./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3452850023 <...> Warning: Permanently added '10.128.1.91' (ED25519) to the list of known hosts. execve("./syz-executor3452850023", ["./syz-executor3452850023"], 0x7fffab22be10 /* 10 vars */) = 0 brk(NULL) = 0x55558159a000 brk(0x55558159ad00) = 0x55558159ad00 arch_prctl(ARCH_SET_FS, 0x55558159a380) = 0 set_tid_address(0x55558159a650) = 5816 set_robust_list(0x55558159a660, 24) = 0 rseq(0x55558159aca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3452850023", 4096) = 28 getrandom("\x17\xc9\x65\x56\x4b\x8f\x82\xc1", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55558159ad00 brk(0x5555815bbd00) = 0x5555815bbd00 brk(0x5555815bc000) = 0x5555815bc000 mprotect(0x7fbab30ad000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 mkdir("/syzcgroup", 0777) = 0 mkdir("/syzcgroup/unified", 0777) = 0 mount("none", "/syzcgroup/unified", "cgroup2", 0, NULL) = 0 chmod("/syzcgroup/unified", 0777) = 0 openat(AT_FDCWD, "/syzcgroup/unified/cgroup.subtree_control", O_WRONLY) = 3 write(3, "+cpu", 4) = 4 write(3, "+io", 3) = 3 write(3, "+pids", 5) = 5 close(3) = 0 mkdir("/syzcgroup/net", 0777) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "net") = -1 EINVAL (Invalid argument) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio") = 0 umount2("/syzcgroup/net", 0) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "devices") = 0 umount2("/syzcgroup/net", 0) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "blkio") = 0 umount2("/syzcgroup/net", 0) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "freezer") = 0 umount2("/syzcgroup/net", 0) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,devices,blkio,freezer") = ? ERESTARTNOINTR (To be restarted) [ 63.023239][ T5816] cgroup: Unknown subsys name 'net' mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,devices,blkio,freezer") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,devices,blkio,freezer") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,devices,blkio,freezer") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,devices,blkio,freezer") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,devices,blkio,freezer") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,devices,blkio,freezer") = 0 chmod("/syzcgroup/net", 0777) = 0 mkdir("/syzcgroup/cpu", 0777) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset") = -1 EINVAL (Invalid argument) mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuacct") = 0 umount2("/syzcgroup/cpu", 0) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "hugetlb") = 0 umount2("/syzcgroup/cpu", 0) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "rlimit") = -1 EINVAL (Invalid argument) mount("none", "/syzcgroup/cpu", "cgroup", 0, "memory") = 0 umount2("/syzcgroup/cpu", 0) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuacct,hugetlb,memory") = ? ERESTARTNOINTR (To be restarted) [ 63.183486][ T5816] cgroup: Unknown subsys name 'cpuset' [ 63.215312][ T5816] cgroup: Unknown subsys name 'rlimit' mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuacct,hugetlb,memory") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuacct,hugetlb,memory") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuacct,hugetlb,memory") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuacct,hugetlb,memory") = 0 chmod("/syzcgroup/cpu", 0777) = 0 openat(AT_FDCWD, "/syzcgroup/cpu/cgroup.clone_children", O_WRONLY|O_CLOEXEC) = 3 write(3, "1", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/syzcgroup/cpu/cpuset.memory_pressure_enabled", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558159a650) = 5817 ./strace-static-x86_64: Process 5817 attached [pid 5816] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5817] set_robust_list(0x55558159a660, 24) = 0 ./strace-static-x86_64: Process 5818 attached [pid 5817] mkdir("./syzkaller.08PRl1", 0700 [pid 5816] <... clone resumed>, child_tidptr=0x55558159a650) = 5818 [pid 5818] set_robust_list(0x55558159a660, 24 [pid 5816] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5818] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 5819 attached [pid 5818] mkdir("./syzkaller.wu0YGK", 0700 [pid 5819] set_robust_list(0x55558159a660, 24) = 0 [pid 5818] <... mkdir resumed>) = 0 [pid 5817] <... mkdir resumed>) = 0 [pid 5816] <... clone resumed>, child_tidptr=0x55558159a650) = 5819 [pid 5819] mkdir("./syzkaller.FKXXjf", 0700 [pid 5817] chmod("./syzkaller.08PRl1", 0777 [pid 5816] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5818] chmod("./syzkaller.wu0YGK", 0777 [pid 5817] <... chmod resumed>) = 0 [pid 5819] <... mkdir resumed>) = 0 [pid 5818] <... chmod resumed>) = 0 [pid 5818] chdir("./syzkaller.wu0YGK") = 0 ./strace-static-x86_64: Process 5820 attached [pid 5819] chmod("./syzkaller.FKXXjf", 0777 [pid 5818] unshare(CLONE_NEWPID [pid 5817] chdir("./syzkaller.08PRl1") = 0 [pid 5820] set_robust_list(0x55558159a660, 24 [pid 5817] unshare(CLONE_NEWPID [pid 5816] <... clone resumed>, child_tidptr=0x55558159a650) = 5820 [pid 5820] <... set_robust_list resumed>) = 0 [pid 5819] <... chmod resumed>) = 0 [pid 5816] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5819] chdir("./syzkaller.FKXXjf") = 0 [pid 5818] <... unshare resumed>) = 0 [pid 5820] mkdir("./syzkaller.at5BTK", 0700 [pid 5819] unshare(CLONE_NEWPID [pid 5817] <... unshare resumed>) = 0 [pid 5819] <... unshare resumed>) = 0 [pid 5817] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5819] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5820] <... mkdir resumed>) = 0 [pid 5818] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5822 attached ./strace-static-x86_64: Process 5821 attached ./strace-static-x86_64: Process 5824 attached ./strace-static-x86_64: Process 5823 attached [pid 5822] set_robust_list(0x55558159a660, 24 [pid 5821] set_robust_list(0x55558159a660, 24 [pid 5820] chmod("./syzkaller.at5BTK", 0777 [pid 5817] <... clone resumed>, child_tidptr=0x55558159a650) = 