./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3945164890 <...> DUID 00:04:dd:0f:a4:e5:cb:b8:04:95:2f:30:92:03:b3:b6:0d:bc forked to background, child pid 3209 [ 29.674321][ T3210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.683632][ T3210] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.89' (ECDSA) to the list of known hosts. execve("./syz-executor3945164890", ["./syz-executor3945164890"], 0x7ffc2e568460 /* 10 vars */) = 0 brk(NULL) = 0x55555719a000 brk(0x55555719ac40) = 0x55555719ac40 arch_prctl(ARCH_SET_FS, 0x55555719a300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 set_tid_address(0x55555719a5d0) = 3631 set_robust_list(0x55555719a5e0, 24) = 0 rt_sigaction(SIGRTMIN, {sa_handler=0x7f7b7bedc560, sa_mask=[], sa_flags=SA_RESTORER|SA_SIGINFO, sa_restorer=0x7f7b7bedcc30}, NULL, 8) = 0 rt_sigaction(SIGRT_1, {sa_handler=0x7f7b7bedc600, sa_mask=[], sa_flags=SA_RESTORER|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f7b7bedcc30}, NULL, 8) = 0 rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3945164890", 4096) = 28 brk(0x5555571bbc40) = 0x5555571bbc40 brk(0x5555571bc000) = 0x5555571bc000 mprotect(0x7f7b7bf9e000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3632 attached , child_tidptr=0x55555719a5d0) = 3632 [pid 3631] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3632] set_robust_list(0x55555719a5e0, 24) = 0 ./strace-static-x86_64: Process 3633 attached [pid 3632] getpid( [pid 3631] <... clone resumed>, child_tidptr=0x55555719a5d0) = 3633 [pid 3631] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3632] <... getpid resumed>) = 3632 [pid 3632] mkdir("./syzkaller.OYiGBR", 0700 [pid 3631] <... clone resumed>, child_tidptr=0x55555719a5d0) = 3634 [pid 3631] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3634 attached [pid 3632] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 3635 attached [pid 3633] set_robust_list(0x55555719a5e0, 24 [pid 3631] <... clone resumed>, child_tidptr=0x55555719a5d0) = 3635 [pid 3631] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3635] set_robust_list(0x55555719a5e0, 24 [pid 3634] set_robust_list(0x55555719a5e0, 24 [pid 3633] <... set_robust_list resumed>) = 0 [pid 3632] chmod("./syzkaller.OYiGBR", 0777 [pid 3631] <... clone resumed>, child_tidptr=0x55555719a5d0) = 3636 [pid 3632] <... chmod resumed>) = 0 [pid 3632] chdir("./syzkaller.OYiGBR") = 0 [pid 3632] mkdir("./0", 0777 [pid 3635] <... set_robust_list resumed>) = 0 [pid 3634] <... set_robust_list resumed>) = 0 [pid 3633] getpid() = 3633 [pid 3633] mkdir("./syzkaller.wgsFGU", 0700 [pid 3634] getpid( [pid 3632] <... mkdir resumed>) = 0 [pid 3632] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 3634] <... getpid resumed>) = 3634 [pid 3631] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3634] mkdir("./syzkaller.HH69uY", 0700 [pid 3632] <... openat resumed>) = 3 [pid 3633] <... mkdir resumed>) = 0 [pid 3632] ioctl(3, LOOP_CLR_FD [pid 3634] <... mkdir resumed>) = 0 [pid 3632] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 3632] close(3./strace-static-x86_64: Process 3637 attached ./strace-static-x86_64: Process 3636 attached [pid 3631] <... clone resumed>, child_tidptr=0x55555719a5d0) = 3637 [pid 3635] getpid( [pid 3634] chmod("./syzkaller.HH69uY", 0777 [pid 3633] chmod("./syzkaller.wgsFGU", 0777 [pid 3637] set_robust_list(0x55555719a5e0, 24 [pid 3635] <... getpid resumed>) = 3635 [pid 3634] <... chmod resumed>) = 0 [pid 3633] <... chmod resumed>) = 0 [pid 3637] <... set_robust_list resumed>) = 0 [pid 3635] mkdir("./syzkaller.H40t93", 0700 [pid 3634] chdir("./syzkaller.HH69uY" [pid 3633] chdir("./syzkaller.wgsFGU" [pid 3637] getpid( [pid 3635] <... mkdir resumed>) = 0 [pid 3634] <... chdir resumed>) = 0 [pid 3633] <... chdir resumed>) = 0 [pid 3637] <... getpid resumed>) = 3637 [pid 3635] chmod("./syzkaller.H40t93", 0777 [pid 3634] mkdir("./0", 0777 [pid 3633] mkdir("./0", 0777 [pid 3637] mkdir("./syzkaller.Bx6Rwf", 0700 [pid 3636] set_robust_list(0x55555719a5e0, 24 [pid 3635] <... chmod resumed>) = 0 [pid 3634] <... mkdir resumed>) = 0 [pid 3633] <... mkdir resumed>) = 0 [pid 3632] <... close resumed>) = 0 [pid 3637] <... mkdir resumed>) = 0 [pid 3636] <... set_robust_list resumed>) = 0 [pid 3635] chdir("./syzkaller.H40t93" [pid 3634] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 3633] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 3632] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3637] chmod("./syzkaller.Bx6Rwf", 0777 [pid 3636] getpid( [pid 3635] <... chdir resumed>) = 0 [pid 3634] <... openat resumed>) = 3 [pid 3633] <... openat resumed>) = 3 [pid 3637] <... chmod resumed>) = 0 [pid 3636] <... getpid resumed>) = 3636 [pid 3635] mkdir("./0", 0777 [pid 3634] ioctl(3, LOOP_CLR_FD [pid 3633] ioctl(3, LOOP_CLR_FD [pid 3637] chdir("./syzkaller.Bx6Rwf" [pid 3636] mkdir("./syzkaller.1OtEI9", 0700 [pid 3635] <... mkdir resumed>) = 0 [pid 3634] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 3633] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 3637] <... chdir resumed>) = 0 [pid 3636] <... mkdir resumed>) = 0 [pid 3635] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 3634] close(3 [pid 3633] close(3 [pid 3632] <... clone resumed>, child_tidptr=0x55555719a5d0) = 3639 [pid 3637] mkdir("./0", 0777 [pid 3636] chmod("./syzkaller.1OtEI9", 0777 [pid 3635] <... openat resumed>) = 3 [pid 3634] <... close resumed>) = 0 [pid 3633] <... close resumed>) = 0 [pid 3637] <... mkdir resumed>) = 0 [pid 3636] <... chmod resumed>) = 0 [pid 3635] ioctl(3, LOOP_CLR_FD [pid 3634] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3633] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3637] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 3636] chdir("./syzkaller.1OtEI9" [pid 3635] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 3637] <... openat resumed>) = 3 [pid 3636] <... chdir resumed>) = 0 [pid 3635] close(3 [pid 3634] <... clone resumed>, child_tidptr=0x55555719a5d0) = 3640 [pid 3633] <... clone resumed>, child_tidptr=0x55555719a5d0) = 3641 [pid 3637] ioctl(3, LOOP_CLR_FD [pid 3636] mkdir("./0", 0777 [pid 3635] <... close resumed>) = 0 [pid 3637] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 3636] <... mkdir resumed>) = 0 [pid 3635] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3642 attached ./strace-static-x86_64: Process 3639 attached [pid 3637] close(3 [pid 3636] openat(AT_FDCWD, "/dev/loop4", O_RDWR./strace-static-x86_64: Process 3640 attached [pid 3642] set_robust_list(0x55555719a5e0, 24 [pid 3639] set_robust_list(0x55555719a5e0, 24 [pid 3637] <... close resumed>) = 0 [pid 3636] <... openat resumed>) = 3 [pid 3635] <... clone resumed>, child_tidptr=0x55555719a5d0) = 3642 [pid 3642] <... set_robust_list resumed>) = 0 [pid 3640] set_robust_list(0x55555719a5e0, 24 [pid 3639] <... set_robust_list resumed>) = 0 [pid 3637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3636] ioctl(3, LOOP_CLR_FD [pid 3642] chdir("./0" [pid 3640] <... set_robust_list resumed>) = 0 [pid 3639] chdir("./0" [pid 3636] <... ioctl resumed>) = -1 ENXIO (No such device or address) ./strace-static-x86_64: Process 3641 attached [pid 3642] <... chdir resumed>) = 0 [pid 3640] chdir("./0" [pid 3639] <... chdir resumed>) = 0 [pid 3637] <... clone resumed>, child_tidptr=0x55555719a5d0) = 3643 [pid 3636] close(3 [pid 3642] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3641] set_robust_list(0x55555719a5e0, 24 [pid 3640] <... chdir resumed>) = 0 [pid 3639] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3636] <... close resumed>) = 0 [pid 3642] <... prctl resumed>) = 0 [pid 3641] <... set_robust_list resumed>) = 0 [pid 3640] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3639] <... prctl resumed>) = 0 [pid 3636] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3643 attached [pid 3642] setpgid(0, 0 [pid 3641] chdir("./0" [pid 3640] <... prctl resumed>) = 0 [pid 3639] setpgid(0, 0 [pid 3643] set_robust_list(0x55555719a5e0, 24 [pid 3642] <... setpgid resumed>) = 0 [pid 3641] <... chdir resumed>) = 0 [pid 3640] setpgid(0, 0 [pid 3639] <... setpgid resumed>) = 0 [pid 3636] <... clone resumed>, child_tidptr=0x55555719a5d0) = 3644 [pid 3643] <... set_robust_list resumed>) = 0 [pid 3642] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3641] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3640] <... setpgid resumed>) = 0 [pid 3639] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3643] chdir("./0" [pid 3642] <... openat resumed>) = 3 [pid 3641] <... prctl resumed>) = 0 [pid 3640] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3639] <... openat resumed>) = 3 ./strace-static-x86_64: Process 3644 attached [pid 3643] <... chdir resumed>) = 0 [pid 3642] write(3, "1000", 4 [pid 3641] setpgid(0, 0 [pid 3640] <... openat resumed>) = 3 [pid 3639] write(3, "1000", 4 [pid 3644] set_robust_list(0x55555719a5e0, 24 [pid 3643] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3642] <... write resumed>) = 4 [pid 3641] <... setpgid resumed>) = 0 [pid 3640] write(3, "1000", 4 [pid 3639] <... write resumed>) = 4 [pid 3644] <... set_robust_list resumed>) = 0 [pid 3643] <... prctl resumed>) = 0 [pid 3642] close(3 [pid 3641] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3640] <... write resumed>) = 4 [pid 3639] close(3 [pid 3644] chdir("./0" [pid 3643] setpgid(0, 0 [pid 3642] <... close resumed>) = 0 [pid 3641] <... openat resumed>) = 3 [pid 3640] close(3 [pid 3639] <... close resumed>) = 0 [pid 3644] <... chdir resumed>) = 0 [pid 3643] <... setpgid resumed>) = 0 [pid 3642] symlink("/dev/binderfs", "./binderfs" [pid 3641] write(3, "1000", 4 [pid 3640] <... close resumed>) = 0 [pid 3639] symlink("/dev/binderfs", "./binderfs" [pid 3644] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3643] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3642] <... symlink resumed>) = 0 [pid 3641] <... write resumed>) = 4 [pid 3640] symlink("/dev/binderfs", "./binderfs" [pid 3644] <... prctl resumed>) = 0 [pid 3643] <... openat resumed>) = 3 [pid 3642] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3641] close(3 [pid 3639] <... symlink resumed>) = 0 [pid 3644] setpgid(0, 0 [pid 3643] write(3, "1000", 4 [pid 3642] <... futex resumed>) = 0 [pid 3641] <... close resumed>) = 0 [pid 3640] <... symlink resumed>) = 0 [pid 3639] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3644] <... setpgid resumed>) = 0 [pid 3643] <... write resumed>) = 4 [pid 3642] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3641] symlink("/dev/binderfs", "./binderfs" [pid 3640] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3639] <... futex resumed>) = 0 [pid 3644] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3643] close(3 [pid 3642] <... mmap resumed>) = 0x7f7b7beab000 [pid 3641] <... symlink resumed>) = 0 [pid 3640] <... futex resumed>) = 0 [pid 3639] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3644] <... openat resumed>) = 3 [pid 3643] <... close resumed>) = 0 [pid 3642] mprotect(0x7f7b7beac000, 131072, PROT_READ|PROT_WRITE [pid 3641] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3640] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3639] <... mmap resumed>) = 0x7f7b7beab000 [pid 3644] write(3, "1000", 4 [pid 3643] symlink("/dev/binderfs", "./binderfs" [pid 3642] <... mprotect resumed>) = 0 [pid 3641] <... futex resumed>) = 0 [pid 3640] <... mmap resumed>) = 0x7f7b7beab000 [pid 3639] mprotect(0x7f7b7beac000, 131072, PROT_READ|PROT_WRITE [pid 3644] <... write resumed>) = 4 [pid 3643] <... symlink resumed>) = 0 [pid 3642] clone(child_stack=0x7f7b7becb3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3641] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3640] mprotect(0x7f7b7beac000, 131072, PROT_READ|PROT_WRITE [pid 3639] <... mprotect resumed>) = 0 [pid 3644] close(3 [pid 3643] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3641] <... mmap resumed>) = 0x7f7b7beab000 [pid 3640] <... mprotect resumed>) = 0 [pid 3639] clone(child_stack=0x7f7b7becb3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3644] <... close resumed>) = 0 [pid 3643] <... futex resumed>) = 0 [pid 3642] <... clone resumed>, parent_tid=[3645], tls=0x7f7b7becb700, child_tidptr=0x7f7b7becb9d0) = 3645 [pid 3641] mprotect(0x7f7b7beac000, 131072, PROT_READ|PROT_WRITE [pid 3640] clone(child_stack=0x7f7b7becb3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3644] symlink("/dev/binderfs", "./binderfs" [pid 3643] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3642] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3641] <... mprotect resumed>) = 0 [pid 3639] <... clone resumed>, parent_tid=[3646], tls=0x7f7b7becb700, child_tidptr=0x7f7b7becb9d0) = 3646 [pid 3644] <... symlink resumed>) = 0 [pid 3643] <... mmap resumed>) = 0x7f7b7beab000 [pid 3642] <... futex resumed>) = 0 [pid 3641] clone(child_stack=0x7f7b7becb3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3640] <... clone resumed>, parent_tid=[3647], tls=0x7f7b7becb700, child_tidptr=0x7f7b7becb9d0) = 3647 [pid 3639] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 3645 attached [pid 3644] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3643] mprotect(0x7f7b7beac000, 131072, PROT_READ|PROT_WRITE [pid 3642] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3640] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3639] <... futex resumed>) = 0 ./strace-static-x86_64: Process 3648 attached [pid 3645] set_robust_list(0x7f7b7becb9e0, 24 [pid 3644] <... futex resumed>) = 0 [pid 3643] <... mprotect resumed>) = 0 [pid 3641] <... clone resumed>, parent_tid=[3648], tls=0x7f7b7becb700, child_tidptr=0x7f7b7becb9d0) = 3648 [pid 3640] <... futex resumed>) = 0 [pid 3639] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 3647 attached ./strace-static-x86_64: Process 3646 attached [pid 3648] set_robust_list(0x7f7b7becb9e0, 24 [pid 3645] <... set_robust_list resumed>) = 0 [pid 3644] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3643] clone(child_stack=0x7f7b7becb3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3641] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3640] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3648] <... set_robust_list resumed>) = 0 [pid 3647] set_robust_list(0x7f7b7becb9e0, 24 [pid 3646] set_robust_list(0x7f7b7becb9e0, 24 [pid 3645] memfd_create("syzkaller", 0 [pid 3644] <... mmap resumed>) = 0x7f7b7beab000 [pid 3641] <... futex resumed>) = 0 [pid 3648] memfd_create("syzkaller", 0 [pid 3647] <... set_robust_list resumed>) = 0 [pid 3646] <... set_robust_list resumed>) = 0 [pid 3645] <... memfd_create resumed>) = 3 [pid 3644] mprotect(0x7f7b7beac000, 131072, PROT_READ|PROT_WRITE [pid 3643] <... clone resumed>, parent_tid=[3649], tls=0x7f7b7becb700, child_tidptr=0x7f7b7becb9d0) = 3649 [pid 3641] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 3649 attached [pid 3648] <... memfd_create resumed>) = 3 [pid 3647] memfd_create("syzkaller", 0 [pid 3646] memfd_create("syzkaller", 0 [pid 3645] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 3644] <... mprotect resumed>) = 0 [pid 3643] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3649] set_robust_list(0x7f7b7becb9e0, 24 [pid 3647] <... memfd_create resumed>) = 3 [pid 3646] <... memfd_create resumed>) = 3 [pid 3643] <... futex resumed>) = 0 [pid 3649] <... set_robust_list resumed>) = 0 [pid 3648] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 3647] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 3646] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 3645] <... mmap resumed>) = 0x7f7b73a00000 [pid 3644] clone(child_stack=0x7f7b7becb3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3643] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3649] memfd_create("syzkaller", 0 [pid 3648] <... mmap resumed>) = 0x7f7b73a00000 [pid 3647] <... mmap resumed>) = 0x7f7b73a00000 [pid 3646] <... mmap resumed>) = 0x7f7b73a00000 [pid 3649] <... memfd_create resumed>) = 3 [pid 3648] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3647] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3646] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3645] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3649] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 3644] <... clone resumed>, parent_tid=[3650], tls=0x7f7b7becb700, child_tidptr=0x7f7b7becb9d0) = 3650 [pid 3649] <... mmap resumed>) = 0x7f7b73a00000 [pid 3644] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3649] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3644] <... futex resumed>) = 0 [pid 3644] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 3650 attached [pid 3650] set_robust_list(0x7f7b7becb9e0, 24) = 0 [pid 3648] <... write resumed>) = 1048576 [pid 3650] memfd_create("syzkaller", 0 [pid 3646] <... write resumed>) = 1048576 [pid 3645] <... write resumed>) = 1048576 [pid 3650] <... memfd_create resumed>) = 3 [pid 3650] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7b73a00000 [pid 3649] <... write resumed>) = 1048576 [pid 3648] munmap(0x7f7b73a00000, 1048576 [pid 3645] munmap(0x7f7b73a00000, 1048576 [pid 3646] munmap(0x7f7b73a00000, 1048576 [pid 3650] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3648] <... munmap resumed>) = 0 [pid 3646] <... munmap resumed>) = 0 [pid 3648] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 3645] <... munmap resumed>) = 0 [pid 3647] <... write resumed>) = 1048576 [pid 3645] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 3648] <... openat resumed>) = 4 [pid 3647] munmap(0x7f7b73a00000, 1048576 [pid 3645] <... openat resumed>) = 4 [pid 3648] ioctl(4, LOOP_SET_FD, 3 [pid 3647] <... munmap resumed>) = 0 [pid 3646] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 3645] ioctl(4, LOOP_SET_FD, 3 [pid 3647] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 3646] <... openat resumed>) = 4 [pid 3649] munmap(0x7f7b73a00000, 1048576) = 0 [pid 3647] <... openat resumed>) = 4 [pid 3646] ioctl(4, LOOP_SET_FD, 3 [pid 3649] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 3647] ioctl(4, LOOP_SET_FD, 3 [pid 3650] <... write resumed>) = 1048576 [pid 3648] <... ioctl resumed>) = 0 [pid 3646] <... ioctl resumed>) = 0 [pid 3645] <... ioctl resumed>) = 0 [pid 3650] munmap(0x7f7b73a00000, 1048576 [pid 3648] close(3 [pid 3646] close(3 [pid 3645] close(3 [pid 3650] <... munmap resumed>) = 0 [pid 3648] <... close resumed>) = 0 [pid 3646] <... close resumed>) = 0 [pid 3645] <... close resumed>) = 0 [pid 3650] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 3648] mkdir("./bus", 0777 [pid 3646] mkdir("./bus", 0777 [pid 3645] mkdir("./bus", 0777 [pid 3650] <... openat resumed>) = 4 [pid 3649] <... openat resumed>) = 4 [pid 3648] <... mkdir resumed>) = 0 [pid 3647] <... ioctl resumed>) = 0 [pid 3650] ioctl(4, LOOP_SET_FD, 3 [pid 3649] ioctl(4, LOOP_SET_FD, 3 [pid 3648] mount("/dev/loop1", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 3647] close(3 [pid 3645] <... mkdir resumed>) = 0 [pid 3646] <... mkdir resumed>) = 0 [pid 3650] <... ioctl resumed>) = 0 [pid 3647] <... close resumed>) = 0 [pid 3645] mount("/dev/loop3", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 3650] close(3 [pid 3649] <... ioctl resumed>) = 0 [pid 3647] mkdir("./bus", 0777 [pid 3646] mount("/dev/loop0", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 3650] <... close resumed>) = 0 [pid 3649] close(3 [pid 3647] <... mkdir resumed>) = 0 [pid 3650] mkdir("./bus", 0777 [pid 3649] <... close resumed>) = 0 [pid 3650] <... mkdir resumed>) = 0 [pid 3649] mkdir("./bus", 0777 [pid 3647] mount("/dev/loop2", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 3650] mount("/dev/loop4", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 3649] <... mkdir resumed>) = 0 syzkaller login: [ 53.922937][ T3648] loop1: detected capacity change from 0 to 2048 [ 53.927079][ T3646] loop0: detected capacity change from 0 to 2048 [ 53.929920][ T3645] loop3: detected capacity change from 0 to 2048 [ 53.937192][ T3647] loop2: detected capacity change from 0 to 2048 [ 53.955355][ T3650] loop4: detected capacity change from 0 to 2048 [ 53.955598][ T3649] loop5: detected capacity change from 0 to 2048 [pid 3649] mount("/dev/loop5", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 3645] <... mount resumed>) = 0 [pid 3645] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3645] chdir("./bus") = 0 [pid 3645] ioctl(4, LOOP_CLR_FD) = 0 [pid 3645] close(4 [pid 3646] <... mount resumed>) = 0 [pid 3645] <... close resumed>) = 0 [pid 3645] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3642] <... futex resumed>) = 0 [pid 3642] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3642] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3645] <... futex resumed>) = 1 [pid 3645] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 3647] <... mount resumed>) = 0 [pid 3646] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3646] chdir("./bus" [pid 3650] <... mount resumed>) = 0 [pid 3650] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 3647] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 3646] <... chdir resumed>) = 0 [ 53.990046][ T3645] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 53.990240][ T3646] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 54.013264][ T3648] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 54.013297][ T3647] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 54.030627][ T3650] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [pid 3648] <... mount resumed>) = 0 [pid 3647] <... openat resumed>) = 3 [pid 3646] ioctl(4, LOOP_CLR_FD [pid 3648] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 3647] chdir("./bus" [pid 3646] <... ioctl resumed>) = 0 [pid 3645] <... open resumed>) = 4 [pid 3646] close(4 [pid 3647] <... chdir resumed>) = 0 [pid 3647] ioctl(4, LOOP_CLR_FD [pid 3646] <... close resumed>) = 0 [pid 3645] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3648] <... openat resumed>) = 3 [pid 3647] <... ioctl resumed>) = 0 [pid 3646] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3645] <... futex resumed>) = 1 [pid 3642] <... futex resumed>) = 0 [pid 3646] <... futex resumed>) = 1 [pid 3642] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3639] <... futex resumed>) = 0 [pid 3646] futex(0x7f7b7bfa47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3642] <... futex resumed>) = 0 [pid 3639] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3646] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3642] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3639] <... futex resumed>) = 0 [pid 3647] close(4 [pid 3646] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 3645] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 3639] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3648] chdir("./bus" [pid 3647] <... close resumed>) = 0 [pid 3646] <... open resumed>) = 4 [pid 3645] <... write resumed>) = 9 [pid 3650] <... openat resumed>) = 3 [pid 3647] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3646] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3645] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3648] <... chdir resumed>) = 0 [pid 3650] chdir("./bus") = 0 [pid 3649] <... mount resumed>) = 0 [pid 3648] ioctl(4, LOOP_CLR_FD [pid 3647] <... futex resumed>) = 1 [pid 3646] <... futex resumed>) = 1 [pid 3645] <... futex resumed>) = 1 [pid 3642] <... futex resumed>) = 0 [pid 3640] <... futex resumed>) = 0 [pid 3639] <... futex resumed>) = 0 [pid 3650] ioctl(4, LOOP_CLR_FD [pid 3649] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 3648] <... ioctl resumed>) = 0 [ 54.044516][ T3649] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [pid 3647] futex(0x7f7b7bfa47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3646] futex(0x7f7b7bfa47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3645] openat(AT_FDCWD, "./bus", O_RDONLY [pid 3642] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3640] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3639] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3650] <... ioctl resumed>) = 0 [pid 3648] close(4 [pid 