_64: Process 6641 attached [pid 6641] set_robust_list(0x555556fb95e0, 24) = 0 [pid 6641] chdir("./54") = 0 [pid 6641] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6641] setpgid(0, 0) = 0 [pid 6641] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6641] write(3, "1000", 4) = 4 [pid 6641] close(3) = 0 [pid 6641] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6641] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6641] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c2b7f0000 [ 148.324979][ T6624] ? avc_policy_seqno+0x9/0x10 [ 148.329797][ T6624] ? selinux_file_permission+0x9c/0x530 [ 148.335399][ T6624] ? security_file_permission+0xaf/0xd0 [ 148.340441][ T6645] loop1: detected capacity change from 0 to 2048 [ 148.340987][ T6624] do_iter_write+0x182/0x810 [ 148.341045][ T6624] vfs_iter_write+0x7a/0xb0 [ 148.356510][ T6624] iter_file_splice_write+0x743/0xc80 [ 148.361971][ T6624] ? page_cache_pipe_buf_confirm+0x5b0/0x5b0 [ 148.368017][ T6624] ? do_splice_direct+0x270/0x270 [pid 6641] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6641] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6646], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6646 [pid 6641] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6641] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6646 attached [pid 6646] set_robust_list(0x7f5c2b8109e0, 24) = 0 [pid 6646] memfd_create("syzkaller", 0) = 3 [pid 6646] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5c233f0000 [pid 6646] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 6646] munmap(0x7f5c233f0000, 1048576) = 0 [pid 6646] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 148.373094][ T6624] ? security_file_permission+0xaf/0xd0 [ 148.378696][ T6624] ? page_cache_pipe_buf_confirm+0x5b0/0x5b0 [ 148.384721][ T6624] direct_splice_actor+0x11a/0x190 [ 148.389875][ T6624] splice_direct_to_actor+0x32c/0x8a0 [ 148.395285][ T6624] ? folio_flags.constprop.0+0x150/0x150 [ 148.400970][ T6624] ? direct_splice_actor+0x190/0x190 [ 148.406293][ T6624] ? security_file_permission+0xaf/0xd0 [ 148.411905][ T6624] do_splice_direct+0x1a8/0x270 [ 148.416795][ T6624] ? splice_direct_to_actor+0x8a0/0x8a0 [pid 6646] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6646] close(3) = 0 [pid 6646] mkdir("./file0", 0777) = 0 [pid 6646] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 4994] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6617, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- [pid 4994] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4994] umount2("./54", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] openat(AT_FDCWD, "./54", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4994] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4994] getdents64(3, 0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4994] umount2("./54/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] lstat("./54/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4994] unlink("./54/binderfs") = 0 [pid 4994] umount2("./54/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6637] <... futex resumed>) = ? [pid 6637] +++ exited with 0 +++ [ 148.419198][ T6646] loop3: detected capacity change from 0 to 2048 [ 148.422360][ T6624] do_sendfile+0xb9c/0x1380 [ 148.422393][ T6624] ? vfs_iocb_iter_write+0x4c0/0x4c0 [ 148.438653][ T6624] ? ptrace_notify+0xfe/0x140 [ 148.443401][ T6624] ? lock_downgrade+0x690/0x690 [ 148.448312][ T6624] __x64_sys_sendfile64+0x1d0/0x210 [ 148.453571][ T6624] ? _raw_spin_unlock_irq+0x23/0x50 [ 148.458884][ T6624] ? __ia32_sys_sendfile+0x220/0x220 [ 148.464219][ T6624] ? lockdep_hardirqs_on+0x7d/0x100 [pid 6644] <... mount resumed>) = 0 [pid 6644] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 148.465302][ T6643] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.469452][ T6624] ? _raw_spin_unlock_irq+0x2e/0x50 [ 148.469502][ T6624] ? ptrace_notify+0xfe/0x140 [ 148.483158][ T6644] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.486643][ T6624] do_syscall_64+0x39/0xb0 [ 148.486677][ T6624] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 148.492492][ T6645] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [pid 6644] chdir("./file0") = 0 [pid 6644] ioctl(4, LOOP_CLR_FD) = 0 [pid 6644] close(4) = 0 [pid 6644] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6642] <... futex resumed>) = 0 [pid 6642] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6642] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6644] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000) = 4 [pid 6644] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6642] <... futex resumed>) = 0 [pid 6644] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6642] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6642] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 148.503670][ T6624] RIP: 0033:0x7f5c2b8646d9 [ 148.503706][ T6624] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 71 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 148.503735][ T6624] RSP: 002b:00007f5c2b8102f8 EFLAGS: 00000246 [ 148.508842][ T6646] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.514012][ T6624] ORIG_RAX: 0000000000000028 [pid 6644] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6644] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9) = 9 [pid 6644] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6642] <... futex resumed>) = 0 [pid 6644] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6642] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6644] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6642] <... futex resumed>) = 0 [pid 6644] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6642] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6644] <... openat resumed>) = 5 [pid 6644] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6642] <... futex resumed>) = 0 [pid 6644] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6642] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6644] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6642] <... futex resumed>) = 0 [ 148.572872][ T6624] RAX: ffffffffffffffda RBX: 00007f5c2b8e97a0 RCX: 00007f5c2b8646d9 [ 148.580902][ T6624] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 148.587827][ T26] kauditd_printk_skb: 98 callbacks suppressed [ 148.587845][ T26] audit: type=1804 audit(1687834618.652:1400): pid=6644 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor113" name="/root/syzkaller.k2b0rY/55/file0/bus" dev="loop2" ino=18 res=1 errno=0 [ 148.588885][ T6624] RBP: 00007f5c2b8b682c R08: 0000000000000000 R09: 0000000000000000 [pid 6644] open("./bus", O_RDWR [pid 6642] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6644] <... open resumed>) = 6 [ 148.588906][ T6624] R10: 0000000080000041 R11: 0000000000000246 R12: 00007f5c2b8b60c0 [ 148.601426][ T26] audit: type=1804 audit(1687834618.662:1401): pid=6644 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor113" name="/root/syzkaller.k2b0rY/55/file0/bus" dev="loop2" ino=18 res=1 errno=0 [ 148.619082][ T6624] R13: 0000000020000fc0 R14: 0030656c69662f2e R15: 00007f5c2b8e97a8 [ 148.619110][ T6624] [ 148.619120][ T6624] Modules linked in: [pid 6644] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6645] <... mount resumed>) = 0 [pid 6645] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6645] chdir("./file0") = 0 [pid 6645] ioctl(4, LOOP_CLR_FD) = 0 [pid 6645] close(4 [pid 6643] <... mount resumed>) = 0 [pid 6645] <... close resumed>) = 0 [pid 6645] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6645] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6643] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6643] chdir("./file0") = 0 [pid 6643] ioctl(4, LOOP_CLR_FD) = 0 [pid 6643] close(4) = 0 [pid 6643] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6643] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6646] <... mount resumed>) = 0 [pid 6646] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6646] chdir("./file0") = 0 [pid 6646] ioctl(4, LOOP_CLR_FD) = 0 [pid 6646] close(4) = 0 [pid 6646] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6646] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6644] <... futex resumed>) = 1 [pid 6639] <... futex resumed>) = 0 [pid 6640] <... futex resumed>) = 0 [pid 6641] <... futex resumed>) = 0 [pid 6642] <... futex resumed>) = 0 [pid 6641] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6640] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6639] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6644] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6642] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6641] <... futex resumed>) = 1 [pid 6640] <... futex resumed>) = 1 [pid 6639] <... futex resumed>) = 1 [pid 6646] <... futex resumed>) = 0 [pid 6645] <... futex resumed>) = 0 [pid 6643] <... futex resumed>) = 0 [pid 6646] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6645] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6643] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 6646] <... open resumed>) = 4 [pid 6645] <... open resumed>) = 4 [pid 6644] <... mmap resumed>) = 0x20000000 [pid 6643] <... open resumed>) = 4 [pid 6642] <... futex resumed>) = 0 [pid 6641] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6640] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6639] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6646] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6645] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6643] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6646] <... futex resumed>) = 0 [pid 6645] <... futex resumed>) = 0 [pid 6643] <... futex resumed>) = 0 [pid 6646] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6645] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6643] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6642] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6641] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6640] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6639] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6644] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6640] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6641] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6644] <... futex