5821 [pid 5816] <... clone resumed>, child_tidptr=0x55558159a650) = 5822 [pid 5823] set_robust_list(0x55558159a660, 24 [pid 5822] <... set_robust_list resumed>) = 0 [pid 5821] <... set_robust_list resumed>) = 0 [pid 5824] set_robust_list(0x55558159a660, 24) = 0 [pid 5824] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5822] mkdir("./syzkaller.Swj7Dj", 0700 [pid 5824] <... prctl resumed>) = 0 [pid 5823] <... set_robust_list resumed>) = 0 [pid 5822] <... mkdir resumed>) = 0 [pid 5821] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5820] <... chmod resumed>) = 0 [pid 5819] <... clone resumed>, child_tidptr=0x55558159a650) = 5823 [pid 5818] <... clone resumed>, child_tidptr=0x55558159a650) = 5824 [pid 5822] chmod("./syzkaller.Swj7Dj", 0777 [pid 5821] <... prctl resumed>) = 0 [pid 5824] getppid( [pid 5823] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5822] <... chmod resumed>) = 0 [pid 5821] getppid( [pid 5820] chdir("./syzkaller.at5BTK" [pid 5824] <... getppid resumed>) = 0 [pid 5824] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, [pid 5823] <... prctl resumed>) = 0 [pid 5822] chdir("./syzkaller.Swj7Dj" [pid 5821] <... getppid resumed>) = 0 [pid 5820] <... chdir resumed>) = 0 [pid 5824] <... prlimit64 resumed>NULL) = 0 [pid 5823] getppid( [pid 5822] <... chdir resumed>) = 0 [pid 5821] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, [pid 5820] unshare(CLONE_NEWPID [pid 5824] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, [pid 5823] <... getppid resumed>) = 0 [pid 5822] unshare(CLONE_NEWPID [pid 5821] <... prlimit64 resumed>NULL) = 0 [pid 5820] <... unshare resumed>) = 0 [pid 5824] <... prlimit64 resumed>NULL) = 0 [pid 5823] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, [pid 5822] <... unshare resumed>) = 0 [pid 5821] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, [pid 5820] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5823] <... prlimit64 resumed>NULL) = 0 [pid 5824] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, [pid 5823] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, [pid 5822] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5821] <... prlimit64 resumed>NULL) = 0 [pid 5824] <... prlimit64 resumed>NULL) = 0 [pid 5824] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5824] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, ./strace-static-x86_64: Process 5826 attached ./strace-static-x86_64: Process 5825 attached NULL) = 0 [pid 5823] <... prlimit64 resumed>NULL) = 0 [pid 5821] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, [pid 5820] <... clone resumed>, child_tidptr=0x55558159a650) = 5825 [pid 5824] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, [pid 5823] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, [pid 5826] set_robust_list(0x55558159a660, 24 [pid 5825] set_robust_list(0x55558159a660, 24 [pid 5824] <... prlimit64 resumed>NULL) = 0 [pid 5823] <... prlimit64 resumed>NULL) = 0 [pid 5821] <... prlimit64 resumed>NULL) = 0 [pid 5826] <... set_robust_list resumed>) = 0 [pid 5825] <... set_robust_list resumed>) = 0 [pid 5824] unshare(CLONE_NEWNS [pid 5823] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, [pid 5822] <... clone resumed>, child_tidptr=0x55558159a650) = 5826 [pid 5821] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, [pid 5826] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5825] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5824] <... unshare resumed>) = 0 [pid 5823] <... prlimit64 resumed>NULL) = 0 [pid 5821] <... prlimit64 resumed>NULL) = 0 [pid 5823] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, [pid 5821] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, [pid 5825] <... prctl resumed>) = 0 [pid 5823] <... prlimit64 resumed>NULL) = 0 [pid 5821] <... prlimit64 resumed>NULL) = 0 [pid 5825] getppid( [pid 5823] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, [pid 5821] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, [pid 5825] <... getppid resumed>) = 0 [pid 5823] <... prlimit64 resumed>NULL) = 0 [pid 5821] <... prlimit64 resumed>NULL) = 0 [pid 5826] <... prctl resumed>) = 0 [pid 5825] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, [pid 5824] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL [pid 5823] unshare(CLONE_NEWNS [pid 5826] getppid( [pid 5825] <... prlimit64 resumed>NULL) = 0 [pid 5824] <... mount resumed>) = 0 [pid 5823] <... unshare resumed>) = 0 [pid 5821] unshare(CLONE_NEWNS [pid 5825] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, [pid 5826] <... getppid resumed>) = 0 [pid 5825] <... prlimit64 resumed>NULL) = 0 [pid 5824] unshare(CLONE_NEWIPC [pid 5823] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL [pid 5826] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, [pid 5825] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, [pid 5821] <... unshare resumed>) = 0 [pid 5825] <... prlimit64 resumed>NULL) = 0 [pid 5821] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL [pid 5826] <... prlimit64 resumed>NULL) = 0 [pid 5823] <... mount resumed>) = 0 [pid 5826] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, [pid 5825] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, [pid 5823] unshare(CLONE_NEWIPC [pid 5821] <... mount resumed>) = 0 [pid 5826] <... prlimit64 resumed>NULL) = 0 [pid 5825] <... prlimit64 resumed>NULL) = 0 [pid 5824] <... unshare resumed>) = 0 [pid 5821] unshare(CLONE_NEWIPC [pid 5826] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, [pid 5825] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, [pid 5824] unshare(CLONE_NEWCGROUP [pid 5823] <... unshare resumed>) = 0 [pid 5821] <... unshare resumed>) = 0 [pid 5826] <... prlimit64 resumed>NULL) = 0 [pid 5825] <... prlimit64 resumed>NULL) = 0 [pid 5824] <... unshare resumed>) = 0 [pid 5826] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, [pid 5824] unshare(CLONE_NEWUTS [pid 5826] <... prlimit64 resumed>NULL) = 0 [pid 