3647] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3646] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3642] <... futex resumed>) = 0 [pid 3640] <... futex resumed>) = 0 [pid 3639] <... futex resumed>) = 0 [pid 3649] <... openat resumed>) = 3 [pid 3649] chdir("./bus") = 0 [pid 3649] ioctl(4, LOOP_CLR_FD) = 0 [pid 3649] close(4) = 0 [pid 3649] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3649] futex(0x7f7b7bfa47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3643] <... futex resumed>) = 0 [pid 3639] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3648] <... close resumed>) = 0 [pid 3647] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 3646] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 3645] <... openat resumed>) = 5 [pid 3643] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3642] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3640] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3650] close(4 [pid 3648] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3643] <... futex resumed>) = 1 [pid 3643] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3646] <... write resumed>) = 9 [pid 3647] <... open resumed>) = 4 [pid 3650] <... close resumed>) = 0 [pid 3649] <... futex resumed>) = 0 [pid 3648] <... futex resumed>) = 1 [pid 3647] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3646] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3645] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3641] <... futex resumed>) = 0 [pid 3650] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3649] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 3648] futex(0x7f7b7bfa47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3647] <... futex resumed>) = 1 [pid 3646] <... futex resumed>) = 1 [pid 3645] <... futex resumed>) = 1 [pid 3642] <... futex resumed>) = 0 [pid 3641] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3640] <... futex resumed>) = 0 [pid 3639] <... futex resumed>) = 0 [pid 3650] <... futex resumed>) = 1 [pid 3648] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3647] futex(0x7f7b7bfa47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3646] futex(0x7f7b7bfa47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3645] futex(0x7f7b7bfa47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3644] <... futex resumed>) = 0 [pid 3642] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3641] <... futex resumed>) = 0 [pid 3640] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3639] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3650] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 3649] <... open resumed>) = 4 [pid 3648] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 3647] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3646] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3645] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3644] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3642] <... futex resumed>) = 0 [pid 3641] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3640] <... futex resumed>) = 0 [pid 3639] <... futex resumed>) = 0 [pid 3650] <... open resumed>) = 4 [pid 3649] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3648] <... open resumed>) = 4 [pid 3647] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [ 54.079265][ T27] audit: type=1804 audit(1669787612.436:2): pid=3645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor394" name="/root/syzkaller.H40t93/0/bus/bus" dev="loop3" ino=18 res=1 errno=0 [pid 3646] openat(AT_FDCWD, "./bus", O_RDONLY [pid 3645] open("./bus", O_RDWR [pid 3644] <... futex resumed>) = 0 [pid 3642] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3640] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3639] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3650] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3649] <... futex resumed>) = 1 [pid 3648] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3647] <... write resumed>) = 9 [pid 3646] <... openat resumed>) = 5 [pid 3645] <... open resumed>) = 6 [pid 3644] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3643] <... futex resumed>) = 0 [pid 3650] <... futex resumed>) = 0 [pid 3649] futex(0x7f7b7bfa47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3648] <... futex resumed>) = 1 [pid 3647] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3646] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3645] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3644] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3643] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3641] <... futex resumed>) = 0 [pid 3650] futex(0x7f7b7bfa47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3649] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3648] futex(0x7f7b7bfa47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3647] <... futex resumed>) = 1 [pid 3646] <... futex resumed>) = 1 [pid 3645] <... futex resumed>) = 1 [pid 3644] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3643] <... futex resumed>) = 0 [pid 3642] <... futex resumed>) = 0 [pid 3641] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3640] <... futex resumed>) = 0 [pid 3639] <... futex resumed>) = 0 [pid 3650] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3649] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 3648] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3647] futex(0x7f7b7bfa47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3646] futex(0x7f7b7bfa47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3645] futex(0x7f7b7bfa47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3644] <... futex resumed>) = 0 [pid 3643] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3642] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3641] <... futex resumed>) = 0 [pid 3640] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3639] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3650] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 3649] <... write resumed>) = 9 [pid 3648] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 3647] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3646] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3645] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3644] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3642] <... futex resumed>) = 0 [pid 3641] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3640] <... futex resumed>) = 0 [pid 3639] <... futex resumed>) = 0 [pid 3650] <... write resumed>) = 9 [pid 3649] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3648] <... write resumed>) = 9 [pid 3647] openat(AT_FDCWD, "./bus", O_RDONLY [pid 3646] open("./bus", O_RDWR [pid 3645] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 3642] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3640] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3639] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3650] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3649] <... futex resumed>) = 1 [pid 3648] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3647] <... openat resumed>) = 5 [pid 3646] <... open resumed>) = 6 [pid 3645] <... mmap resumed>) = 0x20000000 [pid 3643] <... futex resumed>) = 0 [pid 3650] <... futex resumed>) = 1 [pid 3649] futex(0x7f7b7bfa47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3648] <... futex resumed>) = 1 [pid 3647] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3646] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3645] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3644] <... futex resumed>) = 0 [pid 3643] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3641] <... futex resumed>) = 0 [pid 3650] futex(0x7f7b7bfa47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3649] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3648] futex(0x7f7b7bfa47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3647] <... futex resumed>) = 1 [pid 3646] <... futex resumed>) = 1 [pid 3645] <... futex resumed>) = 1 [pid 3644] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3643] <... futex resumed>) = 0 [pid 3642] <... futex resumed>) = 0 [pid 3641] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3640] <... futex resumed>) = 0 [pid 3639] <... futex resumed>) = 0 [pid 3650] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3649] openat(AT_FDCWD, "./bus", O_RDONLY [pid 3648] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3647] futex(0x7f7b7bfa47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3646] futex(0x7f7b7bfa47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3645] futex(0x7f7b7bfa47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3644] <... futex resumed>) = 0 [pid 3643] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3642] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3641] <... futex resumed>) = 0 [pid 3640] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3639] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3650] openat(AT_FDCWD, "./bus", O_RDONLY [pid 3649] <... openat resumed>) = 5 [pid 3648] openat(AT_FDCWD, "./bus", O_RDONLY [pid 3647] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3646] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3645] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3644] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3642] <... futex resumed>) = 0 [pid 3641] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3640] <... futex resumed>) = 0 [pid 3639] <... futex resumed>) = 0 [pid 3650] <... openat resumed>) = 5 [pid 3649] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3648] <... openat resumed>) = 5 [pid 3647] open("./bus", O_RDWR [pid 3646] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 3645] sendfile(4, 5, NULL, 2147483713 [pid 3642] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3640] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3639] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3650] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3649] <... futex resumed>) = 1 [pid 3648] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3647] <... open resumed>) = 6 [pid 3646] <... mmap resumed>) = 0x20000000 [pid 3643] <... futex resumed>) = 0 [ 54.133961][ T27] audit: type=1804 audit(1669787612.486:3): pid=3646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor394" name="/root/syzkaller.OYiGBR/0/bus/bus" dev="loop0" ino=18 res=1 errno=0 [ 54.158310][ T27] audit: type=1804 audit(1669787612.516:4): pid=3645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor394" name="/root/syzkaller.H40t93/0/bus/bus" dev="loop3" ino=18 res=1 errno=0 [ 54.193227][ T3645] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 3650] <... futex resumed>) = 0 [pid 3649] open("./bus", O_RDWR [pid 3648] <... futex resumed>) = 0 [pid 3644] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3643] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3641] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3650] futex(0x7f7b7bfa47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3649] <... open resumed>) = 6 [pid 3648] futex(0x7f7b7bfa47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3647] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3643] <... futex resumed>) = 0 [pid 3649] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3647] <... futex resumed>) = 1 [pid 3646] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3643] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3649] <... futex resumed>) = 0 [pid 3647] futex(0x7f7b7bfa47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3646] <... futex resumed>) = 1 [pid 3643] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3649] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 3646] futex(0x7f7b7bfa47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3643] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3649] <... mmap resumed>) = 0x20000000 [pid 3643] <... futex resumed>) = 0 [pid 3649] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3643] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3649] <... futex resumed>) = 0 [pid 3643] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3649] sendfile(4, 5, NULL, 2147483713 [pid 3643] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3643] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3642] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3640] <... futex resumed>) = 0 [pid 3639] <... futex resumed>) = 0 [pid 3644] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3642] futex(0x7f7b7bfa47bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3641] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3640] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3650] <... futex resumed>) = 0 [pid 3644] <... futex resumed>) = 1 [pid 3639] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3650] open("./bus", O_RDWR [pid 3648] <... futex resumed>) = 0 [pid 3647] <... futex resumed>) = 0 [pid 3646] <... futex resumed>) = 0 [pid 3644] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3642] <... futex resumed>) = 0 [pid 3641] <... futex resumed>) = 1 [pid 3640] <... futex resumed>) = 1 [pid 3639] <... futex resumed>) = 1 [pid 3650] <... open resumed>) = 6 [pid 3648] open("./bus", O_RDWR [pid 3647] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 3646] sendfile(4, 5, NULL, 2147483713 [pid 3642] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3641] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 54.216042][ T27] audit: type=1804 audit(1669787612.526:5): pid=3647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor394" name="/root/syzkaller.HH69uY/0/bus/bus" dev="loop2" ino=18 res=1 errno=0 [ 54.232948][ T3645] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 3640] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3639] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3650] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3648] <... open resumed>) = 6 [pid 3647] <... mmap resumed>) = 0x20000000 [pid 3642] <... mmap resumed>) = 0x7f7b7be8a000 [pid 3650] <... futex resumed>) = 1 [pid 3648] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3647] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3644] <... futex resumed>) = 0 [pid 3642] mprotect(0x7f7b7be8b000, 131072, PROT_READ|PROT_WRITE [pid 3643] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3641] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3643] futex(0x7f7b7bfa47bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3641] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3643] <... futex resumed>) = 0 [pid 3641] <... futex resumed>) = 0 [pid 3643] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3641] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3643] <... mmap resumed>) = 0x7f7b7be8a000 [pid 3643] mprotect(0x7f7b7be8b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3643] clone(child_stack=0x7f7b7beaa3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3666], tls=0x7f7b7beaa700, child_tidptr=0x7f7b7beaa9d0) = 3666 [pid 3643] futex(0x7f7b7bfa47b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3643] futex(0x7f7b7bfa47bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 3666 attached [ 54.272632][ T27] audit: type=1804 audit(1669787612.526:6): pid=3646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor394" name="/root/syzkaller.OYiGBR/0/bus/bus" dev="loop0" ino=18 res=1 errno=0 [ 54.278546][ T3646] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 54.296839][ T27] audit: type=1804 audit(1669787612.526:7): pid=3645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor394" name="/root/syzkaller.H40t93/0/bus/bus" dev="loop3" ino=18 res=1 errno=0 [pid 3666] set_robust_list(0x7f7b7beaa9e0, 24 [pid 3650] futex(0x7f7b7bfa47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3648] <... futex resumed>) = 1 [pid 3647] <... futex resumed>) = 1 [pid 3644] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3641] <... futex resumed>) = 0 [pid 3642] <... mprotect resumed>) = 0 [pid 3641] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=39000000} [pid 3640] <... futex resumed>) = 0 [pid 3644] <... futex resumed>) = 0 [pid 3647] futex(0x7f7b7bfa47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3648] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 3650] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3642] clone(child_stack=0x7f7b7beaa3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3666] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 3667 attached [pid 3650] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 3648] <... mmap resumed>) = 0x20000000 [pid 3647] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3644] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 54.312169][ T3649] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 54.348215][ T3645] EXT4-fs (loop3): This should not happen!! Data will be lost [ 54.348215][ T3645] [ 54.355557][ T27] audit: type=1804 audit(1669787612.536:8): pid=3649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor394" name="/root/syzkaller.Bx6Rwf/0/bus/bus" dev="loop5" ino=18 res=1 errno=0 [ 54.359566][ T3645] EXT4-fs (loop3): Total free blocks count 0 [pid 3640] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3639] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3667] set_robust_list(0x7f7b7beaa9e0, 24 [pid 3643] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3641] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3650] <... mmap resumed>) = 0x20000000 [pid 3648] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3647] sendfile(4, 5, NULL, 2147483713 [pid 3667] <... set_robust_list resumed>) = 0 [pid 3650] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3648] <... futex resumed>) = 0 [pid 3642] <... clone resumed>, parent_tid=[3667], tls=0x7f7b7beaa700, child_tidptr=0x7f7b7beaa9d0) = 3667 [pid 3640] <... futex resumed>) = 0 [pid 3648] sendfile(4, 5, NULL, 2147483713 [pid 3642] futex(0x7f7b7bfa47b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3641] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3640] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3642] <... futex resumed>) = 0 [pid 3650] <... futex resumed>) = 1 [pid 3644] <... futex resumed>) = 0 [pid 3642] futex(0x7f7b7bfa47bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3641] <... futex resumed>) = 0 [pid 3639] futex(0x7f7b7bfa47bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3650] sendfile(4, 5, NULL, 2147483713 [pid 3644] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3641] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3644] <... futex resumed>) = 0 [ 54.383549][ T3646] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 54.409463][ T27] audit: type=1804 audit(1669787612.536:9): pid=3650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor394" name="/root/syzkaller.1OtEI9/0/bus/bus" dev="loop4" ino=18 res=1 errno=0 [pid 3644] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3641] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3640] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3641] futex(0x7f7b7bfa47bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3640] futex(0x7f7b7bfa47bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3641] <... futex resumed>) = 0 [pid 3640] <... futex resumed>) = 0 [pid 3641] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3640] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3641] <... mmap resumed>) = 0x7f7b7be8a000 [pid 3640] <... mmap resumed>) = 0x7f7b7be8a000 [pid 3641] mprotect(0x7f7b7be8b000, 131072, PROT_READ|PROT_WRITE [pid 3640] mprotect(0x7f7b7be8b000, 131072, PROT_READ|PROT_WRITE [pid 3641] <... mprotect resumed>) = 0 [pid 3640] <... mprotect resumed>) = 0 [pid 3641] clone(child_stack=0x7f7b7beaa3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3640] clone(child_stack=0x7f7b7beaa3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3641] <... clone resumed>, parent_tid=[3668], tls=0x7f7b7beaa700, child_tidptr=0x7f7b7beaa9d0) = 3668 [pid 3640] <... clone resumed>, parent_tid=[3669], tls=0x7f7b7beaa700, child_tidptr=0x7f7b7beaa9d0) = 3669 [pid 3641] futex(0x7f7b7bfa47b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3640] futex(0x7f7b7bfa47b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3641] <... futex resumed>) = 0 [pid 3640] <... futex resumed>) = 0 [pid 3641] futex(0x7f7b7bfa47bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3640] futex(0x7f7b7bfa47bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3644] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3642] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3644] futex(0x7f7b7bfa47bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 54.415989][ T3648] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 54.434410][ T3646] EXT4-fs (loop0): This should not happen!! Data will be lost [ 54.434410][ T3646] [ 54.449352][ T3647] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 54.473873][ T3650] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 3644] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3639] <... futex resumed>) = 0 ./strace-static-x86_64: Process 3669 attached [pid 3669] set_robust_list(0x7f7b7beaa9e0, 24) = 0 [pid 3641] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3640] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) ./strace-static-x86_64: Process 3668 attached [pid 3644] <... mmap resumed>) = 0x7f7b7be8a000 [pid 3639] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3668] set_robust_list(0x7f7b7beaa9e0, 24 [pid 3644] mprotect(0x7f7b7be8b000, 131072, PROT_READ|PROT_WRITE [pid 3668] <... set_robust_list resumed>) = 0 [pid 3644] <... mprotect resumed>) = 0 [pid 3639] <... mmap resumed>) = 0x7f7b7be8a000 [ 54.475820][ T27] audit: type=1804 audit(1669787612.536:10): pid=3648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor394" name="/root/syzkaller.wgsFGU/0/bus/bus" dev="loop1" ino=18 res=1 errno=0 [ 54.489321][ T3649] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 54.524227][ T3650] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 3644] clone(child_stack=0x7f7b7beaa3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3639] mprotect(0x7f7b7be8b000, 131072, PROT_READ|PROT_WRITE) = 0 ./strace-static-x86_64: Process 3670 attached [pid 3644] <... clone resumed>, parent_tid=[3670], tls=0x7f7b7beaa700, child_tidptr=0x7f7b7beaa9d0) = 3670 [ 54.537678][ T3647] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 54.540748][ T3646] EXT4-fs (loop0): Total free blocks count 0 [ 54.550266][ T3650] EXT4-fs (loop4): This should not happen!! Data will be lost [ 54.550266][ T3650] [ 54.560384][ T3645] EXT4-fs (loop3): Free/Dirty block details [ 54.566681][ T3648] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 54.574543][ T3646] EXT4-fs (loop0): Free/Dirty block details [pid 3639] clone(child_stack=0x7f7b7beaa3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3670] set_robust_list(0x7f7b7beaa9e0, 24 [pid 3644] futex(0x7f7b7bfa47b8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 3671 attached [pid 3670] <... set_robust_list resumed>) = 0 [pid 3644] <... futex resumed>) = 0 [pid 3639] <... clone resumed>, parent_tid=[3671], tls=0x7f7b7beaa700, child_tidptr=0x7f7b7beaa9d0) = 3671 [pid 3671] set_robust_list(0x7f7b7beaa9e0, 24 [pid 3644] futex(0x7f7b7bfa47bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 54.584109][ T3647] EXT4-fs (loop2): This should not happen!! Data will be lost [ 54.584109][ T3647] [ 54.594377][ T3645] EXT4-fs (loop3): free_blocks=2415919104 [ 54.601365][ T3650] EXT4-fs (loop4): Total free blocks count 0 [ 54.609683][ T3649] EXT4-fs (loop5): This should not happen!! Data will be lost [ 54.609683][ T3649] [ 54.612825][ T3648] EXT4-fs (loop1): This should not happen!! Data will be lost [ 54.612825][ T3648] [ 54.625573][ T3645] EXT4-fs (loop3): dirty_blocks=16 [ 54.632638][ T3647] EXT4-fs (loop2): Total free blocks count 0 [pid 3639] futex(0x7f7b7bfa47b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3671] <... set_robust_list resumed>) = 0 [pid 3639] <... futex resumed>) = 0 [ 54.640276][ T3646] EXT4-fs (loop0): free_blocks=2415919104 [ 54.643888][ T3650] EXT4-fs (loop4): Free/Dirty block details [ 54.651886][ T3649] EXT4-fs (loop5): Total free blocks count 0 [ 54.662104][ T3647] EXT4-fs (loop2): Free/Dirty block details [ 54.663729][ T3645] EXT4-fs (loop3): Block reservation details [pid 3639] futex(0x7f7b7bfa47bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3644] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3639] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3645] <... sendfile resumed>) = 117 [pid 3667] creat(0x200001c0, 0420 [pid 3645] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3645] futex(0x7f7b7bfa47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3667] <... creat resumed>) = -1 EISDIR (Is a directory) [ 54.668565][ T27] audit: type=1804 audit(1669787612.536:11): pid=3647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor394" name="/root/syzkaller.HH69uY/0/bus/bus" dev="loop2" ino=18 res=1 errno=0 [ 54.676188][ T3646] EXT4-fs (loop0): dirty_blocks=16 [ 54.696838][ T3650] EXT4-fs (loop4): free_blocks=2415919104 [ 54.704277][ T3645] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 54.713454][ T3647] EXT4-fs (loop2): free_blocks=2415919104 [ 54.718937][ T3649] EXT4-fs (loop5): Free/Dirty block details [ 54.725209][ T3648] EXT4-fs (loop1): Total free blocks count 0 [ 54.732114][ T3647] EXT4-fs (loop2): dirty_blocks=16 [ 54.738189][ T3650] EXT4-fs (loop4): dirty_blocks=16 [pid 3667] futex(0x7f7b7bfa47bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3642] exit_group(0 [pid 3667] <... futex resumed>) = ? [pid 3642] <... exit_group resumed>) = ? [pid 3645] <... futex resumed>) = ? [pid 3645] +++ exited with 0 +++ [pid 3667] +++ exited with 0 +++ [pid 3642] +++ exited with 0 +++ [pid 3635] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3642, si_uid=0, si_status=0, si_utime=0, si_stime=20} --- [pid 3635] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3635] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 3635] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3635] getdents64(3, 0x55555719b620 /* 4 entries */, 32768) = 104 [pid 3635] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3635] lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3635] unlink("./0/binderfs") = 0 [ 54.741257][ T3649] EXT4-fs (loop5): free_blocks=2415919104 [ 54.743548][ T3648] EXT4-fs (loop1): Free/Dirty block details [ 54.752181][ T3649] EXT4-fs (loop5): dirty_blocks=16 [ 54.756309][ T3647] EXT4-fs (loop2): Block reservation details [ 54.764843][ T3646] EXT4-fs (loop0): Block reservation details [ 54.769299][ T3650] EXT4-fs (loop4): Block reservation details [ 54.779268][ T3647] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 54.785325][ T3648] EXT4-fs (loop1): free_blocks=2415919104 [pid 3669] creat(0x200001c0, 0420 [pid 3647] <... sendfile resumed>) = 117 [pid 3635] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3669] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 3669] futex(0x7f7b7bfa47bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3647] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3669] <... futex resumed>) = 0 [pid 3669] futex(0x7f7b7bfa47b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3640] exit_group(0 [pid 3669] <... futex resumed>) = ? [pid 3640] <... exit_group resumed>) = ? [pid 3669] +++ exited with 0 +++ [pid 3670] creat(0x200001c0, 0420 [pid 3650] <... sendfile resumed>) = 117 [pid 3647] <... futex resumed>) = ? [pid 3666] creat(0x200001c0, 0420) = -1 EISDIR (Is a directory) [pid 3670] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 3666] futex(0x7f7b7bfa47bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3647] +++ exited with 0 +++ [pid 3640] +++ exited with 0 +++ [pid 3670] futex(0x7f7b7bfa47bc, FUTEX_WAKE_PRIVATE, 1000000 [ 54.790588][ T3649] EXT4-fs (loop5): Block reservation details [ 54.791800][ T3648] EXT4-fs (loop1): dirty_blocks=16 [ 54.801673][ T3649] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 54.803286][ T3650] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 54.815212][ T56] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 54.819122][ T3646] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 54.830828][ T3648] EXT4-fs (loop1): Block reservation details [pid 3666] futex(0x7f7b7bfa47b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3650] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3634] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3640, si_uid=0, si_status=0, si_utime=0, si_stime=15} --- [pid 3670] <... futex resumed>) = 0 [pid 3668] creat(0x200001c0, 0420 [pid 3650] <... futex resumed>) = 0 [pid 3648] <... sendfile resumed>) = 117 [pid 3649] <... sendfile resumed>) = 117 [pid 3670] futex(0x7f7b7bfa47b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3668] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 3650] futex(0x7f7b7bfa47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3649] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3648] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3644] exit_group(0 [pid 3635] <... umount2 resumed>) = 0 [pid 3670] <... futex resumed>) = ? [pid 3668] futex(0x7f7b7bfa47bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3650] <... futex resumed>) = ? [pid 3649] <... futex resumed>) = 0 [pid 3648] <... futex resumed>) = 0 [pid 3644] <... exit_group resumed>) = ? [pid 3670] +++ exited with 0 +++ [pid 3668] <... futex resumed>) = 0 [pid 3650] +++ exited with 0 +++ [pid 3643] exit_group(0 [pid 3635] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3668] futex(0x7f7b7bfa47b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3666] <... futex resumed>) = ? [pid 3648] futex(0x7f7b7bfa47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3644] +++ exited with 0 +++ [pid 3643] <... exit_group resumed>) = ? [pid 3641] exit_group(0 [pid 3635] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3671] creat(0x200001c0, 0420 [pid 3668] <... futex resumed>) = ? [pid 3671] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 3666] +++ exited with 0 +++ [pid 3649] +++ exited with 0 +++ [pid 3648] <... futex resumed>) = ? [pid 3646] <... sendfile resumed>) = 117 [pid 3643] +++ exited with 0 +++ [pid 3641] <... exit_group resumed>) = ? [pid 3635] lstat("./0/bus", [pid 3634] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3668] +++ exited with 0 +++ [pid 3648] +++ exited with 0 +++ [pid 3637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3643, si_uid=0, si_status=0, si_utime=0, si_stime=15} --- [pid 3634] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3671] futex(0x7f7b7bfa47bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3646] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3641] +++ exited with 0 +++ [pid 3636] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3644, si_uid=0, si_status=0, si_utime=0, si_stime=16} --- [pid 3635] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3634] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3671] <... futex resumed>) = 0 [pid 3646] <... futex resumed>) = 0 [pid 3636] restart_syscall(<... resuming interrupted clone ...> [pid 3635] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3634] <... openat resumed>) = 3 [pid 3633] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3641, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- [pid 3671] futex(0x7f7b7bfa47b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3646] futex(0x7f7b7bfa47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3639] exit_group(0 [pid 3637] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3636] <... restart_syscall resumed>) = 0 [pid 3635] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 54.842887][ T3648] EXT4-fs (loop1): i_reserved_data_blocks=1 [pid 3634] fstat(3, [pid 3671] <... futex resumed>) = ? [pid 3646] <... futex resumed>) = ? [pid 3639] <... exit_group resumed>) = ? [pid 3637] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3635] openat(AT_FDCWD, "./0/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3634] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3671] +++ exited with 0 +++ [pid 3637] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3635] <... openat resumed>) = 4 [pid 3634] getdents64(3, [pid 3637] <... openat resumed>) = 3 [pid 3636] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3635] fstat(4, [pid 3634] <... getdents64 resumed>0x55555719b620 /* 4 entries */, 32768) = 104 [pid 3633] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3646] +++ exited with 0 +++ [pid 3639] +++ exited with 0 +++ [pid 3637] fstat(3, [pid 3636] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3635] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3634] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3633] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3637] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3636] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3635] getdents64(4, [pid 3634] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3637] getdents64(3, [pid 3636] <... openat resumed>) = 3 [pid 3635] <... getdents64 resumed>0x5555571a3660 /* 2 entries */, 32768) = 48 [pid 3634] lstat("./0/binderfs", [pid 3633] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3632] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3639, si_uid=0, si_status=0, si_utime=0, si_stime=15} --- [pid 3637] <... getdents64 resumed>0x55555719b620 /* 4 entries */, 32768) = 104 [pid 3636] fstat(3, [pid 3635] getdents64(4, [pid 3634] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3637] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3636] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3635] <... getdents64 resumed>0x5555571a3660 /* 0 entries */, 32768) = 0 [pid 3634] unlink("./0/binderfs" [pid 3633] <... openat resumed>) = 3 [pid 3637] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3636] getdents64(3, [pid 3634] <... unlink resumed>) = 0 [pid 3633] fstat(3, [pid 3637] lstat("./0/binderfs", [pid 3636] <... getdents64 resumed>0x55555719b620 /* 4 entries */, 32768) = 104 [pid 3635] close(4 [pid 3634] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3632] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3637] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3636] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3633] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3637] unlink("./0/binderfs" [pid 3636] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3632] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3635] <... close resumed>) = 0 [pid 3635] rmdir("./0/bus") = 0 [pid 3635] getdents64(3, 0x55555719b620 /* 0 entries */, 32768) = 0 [pid 3635] close(3) = 0 [pid 3635] rmdir("./0") = 0 [pid 3635] mkdir("./1", 0777) = 0 [pid 3635] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 3635] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 3635] close(3 [pid 3637] <... unlink resumed>) = 0 [pid 3636] lstat("./0/binderfs", [pid 3635] <... close resumed>) = 0 [pid 3633] getdents64(3, [pid 3632] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3637] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3636] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3633] <... getdents64 resumed>0x55555719b620 /* 4 entries */, 32768) = 104 [pid 3632] <... openat resumed>) = 3 [pid 3636] unlink("./0/binderfs" [pid 3635] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3633] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3632] fstat(3, [pid 3635] <... clone resumed>, child_tidptr=0x55555719a5d0) = 3672 ./strace-static-x86_64: Process 3672 attached [pid 3672] set_robust_list(0x55555719a5e0, 24) = 0 [pid 3672] chdir("./1") = 0 [pid 3672] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3672] setpgid(0, 0) = 0 [pid 3672] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3672] write(3, "1000", 4) = 4 [pid 3672] close(3) = 0 [pid 3636] <... unlink resumed>) = 0 [pid 3633] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3632] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3636] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3633] lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3632] getdents64(3, [pid 3633] unlink("./0/binderfs" [pid 3632] <... getdents64 resumed>0x55555719b620 /* 4 entries */, 32768) = 104 [pid 3672] symlink("/dev/binderfs", "./binderfs" [pid 3633] <... unlink resumed>) = 0 [pid 3632] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3633] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3632] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3632] lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3632] unlink("./0/binderfs") = 0 [pid 3632] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3672] <... symlink resumed>) = 0 [pid 3672] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3672] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7b7beab000 [pid 3634] <... umount2 resumed>) = 0 [ 54.898986][ T56] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 54.916642][ T46] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 54.932532][ T1347] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 3672] mprotect(0x7f7b7beac000, 131072, PROT_READ|PROT_WRITE [pid 3634] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3672] <... mprotect resumed>) = 0 [pid 3672] clone(child_stack=0x7f7b7becb3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3674], tls=0x7f7b7becb700, child_tidptr=0x7f7b7becb9d0) = 3674 [pid 3672] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3672] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 3674 attached [pid 3674] set_robust_list(0x7f7b7becb9e0, 24) = 0 [pid 3634] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3674] memfd_create("syzkaller", 0 [pid 3634] lstat("./0/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3634] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3634] openat(AT_FDCWD, "./0/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3674] <... memfd_create resumed>) = 3 [pid 3634] <... openat resumed>) = 4 [pid 3634] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3674] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 3634] getdents64(4, 0x5555571a3660 /* 2 entries */, 32768) = 48 [pid 3634] getdents64(4, 0x5555571a3660 /* 0 entries */, 32768) = 0 [pid 3634] close(4) = 0 [pid 3634] rmdir("./0/bus" [pid 3674] <... mmap resumed>) = 0x7f7b73a00000 [pid 3634] <... rmdir resumed>) = 0 [pid 3634] getdents64(3, 0x55555719b620 /* 0 entries */, 32768) = 0 [pid 3634] close(3) = 0 [ 54.955711][ T56] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 54.955888][ T11] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 3637] <... umount2 resumed>) = 0 [pid 3634] rmdir("./0" [pid 3637] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3634] <... rmdir resumed>) = 0 [pid 3637] lstat("./0/bus", [pid 3634] mkdir("./1", 0777 [pid 3637] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3637] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3634] <... mkdir resumed>) = 0 [pid 3637] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3634] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 3637] openat(AT_FDCWD, "./0/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3636] <... umount2 resumed>) = 0 [pid 3636] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3637] <... openat resumed>) = 4 [pid 3634] <... openat resumed>) = 3 [pid 3636] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3636] lstat("./0/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3636] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3634] ioctl(3, LOOP_CLR_FD [pid 3637] fstat(4, [pid 3634] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 3637] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3634] close(3 [pid 3637] getdents64(4, [pid 3636] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3634] <... close resumed>) = 0 [pid 3637] <... getdents64 resumed>0x5555571a3660 /* 2 entries */, 32768) = 48 [pid 3634] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3637] getdents64(4, 0x5555571a3660 /* 0 entries */, 32768) = 0 [pid 3636] openat(AT_FDCWD, "./0/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3637] close(4 [pid 3636] <... openat resumed>) = 4 [pid 3634] <... clone resumed>, child_tidptr=0x55555719a5d0) = 3677 [pid 3637] <... close resumed>) = 0 [pid 3636] fstat(4, [pid 3674] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3637] rmdir("./0/bus" [pid 3636] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3636] getdents64(4, 0x5555571a3660 /* 2 entries */, 32768) = 48 [pid 3636] getdents64(4, [pid 3637] <... rmdir resumed>) = 0 [pid 3636] <... getdents64 resumed>0x5555571a3660 /* 0 entries */, 32768) = 0 [pid 3637] getdents64(3, [pid 3636] close(4 [pid 3637] <... getdents64 resumed>0x55555719b620 /* 0 entries */, 32768) = 0 [pid 3636] <... close resumed>) = 0 [pid 3633] <... umount2 resumed>) = 0 [pid 3637] close(3 [pid 3636] rmdir("./0/bus") = 0 [pid 3636] getdents64(3, 0x55555719b620 /* 0 entries */, 32768) = 0 [pid 3636] close(3) = 0 [pid 3636] rmdir("./0") = 0 [pid 3636] mkdir("./1", 0777./strace-static-x86_64: Process 3677 attached [pid 3637] <... close resumed>) = 0 [pid 3636] <... mkdir resumed>) = 0 [pid 3633] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3637] rmdir("./0" [pid 3636] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 3633] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3636] ioctl(3, LOOP_CLR_FD [pid 3637] <... rmdir resumed>) = 0 [pid 3636] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 3677] set_robust_list(0x55555719a5e0, 24 [pid 3637] mkdir("./1", 0777 [pid 3636] close(3 [pid 3633] lstat("./0/bus", [pid 3677] <... set_robust_list resumed>) = 0 [pid 3636] <... close resumed>) = 0 [pid 3637] <... mkdir resumed>) = 0 [pid 3636] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3677] chdir("./1" [pid 3637] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 3633] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3677] <... chdir resumed>) = 0 [pid 3637] <... openat resumed>) = 3 [pid 3636] <... clone resumed>, child_tidptr=0x55555719a5d0) = 3678 [pid 3633] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3677] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3637] ioctl(3, LOOP_CLR_FD [pid 3633] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 3678 attached [pid 3677] <... prctl resumed>) = 0 [pid 3637] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 3633] openat(AT_FDCWD, "./0/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3678] set_robust_list(0x55555719a5e0, 24 [pid 3677] setpgid(0, 0 [pid 3674] <... write resumed>) = 1048576 [pid 3637] close(3 [pid 3678] <... set_robust_list resumed>) = 0 [pid 3677] <... setpgid resumed>) = 0 [pid 3674] munmap(0x7f7b73a00000, 1048576 [pid 3637] <... close resumed>) = 0 [pid 3633] <... openat resumed>) = 4 [pid 3677] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3633] fstat(4, [pid 3678] chdir("./1" [pid 3677] <... openat resumed>) = 3 [pid 3678] <... chdir resumed>) = 0 [pid 3677] write(3, "1000", 4 [pid 3637] <... clone resumed>, child_tidptr=0x55555719a5d0) = 3679 [pid 3633] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3678] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3677] <... write resumed>) = 4 [pid 3678] <... prctl resumed>) = 0 [pid 3677] close(3 [pid 3633] getdents64(4, [pid 3678] setpgid(0, 0) = 0 [pid 3678] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3677] <... close resumed>) = 0 [pid 3633] <... getdents64 resumed>0x5555571a3660 /* 2 entries */, 32768) = 48 [pid 3678] <... openat resumed>) = 3 [pid 3677] symlink("/dev/binderfs", "./binderfs" [pid 3633] getdents64(4, [pid 3678] write(3, "1000", 4) = 4 [pid 3677] <... symlink resumed>) = 0 [pid 3633] <... getdents64 resumed>0x5555571a3660 /* 0 entries */, 32768) = 0 [pid 3678] close(3 [pid 3677] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3633] close(4 [pid 3678] <... close resumed>) = 0 [pid 3677] <... futex resumed>) = 0 [pid 3678] symlink("/dev/binderfs", "./binderfs" [pid 3677] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3633] <... close resumed>) = 0 [pid 3678] <... symlink resumed>) = 0 [pid 3677] <... mmap resumed>) = 0x7f7b7beab000 [pid 3633] rmdir("./0/bus" [pid 3678] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3677] mprotect(0x7f7b7beac000, 131072, PROT_READ|PROT_WRITE [pid 3674] <... munmap resumed>) = 0 [pid 3678] <... futex resumed>) = 0 [pid 3677] <... mprotect resumed>) = 0 [pid 3674] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 3633] <... rmdir resumed>) = 0 [pid 3678] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3677] clone(child_stack=0x7f7b7becb3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3633] getdents64(3, [pid 3678] <... mmap resumed>) = 0x7f7b7beab000 [pid 3674] <... openat resumed>) = 4 [pid 3633] <... getdents64 resumed>0x55555719b620 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 3679 attached [pid 3678] mprotect(0x7f7b7beac000, 131072, PROT_READ|PROT_WRITE [pid 3677] <... clone resumed>, parent_tid=[3680], tls=0x7f7b7becb700, child_tidptr=0x7f7b7becb9d0) = 3680 [pid 3674] ioctl(4, LOOP_SET_FD, 3 [pid 3633] close(3 [pid 3632] <... umount2 resumed>) = 0 [pid 3679] set_robust_list(0x55555719a5e0, 24 [pid 3678] <... mprotect resumed>) = 0 [pid 3677] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3678] clone(child_stack=0x7f7b7becb3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3681], tls=0x7f7b7becb700, child_tidptr=0x7f7b7becb9d0) = 3681 [pid 3678] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3678] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 3681 attached [pid 3681] set_robust_list(0x7f7b7becb9e0, 24) = 0 [pid 3681] memfd_create("syzkaller", 0 [pid 3679] <... set_robust_list resumed>) = 0 [pid 3677] <... futex resumed>) = 0 [pid 3674] <... ioctl resumed>) = 0 [pid 3633] <... close resumed>) = 0 [pid 3632] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3677] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3674] close(3 [pid 3633] rmdir("./0" [pid 3679] chdir("./1" [pid 3674] <... close resumed>) = 0 [pid 3632] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3674] mkdir("./bus", 0777 [pid 3633] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 3680 attached [pid 3679] <... chdir resumed>) = 0 [pid 3674] <... mkdir resumed>) = 0 [pid 3633] mkdir("./1", 0777 [pid 3632] lstat("./0/bus", [pid 3681] <... memfd_create resumed>) = 3 [pid 3680] set_robust_list(0x7f7b7becb9e0, 24 [pid 3679] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3674] mount("/dev/loop3", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 3633] <... mkdir resumed>) = 0 [pid 3632] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3681] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 3680] <... set_robust_list resumed>) = 0 [pid 3679] <... prctl resumed>) = 0 [pid 3633] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 3632] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3681] <... mmap resumed>) = 0x7f7b73a00000 [pid 3680] memfd_create("syzkaller", 0 [pid 3679] setpgid(0, 0 [pid 3633] <... openat resumed>) = 3 [pid 3632] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3681] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3680] <... memfd_create resumed>) = 3 [pid 3679] <... setpgid resumed>) = 0 [pid 3633] ioctl(3, LOOP_CLR_FD [pid 3632] openat(AT_FDCWD, "./0/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3680] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 3679] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3632] <... openat resumed>) = 4 [pid 3680] <... mmap resumed>) = 0x7f7b73a00000 [pid 3633] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 3679] <... openat resumed>) = 3 [pid 3633] close(3 [pid 3632] fstat(4, [pid 3633] <... close resumed>) = 0 [pid 3681] <... write resumed>) = 1048576 [pid 3681] munmap(0x7f7b73a00000, 1048576) = 0 [pid 3681] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 3681] ioctl(4, LOOP_SET_FD, 3 [pid 3679] write(3, "1000", 4 [pid 