resumed>) = 1 [pid 6642] <... futex resumed>) = 0 [pid 6639] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6640] <... futex resumed>) = 1 [pid 6644] sendfile(4, 5, NULL, 2147483713 [pid 6642] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6641] <... futex resumed>) = 1 [pid 6640] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6639] <... futex resumed>) = 1 [pid 6642] <... futex resumed>) = 0 [pid 6641] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6646] <... futex resumed>) = 0 [pid 6645] <... futex resumed>) = 0 [pid 6643] <... futex resumed>) = 0 [pid 6642] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6639] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6646] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6645] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6643] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 6646] <... write resumed>) = 9 [pid 6645] <... write resumed>) = 9 [pid 6643] <... write resumed>) = 9 [pid 6646] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6645] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6643] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6646] <... futex resumed>) = 1 [pid 6645] <... futex resumed>) = 1 [pid 6643] <... futex resumed>) = 1 [pid 6646] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6645] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6643] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6641] <... futex resumed>) = 0 [pid 6640] <... futex resumed>) = 0 [pid 6639] <... futex resumed>) = 0 [pid 6640] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6641] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6643] <... futex resumed>) = 0 [pid 6640] <... futex resumed>) = 1 [pid 6639] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6643] openat(AT_FDCWD, "./bus", O_RDONLY) = 5 [pid 6643] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6643] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6645] <... futex resumed>) = 0 [pid 6639] <... futex resumed>) = 1 [pid 6646] <... futex resumed>) = 0 [pid 6645] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6641] <... futex resumed>) = 1 [pid 6640] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6646] openat(AT_FDCWD, "./bus", O_RDONLY [pid 6645] <... openat resumed>) = 5 [pid 6641] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6640] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6639] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6646] <... openat resumed>) = 5 [pid 6645] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6640] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6639] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6646] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6645] <... futex resumed>) = 0 [pid 6643] <... futex resumed>) = 0 [pid 6640] <... futex resumed>) = 1 [pid 6639] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6646] <... futex resumed>) = 1 [pid 6645] open("./bus", O_RDWR [pid 6643] open("./bus", O_RDWR [pid 6641] <... futex resumed>) = 0 [pid 6640] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6639] <... futex resumed>) = 0 [pid 6646] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6645] <... open resumed>) = 6 [pid 6643] <... open resumed>) = 6 [pid 6646] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6645] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6643] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6641] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6639] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6646] open("./bus", O_RDWR [pid 6645] <... futex resumed>) = 0 [pid 6643] <... futex resumed>) = 1 [pid 6641] <... futex resumed>) = 0 [pid 6640] <... futex resumed>) = 0 [pid 6639] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6646] <... open resumed>) = 6 [pid 6645] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6643] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6641] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6640] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6646] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6645] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6643] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6641] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6640] <... futex resumed>) = 0 [pid 6639] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6646] <... futex resumed>) = 0 [ 148.636168][ T6624] ---[ end trace 0000000000000000 ]--- [ 148.679495][ T11] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 148.706946][ T6644] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 6645] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6643] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6641] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6640] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6639] <... futex resumed>) = 0 [pid 