5825] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, [pid 5824] <... unshare resumed>) = 0 [pid 5826] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, [pid 5821] unshare(CLONE_NEWCGROUP [pid 5825] <... prlimit64 resumed>NULL) = 0 [pid 5824] unshare(CLONE_SYSVSEM [pid 5823] unshare(CLONE_NEWCGROUP [pid 5821] <... unshare resumed>) = 0 [pid 5826] <... prlimit64 resumed>NULL) = 0 [pid 5825] unshare(CLONE_NEWNS [pid 5824] <... unshare resumed>) = 0 [pid 5823] <... unshare resumed>) = 0 [pid 5821] unshare(CLONE_NEWUTS [pid 5826] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5825] <... unshare resumed>) = 0 [pid 5821] <... unshare resumed>) = 0 [pid 5826] unshare(CLONE_NEWNS [pid 5823] unshare(CLONE_NEWUTS [pid 5825] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL [pid 5821] unshare(CLONE_SYSVSEM [pid 5826] <... unshare resumed>) = 0 [pid 5825] <... mount resumed>) = 0 [pid 5821] <... unshare resumed>) = 0 [pid 5824] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 5826] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL [pid 5823] <... unshare resumed>) = 0 [pid 5825] unshare(CLONE_NEWIPC [pid 5823] unshare(CLONE_SYSVSEM) = 0 [pid 5821] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 5826] <... mount resumed>) = 0 [pid 5825] <... unshare resumed>) = 0 [pid 5823] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 5821] <... openat resumed>) = 3 [pid 5824] <... openat resumed>) = 3 [pid 5825] unshare(CLONE_NEWCGROUP) = 0 [pid 5825] unshare(CLONE_NEWUTS) = 0 [pid 5821] write(3, "16777216", 8 [pid 5825] unshare(CLONE_SYSVSEM [pid 5821] <... write resumed>) = 8 [pid 5826] unshare(CLONE_NEWIPC [pid 5825] <... unshare resumed>) = 0 [pid 5824] write(3, "16777216", 8 [pid 5823] <... openat resumed>) = 3 [pid 5821] close(3 [pid 5826] <... unshare resumed>) = 0 [pid 5825] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 5826] unshare(CLONE_NEWCGROUP [pid 5823] write(3, "16777216", 8 [pid 5826] <... unshare resumed>) = 0 [pid 5823] <... write resumed>) = 8 [pid 5826] unshare(CLONE_NEWUTS [pid 5825] <... openat resumed>) = 3 [pid 5824] <... write resumed>) = 8 [pid 5823] close(3 [pid 5821] <... close resumed>) = 0 [pid 5826] <... unshare resumed>) = 0 [pid 5825] write(3, "16777216", 8 [pid 5824] close(3 [pid 5823] <... close resumed>) = 0 [pid 5821] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 5826] unshare(CLONE_SYSVSEM [pid 5825] <... write resumed>) = 8 [pid 5824] <... close resumed>) = 0 [pid 5823] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 5826] <... unshare resumed>) = 0 [pid 5825] close(3 [pid 5824] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 5823] <... openat resumed>) = 3 [pid 5821] <... openat resumed>) = 3 [pid 5826] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 5825] <... close resumed>) = 0 [pid 5826] <... openat resumed>) = 3 [pid 5824] <... openat resumed>) = 3 [pid 5825] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 5823] write(3, "536870912", 9 [pid 5821] write(3, "536870912", 9 [pid 5826] write(3, "16777216", 8 [pid 5823] <... write resumed>) = 9 [pid 5826] <... write resumed>) = 8 [pid 5823] close(3 [pid 5826] close(3 [pid 5823] <... close resumed>) = 0 [pid 5826] <... close resumed>) = 0 [pid 5825] <... openat resumed>) = 3 [pid 5824] write(3, "536870912", 9 [pid 5823] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC [pid 5821] <... write resumed>) = 9 [pid 5825] write(3, "536870912", 9 [pid 5824] <... write resumed>) = 9 [pid 5821] close(3 [pid 5825] <... write resumed>) = 9 [pid 5824] close(3 [pid 5821] <... close resumed>) = 0 [pid 5825] close(3 [pid 5824] <... close resumed>) = 0 [pid 5821] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC [pid 5826] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 5825] <... close resumed>) = 0 [pid 5824] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC [pid 5823] <... openat resumed>) = 3 [pid 5826] <... openat resumed>) = 3 [pid 5825] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC [pid 5821] <... openat resumed>) = 3 [pid 5826] write(3, "536870912", 9 [pid 5824] <... openat resumed>) = 3 [pid 5823] write(3, "1024", 4 [pid 5826] <... write resumed>) = 9 [pid 5825] <... openat resumed>) = 3 [pid 5824] write(3, "1024", 4 [pid 5823] <... write resumed>) = 4 [pid 5821] write(3, "1024", 4 [pid 5826] close(3 [pid 5823] close(3 [pid 5821] <... write resumed>) = 4 [pid 5826] <... close resumed>) = 0 [pid 5825] write(3, "1024", 4 [pid 5824] <... write resumed>) = 4 [pid 5821] close(3 [pid 5826] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC [pid 5825] <... write resumed>) = 4 [pid 5824] close(3 [pid 5823] <... close resumed>) = 0 [pid 5826] <... openat resumed>) = 3 [pid 5825] close(3 [pid 5824] <... close resumed>) = 0 [pid 5821] <... close resumed>) = 0 [pid 5824] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC [pid 5821] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC [pid 5826] write(3, "1024", 4 [pid 5823] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC [pid 5826] <... write resumed>) = 4 [pid 5825] <... close resumed>) = 0 [pid 5824] <... openat resumed>) = 3 [pid 5823] <... openat resumed>) = 3 [pid 5821] <... openat resumed>) = 3 [pid 5826] close(3 [pid 5825] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC [pid 5823] write(3, "8192", 4 [pid 5826] <... close resumed>) = 0 [pid 5823] <... write resumed>) = 4 [pid 5826] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC [pid 5823] close(3 [pid 5826] <... openat resumed>) = 3 [pid 5825] <... openat resumed>) = 3 [pid 5824] write(3, "8192", 4 [pid 5823] <... close resumed>) = 0 [pid 5821] write(3, "8192", 4 [pid 5825] write(3, "8192", 4 [pid 5824] <... write resumed>) = 4 [pid 5825] <... write resumed>) = 4 [pid 5824] close(3 [pid 5821] <... write resumed>) = 4 [pid 5825] close(3 [pid 5824] <... close resumed>) = 0 [pid 5821] close(3 [pid 5826] write(3, "8192", 4 [pid 5825] <... close