3633] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3632] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3679] <... write resumed>) = 4 [pid 3674] <... mount resumed>) = 0 [pid 3632] getdents64(4, [pid 3679] close(3 [pid 3632] <... getdents64 resumed>0x5555571a3660 /* 2 entries */, 32768) = 48 [pid 3679] <... close resumed>) = 0 [pid 3632] getdents64(4, [pid 3679] symlink("/dev/binderfs", "./binderfs" [pid 3633] <... clone resumed>, child_tidptr=0x55555719a5d0) = 3684 [pid 3632] <... getdents64 resumed>0x5555571a3660 /* 0 entries */, 32768) = 0 [pid 3679] <... symlink resumed>) = 0 [pid 3632] close(4 [pid 3679] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3632] <... close resumed>) = 0 [pid 3679] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3632] rmdir("./0/bus" [pid 3679] <... mmap resumed>) = 0x7f7b7beab000 [pid 3679] mprotect(0x7f7b7beac000, 131072, PROT_READ|PROT_WRITE [pid 3632] <... rmdir resumed>) = 0 [pid 3679] <... mprotect resumed>) = 0 [pid 3632] getdents64(3, [pid 3679] clone(child_stack=0x7f7b7becb3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3632] <... getdents64 resumed>0x55555719b620 /* 0 entries */, 32768) = 0 [pid 3632] close(3 [pid 3679] <... clone resumed>, parent_tid=[3685], tls=0x7f7b7becb700, child_tidptr=0x7f7b7becb9d0) = 3685 [pid 3632] <... close resumed>) = 0 [pid 3680] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [ 55.119305][ T3674] loop3: detected capacity change from 0 to 2048 [ 55.154269][ T3674] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [pid 3679] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3674] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3674] chdir("./bus") = 0 [pid 3674] ioctl(4, LOOP_CLR_FD) = 0 [pid 3674] close(4) = 0 [pid 3674] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3679] <... futex resumed>) = 0 [pid 3632] rmdir("./0" [pid 3679] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3632] <... rmdir resumed>) = 0 [pid 3632] mkdir("./1", 0777 [pid 3674] <... futex resumed>) = 1 [pid 3672] <... futex resumed>) = 0 [pid 3632] <... mkdir resumed>) = 0 [pid 3674] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 3672] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3632] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 3672] <... futex resumed>) = 0 [pid 3674] <... open resumed>) = 4 [pid 3672] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3674] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3672] <... futex resumed>) = 0 [pid 3674] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 3672] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3674] <... write resumed>) = 9 [pid 3672] <... futex resumed>) = 0 ./strace-static-x86_64: Process 3684 attached [pid 3674] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3672] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3632] <... openat resumed>) = 3 [pid 3674] <... futex resumed>) = 0 [pid 3672] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3632] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 3685 attached [pid 3684] set_robust_list(0x55555719a5e0, 24 [pid 3674] openat(AT_FDCWD, "./bus", O_RDONLY [pid 3672] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3632] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 3685] set_robust_list(0x7f7b7becb9e0, 24 [pid 3684] <... set_robust_list resumed>) = 0 [pid 3674] <... openat resumed>) = 5 [pid 3672] <... futex resumed>) = 0 [pid 3632] close(3 [pid 3685] <... set_robust_list resumed>) = 0 [pid 3684] chdir("./1" [pid 3674] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3672] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3685] memfd_create("syzkaller", 0 [pid 3684] <... chdir resumed>) = 0 [pid 3681] <... ioctl resumed>) = 0 [pid 3674] <... futex resumed>) = 0 [pid 3672] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3632] <... close resumed>) = 0 [pid 3685] <... memfd_create resumed>) = 3 [pid 3684] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3681] close(3 [pid 3674] futex(0x7f7b7bfa47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3672] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3632] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3685] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 3684] <... prctl resumed>) = 0 [pid 3681] <... close resumed>) = 0 [pid 3674] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3672] <... futex resumed>) = 0 [pid 3684] setpgid(0, 0 [pid 3674] open("./bus", O_RDWR [pid 3672] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3685] <... mmap resumed>) = 0x7f7b73a00000 [pid 3684] <... setpgid resumed>) = 0 [pid 3681] mkdir("./bus", 0777 [pid 3674] <... open resumed>) = 6 [pid 3632] <... clone resumed>, child_tidptr=0x55555719a5d0) = 3686 [pid 3684] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3674] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3684] <... openat resumed>) = 3 [pid 3674] <... futex resumed>) = 1 [pid 3672] <... futex resumed>) = 0 ./strace-static-x86_64: Process 3686 attached [pid 3684] write(3, "1000", 4 [pid 3674] futex(0x7f7b7bfa47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3672] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3686] set_robust_list(0x55555719a5e0, 24 [pid 3684] <... write resumed>) = 4 [pid 3674] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3672] <... futex resumed>) = 0 [pid 3686] <... set_robust_list resumed>) = 0 [pid 3684] close(3 [pid 3681] <... mkdir resumed>) = 0 [pid 3674] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 3672] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3686] chdir("./1" [pid 3684] <... close resumed>) = 0 [pid 3681] mount("/dev/loop4", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 3674] <... mmap resumed>) = 0x20000000 [pid 3686] <... chdir resumed>) = 0 [pid 3685] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3684] symlink("/dev/binderfs", "./binderfs" [pid 3680] <... write resumed>) = 1048576 [pid 3674] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3686] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3684] <... symlink resumed>) = 0 [pid 3674] <... futex resumed>) = 1 [pid 3672] <... futex resumed>) = 0 [pid 3686] <... prctl resumed>) = 0 [pid 3684] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3674] futex(0x7f7b7bfa47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3672] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3686] setpgid(0, 0 [pid 3684] <... futex resumed>) = 0 [pid 3680] munmap(0x7f7b73a00000, 1048576 [pid 3674] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3672] <... futex resumed>) = 0 [pid 3686] <... setpgid resumed>) = 0 [pid 3684] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3680] <... munmap resumed>) = 0 [pid 3674] sendfile(4, 5, NULL, 2147483713 [ 55.185782][ T3681] loop4: detected capacity change from 0 to 2048 [pid 3672] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3686] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3684] <... mmap resumed>) = 0x7f7b7beab000 [pid 3680] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 3684] mprotect(0x7f7b7beac000, 131072, PROT_READ|PROT_WRITE [pid 3680] <... openat resumed>) = 4 [pid 3684] <... mprotect resumed>) = 0 [pid 3680] ioctl(4, LOOP_SET_FD, 3 [pid 3686] <... openat resumed>) = 3 [pid 3684] clone(child_stack=0x7f7b7becb3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3686] write(3, "1000", 4 [pid 3685] <... write resumed>) = 1048576 [pid 3686] <... write resumed>) = 4 [pid 3684] <... clone resumed>, parent_tid=[3688], tls=0x7f7b7becb700, child_tidptr=0x7f7b7becb9d0) = 3688 ./strace-static-x86_64: Process 3688 attached [pid 3686] close(3 [pid 3684] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3686] <... close resumed>) = 0 [pid 3684] <... futex resumed>) = 0 [pid 3686] symlink("/dev/binderfs", "./binderfs" [pid 3684] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3686] <... symlink resumed>) = 0 [ 55.250917][ T3674] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 55.254181][ T3680] loop2: detected capacity change from 0 to 2048 [ 55.266574][ T3674] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 55.285378][ T3674] EXT4-fs (loop3): This should not happen!! Data will be lost [ 55.285378][ T3674] [pid 3686] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3688] set_robust_list(0x7f7b7becb9e0, 24 [pid 3686] <... futex resumed>) = 0 [pid 3685] munmap(0x7f7b73a00000, 1048576 [pid 3672] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3686] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3685] <... munmap resumed>) = 0 [pid 3681] <... mount resumed>) = 0 [pid 3686] <... mmap resumed>) = 0x7f7b7beab000 [pid 3685] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 3681] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 3686] mprotect(0x7f7b7beac000, 131072, PROT_READ|PROT_WRITE [pid 3685] <... openat resumed>) = 4 [pid 3681] <... openat resumed>) = 3 [pid 3688] <... set_robust_list resumed>) = 0 [pid 3686] <... mprotect resumed>) = 0 [pid 3685] ioctl(4, LOOP_SET_FD, 3 [pid 3672] futex(0x7f7b7bfa47bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3688] memfd_create("syzkaller", 0 [pid 3681] chdir("./bus" [pid 3672] <... futex resumed>) = 0 [pid 3686] clone(child_stack=0x7f7b7becb3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3688] <... memfd_create resumed>) = 3 [pid 3672] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3688] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 3672] <... mmap resumed>) = 0x7f7b7be8a000 [pid 3688] <... mmap resumed>) = 0x7f7b73a00000 [pid 3672] mprotect(0x7f7b7be8b000, 131072, PROT_READ|PROT_WRITE [pid 3688] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3686] <... clone resumed>, parent_tid=[3690], tls=0x7f7b7becb700, child_tidptr=0x7f7b7becb9d0) = 3690 [pid 3685] <... ioctl resumed>) = 0 [pid 3681] <... chdir resumed>) = 0 [pid 3672] <... mprotect resumed>) = 0 [pid 3688] <... write resumed>) = 1048576 [pid 3686] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3685] close(3 [pid 3681] ioctl(4, LOOP_CLR_FD [pid 3672] clone(child_stack=0x7f7b7beaa3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3686] <... futex resumed>) = 0 [pid 3685] <... close resumed>) = 0 [pid 3681] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 3690 attached [pid 3686] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3685] mkdir("./bus", 0777 [pid 3681] close(4 [pid 3672] <... clone resumed>, parent_tid=[3691], tls=0x7f7b7beaa700, child_tidptr=0x7f7b7beaa9d0) = 3691 [pid 3690] set_robust_list(0x7f7b7becb9e0, 24 [pid 3672] futex(0x7f7b7bfa47b8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 3691 attached [pid 3690] <... set_robust_list resumed>) = 0 [pid 3672] <... futex resumed>) = 0 [pid 3681] <... close resumed>) = 0 [pid 3672] futex(0x7f7b7bfa47bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3691] set_robust_list(0x7f7b7beaa9e0, 24 [pid 3690] memfd_create("syzkaller", 0 [pid 3685] <... mkdir resumed>) = 0 [pid 3681] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3690] <... memfd_create resumed>) = 3 [pid 3685] mount("/dev/loop5", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 3681] <... futex resumed>) = 1 [pid 3678] <... futex resumed>) = 0 [pid 3690] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 3681] futex(0x7f7b7bfa47a8, FUTEX_WAIT_PRIVATE, 0, NULL [ 55.295495][ T3674] EXT4-fs (loop3): Total free blocks count 0 [ 55.301696][ T3674] EXT4-fs (loop3): Free/Dirty block details [ 55.302781][ T3681] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 55.307928][ T3674] EXT4-fs (loop3): free_blocks=2415919104 [ 55.322011][ T3674] EXT4-fs (loop3): dirty_blocks=16 [ 55.329846][ T3685] loop5: detected capacity change from 0 to 2048 [pid 3678] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3691] <... set_robust_list resumed>) = 0 [pid 3690] <... mmap resumed>) = 0x7f7b73a00000 [pid 3688] munmap(0x7f7b73a00000, 1048576 [pid 3681] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3680] <... ioctl resumed>) = 0 [pid 3678] <... futex resumed>) = 0 [pid 3690] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3678] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3690] <... write resumed>) = 1048576 [pid 3688] <... munmap resumed>) = 0 [pid 3681] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 3680] close(3 [pid 3690] munmap(0x7f7b73a00000, 1048576 [pid 3688] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 3681] <... open resumed>) = 4 [pid 3680] <... close resumed>) = 0 [pid 3691] creat(0x200001c0, 0420 [pid 3688] <... openat resumed>) = 4 [pid 3681] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3680] mkdir("./bus", 0777 [pid 3691] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 3691] futex(0x7f7b7bfa47bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3672] <... futex resumed>) = 0 [pid 3691] futex(0x7f7b7bfa47b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3681] <... futex resumed>) = 1 [pid 3678] <... futex resumed>) = 0 [pid 3688] ioctl(4, LOOP_SET_FD, 3 [pid 3678] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3678] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3681] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 3680] <... mkdir resumed>) = 0 [pid 3674] <... sendfile resumed>) = 117 [pid 3690] <... munmap resumed>) = 0 [pid 3674] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3674] futex(0x7f7b7bfa47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3690] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 3672] exit_group(0 [pid 3691] <... futex resumed>) = ? [pid 3672] <... exit_group resumed>) = ? [pid 3691] +++ exited with 0 +++ [pid 3674] <... futex resumed>) = ? [pid 3690] <... openat resumed>) = 4 [pid 3690] ioctl(4, LOOP_SET_FD, 3 [pid 3688] <... ioctl resumed>) = 0 [pid 3680] mount("/dev/loop2", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 3681] <... write resumed>) = 9 [pid 3681] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3674] +++ exited with 0 +++ [pid 3672] +++ exited with 0 +++ [pid 3688] close(3 [pid 3681] <... futex resumed>) = 1 [pid 3678] <... futex resumed>) = 0 [pid 3681] futex(0x7f7b7bfa47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3678] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3635] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3672, si_uid=0, si_status=0, si_utime=1, si_stime=17} --- [pid 3681] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3678] <... futex resumed>) = 0 [ 55.359751][ T3674] EXT4-fs (loop3): Block reservation details [ 55.365964][ T3674] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 55.394484][ T3688] loop1: detected capacity change from 0 to 2048 [ 55.398331][ T3690] loop0: detected capacity change from 0 to 2048 [pid 3635] restart_syscall(<... resuming interrupted clone ...> [pid 3688] <... close resumed>) = 0 [pid 3681] openat(AT_FDCWD, "./bus", O_RDONLY [pid 3678] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3635] <... restart_syscall resumed>) = 0 [pid 3690] <... ioctl resumed>) = 0 [pid 3681] <... openat resumed>) = 5 [pid 3690] close(3) = 0 [pid 3690] mkdir("./bus", 0777) = 0 [pid 3690] mount("/dev/loop0", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 3681] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3635] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3688] mkdir("./bus", 0777 [pid 3681] <... futex resumed>) = 1 [pid 3678] <... futex resumed>) = 0 [pid 3635] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3681] futex(0x7f7b7bfa47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3678] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3635] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3681] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3678] <... futex resumed>) = 0 [pid 3678] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3635] <... openat resumed>) = 3 [pid 3681] open("./bus", O_RDWR [pid 3635] fstat(3, [pid 3681] <... open resumed>) = 6 [pid 3681] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3635] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3681] <... futex resumed>) = 1 [pid 3678] <... futex resumed>) = 0 [pid 3635] getdents64(3, [pid 3681] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 3678] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3635] <... getdents64 resumed>0x55555719b620 /* 4 entries */, 32768) = 104 [pid 3688] <... mkdir resumed>) = 0 [pid 3681] <... mmap resumed>) = 0x20000000 [pid 3678] <... futex resumed>) = 0 [pid 3635] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3681] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3678] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3635] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3681] <... futex resumed>) = 0 [pid 3678] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3635] lstat("./1/binderfs", [pid 3681] futex(0x7f7b7bfa47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3678] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3681] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3678] <... futex resumed>) = 0 [pid 3635] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3681] sendfile(4, 5, NULL, 2147483713 [pid 3678] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3635] unlink("./1/binderfs" [pid 3688] mount("/dev/loop1", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 3635] <... unlink resumed>) = 0 [pid 3635] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3685] <... mount resumed>) = 0 [pid 3685] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3685] chdir("./bus") = 0 [pid 3685] ioctl(4, LOOP_CLR_FD) = 0 [pid 3685] close(4) = 0 [pid 3685] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3679] <... futex resumed>) = 0 [pid 3679] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3679] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3685] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 3690] <... mount resumed>) = 0 [pid 3690] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3690] chdir("./bus") = 0 [pid 3690] ioctl(4, LOOP_CLR_FD) = 0 [pid 3690] close(4) = 0 [ 55.414389][ T3685] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 55.436040][ T3675] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 55.452332][ T3690] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [pid 3690] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3690] futex(0x7f7b7bfa47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3686] <... futex resumed>) = 0 [pid 3686] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3690] <... futex resumed>) = 0 [pid 3686] <... futex resumed>) = 1 [pid 3690] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 3686] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3690] <... open resumed>) = 4 [pid 3690] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3686] <... futex resumed>) = 0 [pid 3686] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3686] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3690] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9) = 9 [pid 3678] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3678] futex(0x7f7b7bfa47bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3690] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3678] <... futex resumed>) = 0 [pid 3678] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7b7be8a000 [pid 3678] mprotect(0x7f7b7be8b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3678] clone(child_stack=0x7f7b7beaa3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3690] <... futex resumed>) = 1 [pid 3686] <... futex resumed>) = 0 [pid 3678] <... clone resumed>, parent_tid=[3698], tls=0x7f7b7beaa700, child_tidptr=0x7f7b7beaa9d0) = 3698 [pid 3690] openat(AT_FDCWD, "./bus", O_RDONLY [pid 3686] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3678] futex(0x7f7b7bfa47b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3690] <... openat resumed>) = 5 [pid 3686] <... futex resumed>) = 0 [pid 3679] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3678] <... futex resumed>) = 0 [pid 3690] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3686] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3679] futex(0x7f7b7bfa47bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3690] <... futex resumed>) = 0 [pid 3686] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3679] <... futex resumed>) = 0 [pid 3678] futex(0x7f7b7bfa47bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3686] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3679] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3686] <... futex resumed>) = 0 [pid 3690] open("./bus", O_RDWR [pid 3686] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3685] <... open resumed>) = 4 [pid 3679] <... mmap resumed>) = 0x7f7b7be8a000 [pid 3690] <... open resumed>) = 6 [pid 3685] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3679] mprotect(0x7f7b7be8b000, 131072, PROT_READ|PROT_WRITE [pid 3690] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3685] <... futex resumed>) = 0 [pid 3679] <... mprotect resumed>) = 0 [pid 3690] <... futex resumed>) = 1 [pid 3686] <... futex resumed>) = 0 [pid 3686] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3685] futex(0x7f7b7bfa47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3679] clone(child_stack=0x7f7b7beaa3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3690] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 3686] <... futex resumed>) = 0 [ 55.455398][ T3681] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 55.486311][ T3680] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 55.498005][ T3681] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 3686] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3690] <... mmap resumed>) = 0x20000000 [pid 3690] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3679] <... clone resumed>, parent_tid=[3699], tls=0x7f7b7beaa700, child_tidptr=0x7f7b7beaa9d0) = 3699 [pid 3679] futex(0x7f7b7bfa47b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3690] <... futex resumed>) = 1 [pid 3686] <... futex resumed>) = 0 [pid 3679] <... futex resumed>) = 0 [pid 3690] futex(0x7f7b7bfa47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3686] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3679] futex(0x7f7b7bfa47bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3690] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3686] <... futex resumed>) = 0 [pid 3690] sendfile(4, 5, NULL, 2147483713 [pid 3686] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 3699 attached ./strace-static-x86_64: Process 3698 attached [ 55.517136][ T3681] EXT4-fs (loop4): This should not happen!! Data will be lost [ 55.517136][ T3681] [ 55.528422][ T3681] EXT4-fs (loop4): Total free blocks count 0 [ 55.537054][ T3690] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 55.537189][ T3681] EXT4-fs (loop4): Free/Dirty block details [ 55.559110][ T3681] EXT4-fs (loop4): free_blocks=2415919104 [pid 3699] set_robust_list(0x7f7b7beaa9e0, 24 [pid 3698] set_robust_list(0x7f7b7beaa9e0, 24 [pid 3680] <... mount resumed>) = 0 [pid 3678] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3699] <... set_robust_list resumed>) = 0 [pid 3698] <... set_robust_list resumed>) = 0 [pid 3680] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 3699] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 3679] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3699] <... write resumed>) = 9 [pid 3686] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3679] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3699] futex(0x7f7b7bfa47bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3686] futex(0x7f7b7bfa47bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3679] <... futex resumed>) = 1 [pid 3699] <... futex resumed>) = 0 [pid 3686] <... futex resumed>) = 0 [pid 3679] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3699] futex(0x7f7b7bfa47b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3686] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7b7be8a000 [pid 3685] <... futex resumed>) = 0 [pid 