6646] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6645] <... mmap resumed>) = 0x20000000 [pid 6643] <... mmap resumed>) = 0x20000000 [pid 6646] <... mmap resumed>) = 0x20000000 [pid 6645] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6643] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6646] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6645] <... futex resumed>) = 0 [pid 6643] <... futex resumed>) = 0 [pid 6646] <... futex resumed>) = 0 [pid 6645] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6643] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6646] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL) = 0 [pid 6641] <... futex resumed>) = 1 [pid 6640] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6639] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6641] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6640] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6639] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6641] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6640] <... futex resumed>) = 1 [pid 6639] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6641] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6640] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6639] <... futex resumed>) = 1 [pid 6641] <... futex resumed>) = 0 [pid 6639] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6641] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6646] sendfile(4, 5, NULL, 2147483713 [pid 6645] <... futex resumed>) = 0 [pid 6643] <... futex resumed>) = 0 [pid 6645] sendfile(4, 5, NULL, 2147483713 [ 148.737116][ T11] EXT4-fs (loop0): This should not happen!! Data will be lost [ 148.737116][ T11] [ 148.758413][ T6643] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 6643] sendfile(4, 5, NULL, 2147483713 [pid 6642] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6642] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6641] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6640] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6639] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6641] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6639] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6642] <... futex resumed>) = 0 [pid 6641] <... futex resumed>) = 0 [pid 6640] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6639] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6642] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c234cf000 [pid 6641] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6640] <... futex resumed>) = 0 [pid 6639] <... mmap resumed>) = 0x7f5c234cf000 [pid 6640] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6641] <... mmap resumed>) = 0x7f5c234cf000 [pid 6640] <... mmap resumed>) = 0x7f5c234cf000 [pid 6642] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 6641] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 6640] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 6639] mprotect(0x7f5c234d0000, 131072, PROT_READ|PROT_WRITE [pid 6642] <... mprotect resumed>) = 0 [pid 6640] <... mprotect resumed>) = 0 [pid 6641] <... mprotect resumed>) = 0 [pid 6639] <... mprotect resumed>) = 0 [pid 6640] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6642] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6639] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6641] clone(child_stack=0x7f5c234ef3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6640] <... clone resumed>, parent_tid=[6657], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6657 [pid 6642] <... clone resumed>, parent_tid=[6656], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6656 [pid 6641] <... clone resumed>, parent_tid=[6659], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6659 [pid 6639] <... clone resumed>, parent_tid=[6658], tls=0x7f5c234ef700, child_tidptr=0x7f5c234ef9d0) = 6658 [pid 6640] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6642] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6641] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6642] <... futex resumed>) = 0 [pid 6640] <... futex resumed>) = 0 [pid 6639] futex(0x7f5c2b8e97b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6640] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6642] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6641] <... futex resumed>) = 0 [pid 6639] <... futex resumed>) = 0 [pid 6641] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6639] futex(0x7f5c2b8e97bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6657 attached ./strace-static-x86_64: Process 6659 attached [pid 6657] set_robust_list(0x7f5c234ef9e0, 24 [pid 6659] set_robust_list(0x7f5c234ef9e0, 24) = 0 [pid 6657] <... set_robust_list resumed>) = 0 [pid 6659] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6657] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 4994] <... umount2 resumed>) = 0 [ 148.775677][ T6645] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 148.785573][ T6644] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 148.792372][ T6646] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters ./strace-static-x86_64: Process 6658 attached ./strace-static-x86_64: Process 6656 attached [pid 4994] umount2("./54/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6658] set_robust_list(0x7f5c234ef9e0, 24 [pid 6656] set_robust_list(0x7f5c234ef9e0, 24 [pid 4994] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6656] <... set_robust_list resumed>) = 0 [pid 4994] lstat("./54/file0", [pid 6658] <... set_robust_list resumed>) = 0 [pid 4994] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6658] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 6656] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 4994] umount2("./54/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4994] openat(AT_FDCWD, "./54/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [ 148.846176][ T6643] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 148.852198][ T6624] RIP: 0010:__ext4_journal_stop+0x1b7/0x1f0 [ 148.867693][ T6645] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 148.882201][ T6644] EXT4-fs (loop2): This should not happen!! Data will be lost [ 148.882201][ T6644] [pid 4994] fstat(4, [pid 6642] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6641] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6640] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4994] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6639] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 148.883546][ T6624] Code: 0f c9 1a 00 31 ff 89 de 41 89 c4 e8 93 24 5f ff 85 db 44 0f 45 e3 e9 5e ff ff ff e8 13 04 b1 ff e9 ae fe ff ff e8 59 28 5f ff <0f> 0b 4c 89 e7 e8 1f 04 b1 ff e9 e5 fe ff ff 48 89 ef e8 12 04 b1 [ 148.912134][ T26] audit: type=1804 audit(1687834618.762:1402): pid=6644 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor113" name="/root/syzkaller.k2b0rY/55/file0/bus" dev="loop2" ino=18 res=1 errno=0 [pid 4994] getdents64(4, 0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4994] getdents64(4, 0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4994] close(4) = 0 [ 148.912839][ T6646] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 148.936308][ T6643] EXT4-fs (loop5): This should not happen!! Data will be lost [ 148.936308][ T6643] [ 148.949601][ T6645] EXT4-fs (loop1): This should not happen!! Data will be lost [ 148.949601][ T6645] [ 148.960514][ T6644] EXT4-fs (loop2): Total free blocks count 0 [ 148.975190][ T6645] EXT4-fs (loop1): Total free blocks count 0 [ 148.981775][ T6644] EXT4-fs (loop2): Free/Dirty block details [ 148.982302][ T6645] EXT4-fs (loop1): Free/Dirty block details [pid 4994] rmdir("./54/file0") = 0 [pid 4994] getdents64(3, 0x555556fba620 /* 0 entries */, 32768) = 0 [ 148.994088][ T6644] EXT4-fs (loop2): free_blocks=2415919104 [ 148.994836][ T6645] EXT4-fs (loop1): free_blocks=2415919104 [ 149.005630][ T6643] EXT4-fs (loop5): Total free blocks count 0 [ 149.005653][ T6643] EXT4-fs (loop5): Free/Dirty block details [ 149.007117][ T6645] EXT4-fs (loop1): dirty_blocks=16 [ 149.011957][ T6643] EXT4-fs (loop5): free_blocks=2415919104 [ 149.018436][ T6645] EXT4-fs (loop1): Block reservation details [ 149.023067][ T6624] RSP: 0018:ffffc90006b6f3f8 EFLAGS: 00010293 [ 149.029243][ T6645] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 149.034617][ T26] audit: type=1804 audit(1687834618.762:1403): pid=6644 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor113" name="/root/syzkaller.k2b0rY/55/file0/bus" dev="loop2" ino=18 res=1 errno=0 [ 149.041799][ T6646] EXT4-fs (loop3): This should not happen!! Data will be lost [ 149.041799][ T6646] [ 149.046524][ T6644] EXT4-fs (loop2): dirty_blocks=16 [ 149.070507][ T6646] EXT4-fs (loop3): Total free blocks count 0 [ 149.085492][ T6643] EXT4-fs (loop5): dirty_blocks=16 [pid 6658] <... ioctl resumed>) = 0 [pid 6645] <... sendfile resumed>) = 63 [pid 4994] close(3 [pid 6658] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6645] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6639] exit_group(0 [pid 4994] <... close resumed>) = 0 [ 149.096141][ T6624] [ 149.096149][ T6624] RAX: 0000000000000000 RBX: 000000000000001b RCX: 0000000000000000 [ 149.105522][ T26] audit: type=1804 audit(1687834618.782:1404): pid=6643 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor113" name="/root/syzkaller.drywye/54/file0/bus" dev="loop5" ino=18 res=1 errno=0 [ 149.130642][ T6624] RDX: ffff88802dc3c140 RSI: ffffffff82244417 RDI: 0000000000000007 [ 149.130670][ T6624] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000fff [pid 6658] <... futex resumed>) = ? [pid 6645] <... futex resumed>) = ? [pid 6639] <... exit_group resumed>) = ? [pid 4994] rmdir("./54" [pid 6658] +++ exited with 0 +++ [pid 6645] +++ exited with 0 +++ [pid 6639] +++ exited with 0 +++ [pid 4994] <... rmdir resumed>) = 0 [pid 4995] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6639, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 4994] mkdir("./55", 0777) = 0 [pid 4994] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6657] <... ioctl resumed>) = 0 [pid 