resumed>) = 0 [pid 5823] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC [pid 5826] <... write resumed>) = 4 [pid 5825] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC [pid 5824] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC [pid 5821] <... close resumed>) = 0 [pid 5826] close(3 [pid 5823] <... openat resumed>) = 3 [pid 5821] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC [pid 5826] <... close resumed>) = 0 [pid 5824] <... openat resumed>) = 3 [pid 5826] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC [pid 5823] write(3, "1024", 4 [pid 5821] <... openat resumed>) = 3 [pid 5826] <... openat resumed>) = 3 [pid 5823] <... write resumed>) = 4 [pid 5823] close(3 [pid 5826] write(3, "1024", 4 [pid 5823] <... close resumed>) = 0 [pid 5826] <... write resumed>) = 4 [pid 5825] <... openat resumed>) = 3 [pid 5826] close(3 [pid 5823] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC [pid 5825] write(3, "1024", 4 [pid 5824] write(3, "1024", 4 [pid 5821] write(3, "1024", 4 [pid 5825] <... write resumed>) = 4 [pid 5824] <... write resumed>) = 4 [pid 5821] <... write resumed>) = 4 [pid 5825] close(3 [pid 5826] <... close resumed>) = 0 [pid 5825] <... close resumed>) = 0 [pid 5824] close(3 [pid 5823] <... openat resumed>) = 3 [pid 5821] close(3 [pid 5826] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC [pid 5825] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC [pid 5824] <... close resumed>) = 0 [pid 5823] write(3, "1024", 4 [pid 5821] <... close resumed>) = 0 [pid 5826] <... openat resumed>) = 3 [pid 5823] <... write resumed>) = 4 [pid 5821] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC [pid 5826] write(3, "1024", 4 [pid 5825] <... openat resumed>) = 3 [pid 5824] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC [pid 5823] close(3 [pid 5825] write(3, "1024", 4 [pid 5821] <... openat resumed>) = 3 [pid 5824] <... openat resumed>) = 3 [pid 5821] write(3, "1024", 4 [pid 5825] <... write resumed>) = 4 [pid 5824] write(3, "1024", 4 [pid 5825] close(3 [pid 5821] <... write resumed>) = 4 [pid 5825] <... close resumed>) = 0 [pid 5824] <... write resumed>) = 4 [pid 5821] close(3 [pid 5824] close(3 [pid 5821] <... close resumed>) = 0 [pid 5826] <... write resumed>) = 4 [pid 5825] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC [pid 5824] <... close resumed>) = 0 [pid 5823] <... close resumed>) = 0 [pid 5826] close(3 [pid 5825] <... openat resumed>) = 3 [pid 5824] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC [pid 5823] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC [pid 5821] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC [pid 5826] <... close resumed>) = 0 [pid 5826] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5824] <... openat resumed>) = 3 [pid 5821] <... openat resumed>) = 3 [pid 5826] write(3, "1024 1048576 500 1024", 21 [pid 5825] write(3, "1024 1048576 500 1024", 21 [pid 5823] <... openat resumed>) = 3 [pid 5821] write(3, "1024 1048576 500 1024", 21 [pid 5826] <... write resumed>) = 21 [pid 5826] close(3) = 0 [pid 5826] getpid() = 1 [pid 5826] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5825] <... write resumed>) = 21 [pid 5824] write(3, "1024 1048576 500 1024", 21 [pid 5823] write(3, "1024 1048576 500 1024", 21 [pid 5821] <... write resumed>) = 21 [pid 5825] close(3 [pid 5824] <... write resumed>) = 21 [pid 5823] <... write resumed>) = 21 [pid 5821] close(3 [pid 5825] <... close resumed>) = 0 [pid 5824] close(3 [pid 5823] close(3 [pid 5821] <... close resumed>) = 0 [pid 5825] getpid( [pid 5824] <... close resumed>) = 0 [pid 5823] <... close resumed>) = 0 [pid 5821] getpid( [pid 5825] <... getpid resumed>) = 1 [pid 5824] getpid( [pid 5823] getpid( [pid 5821] <... getpid resumed>) = 1 [pid 5825] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, [pid 5824] <... getpid resumed>) = 1 [pid 5823] <... getpid resumed>) = 1 [pid 5821] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, [pid 5825] <... capget resumed>{effective=1< [pid 5823] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, [pid 5821] <... capget resumed>{effective=1< [pid 5824] <... capget resumed>{effective=1<{effective=1< [pid 5825] <... capset resumed>) = 0 [pid 5824] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5823] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5821] <... capset resumed>) = 0 [pid 5825] unshare(CLONE_NEWNET [pid 5824] <... capset resumed>) = 0 [pid 5823] <... capset resumed>) = 0 [pid 5821] unshare(CLONE_NEWNET [pid 5823] unshare(CLONE_NEWNET [pid 5824] unshare(CLONE_NEWNET [pid 5826] <... unshare resumed>) = 0 [pid 5826] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC) = 3 [pid 5826] write(3, "0 65535", 7) = 7 [pid 5826] close(3) = 0 [pid 5826] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC) = 3 [pid 5826] write(3, "100000", 6) = 6 [pid 5826] close(3) = 0 [pid 5826] mkdir("./syz-tmp", 0777) = 0 [pid 5826] mount("", "./syz-tmp", "tmpfs", 0, NULL) = 0 [pid 5826] mkdir("./syz-tmp/newroot", 0777) = 0 [pid 5826] mkdir("./syz-tmp/newroot/dev", 0700) = 0 [pid 5826] mount("/dev", "./syz-tmp/newroot/dev", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5821] <... unshare resumed>) = 0 [pid 5826] <... mount resumed>) = 0 [pid 5825] <... unshare resumed>) = 0 [pid 5821] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC) = 3 [pid 5826] mkdir("./syz-tmp/newroot/proc", 0700 [pid 5821] write(3, "0 65535", 7 [pid 5826] <... mkdir resumed>) = 0 [pid 5821] <... write resumed>) = 7 [pid 5821] close(3) = 0 [pid 5826] mount("syz-proc", "./syz-tmp/newroot/proc", "proc", 0, NULL [pid 5821] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC [pid 5826] <... mount resumed>) = 0 [pid 5821] <... openat resumed>) = 3 [pid 5821] write(3, "100000", 6) = 6 [pid 5821] close(3 [pid 5826] mkdir("./syz-tmp/newroot/selinux", 0700 [pid 5821] <... close resumed>) = 0 [pid 5826] <... mkdir resumed>) = 0 [pid 