3686] mprotect(0x7f7b7be8b000, 131072, PROT_READ|PROT_WRITE [pid 3685] openat(AT_FDCWD, "./bus", O_RDONLY [pid 3680] <... openat resumed>) = 3 [pid 3686] <... mprotect resumed>) = 0 [pid 3685] <... openat resumed>) = 5 [pid 3680] chdir("./bus" [pid 3686] clone(child_stack=0x7f7b7beaa3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3685] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3680] <... chdir resumed>) = 0 [pid 3679] <... futex resumed>) = 0 [pid 3686] <... clone resumed>, parent_tid=[3702], tls=0x7f7b7beaa700, child_tidptr=0x7f7b7beaa9d0) = 3702 [pid 3685] futex(0x7f7b7bfa47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3680] ioctl(4, LOOP_CLR_FD [pid 3679] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3688] <... mount resumed>) = 0 [pid 3686] futex(0x7f7b7bfa47b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3685] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3680] <... ioctl resumed>) = 0 [pid 3679] <... futex resumed>) = 0 [pid 3635] <... umount2 resumed>) = 0 [pid 3685] open("./bus", O_RDWR [pid 3679] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3685] <... open resumed>) = 6 [pid 3685] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3679] <... futex resumed>) = 0 [pid 3685] futex(0x7f7b7bfa47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3679] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3685] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3679] <... futex resumed>) = 0 [pid 3685] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 3679] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3685] <... mmap resumed>) = 0x20000000 [pid 3685] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3679] <... futex resumed>) = 0 [pid 3685] futex(0x7f7b7bfa47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3679] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3685] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3679] <... futex resumed>) = 0 [ 55.560677][ T3688] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 55.565035][ T3681] EXT4-fs (loop4): dirty_blocks=16 [ 55.596437][ T3690] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 55.609974][ T3690] EXT4-fs (loop0): This should not happen!! Data will be lost [pid 3686] <... futex resumed>) = 0 [pid 3685] sendfile(4, 5, NULL, 2147483713 [pid 3680] close(4 [pid 3679] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3635] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3688] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY./strace-static-x86_64: Process 3702 attached [pid 3686] futex(0x7f7b7bfa47bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3702] set_robust_list(0x7f7b7beaa9e0, 24) = 0 [pid 3688] <... openat resumed>) = 3 [pid 3680] <... close resumed>) = 0 [pid 3635] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3688] chdir("./bus" [pid 3680] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3688] <... chdir resumed>) = 0 [pid 3635] lstat("./1/bus", [pid 3680] <... futex resumed>) = 1 [pid 3688] ioctl(4, LOOP_CLR_FD [pid 3677] <... futex resumed>) = 0 [pid 3688] <... ioctl resumed>) = 0 [pid 3680] futex(0x7f7b7bfa47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3677] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3635] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 55.609974][ T3690] [ 55.615267][ T3685] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 55.620083][ T3690] EXT4-fs (loop0): Total free blocks count 0 [ 55.641487][ T3690] EXT4-fs (loop0): Free/Dirty block details [ 55.647619][ T3690] EXT4-fs (loop0): free_blocks=2415919104 [ 55.653835][ T3690] EXT4-fs (loop0): dirty_blocks=16 [ 55.659958][ T3690] EXT4-fs (loop0): Block reservation details [pid 3688] close(4 [pid 3680] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3677] <... futex resumed>) = 0 [pid 3635] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3702] creat(0x200001c0, 0420 [pid 3690] <... sendfile resumed>) = 117 [pid 3688] <... close resumed>) = 0 [pid 3680] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 3677] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3635] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3702] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 3690] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3688] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3680] <... open resumed>) = 4 [pid 3679] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3635] openat(AT_FDCWD, "./1/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3702] futex(0x7f7b7bfa47bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3690] <... futex resumed>) = 0 [pid 3688] <... futex resumed>) = 1 [pid 3684] <... futex resumed>) = 0 [pid 3680] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3679] futex(0x7f7b7bfa47b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3635] <... openat resumed>) = 4 [pid 3702] <... futex resumed>) = 1 [pid 3699] <... futex resumed>) = 0 [pid 3690] futex(0x7f7b7bfa47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3688] futex(0x7f7b7bfa47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3686] <... futex resumed>) = 0 [pid 3684] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3680] <... futex resumed>) = 1 [pid 3679] <... futex resumed>) = 1 [pid 3677] <... futex resumed>) = 0 [pid 3635] fstat(4, [pid 3702] futex(0x7f7b7bfa47b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3688] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3686] exit_group(0 [pid 3684] <... futex resumed>) = 0 [pid 3680] futex(0x7f7b7bfa47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3679] futex(0x7f7b7bfa47bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3677] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3635] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3702] <... futex resumed>) = ? [pid 3688] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 3686] <... exit_group resumed>) = ? [pid 3684] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3680] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3677] <... futex resumed>) = 0 [pid 3635] getdents64(4, [pid 3702] +++ exited with 0 +++ [pid 3688] <... open resumed>) = 4 [pid 3680] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 3690] <... futex resumed>) = ? [pid 3677] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3635] <... getdents64 resumed>0x5555571a3660 /* 2 entries */, 32768) = 48 [pid 3688] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3680] <... write resumed>) = 9 [pid 3635] getdents64(4, [pid 3690] +++ exited with 0 +++ [pid 3688] <... futex resumed>) = 1 [pid 3686] +++ exited with 0 +++ [pid 3684] <... futex resumed>) = 0 [pid 3680] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3688] futex(0x7f7b7bfa47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3684] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3680] <... futex resumed>) = 1 [pid 3677] <... futex resumed>) = 0 [pid 3688] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3684] <... futex resumed>) = 0 [pid 3680] futex(0x7f7b7bfa47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3677] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3635] <... getdents64 resumed>0x5555571a3660 /* 0 entries */, 32768) = 0 [pid 3688] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 3684] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3680] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3677] <... futex resumed>) = 0 [pid 3635] close(4 [pid 3632] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3686, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- [pid 3688] <... write resumed>) = 9 [pid 3680] openat(AT_FDCWD, "./bus", O_RDONLY [pid 3677] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3635] <... close resumed>) = 0 [pid 3632] restart_syscall(<... resuming interrupted clone ...> [pid 3688] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3680] <... openat resumed>) = 5 [pid 3680] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3635] rmdir("./1/bus" [pid 3632] <... restart_syscall resumed>) = 0 [pid 3688] <... futex resumed>) = 1 [pid 3684] <... futex resumed>) = 0 [pid 3680] <... futex resumed>) = 1 [pid 3677] <... futex resumed>) = 0 [pid 3680] futex(0x7f7b7bfa47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3677] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3635] <... rmdir resumed>) = 0 [pid 3684] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3688] openat(AT_FDCWD, "./bus", O_RDONLY [pid 3684] <... futex resumed>) = 0 [pid 3680] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3677] <... futex resumed>) = 0 [pid 3635] getdents64(3, [pid 3688] <... openat resumed>) = 5 [pid 3680] open("./bus", O_RDWR [pid 3677] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3688] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3684] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3680] <... open resumed>) = 6 [pid 3635] <... getdents64 resumed>0x55555719b620 /* 0 entries */, 32768) = 0 [pid 3688] <... futex resumed>) = 0 [pid 3684] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3680] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3688] futex(0x7f7b7bfa47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3684] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3680] <... futex resumed>) = 1 [pid 3677] <... futex resumed>) = 0 [pid 3635] close(3 [pid 3632] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3688] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3684] <... futex resumed>) = 0 [ 55.660526][ T3681] EXT4-fs (loop4): Block reservation details [ 55.666308][ T3690] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 55.698463][ T3690] syz-executor394 (3690) used greatest stack depth: 16560 bytes left [pid 3680] futex(0x7f7b7bfa47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3677] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3635] <... close resumed>) = 0 [pid 3632] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3688] open("./bus", O_RDWR [pid 3684] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3680] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3677] <... futex resumed>) = 0 [pid 3688] <... open resumed>) = 6 [pid 3680] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 3679] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3677] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3635] rmdir("./1" [pid 3632] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3680] <... mmap resumed>) = 0x20000000 [pid 3688] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3680] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3677] <... futex resumed>) = 0 [pid 3680] futex(0x7f7b7bfa47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3677] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3680] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3677] <... futex resumed>) = 0 [ 55.737500][ T3685] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 55.738785][ T3681] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 55.751268][ T3685] EXT4-fs (loop5): This should not happen!! Data will be lost [ 55.751268][ T3685] [ 55.768600][ T3685] EXT4-fs (loop5): Total free blocks count 0 [pid 3680] sendfile(4, 5, NULL, 2147483713 [pid 3677] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3688] <... futex resumed>) = 1 [pid 3684] <... futex resumed>) = 0 [pid 3635] <... rmdir resumed>) = 0 [pid 3632] <... openat resumed>) = 3 [pid 3681] <... sendfile resumed>) = 117 [pid 3681] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3681] futex(0x7f7b7bfa47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3698] creat(0x200001c0, 0420 [pid 3688] futex(0x7f7b7bfa47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3684] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3635] mkdir("./2", 0777 [pid 3632] fstat(3, [pid 3698] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 3688] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3684] <... futex resumed>) = 0 [pid 3635] <... mkdir resumed>) = 0 [pid 3632] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 55.772687][ T3680] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 55.774690][ T3685] EXT4-fs (loop5): Free/Dirty block details [ 55.791438][ T3680] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 55.796954][ T3685] EXT4-fs (loop5): free_blocks=2415919104 [ 55.808761][ T3680] EXT4-fs (loop2): This should not happen!! Data will be lost [ 55.808761][ T3680] [ 55.815502][ T3685] EXT4-fs (loop5): dirty_blocks=16 [ 55.823734][ T3680] EXT4-fs (loop2): Total free blocks count 0 [pid 3698] futex(0x7f7b7bfa47bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3688] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 3684] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3678] exit_group(0 [pid 3635] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 3632] getdents64(3, [pid 3698] <... futex resumed>) = ? [pid 3688] <... mmap resumed>) = 0x20000000 [pid 3678] <... exit_group resumed>) = ? [pid 3635] <... openat resumed>) = 3 [pid 3632] <... getdents64 resumed>0x55555719b620 /* 4 entries */, 32768) = 104 [pid 3681] <... futex resumed>) = ? [pid 3677] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3681] +++ exited with 0 +++ [pid 3677] futex(0x7f7b7bfa47bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3698] +++ exited with 0 +++ [pid 3677] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7b7be8a000 [pid 3677] mprotect(0x7f7b7be8b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3677] clone(child_stack=0x7f7b7beaa3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3703], tls=0x7f7b7beaa700, child_tidptr=0x7f7b7beaa9d0) = 3703 [pid 3677] futex(0x7f7b7bfa47b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3677] futex(0x7f7b7bfa47bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 3703 attached [pid 3703] set_robust_list(0x7f7b7beaa9e0, 24) = 0 [pid 3688] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3685] <... sendfile resumed>) = 117 [pid 3678] +++ exited with 0 +++ [pid 3635] ioctl(3, LOOP_CLR_FD [pid 3632] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3699] creat(0x200001c0, 0420 [pid 3688] <... futex resumed>) = 1 [pid 3685] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3684] <... futex resumed>) = 0 [pid 3635] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 3632] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3699] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 3688] sendfile(4, 5, NULL, 2147483713 [pid 3685] <... futex resumed>) = 0 [pid 3684] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3636] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3678, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- [pid 3635] close(3 [pid 3632] lstat("./1/binderfs", [pid 3699] futex(0x7f7b7bfa47bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3684] <... futex resumed>) = 0 [pid 3632] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3684] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3635] <... close resumed>) = 0 [pid 3632] unlink("./1/binderfs" [pid 3699] <... futex resumed>) = 0 [pid 3685] futex(0x7f7b7bfa47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3635] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3632] <... unlink resumed>) = 0 [ 55.829151][ T3685] EXT4-fs (loop5): Block reservation details [ 55.835376][ T3680] EXT4-fs (loop2): Free/Dirty block details [ 55.842554][ T3685] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 55.851273][ T3680] EXT4-fs (loop2): free_blocks=2415919104 [ 55.867642][ T3680] EXT4-fs (loop2): dirty_blocks=16 [ 55.872891][ T3680] EXT4-fs (loop2): Block reservation details [ 55.879267][ T3680] EXT4-fs (loop2): i_reserved_data_blocks=1 ./strace-static-x86_64: Process 3704 attached [pid 3699] futex(0x7f7b7bfa47b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3680] <... sendfile resumed>) = 117 [pid 3679] exit_group(0 [pid 3677] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3636] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3632] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3703] creat(0x200001c0, 0420 [pid 3685] <... futex resumed>) = ? [pid 3679] <... exit_group resumed>) = ? [pid 3636] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3635] <... clone resumed>, child_tidptr=0x55555719a5d0) = 3704 [pid 3703] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 3699] <... futex resumed>) = ? [pid 3685] +++ exited with 0 +++ [pid 3636] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3703] futex(0x7f7b7bfa47bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3703] futex(0x7f7b7bfa47b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3704] set_robust_list(0x55555719a5e0, 24 [pid 3699] +++ exited with 0 +++ [pid 3684] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3680] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3679] +++ exited with 0 +++ [pid 3636] <... openat resumed>) = 3 [pid 3704] <... set_robust_list resumed>) = 0 [pid 3684] futex(0x7f7b7bfa47bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3680] <... futex resumed>) = 0 [pid 3637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3679, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- [pid 3636] fstat(3, [pid 3677] exit_group(0 [pid 3703] <... futex resumed>) = ? [pid 3677] <... exit_group resumed>) = ? [pid 3703] +++ exited with 0 +++ [pid 3704] chdir("./2") = 0 [pid 3704] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3704] setpgid(0, 0) = 0 [pid 3704] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3704] write(3, "1000", 4) = 4 [pid 3704] close(3) = 0 [ 55.884760][ T3688] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 55.904066][ T3688] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 55.917434][ T1347] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 55.929868][ T3688] EXT4-fs (loop1): This should not happen!! Data will be lost [pid 3704] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3704] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3684] <... futex resumed>) = 0 [pid 3636] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3704] <... futex resumed>) = 0 [pid 3684] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3704] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7b7beab000 [pid 3704] mprotect(0x7f7b7beac000, 131072, PROT_READ|PROT_WRITE [pid 3680] +++ exited with 0 +++ [pid 3677] +++ exited with 0 +++ [pid 3704] <... mprotect resumed>) = 0 [pid 3684] <... mmap resumed>) = 0x7f7b7be8a000 [pid 3636] getdents64(3, [pid 3704] clone(child_stack=0x7f7b7becb3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3634] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3677, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- [pid 3634] restart_syscall(<... resuming interrupted clone ...> [pid 3704] <... clone resumed>, parent_tid=[3705], tls=0x7f7b7becb700, child_tidptr=0x7f7b7becb9d0) = 3705 [pid 3634] <... restart_syscall resumed>) = 0 [pid 3704] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3704] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3634] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3634] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 3634] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3634] getdents64(3, 0x55555719b620 /* 4 entries */, 32768) = 104 [pid 3634] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3634] lstat("./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3634] unlink("./1/binderfs") = 0 ./strace-static-x86_64: Process 3705 attached [pid 3684] mprotect(0x7f7b7be8b000, 131072, PROT_READ|PROT_WRITE [pid 3637] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3636] <... getdents64 resumed>0x55555719b620 /* 4 entries */, 32768) = 104 [pid 3634] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3705] set_robust_list(0x7f7b7becb9e0, 24 [pid 3684] <... mprotect resumed>) = 0 [pid 3637] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 55.929868][ T3688] [ 55.943208][ T3688] EXT4-fs (loop1): Total free blocks count 0 [ 55.951453][ T3688] EXT4-fs (loop1): Free/Dirty block details [ 55.957742][ T3688] EXT4-fs (loop1): free_blocks=2415919104 [ 55.964356][ T11] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 55.965322][ T3688] EXT4-fs (loop1): dirty_blocks=16 [pid 3636] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3705] <... set_robust_list resumed>) = 0 [pid 3688] <... sendfile resumed>) = 117 [pid 3684] clone(child_stack=0x7f7b7beaa3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3637] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3636] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3632] <... umount2 resumed>) = 0 [pid 3705] memfd_create("syzkaller", 0 [pid 3632] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3637] <... openat resumed>) = 3 [pid 3636] lstat("./1/binderfs", [pid 3684] <... clone resumed>, parent_tid=[3706], tls=0x7f7b7beaa700, child_tidptr=0x7f7b7beaa9d0) = 3706 [pid 3637] fstat(3, [pid 3705] <... memfd_create resumed>) = 3 [pid 3636] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3705] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 3684] futex(0x7f7b7bfa47b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3637] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3636] unlink("./1/binderfs" [pid 3705] <... mmap resumed>) = 0x7f7b73a00000 [pid 3636] <... unlink resumed>) = 0 [pid 3632] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3684] <... futex resumed>) = 0 [pid 3637] getdents64(3, [pid 3636] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3632] lstat("./1/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3632] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3632] openat(AT_FDCWD, "./1/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 3632] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3632] getdents64(4, 0x5555571a3660 /* 2 entries */, 32768) = 48 [pid 3632] getdents64(4, [pid 3705] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3632] <... getdents64 resumed>0x5555571a3660 /* 0 entries */, 32768) = 0 [pid 3684] futex(0x7f7b7bfa47bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3637] <... getdents64 resumed>0x55555719b620 /* 4 entries */, 32768) = 104 [pid 3637] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3632] close(4) = 0 [pid 3632] rmdir("./1/bus") = 0 [pid 3632] getdents64(3, 0x55555719b620 /* 0 entries */, 32768) = 0 [pid 3632] close(3) = 0 [pid 3632] rmdir("./1") = 0 [pid 3632] mkdir("./2", 0777) = 0 [pid 3632] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 3632] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 3632] close(3) = 0 [pid 3632] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555719a5d0) = 3707 [pid 3637] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3637] lstat("./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3637] unlink("./1/binderfs") = 0 [pid 3637] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 3706 attached [pid 3705] <... write resumed>) = 1048576 [pid 3688] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3706] set_robust_list(0x7f7b7beaa9e0, 24 [pid 3688] <... futex resumed>) = 0 [pid 3706] <... set_robust_list resumed>) = 0 [pid 3688] futex(0x7f7b7bfa47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3706] creat(0x200001c0, 0420 [pid 3705] munmap(0x7f7b73a00000, 1048576./strace-static-x86_64: Process 3707 attached [pid 3706] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 3707] set_robust_list(0x55555719a5e0, 24 [pid 3706] futex(0x7f7b7bfa47bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3705] <... munmap resumed>) = 0 [pid 3707] <... set_robust_list resumed>) = 0 [pid 3706] <... futex resumed>) = 1 [pid 3705] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 3684] <... futex resumed>) = 0 [pid 3707] chdir("./2" [pid 3706] futex(0x7f7b7bfa47b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3707] <... chdir resumed>) = 0 [pid 3705] <... openat resumed>) = 4 [pid 3684] exit_group(0 [pid 3707] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3684] <... exit_group resumed>) = ? [pid 