6657] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6657] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6643] <... sendfile resumed>) = 63 [pid 6643] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6643] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4994] <... openat resumed>) = 3 [pid 6640] exit_group(0) = ? [pid 4995] umount2("./53", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] ioctl(3, LOOP_CLR_FD [pid 6657] <... futex resumed>) = ? [pid 6657] +++ exited with 0 +++ [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6643] <... futex resumed>) = ? [pid 4995] openat(AT_FDCWD, "./53", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4994] close(3 [pid 6643] +++ exited with 0 +++ [pid 6640] +++ exited with 0 +++ [ 149.142068][ T6643] EXT4-fs (loop5): Block reservation details [ 149.147827][ T6646] EXT4-fs (loop3): Free/Dirty block details [ 149.158375][ T6643] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 149.163090][ T6646] EXT4-fs (loop3): free_blocks=2415919104 [ 149.172228][ T6624] R10: 0000000000000000 R11: ffffffff81d527bf R12: ffff88806dc79740 [ 149.183282][ T6646] EXT4-fs (loop3): dirty_blocks=16 [ 149.186748][ T6644] EXT4-fs (loop2): Block reservation details [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6640, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 4995] <... openat resumed>) = 3 [pid 4994] <... close resumed>) = 0 [pid 4995] fstat(3, [pid 4994] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] getdents64(3, [pid 4999] umount2("./54", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./54", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4995] umount2("./53/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... openat resumed>) = 3 [pid 4999] fstat(3, [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4994] <... clone resumed>, child_tidptr=0x555556fb95d0) = 6660 [pid 4995] lstat("./53/binderfs", [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] getdents64(3, [pid 4995] unlink("./53/binderfs" [pid 4999] <... getdents64 resumed>0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4995] <... unlink resumed>) = 0 [pid 4999] umount2("./54/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] umount2("./53/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./54/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 ./strace-static-x86_64: Process 6660 attached [pid 6660] set_robust_list(0x555556fb95e0, 24) = 0 [pid 6660] chdir("./55") = 0 [pid 6660] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6660] setpgid(0, 0) = 0 [pid 6660] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 149.189396][ T6646] EXT4-fs (loop3): Block reservation details [ 149.208330][ T6644] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 149.209079][ T6624] R13: ffffffff8a62bf20 R14: 000000000000032a R15: 0000000000000005 [ 149.223910][ T6646] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 149.223966][ T5457] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 4999] unlink("./54/binderfs" [pid 6660] write(3, "1000", 4) = 4 [pid 6660] close(3) = 0 [pid 6660] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6660] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6660] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5c2b7f0000 [pid 6660] mprotect(0x7f5c2b7f1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6660] clone(child_stack=0x7f5c2b8103f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6661], tls=0x7f5c2b810700, child_tidptr=0x7f5c2b8109d0) = 6661 [pid 6660] futex(0x7f5c2b8e97a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6660] futex(0x7f5c2b8e97ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4999] <... unlink resumed>) = 0 [pid 4999] umount2("./54/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6644] <... sendfile resumed>) = 63 [pid 6644] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6644] futex(0x7f5c2b8e97a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 6661 attached [pid 6656] <... ioctl resumed>) = 0 [pid 6646] <... sendfile resumed>) = 63 [pid 6659] <... ioctl resumed>) = 0 [pid 6659] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6659] futex(0x7f5c2b8e97b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6661] set_robust_list(0x7f5c2b8109e0, 24 [pid 6656] futex(0x7f5c2b8e97bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6646] futex(0x7f5c2b8e97ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6642] exit_group(0 [pid 6641] exit_group(0 [pid 6646] <... futex resumed>) = 0 [pid 6656] <... futex resumed>) = 0 [pid 6661] <... set_robust_list resumed>) = 0 [pid 6646] read(-256, [pid 6656] read(-256, [pid 6641] <... exit_group resumed>) = ? [pid 6646] <... read resumed> ) = ? [pid 6642] <... exit_group resumed>) = ? [pid 6659] <... futex resumed>) = ? [pid 6661] memfd_create("syzkaller", 0 [pid 6656] +++ exited with 0 +++ [pid 6659] +++ exited with 0 +++ [pid 6646] +++ exited with 0 +++ [pid 6644] <... futex resumed>) = ? [pid 6644] +++ exited with 0 +++ [pid 6641] +++ exited with 0 +++ [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6641, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 