5825] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC [pid 5824] <... unshare resumed>) = 0 [pid 5823] <... unshare resumed>) = 0 [pid 5821] mkdir("./syz-tmp", 0777 [pid 5825] <... openat resumed>) = 3 [pid 5823] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC) = 3 [pid 5826] mount("/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5825] write(3, "0 65535", 7 [pid 5824] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC [pid 5821] <... mkdir resumed>) = 0 [pid 5825] <... write resumed>) = 7 [pid 5823] write(3, "0 65535", 7 [pid 5821] mount("", "./syz-tmp", "tmpfs", 0, NULL [pid 5826] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5825] close(3 [pid 5823] <... write resumed>) = 7 [pid 5824] <... openat resumed>) = 3 [pid 5825] <... close resumed>) = 0 [pid 5823] close(3 [pid 5826] mount("/sys/fs/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5825] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC [pid 5824] write(3, "0 65535", 7 [pid 5823] <... close resumed>) = 0 [pid 5826] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5821] <... mount resumed>) = 0 [pid 5824] <... write resumed>) = 7 [pid 5821] mkdir("./syz-tmp/newroot", 0777 [pid 5826] mkdir("./syz-tmp/newroot/sys", 0700 [pid 5825] <... openat resumed>) = 3 [pid 5824] close(3 [pid 5823] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC [pid 5825] write(3, "100000", 6 [pid 5824] <... close resumed>) = 0 [pid 5821] <... mkdir resumed>) = 0 [pid 5825] <... write resumed>) = 6 [pid 5824] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC [pid 5823] <... openat resumed>) = 3 [pid 5825] close(3 [pid 5826] <... mkdir resumed>) = 0 [pid 5825] <... close resumed>) = 0 [pid 5824] <... openat resumed>) = 3 [pid 5823] write(3, "100000", 6 [pid 5821] mkdir("./syz-tmp/newroot/dev", 0700 [pid 5826] mount("/sys", "./syz-tmp/newroot/sys", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5825] mkdir("./syz-tmp", 0777 [pid 5824] write(3, "100000", 6 [pid 5823] <... write resumed>) = 6 [pid 5821] <... mkdir resumed>) = 0 [pid 5821] mount("/dev", "./syz-tmp/newroot/dev", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5825] <... mkdir resumed>) = 0 [pid 5824] <... write resumed>) = 6 [pid 5823] close(3 [pid 5826] <... mount resumed>) = 0 [pid 5824] close(3 [pid 5826] mount("/sys/kernel/debug", "./syz-tmp/newroot/sys/kernel/debug", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5825] mount("", "./syz-tmp", "tmpfs", 0, NULL [pid 5823] <... close resumed>) = 0 [pid 5824] <... close resumed>) = 0 [pid 5821] <... mount resumed>) = 0 [pid 5821] mkdir("./syz-tmp/newroot/proc", 0700 [pid 5826] <... mount resumed>) = 0 [pid 5824] mkdir("./syz-tmp", 0777 [pid 5823] mkdir("./syz-tmp", 0777 [pid 5821] <... mkdir resumed>) = 0 [pid 5821] mount("syz-proc", "./syz-tmp/newroot/proc", "proc", 0, NULL [pid 5823] <... mkdir resumed>) = 0 [pid 5821] <... mount resumed>) = 0 [pid 5821] mkdir("./syz-tmp/newroot/selinux", 0700 [pid 5826] mount("/sys/fs/smackfs", "./syz-tmp/newroot/sys/fs/smackfs", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5825] <... mount resumed>) = 0 [pid 5824] <... mkdir resumed>) = 0 [pid 5823] mount("", "./syz-tmp", "tmpfs", 0, NULL [pid 5825] mkdir("./syz-tmp/newroot", 0777 [pid 5821] <... mkdir resumed>) = 0 [pid 5826] <... mount resumed>) = 0 [pid 5825] <... mkdir resumed>) = 0 [pid 5824] mount("", "./syz-tmp", "tmpfs", 0, NULL [pid 5826] mount("/proc/sys/fs/binfmt_misc", "./syz-tmp/newroot/proc/sys/fs/binfmt_misc", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5823] <... mount resumed>) = 0 [pid 5825] mkdir("./syz-tmp/newroot/dev", 0700 [pid 5821] mount("/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5825] <... mkdir resumed>) = 0 [pid 5824] <... mount resumed>) = 0 [pid 5823] mkdir("./syz-tmp/newroot", 0777 [pid 5821] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5825] mount("/dev", "./syz-tmp/newroot/dev", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5821] mount("/sys/fs/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5826] <... mount resumed>) = 0 [pid 5825] <... mount resumed>) = 0 [pid 5823] <... mkdir resumed>) = 0 [pid 5821] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5821] mkdir("./syz-tmp/newroot/sys", 0700 [pid 5826] mkdir("./syz-tmp/newroot/syzcgroup", 0700 [pid 5825] mkdir("./syz-tmp/newroot/proc", 0700 [pid 5824] mkdir("./syz-tmp/newroot", 0777 [pid 5823] mkdir("./syz-tmp/newroot/dev", 0700 [pid 5821] <... mkdir resumed>) = 0 [pid 5826] <... mkdir resumed>) = 0 [pid 5825] <... mkdir resumed>) = 0 [pid 5824] <... mkdir resumed>) = 0 [pid 5826] mkdir("./syz-tmp/newroot/syzcgroup/unified", 0700 [pid 5823] <... mkdir resumed>) = 0 [pid 5821] mount("/sys", "./syz-tmp/newroot/sys", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5825] mount("syz-proc", "./syz-tmp/newroot/proc", "proc", 0, NULL [pid 5821] <... mount resumed>) = 0 [pid 5826] <... mkdir resumed>) = 0 [pid 5824] mkdir("./syz-tmp/newroot/dev", 0700 [pid 5823] mount("/dev", "./syz-tmp/newroot/dev", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5821] mount("/sys/kernel/debug", "./syz-tmp/newroot/sys/kernel/debug", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5826] mkdir("./syz-tmp/newroot/syzcgroup/cpu", 0700 [pid 5824] <... mkdir resumed>) = 0 [pid 5823] <... mount resumed>) = 0 [pid 5825] <... mount resumed>) = 0 [pid 5823] mkdir("./syz-tmp/newroot/proc", 0700 [pid 5821] <... mount resumed>) = 0 [pid 5825] mkdir("./syz-tmp/newroot/selinux", 0700 [pid 5823] <... mkdir resumed>) = 0 [pid 5826] <... mkdir resumed>) = 0 [pid 5824] mount("/dev", "./syz-tmp/newroot/dev", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5821] mount("/sys/fs/smackfs", "./syz-tmp/newroot/sys/fs/smackfs", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5826] mkdir("./syz-tmp/newroot/syzcgroup/net", 0700 [pid 5825] <... mkdir resumed>) = 0 [pid 5824] <... mount resumed>) = 0 [pid 5821] <... mount resumed>) = 0 [pid 