3688] <... futex resumed>) = ? [pid 3706] <... futex resumed>) = ? [ 55.982936][ T3688] EXT4-fs (loop1): Block reservation details [ 55.990053][ T3688] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 56.008606][ T56] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 56.023704][ T1347] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 3707] <... prctl resumed>) = 0 [pid 3706] +++ exited with 0 +++ [pid 3705] ioctl(4, LOOP_SET_FD, 3 [pid 3688] +++ exited with 0 +++ [pid 3684] +++ exited with 0 +++ [pid 3637] <... umount2 resumed>) = 0 [pid 3707] setpgid(0, 0 [pid 3705] <... ioctl resumed>) = 0 [pid 3633] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3684, si_uid=0, si_status=0, si_utime=0, si_stime=11} --- [pid 3707] <... setpgid resumed>) = 0 [pid 3707] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3705] close(3 [pid 3636] <... umount2 resumed>) = 0 [pid 3634] <... umount2 resumed>) = 0 [pid 3633] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3707] write(3, "1000", 4 [pid 3705] <... close resumed>) = 0 [pid 3633] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3707] <... write resumed>) = 4 [pid 3705] mkdir("./bus", 0777 [pid 3637] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3633] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3707] close(3 [pid 3705] <... mkdir resumed>) = 0 [pid 3637] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3633] <... openat resumed>) = 3 [pid 3707] <... close resumed>) = 0 [pid 3705] mount("/dev/loop3", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 3637] lstat("./1/bus", [pid 3633] fstat(3, [pid 3707] symlink("/dev/binderfs", "./binderfs" [pid 3637] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3636] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3634] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3633] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3707] <... symlink resumed>) = 0 [pid 3637] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3633] getdents64(3, [pid 3707] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3637] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3633] <... getdents64 resumed>0x55555719b620 /* 4 entries */, 32768) = 104 [pid 3707] <... futex resumed>) = 0 [pid 3637] openat(AT_FDCWD, "./1/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3633] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3707] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3637] <... openat resumed>) = 4 [pid 3633] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3707] <... mmap resumed>) = 0x7f7b7beab000 [pid 3637] fstat(4, [pid 3633] lstat("./1/binderfs", [pid 3707] mprotect(0x7f7b7beac000, 131072, PROT_READ|PROT_WRITE [pid 3637] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3633] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3707] <... mprotect resumed>) = 0 [pid 3637] getdents64(4, [pid 3633] unlink("./1/binderfs" [pid 3707] clone(child_stack=0x7f7b7becb3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3637] <... getdents64 resumed>0x5555571a3660 /* 2 entries */, 32768) = 48 [pid 3633] <... unlink resumed>) = 0 [pid 3637] getdents64(4, [pid 3633] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3707] <... clone resumed>, parent_tid=[3708], tls=0x7f7b7becb700, child_tidptr=0x7f7b7becb9d0) = 3708 [pid 3637] <... getdents64 resumed>0x5555571a3660 /* 0 entries */, 32768) = 0 [pid 3707] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3637] close(4 [pid 3707] <... futex resumed>) = 0 [pid 3637] <... close resumed>) = 0 [pid 3707] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [ 56.058333][ T3705] loop3: detected capacity change from 0 to 2048 [pid 3637] rmdir("./1/bus"./strace-static-x86_64: Process 3708 attached ) = 0 [pid 3636] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3634] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3708] set_robust_list(0x7f7b7becb9e0, 24 [pid 3637] getdents64(3, [pid 3636] lstat("./1/bus", [pid 3634] lstat("./1/bus", [pid 3708] <... set_robust_list resumed>) = 0 [pid 3637] <... getdents64 resumed>0x55555719b620 /* 0 entries */, 32768) = 0 [pid 3636] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3634] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3708] memfd_create("syzkaller", 0 [pid 3637] close(3 [pid 3636] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3634] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3637] <... close resumed>) = 0 [pid 3636] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3633] <... umount2 resumed>) = 0 [pid 3637] rmdir("./1" [pid 3636] openat(AT_FDCWD, "./1/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3634] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3633] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3637] <... rmdir resumed>) = 0 [pid 3633] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3637] mkdir("./2", 0777 [pid 3633] lstat("./1/bus", [pid 3708] <... memfd_create resumed>) = 3 [pid 3637] <... mkdir resumed>) = 0 [pid 3633] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3708] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 3637] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 3633] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3708] <... mmap resumed>) = 0x7f7b73a00000 [pid 3705] <... mount resumed>) = 0 [pid 3637] <... openat resumed>) = 3 [pid 3636] <... openat resumed>) = 4 [pid 3634] openat(AT_FDCWD, "./1/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3633] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3705] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 3636] fstat(4, [pid 3634] <... openat resumed>) = 4 [pid 3705] <... openat resumed>) = 3 [pid 3637] ioctl(3, LOOP_CLR_FD [pid 3636] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3634] fstat(4, [pid 3633] openat(AT_FDCWD, "./1/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3705] chdir("./bus" [pid 3636] getdents64(4, [pid 3634] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3705] <... chdir resumed>) = 0 [pid 3637] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 3636] <... getdents64 resumed>0x5555571a3660 /* 2 entries */, 32768) = 48 [pid 3634] getdents64(4, [pid 3633] <... openat resumed>) = 4 [pid 3705] ioctl(4, LOOP_CLR_FD [pid 3637] close(3 [pid 3636] getdents64(4, [pid 3634] <... getdents64 resumed>0x5555571a3660 /* 2 entries */, 32768) = 48 [pid 3633] fstat(4, [pid 3705] <... ioctl resumed>) = 0 [pid 3637] <... close resumed>) = 0 [pid 3636] <... getdents64 resumed>0x5555571a3660 /* 0 entries */, 32768) = 0 [pid 3634] getdents64(4, [pid 3705] close(4 [pid 3636] close(4 [pid 3634] <... getdents64 resumed>0x5555571a3660 /* 0 entries */, 32768) = 0 [pid 3705] <... close resumed>) = 0 [pid 3636] <... close resumed>) = 0 [pid 3634] close(4 [pid 3705] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3636] rmdir("./1/bus" [pid 3634] <... close resumed>) = 0 [pid 3705] <... futex resumed>) = 1 [pid 3704] <... futex resumed>) = 0 [pid 3636] <... rmdir resumed>) = 0 [pid 3634] rmdir("./1/bus" [pid 3705] futex(0x7f7b7bfa47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3704] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3636] getdents64(3, [pid 3634] <... rmdir resumed>) = 0 [pid 3705] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3704] <... futex resumed>) = 0 [pid 3636] <... getdents64 resumed>0x55555719b620 /* 0 entries */, 32768) = 0 [pid 3634] getdents64(3, [pid 3705] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 3704] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3636] close(3 [pid 3634] <... getdents64 resumed>0x55555719b620 /* 0 entries */, 32768) = 0 [pid 3705] <... open resumed>) = 4 [pid 3636] <... close resumed>) = 0 [pid 3634] close(3 [pid 3705] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3636] rmdir("./1" [pid 3634] <... close resumed>) = 0 [pid 3705] <... futex resumed>) = 1 [pid 3704] <... futex resumed>) = 0 [pid 3636] <... rmdir resumed>) = 0 [pid 3634] rmdir("./1" [pid 3705] futex(0x7f7b7bfa47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3704] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3636] mkdir("./2", 0777 [pid 3634] <... rmdir resumed>) = 0 [pid 3633] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3705] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3704] <... futex resumed>) = 0 [pid 3636] <... mkdir resumed>) = 0 [pid 3634] mkdir("./2", 0777 [pid 3633] getdents64(4, [pid 3708] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3705] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 3704] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3637] <... clone resumed>, child_tidptr=0x55555719a5d0) = 3711 [pid 3636] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 3634] <... mkdir resumed>) = 0 [pid 3705] <... write resumed>) = 9 [pid 3636] <... openat resumed>) = 3 [pid 3634] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 3705] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3636] ioctl(3, LOOP_CLR_FD [pid 3634] <... openat resumed>) = 3 [pid 3705] <... futex resumed>) = 1 [pid 3704] <... futex resumed>) = 0 [pid 3636] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 3634] ioctl(3, LOOP_CLR_FD [pid 3705] futex(0x7f7b7bfa47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3704] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3636] close(3 [pid 3634] <... ioctl resumed>) = -1 ENXIO (No such device or address) ./strace-static-x86_64: Process 3711 attached [pid 3705] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3704] <... futex resumed>) = 0 [pid 3636] <... close resumed>) = 0 [pid 3634] close(3 [pid 3711] set_robust_list(0x55555719a5e0, 24 [pid 3705] openat(AT_FDCWD, "./bus", O_RDONLY [pid 3704] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3636] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3634] <... close resumed>) = 0 [pid 3711] <... set_robust_list resumed>) = 0 [pid 3705] <... openat resumed>) = 5 [pid 3634] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3633] <... getdents64 resumed>0x5555571a3660 /* 2 entries */, 32768) = 48 [pid 3711] chdir("./2" [pid 3705] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3636] <... clone resumed>, child_tidptr=0x55555719a5d0) = 3712 [pid 3633] getdents64(4, [pid 3711] <... chdir resumed>) = 0 [pid 3705] <... futex resumed>) = 1 [pid 3704] <... futex resumed>) = 0 [pid 3634] <... clone resumed>, child_tidptr=0x55555719a5d0) = 3713 [pid 3633] <... getdents64 resumed>0x5555571a3660 /* 0 entries */, 32768) = 0 [pid 3711] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3705] futex(0x7f7b7bfa47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3704] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3633] close(4 [pid 3711] <... prctl resumed>) = 0 [pid 3705] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3704] <... futex resumed>) = 0 [pid 3633] <... close resumed>) = 0 [pid 3711] setpgid(0, 0 [pid 3705] open("./bus", O_RDWR [pid 3704] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3633] rmdir("./1/bus" [pid 3711] <... setpgid resumed>) = 0 [pid 3705] <... open resumed>) = 6 [pid 3711] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3705] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3633] <... rmdir resumed>) = 0 [pid 3711] <... openat resumed>) = 3 [pid 3705] <... futex resumed>) = 1 [pid 3704] <... futex resumed>) = 0 [pid 3633] getdents64(3, [pid 3711] write(3, "1000", 4 [pid 3705] futex(0x7f7b7bfa47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3704] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3633] <... getdents64 resumed>0x55555719b620 /* 0 entries */, 32768) = 0 [pid 3711] <... write resumed>) = 4 [pid 3705] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3704] <... futex resumed>) = 0 [pid 3633] close(3./strace-static-x86_64: Process 3713 attached [pid 3711] close(3 [pid 3705] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 3704] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3633] <... close resumed>) = 0 [pid 3713] set_robust_list(0x55555719a5e0, 24 [pid 3711] <... close resumed>) = 0 [pid 3705] <... mmap resumed>) = 0x20000000 [pid 3633] rmdir("./1" [pid 3713] <... set_robust_list resumed>) = 0 [pid 3711] symlink("/dev/binderfs", "./binderfs" [pid 3705] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3713] chdir("./2" [pid 3711] <... symlink resumed>) = 0 [pid 3705] <... futex resumed>) = 1 [pid 3704] <... futex resumed>) = 0 [pid 3633] <... rmdir resumed>) = 0 [pid 3713] <... chdir resumed>) = 0 [pid 3711] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3705] futex(0x7f7b7bfa47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3704] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3633] mkdir("./2", 0777 [pid 3713] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3711] <... futex resumed>) = 0 [pid 3705] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3704] <... futex resumed>) = 0 [pid 3713] <... prctl resumed>) = 0 [pid 3711] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3705] sendfile(4, 5, NULL, 2147483713 [pid 3704] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3713] setpgid(0, 0 [pid 3711] <... mmap resumed>) = 0x7f7b7beab000 [pid 3633] <... mkdir resumed>) = 0 [pid 3713] <... setpgid resumed>) = 0 [ 56.098504][ T1347] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 56.127119][ T3705] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [pid 3711] mprotect(0x7f7b7beac000, 131072, PROT_READ|PROT_WRITE [pid 3633] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 3713] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3711] <... mprotect resumed>) = 0 [pid 3713] <... openat resumed>) = 3 [pid 3711] clone(child_stack=0x7f7b7becb3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3633] <... openat resumed>) = 3 [pid 3713] write(3, "1000", 4) = 4 [pid 3711] <... clone resumed>, parent_tid=[3714], tls=0x7f7b7becb700, child_tidptr=0x7f7b7becb9d0) = 3714 [pid 3713] close(3 [pid 3711] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3713] <... close resumed>) = 0 [pid 3711] <... futex resumed>) = 0 [pid 3713] symlink("/dev/binderfs", "./binderfs" [pid 3711] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3713] <... symlink resumed>) = 0 [pid 3713] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3713] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7b7beab000 [pid 3713] mprotect(0x7f7b7beac000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3713] clone(child_stack=0x7f7b7becb3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3715], tls=0x7f7b7becb700, child_tidptr=0x7f7b7becb9d0) = 3715 [pid 3713] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3713] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 3714 attached [pid 3714] set_robust_list(0x7f7b7becb9e0, 24) = 0 [pid 3714] memfd_create("syzkaller", 0) = 3 [pid 3714] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7b73a00000 ./strace-static-x86_64: Process 3715 attached [pid 3715] set_robust_list(0x7f7b7becb9e0, 24) = 0 [pid 3715] memfd_create("syzkaller", 0) = 3 [pid 3715] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7b73a00000 [pid 3633] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 3633] close(3) = 0 ./strace-static-x86_64: Process 3712 attached [pid 3633] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555719a5d0) = 3716 [pid 3712] set_robust_list(0x55555719a5e0, 24) = 0 [pid 3714] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3712] chdir("./2" [pid 3708] <... write resumed>) = 1048576 [pid 3712] <... chdir resumed>) = 0 [pid 3708] munmap(0x7f7b73a00000, 1048576 [pid 3712] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 3716 attached ) = 0 [pid 3716] set_robust_list(0x55555719a5e0, 24 [pid 3712] setpgid(0, 0 [pid 3708] <... munmap resumed>) = 0 [pid 3716] <... set_robust_list resumed>) = 0 [pid 3712] <... setpgid resumed>) = 0 [pid 3716] chdir("./2" [pid 3715] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3712] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3708] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 3716] <... chdir resumed>) = 0 [pid 3712] <... openat resumed>) = 3 [pid 3716] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3712] write(3, "1000", 4 [pid 3708] <... openat resumed>) = 4 [pid 3712] <... write resumed>) = 4 [pid 3708] ioctl(4, LOOP_SET_FD, 3 [pid 3712] close(3 [pid 3716] <... prctl resumed>) = 0 [pid 3716] setpgid(0, 0 [pid 3712] <... close resumed>) = 0 [pid 3716] <... setpgid resumed>) = 0 [pid 3716] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3712] symlink("/dev/binderfs", "./binderfs" [pid 3704] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3716] <... openat resumed>) = 3 [pid 3712] <... symlink resumed>) = 0 [pid 3708] <... ioctl resumed>) = 0 [pid 3704] futex(0x7f7b7bfa47bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3716] write(3, "1000", 4 [pid 3712] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3708] close(3 [pid 3704] <... futex resumed>) = 0 [ 56.191192][ T3705] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 56.225886][ T3708] loop0: detected capacity change from 0 to 2048 [pid 3716] <... write resumed>) = 4 [pid 3714] <... write resumed>) = 1048576 [pid 3712] <... futex resumed>) = 0 [pid 3708] <... close resumed>) = 0 [pid 3704] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3716] close(3 [pid 3704] <... mmap resumed>) = 0x7f7b7be8a000 [pid 3716] <... close resumed>) = 0 [pid 3704] mprotect(0x7f7b7be8b000, 131072, PROT_READ|PROT_WRITE [pid 3716] symlink("/dev/binderfs", "./binderfs" [pid 3704] <... mprotect resumed>) = 0 [pid 3716] <... symlink resumed>) = 0 [pid 3704] clone(child_stack=0x7f7b7beaa3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3716] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3704] <... clone resumed>, parent_tid=[3717], tls=0x7f7b7beaa700, child_tidptr=0x7f7b7beaa9d0) = 3717 [pid 3716] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3704] futex(0x7f7b7bfa47b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3716] <... mmap resumed>) = 0x7f7b7beab000 [pid 3704] <... futex resumed>) = 0 [pid 3716] mprotect(0x7f7b7beac000, 131072, PROT_READ|PROT_WRITE [pid 3704] futex(0x7f7b7bfa47bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3716] <... mprotect resumed>) = 0 [pid 3716] clone(child_stack=0x7f7b7becb3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3718], tls=0x7f7b7becb700, child_tidptr=0x7f7b7becb9d0) = 3718 [pid 3716] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3716] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 3717 attached [pid 3717] set_robust_list(0x7f7b7beaa9e0, 24) = 0 [pid 3714] munmap(0x7f7b73a00000, 1048576./strace-static-x86_64: Process 3718 attached [pid 3712] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3708] mkdir("./bus", 0777 [pid 3712] <... mmap resumed>) = 0x7f7b7beab000 [pid 3714] <... munmap resumed>) = 0 [pid 3712] mprotect(0x7f7b7beac000, 131072, PROT_READ|PROT_WRITE [pid 3708] <... mkdir resumed>) = 0 [pid 3718] set_robust_list(0x7f7b7becb9e0, 24) = 0 [pid 3712] <... mprotect resumed>) = 0 [pid 3708] mount("/dev/loop0", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 3715] <... write resumed>) = 1048576 [pid 3712] clone(child_stack=0x7f7b7becb3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3715] munmap(0x7f7b73a00000, 1048576 [pid 3714] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 3718] memfd_create("syzkaller", 0 [pid 3715] <... munmap resumed>) = 0 [pid 3714] ioctl(4, LOOP_SET_FD, 3 [pid 3712] <... clone resumed>, parent_tid=[3719], tls=0x7f7b7becb700, child_tidptr=0x7f7b7becb9d0) = 3719 [pid 3718] <... memfd_create resumed>) = 3 [pid 3715] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 3712] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3715] <... openat resumed>) = 4 ./strace-static-x86_64: Process 3719 attached [ 56.247682][ T3705] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 56.268259][ T3714] loop5: detected capacity change from 0 to 2048 [ 56.276437][ T3715] loop2: detected capacity change from 0 to 2048 [pid 3715] ioctl(4, LOOP_SET_FD, 3 [pid 3719] set_robust_list(0x7f7b7becb9e0, 24 [pid 3718] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 3712] <... futex resumed>) = 0 [pid 3719] <... set_robust_list resumed>) = 0 [pid 3719] memfd_create("syzkaller", 0) = 3 [pid 3719] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7b73a00000 [pid 3718] <... mmap resumed>) = 0x7f7b73a00000 [pid 3712] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3704] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3714] <... ioctl resumed>) = 0 [pid 3714] close(3) = 0 [pid 3714] mkdir("./bus", 0777 [pid 3715] <... ioctl resumed>) = 0 [pid 3715] close(3) = 0 [pid 3715] mkdir("./bus", 0777 [pid 3714] <... mkdir resumed>) = 0 [pid 3714] mount("/dev/loop5", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 3715] <... mkdir resumed>) = 0 [pid 3719] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3715] mount("/dev/loop2", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [ 56.289733][ T3651] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 56.308287][ T3705] EXT4-fs (loop3): This should not happen!! Data will be lost [ 56.308287][ T3705] [ 56.321763][ T3705] EXT4-fs (loop3): Total free blocks count 0 [ 56.328791][ T3705] EXT4-fs (loop3): Free/Dirty block details [pid 3718] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3719] <... write resumed>) = 1048576 [pid 3719] munmap(0x7f7b73a00000, 1048576) = 0 [ 56.341877][ T3708] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 56.356693][ T3705] EXT4-fs (loop3): free_blocks=2415919104 [ 56.364813][ T3705] EXT4-fs (loop3): dirty_blocks=16 [ 56.365390][ T3715] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 56.370308][ T3705] EXT4-fs (loop3): Block reservation details [ 56.380995][ T3714] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [pid 3719] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 3718] <... write resumed>) = 1048576 [pid 3708] <... mount resumed>) = 0 [pid 3719] <... openat resumed>) = 4 [pid 3719] ioctl(4, LOOP_SET_FD, 3 [pid 3718] munmap(0x7f7b73a00000, 1048576 [pid 3717] creat(0x200001c0, 0420 [pid 3715] <... mount resumed>) = 0 [pid 3714] <... mount resumed>) = 0 [pid 3708] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 3705] <... sendfile resumed>) = 117 [pid 3718] <... munmap resumed>) = 0 [pid 3717] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 3715] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 3708] <... openat resumed>) = 3 [pid 3705] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3719] <... ioctl resumed>) = 0 [pid 3718] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 3717] futex(0x7f7b7bfa47bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3714] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 3705] <... futex resumed>) = 0 [pid 3717] <... futex resumed>) = 0 [pid 3708] chdir("./bus" [pid 3705] futex(0x7f7b7bfa47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3718] <... openat resumed>) = 4 [pid 3708] <... chdir resumed>) = 0 [pid 3718] ioctl(4, LOOP_SET_FD, 3 [pid 3717] futex(0x7f7b7bfa47b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3708] ioctl(4, LOOP_CLR_FD [pid 3719] close(3 [pid 3714] <... openat resumed>) = 3 [pid 3719] <... close resumed>) = 0 [pid 3719] mkdir("./bus", 0777) = 0 [pid 3714] chdir("./bus") = 0 [pid 3714] ioctl(4, LOOP_CLR_FD) = 0 [pid 3714] close(4) = 0 [pid 3714] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3711] <... futex resumed>) = 0 [pid 3711] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3711] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3714] <... futex resumed>) = 1 [pid 3714] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 3719] mount("/dev/loop4", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 3714] <... open resumed>) = 4 [pid 3714] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3711] <... futex resumed>) = 0 [pid 3711] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3711] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3714] <... futex