4997] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4997] umount2("./54", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6642] +++ exited with 0 +++ [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4996] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6642, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 6661] <... memfd_create resumed>) = 3 [pid 6661] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4997] openat(AT_FDCWD, "./54", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4997] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(3, 0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4997] umount2("./54/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./54/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] unlink("./54/binderfs") = 0 [pid 4997] umount2("./54/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6661] <... mmap resumed>) = 0x7f5c233f0000 [pid 4996] umount2("./55", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6661] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4996] openat(AT_FDCWD, "./55", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4996] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] getdents64(3, 0x555556fba620 /* 4 entries */, 32768) = 112 [pid 4996] umount2("./55/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4996] lstat("./55/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4996] unlink("./55/binderfs" [pid 4995] <... umount2 resumed>) = 0 [pid 4996] <... unlink resumed>) = 0 [ 149.230404][ T6624] FS: 00007f5c2b810700(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 149.253387][ T11] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 149.261278][ T26] audit: type=1804 audit(1687834618.792:1405): pid=6645 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor113" name="/root/syzkaller.0rM9bT/53/file0/bus" dev="loop1" ino=18 res=1 errno=0 [ 149.289876][ T6624] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [pid 4996] umount2("./55/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6661] <... write resumed>) = 1048576 [pid 4995] umount2("./53/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4995] lstat("./53/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] umount2("./53/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... umount2 resumed>) = 0 [pid 4995] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6661] munmap(0x7f5c233f0000, 1048576 [pid 4999] umount2("./54/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] openat(AT_FDCWD, "./53/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6661] <... munmap resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] <... openat resumed>) = 4 [ 149.333350][ T6624] CR2: 00007fff68385d88 CR3: 000000002b86c000 CR4: 00000000003506f0 [ 149.335986][ T5076] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 149.349218][ T6624] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 149.364592][ T11] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 6661] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 4999] lstat("./54/file0", [pid 4995] fstat(4, [pid 6661] <... openat resumed>) = 4 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] <... umount2 resumed>) = 0 [pid 4997] <... umount2 resumed>) = 0 [pid 4997] umount2("./54/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./54/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./54/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./54/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4996] umount2("./55/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4996] lstat("./55/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] getdents64(4, [pid 6661] ioctl(4, LOOP_SET_FD, 3 [pid 4999] umount2("./54/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] <... getdents64 resumed>0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4997] getdents64(4, 0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4996] umount2("./55/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] getdents64(4, [pid 4996] openat(AT_FDCWD, "./55/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] <... getdents64 resumed>0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4996] <... openat resumed>) = 4 [pid 4997] close(4) = 0 [pid 4997] rmdir("./54/file0") = 0 [pid 4996] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4996] getdents64(4, 0x555556fc2660 /* 2 entries */, 32768) = 48 [pid 4996] getdents64(4, 0x555556fc2660 /* 0 entries */, 32768) = 0 [pid 4996] close(4) = 0 [pid 4996] rmdir("./55/file0") = 0 [pid 4997] getdents64(3, 0x555556fba620 /* 0 entries */, 32768) = 0 [pid 4997] close(3) = 0 [pid 4997] rmdir("./54") = 0 [pid 4999] openat(AT_FDCWD, "./54/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [ 149.390397][ T6624] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 149.406029][ T6661] loop0: detected capacity change from 0 to 2048 [ 149.421510][ T6624] Kernel panic - not syncing: Fatal exception [ 149.427875][ T6624] Kernel Offset: disabled [ 149.432220][ T6624] Rebooting in 86400 seconds..