5823] mount("syz-proc", "./syz-tmp/newroot/proc", "proc", 0, NULL [pid 5826] <... mkdir resumed>) = 0 [pid 5825] mount("/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5824] mkdir("./syz-tmp/newroot/proc", 0700 [pid 5825] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5824] <... mkdir resumed>) = 0 [pid 5826] mount("/syzcgroup/unified", "./syz-tmp/newroot/syzcgroup/unified", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5825] mount("/sys/fs/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5823] <... mount resumed>) = 0 [pid 5821] mount("/proc/sys/fs/binfmt_misc", "./syz-tmp/newroot/proc/sys/fs/binfmt_misc", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5824] mount("syz-proc", "./syz-tmp/newroot/proc", "proc", 0, NULL [pid 5823] mkdir("./syz-tmp/newroot/selinux", 0700 [pid 5825] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5824] <... mount resumed>) = 0 [pid 5823] <... mkdir resumed>) = 0 [pid 5826] <... mount resumed>) = 0 [pid 5823] mount("/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5821] <... mount resumed>) = 0 [pid 5826] mount("/syzcgroup/cpu", "./syz-tmp/newroot/syzcgroup/cpu", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5825] mkdir("./syz-tmp/newroot/sys", 0700 [pid 5824] mkdir("./syz-tmp/newroot/selinux", 0700 [pid 5826] <... mount resumed>) = 0 [pid 5823] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5821] mkdir("./syz-tmp/newroot/syzcgroup", 0700 [pid 5826] mount("/syzcgroup/net", "./syz-tmp/newroot/syzcgroup/net", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5824] <... mkdir resumed>) = 0 [pid 5823] mount("/sys/fs/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5825] <... mkdir resumed>) = 0 [pid 5823] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5826] <... mount resumed>) = 0 [pid 5825] mount("/sys", "./syz-tmp/newroot/sys", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5824] mount("/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5821] <... mkdir resumed>) = 0 [pid 5823] mkdir("./syz-tmp/newroot/sys", 0700) = 0 [pid 5823] mount("/sys", "./syz-tmp/newroot/sys", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5826] mkdir("./syz-tmp/pivot", 0777 [pid 5825] <... mount resumed>) = 0 [pid 5824] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5821] mkdir("./syz-tmp/newroot/syzcgroup/unified", 0700 [pid 5826] <... mkdir resumed>) = 0 [pid 5825] mount("/sys/kernel/debug", "./syz-tmp/newroot/sys/kernel/debug", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5824] mount("/sys/fs/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5823] <... mount resumed>) = 0 [pid 5825] <... mount resumed>) = 0 [pid 5824] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5821] <... mkdir resumed>) = 0 [pid 5826] pivot_root("./syz-tmp", "./syz-tmp/pivot" [pid 5824] mkdir("./syz-tmp/newroot/sys", 0700 [pid 5823] mount("/sys/kernel/debug", "./syz-tmp/newroot/sys/kernel/debug", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5824] <... mkdir resumed>) = 0 [pid 5823] <... mount resumed>) = 0 [pid 5821] mkdir("./syz-tmp/newroot/syzcgroup/cpu", 0700 [pid 5825] mount("/sys/fs/smackfs", "./syz-tmp/newroot/sys/fs/smackfs", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5826] <... pivot_root resumed>) = 0 [pid 5825] <... mount resumed>) = 0 [pid 5823] mount("/sys/fs/smackfs", "./syz-tmp/newroot/sys/fs/smackfs", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 5826] chdir("/" [pid 5825] mount("/proc/sys/fs/binfmt_misc", "./syz-tmp/newroot/proc/sys/fs/binfmt_misc", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5824] mount("/sys", "./syz-tmp/newroot/sys", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5821] <... mkdir resumed>) = 0 [pid 5826] <... chdir resumed>) = 0 [pid 5823] mount("/proc/sys/fs/binfmt_misc", "./syz-tmp/newroot/proc/sys/fs/binfmt_misc", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5821] mkdir("./syz-tmp/newroot/syzcgroup/net", 0700 [pid 5825] <... mount resumed>) = 0 [pid 5824] <... mount resumed>) = 0 [pid 5821] <... mkdir resumed>) = 0 [pid 5826] umount2("./pivot", MNT_DETACH [pid 5823] <... mount resumed>) = 0 [pid 5821] mount("/syzcgroup/unified", "./syz-tmp/newroot/syzcgroup/unified", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 5825] mkdir("./syz-tmp/newroot/syzcgroup", 0700 [pid 5823] mkdir("./syz-tmp/newroot/syzcgroup", 0700 [pid 5821] mount("/syzcgroup/cpu", "./syz-tmp/newroot/syzcgroup/cpu", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5826] <... umount2 resumed>) = 0 [pid 5825] <... mkdir resumed>) = 0 [pid 5824] mount("/sys/kernel/debug", "./syz-tmp/newroot/sys/kernel/debug", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5823] <... mkdir resumed>) = 0 [pid 5826] chroot("./newroot" [pid 5821] <... mount resumed>) = 0 [pid 5826] <... chroot resumed>) = 0 [pid 5825] mkdir("./syz-tmp/newroot/syzcgroup/unified", 0700 [pid 5824] <... mount resumed>) = 0 [pid 5823] mkdir("./syz-tmp/newroot/syzcgroup/unified", 0700 [pid 5826] chdir("/" [pid 5821] mount("/syzcgroup/net", "./syz-tmp/newroot/syzcgroup/net", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5826] <... chdir resumed>) = 0 [pid 5825] <... mkdir resumed>) = 0 [pid 5823] <... mkdir resumed>) = 0 [pid 5824] mount("/sys/fs/smackfs", "./syz-tmp/newroot/sys/fs/smackfs", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5821] <... mount resumed>) = 0 [pid 5826] mkdir("/dev/binderfs", 0777 [pid 5824] <... mount resumed>) = 0 [pid 5825] mkdir("./syz-tmp/newroot/syzcgroup/cpu", 0700 [pid 5823] mkdir("./syz-tmp/newroot/syzcgroup/cpu", 0700 [pid 5826] <... mkdir resumed>) = 0 [pid 5821] mkdir("./syz-tmp/pivot", 0777 [pid 5826] mount("binder", "/dev/binderfs", "binder", 0, NULL [pid 5821] <... mkdir resumed>) = 0 [pid 5825] <... mkdir resumed>) = 0 [pid 5824] mount("/proc/sys/fs/binfmt_misc", "./syz-tmp/newroot/proc/sys/fs/binfmt_misc", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5823] <... mkdir resumed>) = 0 [pid 