resumed>) = 1 [pid 3714] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9) = 9 [pid 3714] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3711] <... futex resumed>) = 0 [pid 3711] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3711] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3714] <... futex resumed>) = 1 [pid 3714] openat(AT_FDCWD, "./bus", O_RDONLY [pid 3708] <... ioctl resumed>) = 0 [pid 3704] exit_group(0) = ? [pid 3705] <... futex resumed>) = ? [pid 3708] close(4 [pid 3705] +++ exited with 0 +++ [pid 3717] <... futex resumed>) = ? [pid 3708] <... close resumed>) = 0 [pid 3714] <... openat resumed>) = 5 [pid 3714] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3711] <... futex resumed>) = 0 [pid 3714] open("./bus", O_RDWR [pid 3711] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3714] <... open resumed>) = 6 [pid 3711] <... futex resumed>) = 0 [pid 3714] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3711] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3714] <... futex resumed>) = 0 [pid 3711] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3714] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 3711] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3717] +++ exited with 0 +++ [pid 3714] <... mmap resumed>) = 0x20000000 [pid 3711] <... futex resumed>) = 0 [pid 3708] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3704] +++ exited with 0 +++ [pid 3714] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3711] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3708] <... futex resumed>) = 1 [pid 3707] <... futex resumed>) = 0 [pid 3635] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3704, si_uid=0, si_status=0, si_utime=0, si_stime=11} --- [pid 3715] <... openat resumed>) = 3 [pid 3714] <... futex resumed>) = 0 [pid 3711] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3708] futex(0x7f7b7bfa47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3707] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3715] chdir("./bus" [pid 3714] sendfile(4, 5, NULL, 2147483713 [pid 3711] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3708] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3707] <... futex resumed>) = 0 [pid 3718] <... ioctl resumed>) = 0 [pid 3715] <... chdir resumed>) = 0 [pid 3711] <... futex resumed>) = 0 [pid 3708] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 3707] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3715] ioctl(4, LOOP_CLR_FD [pid 3711] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3715] <... ioctl resumed>) = 0 [pid 3708] <... open resumed>) = 4 [pid 3635] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3708] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3635] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3715] close(4 [pid 3708] <... futex resumed>) = 1 [pid 3707] <... futex resumed>) = 0 [pid 3635] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3715] <... close resumed>) = 0 [pid 3708] futex(0x7f7b7bfa47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3707] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3635] <... openat resumed>) = 3 [ 56.384919][ T3705] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 56.395242][ T3719] loop4: detected capacity change from 0 to 2048 [ 56.408169][ T3718] loop1: detected capacity change from 0 to 2048 [pid 3715] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3708] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3707] <... futex resumed>) = 0 [pid 3635] fstat(3, [pid 3715] <... futex resumed>) = 1 [pid 3713] <... futex resumed>) = 0 [pid 3708] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 3707] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3635] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3715] futex(0x7f7b7bfa47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3713] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3635] getdents64(3, [pid 3713] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3635] <... getdents64 resumed>0x55555719b620 /* 4 entries */, 32768) = 104 [pid 3635] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3708] <... write resumed>) = 9 [pid 3715] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3635] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3708] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3707] <... futex resumed>) = 0 [pid 3635] lstat("./2/binderfs", [pid 3715] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 3708] openat(AT_FDCWD, "./bus", O_RDONLY [pid 3707] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3635] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3707] <... futex resumed>) = 0 [pid 3707] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3708] <... openat resumed>) = 5 [pid 3635] unlink("./2/binderfs" [pid 3708] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3715] <... open resumed>) = 4 [pid 3708] <... futex resumed>) = 1 [pid 3707] <... futex resumed>) = 0 [pid 3635] <... unlink resumed>) = 0 [pid 3707] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3707] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3708] open("./bus", O_RDWR [pid 3635] umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW [ 56.439206][ T3714] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 56.470222][ T11] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 3715] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3713] <... futex resumed>) = 0 [pid 3708] <... open resumed>) = 6 [pid 3715] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 3713] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3708] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3713] <... futex resumed>) = 0 [pid 3713] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3715] <... write resumed>) = 9 [pid 3708] <... futex resumed>) = 1 [pid 3707] <... futex resumed>) = 0 [pid 3715] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3708] futex(0x7f7b7bfa47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3707] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3708] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3707] <... futex resumed>) = 0 [pid 3707] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3708] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 3715] <... futex resumed>) = 1 [pid 3713] <... futex resumed>) = 0 [pid 3713] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3713] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3718] close(3) = 0 [pid 3718] mkdir("./bus", 0777) = 0 [pid 3718] mount("/dev/loop1", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 3711] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3711] futex(0x7f7b7bfa47bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3711] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3715] openat(AT_FDCWD, "./bus", O_RDONLY [pid 3711] <... mmap resumed>) = 0x7f7b7be8a000 [pid 3708] <... mmap resumed>) = 0x20000000 [pid 3711] mprotect(0x7f7b7be8b000, 131072, PROT_READ|PROT_WRITE [pid 3715] <... openat resumed>) = 5 [pid 3708] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3707] <... futex resumed>) = 0 [pid 3708] <... futex resumed>) = 1 [pid 3715] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3707] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3708] sendfile(4, 5, NULL, 2147483713 [pid 3713] <... futex resumed>) = 0 [pid 3707] <... futex resumed>) = 0 [pid 3715] <... futex resumed>) = 1 [pid 3713] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3707] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3715] open("./bus", O_RDWR [pid 3713] <... futex resumed>) = 0 [pid 3711] <... mprotect resumed>) = 0 [pid 3713] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 56.472832][ T3714] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 3711] clone(child_stack=0x7f7b7beaa3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3715] <... open resumed>) = 6 [pid 3711] <... clone resumed>, parent_tid=[3726], tls=0x7f7b7beaa700, child_tidptr=0x7f7b7beaa9d0) = 3726 [pid 3715] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3711] futex(0x7f7b7bfa47b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3715] <... futex resumed>) = 1 [pid 3713] <... futex resumed>) = 0 [pid 3711] <... futex resumed>) = 0 [pid 3715] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 3713] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3711] futex(0x7f7b7bfa47bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3713] <... futex resumed>) = 0 [pid 3713] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 3726 attached [pid 3726] set_robust_list(0x7f7b7beaa9e0, 24) = 0 [pid 3715] <... mmap resumed>) = 0x20000000 [pid 3715] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3713] <... futex resumed>) = 0 [pid 3715] futex(0x7f7b7bfa47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3713] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3715] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3713] <... futex resumed>) = 0 [pid 3713] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3715] sendfile(4, 5, NULL, 2147483713 [pid 3707] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3707] futex(0x7f7b7bfa47bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3707] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7b7be8a000 [pid 3707] mprotect(0x7f7b7be8b000, 131072, PROT_READ|PROT_WRITE) = 0 [ 56.509777][ T3714] EXT4-fs (loop5): This should not happen!! Data will be lost [ 56.509777][ T3714] [ 56.522556][ T3714] EXT4-fs (loop5): Total free blocks count 0 [ 56.533129][ T3714] EXT4-fs (loop5): Free/Dirty block details [ 56.534262][ T3719] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 56.540637][ T3714] EXT4-fs (loop5): free_blocks=2415919104 [pid 3707] clone(child_stack=0x7f7b7beaa3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3731], tls=0x7f7b7beaa700, child_tidptr=0x7f7b7beaa9d0) = 3731 [pid 3707] futex(0x7f7b7bfa47b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3707] futex(0x7f7b7bfa47bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 3731 attached [pid 3711] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3731] set_robust_list(0x7f7b7beaa9e0, 24) = 0 [ 56.551596][ T3715] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 56.574525][ T3718] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 56.574842][ T3731] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 3731] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200001c0} --- [pid 3713] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3707] <... futex resumed>) = ? [pid 3635] <... umount2 resumed>) = 0 [pid 3713] futex(0x7f7b7bfa47bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3713] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3719] <... mount resumed>) = 0 [pid 3713] <... mmap resumed>) = 0x7f7b7be8a000 [pid 3635] umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3713] mprotect(0x7f7b7be8b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3635] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3713] clone(child_stack=0x7f7b7beaa3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3635] lstat("./2/bus", [pid 3713] <... clone resumed>, parent_tid=[3732], tls=0x7f7b7beaa700, child_tidptr=0x7f7b7beaa9d0) = 3732 [pid 3713] futex(0x7f7b7bfa47b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3713] futex(0x7f7b7bfa47bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3635] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3635] umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3635] openat(AT_FDCWD, "./2/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 3635] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3635] getdents64(4, 0x5555571a3660 /* 2 entries */, 32768) = 48 [pid 3635] getdents64(4, ./strace-static-x86_64: Process 3732 attached 0x5555571a3660 /* 0 entries */, 32768) = 0 [pid 3732] set_robust_list(0x7f7b7beaa9e0, 24 [pid 3635] close(4 [pid 3732] <... set_robust_list resumed>) = 0 [pid 3635] <... close resumed>) = 0 [pid 3635] rmdir("./2/bus") = 0 [pid 3635] getdents64(3, 0x55555719b620 /* 0 entries */, 32768) = 0 [pid 3635] close(3) = 0 [pid 3635] rmdir("./2" [pid 3718] <... mount resumed>) = 0 [pid 3635] <... rmdir resumed>) = 0 [pid 3718] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 3635] mkdir("./3", 0777 [pid 3719] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 3718] <... openat resumed>) = 3 [pid 3635] <... mkdir resumed>) = 0 [pid 3719] <... openat resumed>) = 3 [pid 3718] chdir("./bus" [pid 3719] chdir("./bus" [pid 3718] <... chdir resumed>) = 0 [pid 3635] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 3719] <... chdir resumed>) = 0 [pid 3718] ioctl(4, LOOP_CLR_FD [pid 3635] <... openat resumed>) = 3 [pid 3719] ioctl(4, LOOP_CLR_FD [pid 3718] <... ioctl resumed>) = 0 [pid 3635] ioctl(3, LOOP_CLR_FD [pid 3719] <... ioctl resumed>) = 0 [pid 3718] close(4 [pid 3635] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 3719] close(4 [pid 3718] <... close resumed>) = 0 [pid 3635] close(3 [pid 3719] <... close resumed>) = 0 [ 56.601916][ T3708] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 56.618636][ T3715] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 56.631135][ T3715] EXT4-fs (loop2): This should not happen!! Data will be lost [ 56.631135][ T3715] [ 56.640715][ T3708] EXT4-fs (loop0): This should not happen!! Data will be lost [ 56.640715][ T3708] [ 56.653904][ T3715] EXT4-fs (loop2): Total free blocks count 0 [pid 3718] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3635] <... close resumed>) = 0 [pid 3719] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3718] <... futex resumed>) = 1 [pid 3716] <... futex resumed>) = 0 [pid 3713] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3635] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3719] <... futex resumed>) = 1 [pid 3718] futex(0x7f7b7bfa47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3716] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3712] <... futex resumed>) = 0 ./strace-static-x86_64: Process 3733 attached [pid 3719] futex(0x7f7b7bfa47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3718] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3716] <... futex resumed>) = 0 [pid 3712] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3635] <... clone resumed>, child_tidptr=0x55555719a5d0) = 3733 [pid 3719] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3718] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 3716] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3712] <... futex resumed>) = 0 [pid 3733] set_robust_list(0x55555719a5e0, 24 [pid 3732] creat(0x200001c0, 0420 [pid 3719] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 3718] <... open resumed>) = 4 [pid 3715] <... sendfile resumed>) = 117 [pid 3712] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3733] <... set_robust_list resumed>) = 0 [pid 3732] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 3719] <... open resumed>) = 4 [pid 3718] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3733] chdir("./3" [pid 3732] futex(0x7f7b7bfa47bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3719] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3718] <... futex resumed>) = 1 [pid 3716] <... futex resumed>) = 0 [pid 3715] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3733] <... chdir resumed>) = 0 [pid 3732] <... futex resumed>) = 0 [pid 3719] <... futex resumed>) = 1 [pid 3718] futex(0x7f7b7bfa47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3716] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3712] <... futex resumed>) = 0 [pid 3733] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3732] futex(0x7f7b7bfa47b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3719] futex(0x7f7b7bfa47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3718] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3716] <... futex resumed>) = 0 [pid 3715] <... futex resumed>) = 0 [ 56.660481][ T3715] EXT4-fs (loop2): Free/Dirty block details [ 56.666405][ T3715] EXT4-fs (loop2): free_blocks=2415919104 [ 56.672566][ T3715] EXT4-fs (loop2): dirty_blocks=16 [ 56.678163][ T3714] EXT4-fs (loop5): dirty_blocks=16 [ 56.678246][ T3715] EXT4-fs (loop2): Block reservation details [ 56.689485][ T3715] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 56.695650][ T3708] EXT4-fs (loop0): Total free blocks count 0 [ 56.701761][ T3708] EXT4-fs (loop0): Free/Dirty block details [pid 3713] exit_group(0 [pid 3712] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3733] <... prctl resumed>) = 0 [pid 3732] <... futex resumed>) = ? [pid 3719] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3718] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 3716] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3713] <... exit_group resumed>) = ? [pid 3712] <... futex resumed>) = 0 [pid 3733] setpgid(0, 0 [pid 3732] +++ exited with 0 +++ [pid 3719] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 3718] <... write resumed>) = 9 [pid 3712] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3733] <... setpgid resumed>) = 0 [pid 3719] <... write resumed>) = 9 [pid 3718] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3715] +++ exited with 0 +++ [pid 3713] +++ exited with 0 +++ [pid 3733] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3719] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3718] <... futex resumed>) = 1 [pid 3716] <... futex resumed>) = 0 [pid 3634] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3713, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- [pid 3733] <... openat resumed>) = 3 [pid 3719] <... futex resumed>) = 1 [pid 3718] futex(0x7f7b7bfa47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3716] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3712] <... futex resumed>) = 0 [pid 3634] restart_syscall(<... resuming interrupted clone ...> [pid 3733] write(3, "1000", 4 [pid 3719] futex(0x7f7b7bfa47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3718] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3716] <... futex resumed>) = 0 [pid 3712] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3708] <... sendfile resumed>) = ? [pid 3634] <... restart_syscall resumed>) = 0 [pid 3733] <... write resumed>) = 4 [pid 3719] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3718] openat(AT_FDCWD, "./bus", O_RDONLY [pid 3716] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3712] <... futex resumed>) = 0 [pid 3733] close(3 [pid 3719] openat(AT_FDCWD, "./bus", O_RDONLY [pid 3718] <... openat resumed>) = 5 [pid 3712] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3733] <... close resumed>) = 0 [pid 3731] +++ killed by SIGBUS +++ [pid 3726] creat(0x200001c0, 0420 [pid 3719] <... openat resumed>) = 5 [pid 3718] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3714] <... sendfile resumed>) = 117 [pid 3708] +++ killed by SIGBUS +++ [pid 3707] +++ killed by SIGBUS +++ [pid 3634] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3733] symlink("/dev/binderfs", "./binderfs" [pid 3726] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 3719] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3718] <... futex resumed>) = 1 [pid 3716] <... futex resumed>) = 0 [pid 3714] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3634] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3632] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3707, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=15} --- [pid 3733] <... symlink resumed>) = 0 [pid 3726] futex(0x7f7b7bfa47bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3719] <... futex resumed>) = 1 [pid 3718] futex(0x7f7b7bfa47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3716] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3714] <... futex resumed>) = 0 [pid 3712] <... futex resumed>) = 0 [pid 3634] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3632] restart_syscall(<... resuming interrupted clone ...> [pid 3733] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3726] <... futex resumed>) = 0 [pid 3719] futex(0x7f7b7bfa47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3718] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3716] <... futex resumed>) = 0 [pid 3714] futex(0x7f7b7bfa47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3712] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3711] exit_group(0 [pid 3634] <... openat resumed>) = 3 [pid 3632] <... restart_syscall resumed>) = 0 [pid 3733] <... futex resumed>) = 0 [pid 3719] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3718] open("./bus", O_RDWR [pid 3716] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3714] <... futex resumed>) = ? [pid 3712] <... futex resumed>) = 0 [pid 3711] <... exit_group resumed>) = ? [pid 3634] fstat(3, [pid 3733] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3726] +++ exited with 0 +++ [pid 3719] open("./bus", O_RDWR [pid 3718] <... open resumed>) = 6 [pid 3714] +++ exited with 0 +++ [pid 3712] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3719] <... open resumed>) = 6 [pid 3733] <... mmap resumed>) = 0x7f7b7beab000 [pid 3733] mprotect(0x7f7b7beac000, 131072, PROT_READ|PROT_WRITE [pid 3719] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3718] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3711] +++ exited with 0 +++ [pid 3634] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3632] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3733] <... mprotect resumed>) = 0 [pid 3719] <... futex resumed>) = 1 [pid 3718] <... futex resumed>) = 1 [pid 3716] <... futex resumed>) = 0 [pid 3712] <... futex resumed>) = 0 [pid 3634] getdents64(3, [pid 3632] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3733] clone(child_stack=0x7f7b7becb3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3719] futex(0x7f7b7bfa47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3718] futex(0x7f7b7bfa47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3716] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3712] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3711, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- [pid 3634] <... getdents64 resumed>0x55555719b620 /* 4 entries */, 32768) = 104 [pid 3632] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3719] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3718] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3716] <... futex resumed>) = 0 [pid 3712] <... futex resumed>) = 0 [pid 3637] restart_syscall(<... resuming interrupted clone ...