5821] pivot_root("./syz-tmp", "./syz-tmp/pivot" [pid 5824] <... mount resumed>) = 0 [pid 5825] mkdir("./syz-tmp/newroot/syzcgroup/net", 0700 [pid 5823] mkdir("./syz-tmp/newroot/syzcgroup/net", 0700 [pid 5826] <... mount resumed>) = 0 [pid 5825] <... mkdir resumed>) = 0 [pid 5824] mkdir("./syz-tmp/newroot/syzcgroup", 0700 [pid 5821] <... pivot_root resumed>) = 0 [pid 5823] <... mkdir resumed>) = 0 [pid 5826] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [pid 5825] mount("/syzcgroup/unified", "./syz-tmp/newroot/syzcgroup/unified", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5824] <... mkdir resumed>) = 0 [pid 5823] mount("/syzcgroup/unified", "./syz-tmp/newroot/syzcgroup/unified", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5821] chdir("/" [pid 5826] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 5825] <... mount resumed>) = 0 [pid 5824] mkdir("./syz-tmp/newroot/syzcgroup/unified", 0700 [pid 5823] <... mount resumed>) = 0 [pid 5821] <... chdir resumed>) = 0 [pid 5825] mount("/syzcgroup/cpu", "./syz-tmp/newroot/syzcgroup/cpu", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5823] mount("/syzcgroup/cpu", "./syz-tmp/newroot/syzcgroup/cpu", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5825] <... mount resumed>) = 0 [pid 5823] <... mount resumed>) = 0 [pid 5821] umount2("./pivot", MNT_DETACH [pid 5826] getpid( [pid 5825] mount("/syzcgroup/net", "./syz-tmp/newroot/syzcgroup/net", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5824] <... mkdir resumed>) = 0 [pid 5826] <... getpid resumed>) = 1 [pid 5824] mkdir("./syz-tmp/newroot/syzcgroup/cpu", 0700 [pid 5826] mkdir("/syzcgroup/unified/syz4", 0777 [pid 5825] <... mount resumed>) = 0 [pid 5824] <... mkdir resumed>) = 0 [pid 5823] mount("/syzcgroup/net", "./syz-tmp/newroot/syzcgroup/net", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5821] <... umount2 resumed>) = 0 [pid 5825] mkdir("./syz-tmp/pivot", 0777 [pid 5823] <... mount resumed>) = 0 [pid 5825] <... mkdir resumed>) = 0 [pid 5826] <... mkdir resumed>) = 0 [pid 5824] mkdir("./syz-tmp/newroot/syzcgroup/net", 0700 [pid 5823] mkdir("./syz-tmp/pivot", 0777 [pid 5821] chroot("./newroot" [pid 5826] openat(AT_FDCWD, "/syzcgroup/unified/syz4/pids.max", O_WRONLY|O_CLOEXEC [pid 5825] pivot_root("./syz-tmp", "./syz-tmp/pivot" [pid 5824] <... mkdir resumed>) = 0 [pid 5821] <... chroot resumed>) = 0 [pid 5826] <... openat resumed>) = 3 [pid 5825] <... pivot_root resumed>) = 0 [pid 5823] <... mkdir resumed>) = 0 [pid 5824] mount("/syzcgroup/unified", "./syz-tmp/newroot/syzcgroup/unified", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5821] chdir("/" [pid 5826] write(3, "32", 2) = 2 [pid 5825] chdir("/" [pid 5824] <... mount resumed>) = 0 [pid 5823] pivot_root("./syz-tmp", "./syz-tmp/pivot" [pid 5821] <... chdir resumed>) = 0 [pid 5826] close(3 [pid 5824] mount("/syzcgroup/cpu", "./syz-tmp/newroot/syzcgroup/cpu", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5821] mkdir("/dev/binderfs", 0777 [pid 5826] <... close resumed>) = 0 [pid 5825] <... chdir resumed>) = 0 [pid 5824] <... mount resumed>) = 0 [pid 5821] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5821] mount("binder", "/dev/binderfs", "binder", 0, NULL [pid 5826] openat(AT_FDCWD, "/syzcgroup/unified/syz4/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 5825] umount2("./pivot", MNT_DETACH [pid 5824] mount("/syzcgroup/net", "./syz-tmp/newroot/syzcgroup/net", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5823] <... pivot_root resumed>) = 0 [pid 5826] <... openat resumed>) = 3 [pid 5821] <... mount resumed>) = 0 [pid 5821] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [pid 5826] write(3, "1", 1 [pid 5825] <... umount2 resumed>) = 0 [pid 5824] <... mount resumed>) = 0 [pid 5823] chdir("/" [pid 5821] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 5825] chroot("./newroot" [pid 5821] getpid( [pid 5825] <... chroot resumed>) = 0 [pid 5824] mkdir("./syz-tmp/pivot", 0777 [pid 5823] <... chdir resumed>) = 0 [pid 5825] chdir("/" [pid 5821] <... getpid resumed>) = 1 [pid 5825] <... chdir resumed>) = 0 [pid 5824] <... mkdir resumed>) = 0 [pid 5823] umount2("./pivot", MNT_DETACH [pid 5821] mkdir("/syzcgroup/unified/syz0", 0777 [pid 5825] mkdir("/dev/binderfs", 0777) = -1 EEXIST (File exists) [pid 5825] mount("binder", "/dev/binderfs", "binder", 0, NULL [pid 5826] <... write resumed>) = 1 [pid 5824] pivot_root("./syz-tmp", "./syz-tmp/pivot" [pid 5823] <... umount2 resumed>) = 0 [pid 5821] <... mkdir resumed>) = 0 [pid 5826] close(3 [pid 5825] <... mount resumed>) = 0 [pid 5826] <... close resumed>) = 0 [pid 5826] mkdir("/syzcgroup/cpu/syz4", 0777 [pid 5825] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [pid 5824] <... pivot_root resumed>) = 0 [pid 5823] chroot("./newroot" [pid 5821] openat(AT_FDCWD, "/syzcgroup/unified/syz0/pids.max", O_WRONLY|O_CLOEXEC [pid 5823] <... chroot resumed>) = 0 [pid 5825] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 5823] chdir("/" [pid 5821] <... openat resumed>) = 3 [pid 5824] chdir("/" [pid 5823] <... chdir resumed>) = 0 [pid 5824] <... chdir resumed>) = 0 [pid 5824] umount2("./pivot", MNT_DETACH [pid 5823] mkdir("/dev/binderfs", 0777) = -1 EEXIST (File exists) [pid 5824] <... umount2 resumed>) = 0 [pid 5823] mount("binder", "/dev/binderfs", "binder", 0, NULL [pid 5826] <... mkdir resumed>) = 0 [pid 5825] getpid( [pid 5824] chroot("./newroot" [pid 5823] <... mount resumed>) = 0 [pid 5821] write(3, "32", 2 [pid 5826] openat(AT_FDCWD, "/syzcgroup/cpu/syz4/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 5825] <... getpid resumed>) = 1 [pid 5824] <... chroot resumed>) = 0 [pid 5821] <... write resumed>) = 2 [pid 5825] mkdir("/syzcgroup/unified/syz3", 0777 [pid 5823] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [pid 5821] close(3 [pid 5826] <... openat resumed>) = 3 [pid 5825] <... mkdir resumed>) = 0 [pid 5824] chdir("/" [pid 