> [pid 3634] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3632] <... openat resumed>) = 3 [pid 3733] <... clone resumed>, parent_tid=[3734], tls=0x7f7b7becb700, child_tidptr=0x7f7b7becb9d0) = 3734 [pid 3719] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 3718] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 3716] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3712] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3637] <... restart_syscall resumed>) = 0 [pid 3634] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3632] fstat(3, [pid 3733] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3719] <... mmap resumed>) = 0x20000000 [pid 3718] <... mmap resumed>) = 0x20000000 [pid 3634] lstat("./2/binderfs", [pid 3632] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 3734 attached [pid 3733] <... futex resumed>) = 0 [pid 3719] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3718] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3632] getdents64(3, [pid 3734] set_robust_list(0x7f7b7becb9e0, 24 [pid 3733] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3719] <... futex resumed>) = 1 [pid 3718] <... futex resumed>) = 1 [pid 3716] <... futex resumed>) = 0 [pid 3712] <... futex resumed>) = 0 [pid 3637] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3634] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3632] <... getdents64 resumed>0x55555719b620 /* 4 entries */, 32768) = 104 [pid 3719] futex(0x7f7b7bfa47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3718] futex(0x7f7b7bfa47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3716] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3712] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3637] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3634] unlink("./2/binderfs" [pid 3632] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3719] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3718] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3716] <... futex resumed>) = 0 [pid 3712] <... futex resumed>) = 0 [pid 3637] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3632] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3734] <... set_robust_list resumed>) = 0 [pid 3719] sendfile(4, 5, NULL, 2147483713 [pid 3718] sendfile(4, 5, NULL, 2147483713 [pid 3716] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3712] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3637] <... openat resumed>) = 3 [pid 3634] <... unlink resumed>) = 0 [ 56.707916][ T3708] EXT4-fs (loop0): free_blocks=2415919104 [ 56.711764][ T3714] EXT4-fs (loop5): Block reservation details [ 56.713706][ T3708] EXT4-fs (loop0): dirty_blocks=16 [ 56.725145][ T3708] EXT4-fs (loop0): Block reservation details [ 56.733135][ T3708] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 56.740221][ T3714] EXT4-fs (loop5): i_reserved_data_blocks=1 [pid 3632] lstat("./2/binderfs", [pid 3734] memfd_create("syzkaller", 0 [pid 3637] fstat(3, [pid 3634] umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3734] <... memfd_create resumed>) = 3 [pid 3637] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3632] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3734] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 3637] getdents64(3, [pid 3632] unlink("./2/binderfs" [pid 3637] <... getdents64 resumed>0x55555719b620 /* 4 entries */, 32768) = 104 [pid 3632] <... unlink resumed>) = 0 [pid 3637] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3632] umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3637] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3637] lstat("./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3637] unlink("./2/binderfs") = 0 [pid 3637] umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3734] <... mmap resumed>) = 0x7f7b73a00000 [ 56.794946][ T1347] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 56.800343][ T3719] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 56.822932][ T9] ------------[ cut here ]------------ [ 56.829253][ T3718] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 3734] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3716] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3712] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3734] <... write resumed>) = 1048576 [pid 3734] munmap(0x7f7b73a00000, 1048576) = 0 [pid 3734] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 56.830168][ T11] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 56.856829][ T9] kernel BUG at fs/ext4/inode.c:2739! [ 56.862596][ T9] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 56.868680][ T9] CPU: 0 PID: 9 Comm: kworker/u4:0 Not tainted 6.1.0-rc7-syzkaller-00101-g01f856ae6d0c #0 [ 56.869502][ T3734] loop3: detected capacity change from 0 to 2048 [ 56.878564][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [pid 3734] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 3734] close(3) = 0 [pid 3734] mkdir("./bus", 0777) = 0 [ 56.878576][ T9] Workqueue: writeback wb_workfn (flush-7:0) [ 56.878616][ T9] RIP: 0010:ext4_writepages+0x3bd4/0x3be0 [ 56.885158][ T3718] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 56.894963][ T9] Code: c7 30 80 2b 8d 4c 89 fa e8 09 4e 32 02 e9 a6 fb ff ff e8 0f ec 52 ff 0f 0b e8 08 ec 52 ff 0f 0b e8 81 88 5a 08 e8 fc eb 52 ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 41 57 41 56 41 55 41 54 53 49 [ 56.894983][ T9] RSP: 0018:ffffc900000e6f40 EFLAGS: 00010293 [ 56.904464][ T3718] EXT4-fs (loop1): This should not happen!! Data will be lost [ 56.904464][ T3718] [ 56.906672][ T9] RAX: ffffffff8237abf4 RBX: 0000008000000000 RCX: ffff88813fee0000 [ 56.906688][ T9] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000 [ 56.906698][ T9] RBP: ffffc900000e7330 R08: ffffffff823775f2 R09: ffffed100e3ab14c [ 56.906710][ T9] R10: ffffed100e3ab14c R11: 1ffff1100e3ab14b R12: ffff888071d58ce0 [ 56.919165][ T3718] EXT4-fs (loop1): Total free blocks count 0 [ 56.938502][ T9] R13: 0000000000000001 R14: 0000008410000000 R15: ffff888071d58cb8 [ 56.938522][ T9] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 56.938535][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 56.938546][ T9] CR2: 00005555571a3628 CR3: 0000000028620000 CR4: 00000000003506f0 [ 56.938559][ T9] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 56.938567][ T9] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 56.938577][ T9] Call Trace: [ 56.938584][ T9] [ 56.938592][ T9] ? deref_stack_reg+0x17a/0x210 [ 56.938613][ T9] ? deref_stack_reg+0x17a/0x210 [ 56.938631][ T9] ? mark_lock+0x9a/0x350 [ 56.938651][ T9] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 56.938672][ T9] ? ext4_read_folio+0x140/0x140 [ 56.938691][ T9] ? mark_lock+0x9a/0x350 [ 56.938708][ T9] ? __lock_acquire+0x1292/0x1f60 [ 56.938731][ T9] ? rcu_read_lock_sched_held+0x87/0x110 [ 56.938746][ T9] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 56.938761][ T9] ? ext4_read_folio+0x140/0x140 [ 56.938775][ T9] do_writepages+0x3c3/0x680 [ 56.938792][ T9] ? __writepage+0x120/0x120 [ 56.938810][ T9] ? rcu_read_lock_sched_held+0x87/0x110 [ 57.111266][ T9] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 57.117246][ T9] ? do_raw_spin_unlock+0x134/0x8a0 [ 57.122437][ T9] ? trace_writeback_single_inode_start+0xe5/0x2c0 [ 57.128933][ T9] __writeback_single_inode+0xd1/0x670 [ 57.134386][ T9] ? wbc_attach_and_unlock_inode+0x350/0x540 [ 57.140357][ T9] writeback_sb_inodes+0xb3b/0x18f0 [ 57.145548][ T9] ? __lock_acquire+0x1f60/0x1f60 [ 57.150568][ T9] ? move_expired_inodes+0x889/0x8e0 [ 57.155845][ T9] ? queue_io+0x400/0x400 [ 57.160171][ T9] ? queue_io+0x382/0x400 [ 57.164494][ T9] ? trace_writeback_queue_io+0xe8/0x2d0 [ 57.170117][ T9] wb_writeback+0x41f/0x7b0 [ 57.174617][ T9] ? trace_writeback_exec+0x2c0/0x2c0 [ 57.179979][ T9] ? rcu_read_lock_sched_held+0x87/0x110 [ 57.185607][ T9] ? do_raw_spin_unlock+0x134/0x8a0 [ 57.190796][ T9] wb_workfn+0x3cb/0xef0 [ 57.195043][ T9] ? inode_wait_for_writeback+0x2c0/0x2c0 [ 57.200756][ T9] ? rcu_read_lock_sched_held+0x87/0x110 [ 57.206378][ T9] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 57.212343][ T9] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 57.218244][ T9] ? do_raw_spin_unlock+0x134/0x8a0 [ 57.223435][ T9] process_one_work+0x877/0xdb0 [ 57.228283][ T9] ? worker_detach_from_pool+0x260/0x260 [ 57.233918][ T9] ? _raw_spin_lock_irq+0xba/0xf0 [ 57.238933][ T9] ? _raw_spin_lock_irqsave+0x100/0x100 [pid 3734] mount("/dev/loop3", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 3716] futex(0x7f7b7bfa47bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3712] futex(0x7f7b7bfa47bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3716] <... futex resumed>) = 0 [pid 3712] <... futex resumed>) = 0 [pid 3716] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3712] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3716] <... mmap resumed>) = 0x7f7b7be8a000 [pid 3712] <... mmap resumed>) = 0x7f7b7be8a000 [pid 3716] mprotect(0x7f7b7be8b000, 131072, PROT_READ|PROT_WRITE [pid 3712] mprotect(0x7f7b7be8b000, 131072, PROT_READ|PROT_WRITE [pid 3716] <... mprotect resumed>) = 0 [pid 3712] <... mprotect resumed>) = 0 [pid 3716] clone(child_stack=0x7f7b7beaa3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3712] clone(child_stack=0x7f7b7beaa3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3716] <... clone resumed>, parent_tid=[3736], tls=0x7f7b7beaa700, child_tidptr=0x7f7b7beaa9d0) = 3736 [pid 3716] futex(0x7f7b7bfa47b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3712] <... clone resumed>, parent_tid=[3737], tls=0x7f7b7beaa700, child_tidptr=0x7f7b7beaa9d0) = 3737 [pid 3716] <... futex resumed>) = 0 [pid 3712] futex(0x7f7b7bfa47b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3716] futex(0x7f7b7bfa47bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3712] <... futex resumed>) = 0 [pid 3712] futex(0x7f7b7bfa47bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 3737 attached [pid 3737] set_robust_list(0x7f7b7beaa9e0, 24) = 0 ./strace-static-x86_64: Process 3736 attached [pid 3634] <... umount2 resumed>) = 0 [pid 3736] set_robust_list(0x7f7b7beaa9e0, 24) = 0 [ 57.244471][ T9] worker_thread+0xb14/0x1330 [ 57.249148][ T9] kthread+0x266/0x300 [ 57.253204][ T9] ? rcu_lock_release+0x20/0x20 [ 57.258045][ T9] ? kthread_blkcg+0xd0/0xd0 [ 57.262622][ T9] ret_from_fork+0x1f/0x30 [ 57.267033][ T9] [ 57.270036][ T9] Modules linked in: [ 57.275796][ T3718] EXT4-fs (loop1): Free/Dirty block details [ 57.283188][ T3718] EXT4-fs (loop1): free_blocks=2415919104 [ 57.289904][ T3718] EXT4-fs (loop1): dirty_blocks=16 [pid 3634] umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3634] lstat("./2/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3634] umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3634] openat(AT_FDCWD, "./2/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 3634] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3634] getdents64(4, 0x5555571a3660 /* 2 entries */, 32768) = 48 [pid 3634] getdents64(4, 0x5555571a3660 /* 0 entries */, 32768) = 0 [pid 3634] close(4) = 0 [pid 3634] rmdir("./2/bus") = 0 [pid 3634] getdents64(3, 0x55555719b620 /* 0 entries */, 32768) = 0 [pid 3634] close(3) = 0 [pid 3634] rmdir("./2") = 0 [pid 3634] mkdir("./3", 0777) = 0 [pid 3634] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 3634] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 3634] close(3) = 0 [pid 3634] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3739 attached [pid 3716] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3712] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3739] set_robust_list(0x55555719a5e0, 24) = 0 [pid 3634] <... clone resumed>, child_tidptr=0x55555719a5d0) = 3739 [ 57.291077][ T3734] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 57.295346][ T3719] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 57.316834][ T3719] EXT4-fs (loop4): This should not happen!! Data will be lost [ 57.316834][ T3719] [ 57.322352][ T3718] EXT4-fs (loop1): Block reservation details [ 57.327135][ T3719] EXT4-fs (loop4): Total free blocks count 0 [ 57.338805][ T3719] EXT4-fs (loop4): Free/Dirty block details [pid 3739] chdir("./3") = 0 [pid 3739] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3734] <... mount resumed>) = 0 [pid 3734] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3734] chdir("./bus") = 0 [pid 3734] ioctl(4, LOOP_CLR_FD) = 0 [pid 3734] close(4 [pid 3739] setpgid(0, 0 [pid 3737] creat(0x200001c0, 0420 [pid 3719] <... sendfile resumed>) = 117 [pid 3637] <... umount2 resumed>) = 0 [pid 3737] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 3737] futex(0x7f7b7bfa47bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3737] futex(0x7f7b7bfa47b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3637] umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3739] <... setpgid resumed>) = 0 [pid 3734] <... close resumed>) = 0 [pid 3719] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3712] exit_group(0 [pid 3737] <... futex resumed>) = ? [pid 3712] <... exit_group resumed>) = ? [pid 3737] +++ exited with 0 +++ [pid 3637] lstat("./2/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3637] umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3637] openat(AT_FDCWD, "./2/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 3637] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3637] getdents64(4, 0x5555571a3660 /* 2 entries */, 32768) = 48 [ 57.345086][ T3719] EXT4-fs (loop4): free_blocks=2415919104 [ 57.351029][ T3719] EXT4-fs (loop4): dirty_blocks=16 [ 57.356401][ T3719] EXT4-fs (loop4): Block reservation details [ 57.363311][ T3719] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 57.369385][ T9] ---[ end trace 0000000000000000 ]--- [ 57.374840][ T9] RIP: 0010:ext4_writepages+0x3bd4/0x3be0 [pid 3637] getdents64(4, 0x5555571a3660 /* 0 entries */, 32768) = 0 [pid 3637] close(4) = 0 [pid 3637] rmdir("./2/bus") = 0 [pid 3739] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3719] <... futex resumed>) = ? [pid 3637] getdents64(3, [pid 3719] +++ exited with 0 +++ [pid 3712] +++ exited with 0 +++ [pid 3636] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3712, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- [pid 3739] <... openat resumed>) = 3 [pid 3636] restart_syscall(<... resuming interrupted clone ...> [pid 3637] <... getdents64 resumed>0x55555719b620 /* 0 entries */, 32768) = 0 [pid 3637] close(3) = 0 [pid 3636] <... restart_syscall resumed>) = 0 [pid 3636] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3734] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3637] rmdir("./2" [pid 3636] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3739] write(3, "1000", 4 [pid 3734] <... futex resumed>) = 1 [pid 3733] <... futex resumed>) = 0 [pid 3637] <... rmdir resumed>) = 0 [pid 3636] <... openat resumed>) = 3 [pid 3739] <... write resumed>) = 4 [pid 3733] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3636] fstat(3, [pid 3739] close(3 [pid 3733] <... futex resumed>) = 0 [pid 3636] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3739] <... close resumed>) = 0 [pid 3733] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3636] getdents64(3, [pid 3739] symlink("/dev/binderfs", "./binderfs" [pid 3636] <... getdents64 resumed>0x55555719b620 /* 4 entries */, 32768) = 104 [pid 3739] <... symlink resumed>) = 0 [pid 3734] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 3637] mkdir("./3", 0777 [pid 3636] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3739] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3734] <... open resumed>) = 4 [pid 3637] <... mkdir resumed>) = 0 [pid 3636] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3739] <... futex resumed>) = 0 [pid 3734] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3637] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 3636] lstat("./2/binderfs", [pid 3739] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3734] <... futex resumed>) = 1 [pid 3733] <... futex resumed>) = 0 [pid 3637] <... openat resumed>) = 3 [pid 3636] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3739] <... mmap resumed>) = 0x7f7b7beab000 [pid 3734] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 3733] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3637] ioctl(3, LOOP_CLR_FD [pid 3636] unlink("./2/binderfs" [pid 3739] mprotect(0x7f7b7beac000, 131072, PROT_READ|PROT_WRITE [pid 3734] <... write resumed>) = 9 [pid 3733] <... futex resumed>) = 0 [pid 3637] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 3636] <... unlink resumed>) = 0 [pid 3739] <... mprotect resumed>) = 0 [pid 3734] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3733] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3637] close(3 [pid 3636] umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3739] clone(child_stack=0x7f7b7becb3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3734] <... futex resumed>) = 0 [pid 3733] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3637] <... close resumed>) = 0 [pid 3734] openat(AT_FDCWD, "./bus", O_RDONLY [pid 3733] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3739] <... clone resumed>, parent_tid=[3740], tls=0x7f7b7becb700, child_tidptr=0x7f7b7becb9d0) = 3740 [pid 3734] <... openat resumed>) = 5 [pid 3733] <... futex resumed>) = 0 [pid 3739] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3734] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3733] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3637] <... clone resumed>, child_tidptr=0x55555719a5d0) = 3741 ./strace-static-x86_64: Process 3740 attached [pid 3739] <... futex resumed>) = 0 [pid 3734] <... futex resumed>) = 0 [pid 3733] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3739] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3734] futex(0x7f7b7bfa47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3733] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3734] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3733] <... futex resumed>) = 0 [pid 3734] open("./bus", O_RDWR [pid 3733] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3734] <... open resumed>) = 6 [pid 3734] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3733] <... futex resumed>) = 0 [pid 3734] futex(0x7f7b7bfa47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3733] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3734] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3733] <... futex resumed>) = 0 [pid 3718] <... sendfile resumed>) = 117 ./strace-static-x86_64: Process 3741 attached [pid 3734] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 3733] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3718] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3741] set_robust_list(0x55555719a5e0, 24 [pid 3734] <... mmap resumed>) = 0x20000000 [pid 3718] <... futex resumed>) = 0 [pid 3741] <... set_robust_list resumed>) = 0 [pid 3734] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3718] futex(0x7f7b7bfa47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3741] chdir("./3" [pid 3734] <... futex resumed>) = 1 [ 57.380955][ T9] Code: c7 30 80 2b 8d 4c 89 fa e8 09 4e 32 02 e9 a6 fb ff ff e8 0f ec 52 ff 0f 0b e8 08 ec 52 ff 0f 0b e8 81 88 5a 08 e8 fc eb 52 ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 41 57 41 56 41 55 41 54 53 49 [ 57.402986][ T9] RSP: 0018:ffffc900000e6f40 EFLAGS: 00010293 [ 57.409751][ T9] RAX: ffffffff8237abf4 RBX: 0000008000000000 RCX: ffff88813fee0000 [ 57.415020][ T3718] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 57.418250][ T9] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000 [ 57.432421][ T9] RBP: ffffc900000e7330 R08: ffffffff823775f2 R09: ffffed100e3ab14c [pid 3733] <... futex resumed>) = 0 [pid 3741] <... chdir resumed>) = 0 [pid 3734] futex(0x7f7b7bfa47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3733] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3741] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3736] creat(0x200001c0, 0420 [pid 3734] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3733] <... futex resumed>) = 0 [pid 3741] <... prctl resumed>) = 0 [pid 3734] sendfile(4, 5, NULL, 2147483713 [pid 3733] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3741] setpgid(0, 0 [pid 3740] set_robust_list(0x7f7b7becb9e0, 24 [pid 3736] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 3741] <... setpgid resumed>) = 0 [pid 3740] <... set_robust_list resumed>) = 0 [pid 3736] futex(0x7f7b7bfa47bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3741] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3716] exit_group(0 [pid 3741] write(3, "1000", 4 [pid 3718] <... futex resumed>) = ? [pid 3716] <... exit_group resumed>) = ? [pid 3741] <... write resumed>) = 4 [pid 3718] +++ exited with 0 +++ [pid 3741] close(3) = 0 [pid 3741] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3741] futex(0x7f7b7bfa47ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3740] memfd_create("syzkaller", 0 [pid 3736] <... futex resumed>) = ? [pid 3741] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7b7beab000 [pid 3741] mprotect(0x7f7b7beac000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3736] +++ exited with 0 +++ [pid 3716] +++ exited with 0 +++ [pid 3740] <... memfd_create resumed>) = 3 [pid 3741] clone(child_stack=0x7f7b7becb3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3740] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 3741] <... clone resumed>, parent_tid=[3742], tls=0x7f7b7becb700, child_tidptr=0x7f7b7becb9d0) = 3742 [pid 3741] futex(0x7f7b7bfa47a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3741] futex(0x7f7b7bfa47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 3742 attached [pid 3742] set_robust_list(0x7f7b7becb9e0, 24) = 0 [pid 3742] memfd_create("syzkaller", 0) = 3 [pid 3742] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7b73a00000 [pid 3740] <... mmap resumed>) = 0x7f7b73a00000 [pid 3633] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3716, si_uid=0, si_status=0, si_utime=0, si_stime=16} --- [pid 3740] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3633] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3633] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3636] <... umount2 resumed>) = 0 [pid 3633] <... openat resumed>) = 3 [pid 3636] umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3740] <... write resumed>) = 1048576 [ 57.440991][ T9] R10: ffffed100e3ab14c R11: 1ffff1100e3ab14b R12: ffff888071d58ce0 [ 57.450275][ T1347] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 57.453346][ T3734] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 57.478837][ T9] R13: 0000000000000001 R14: 0000008410000000 R15: ffff888071d58cb8 [pid 3633] fstat(3, [pid 3742] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3636] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3740] munmap(0x7f7b73a00000, 1048576 [pid 3633] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3733] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3733] futex(0x7f7b7bfa47bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3733] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7b7be8a000 [pid 3733] mprotect(0x7f7b7be8b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3636] lstat("./2/bus", [pid 3740] <... munmap resumed>) = 0 [pid 3733] clone(child_stack=0x7f7b7beaa3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3633] getdents64(3, [pid 3740] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 3636] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3733] <... clone resumed>, parent_tid=[3743], tls=0x7f7b7beaa700, child_tidptr=0x7f7b7beaa9d0) = 3743 [pid 3733] futex(0x7f7b7bfa47b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3733] futex(0x7f7b7bfa47bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3742] <... write resumed>) = 1048576 [pid 3742] munmap(0x7f7b73a00000, 1048576) = 0 ./strace-static-x86_64: Process 3743 attached [pid 3743] set_robust_list(0x7f7b7beaa9e0, 24) = 0 [pid 3742] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 3742] ioctl(4, LOOP_SET_FD, 3 [pid 3740] <... openat resumed>) = 4 [pid 3636] umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3633] <... getdents64 resumed>0x55555719b620 /* 4 entries */, 32768) = 104 [ 57.513378][ T9] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 57.523021][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 57.530908][ T9] CR2: 000055555719a2b8 CR3: 000000001d2d1000 CR4: 00000000003506f0 [ 57.538248][ T3742] loop5: detected capacity change from 0 to 2048 [ 57.540276][ T9] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [pid 3740] ioctl(4, LOOP_SET_FD, 3 [pid 3636] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3633] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3742] <... ioctl resumed>) = 0 [pid 3742] close(3) = 0 [pid 3742] mkdir("./bus", 0777) = 0 [pid 3742] mount("/dev/loop5", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 3733] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 57.546210][ T3734] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 57.553689][ T9] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 57.569541][ T3734] EXT4-fs (loop3): This should not happen!! Data will be lost [ 57.569541][ T3734] [ 57.573946][ T3740] loop2: detected capacity change from 0 to 2048 [ 57.584123][ T3734] EXT4-fs (loop3): Total free blocks count 0 [ 57.590111][ T9] Kernel panic - not syncing: Fatal exception [ 57.595637][ T9] Kernel Offset: disabled [ 57.606015][ T9] Rebooting in 86400 seconds..