5823] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 5821] <... close resumed>) = 0 [pid 5825] openat(AT_FDCWD, "/syzcgroup/unified/syz3/pids.max", O_WRONLY|O_CLOEXEC [pid 5821] openat(AT_FDCWD, "/syzcgroup/unified/syz0/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 5826] write(3, "1", 1 [pid 5824] <... chdir resumed>) = 0 [pid 5823] getpid( [pid 5825] <... openat resumed>) = 3 [pid 5821] <... openat resumed>) = 3 [pid 5825] write(3, "32", 2 [pid 5821] write(3, "1", 1 [pid 5826] <... write resumed>) = 1 [pid 5825] <... write resumed>) = 2 [pid 5824] mkdir("/dev/binderfs", 0777 [pid 5823] <... getpid resumed>) = 1 [pid 5821] <... write resumed>) = 1 [pid 5826] close(3 [pid 5825] close(3 [pid 5824] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5821] close(3 [pid 5826] <... close resumed>) = 0 [pid 5825] <... close resumed>) = 0 [pid 5821] <... close resumed>) = 0 [pid 5826] openat(AT_FDCWD, "/syzcgroup/cpu/syz4/memory.soft_limit_in_bytes", O_WRONLY|O_CLOEXEC [pid 5825] openat(AT_FDCWD, "/syzcgroup/unified/syz3/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 5824] mount("binder", "/dev/binderfs", "binder", 0, NULL [pid 5821] mkdir("/syzcgroup/cpu/syz0", 0777 [pid 5826] <... openat resumed>) = 3 [pid 5825] <... openat resumed>) = 3 [pid 5824] <... mount resumed>) = 0 [pid 5823] mkdir("/syzcgroup/unified/syz2", 0777 [pid 5826] write(3, "313524224", 9 [pid 5825] write(3, "1", 1 [pid 5824] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [pid 5821] <... mkdir resumed>) = 0 [pid 5824] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 5823] <... mkdir resumed>) = 0 [pid 5824] getpid() = 1 [pid 5823] openat(AT_FDCWD, "/syzcgroup/unified/syz2/pids.max", O_WRONLY|O_CLOEXEC [pid 5824] mkdir("/syzcgroup/unified/syz1", 0777) = 0 [pid 5823] <... openat resumed>) = 3 [pid 5824] openat(AT_FDCWD, "/syzcgroup/unified/syz1/pids.max", O_WRONLY|O_CLOEXEC) = 3 [pid 5824] write(3, "32", 2) = 2 [pid 5824] close(3) = 0 [pid 5824] openat(AT_FDCWD, "/syzcgroup/unified/syz1/cgroup.procs", O_WRONLY|O_CLOEXEC) = 3 [pid 5823] write(3, "32", 2 [pid 5824] write(3, "1", 1) = 1 [pid 5823] <... write resumed>) = 2 [pid 5824] close(3 [pid 5823] close(3 [pid 5824] <... close resumed>) = 0 [pid 5824] mkdir("/syzcgroup/cpu/syz1", 0777 [pid 5823] <... close resumed>) = 0 [pid 5824] <... mkdir resumed>) = 0 [pid 5823] openat(AT_FDCWD, "/syzcgroup/unified/syz2/cgroup.procs", O_WRONLY|O_CLOEXEC) = 3 [pid 5823] write(3, "1", 1) = 1 [pid 5823] close(3) = 0 [pid 5823] mkdir("/syzcgroup/cpu/syz2", 0777 [pid 5825] <... write resumed>) = 1 [pid 5821] openat(AT_FDCWD, "/syzcgroup/cpu/syz0/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 5826] <... write resumed>) = 9 [pid 5825] close(3 [pid 5824] openat(AT_FDCWD, "/syzcgroup/cpu/syz1/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 5826] close(3 [pid 5825] <... close resumed>) = 0 [pid 5826] <... close resumed>) = 0 [pid 5825] mkdir("/syzcgroup/cpu/syz3", 0777 [pid 5826] openat(AT_FDCWD, "/syzcgroup/cpu/syz4/memory.limit_in_bytes", O_WRONLY|O_CLOEXEC [pid 5823] <... mkdir resumed>) = 0 [pid 5821] <... openat resumed>) = 3 [pid 5823] openat(AT_FDCWD, "/syzcgroup/cpu/syz2/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 5826] <... openat resumed>) = 3 [pid 5825] <... mkdir resumed>) = 0 [pid 5824] <... openat resumed>) = 3 [pid 5823] <... openat resumed>) = 3 [pid 5821] write(3, "1", 1 [pid 5825] openat(AT_FDCWD, "/syzcgroup/cpu/syz3/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 5826] write(3, "314572800", 9 [pid 5825] <... openat resumed>) = 3 [pid 5824] write(3, "1", 1 [pid 5823] write(3, "1", 1 [pid 5821] <... write resumed>) = 1 [pid 5826] <... write resumed>) = 9 [pid 5825] write(3, "1", 1 [pid 5824] <... write resumed>) = 1 [pid 5823] <... write resumed>) = 1 [pid 5826] close(3 [pid 5824] close(3 [pid 5821] close(3 [pid 5826] <... close resumed>) = 0 [pid 5825] <... write resumed>) = 1 [pid 5824] <... close resumed>) = 0 [pid 5823] close(3 [pid 5821] <... close resumed>) = 0 [pid 5826] mkdir("/syzcgroup/net/syz4", 0777 [pid 5825] close(3 [pid 5821] openat(AT_FDCWD, "/syzcgroup/cpu/syz0/memory.soft_limit_in_bytes", O_WRONLY|O_CLOEXEC [pid 5825] <... close resumed>) = 0 [pid 5824] openat(AT_FDCWD, "/syzcgroup/cpu/syz1/memory.soft_limit_in_bytes", O_WRONLY|O_CLOEXEC [pid 5823] <... close resumed>) = 0 [pid 5825] openat(AT_FDCWD, "/syzcgroup/cpu/syz3/memory.soft_limit_in_bytes", O_WRONLY|O_CLOEXEC) = 3 [pid 5823] openat(AT_FDCWD, "/syzcgroup/cpu/syz2/memory.soft_limit_in_bytes", O_WRONLY|O_CLOEXEC [pid 5825] write(3, "313524224", 9) = 9 [pid 5825] close(3) = 0 [pid 5825] openat(AT_FDCWD, "/syzcgroup/cpu/syz3/memory.limit_in_bytes", O_WRONLY|O_CLOEXEC) = 3 [pid 5825] write(3, "314572800", 9) = 9 [pid 5825] close(3) = 0 [pid 5826] <... mkdir resumed>) = 0 [pid 5825] mkdir("/syzcgroup/net/syz3", 0777 [pid 5826] openat(AT_FDCWD, "/syzcgroup/net/syz4/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 5824] <... openat resumed>) = 3 [pid 5823] <... openat resumed>) = 3 [pid 5821] <... openat resumed>) = 3 [pid 5826] <... openat resumed>) = 3 [pid 5825] <... mkdir resumed>) = 0 [pid 5824] write(3, "313524224", 9 [pid 5823] write(3, "313524224", 9 [pid 5821] write(3, "313524224", 9 [pid 5824] <... write resumed>) = 9 [pid 5823] <... write resumed>) = 9 [pid 5826] write(3, "1", 1 [pid 5824] close(3 [pid 5823] close(3 [pid 5821] <... write resumed>) = 9 [pid 5824] <... close resumed>) = 0 [pid 5823] <... close resumed>) = 0 [pid 5821] close(3 [pid 5824] openat(AT_FDCWD, "/syzcgroup/cpu/syz1/memory.limit_in_bytes", O_WRONLY|O_CLOEXEC [pid 5823] openat(AT_FDCWD, "/syzcgroup/cpu/syz2/memory.limit_in_bytes", O_WRONLY|O_CLOEXEC [pid 5825] openat(AT_FDCWD, "/syzcgroup/net/syz3/cgroup.procs", O_WRONLY|O_CLOEXEC) = 3 [pid 5824] <... openat resumed>) = 3 [pid 5825] write(3, "1", 1 [pid 5826] <... write resumed>) = 1 [pid 5823] <... openat resumed>) = 3 [pid 5826] close(3 [pid 5825] <... write resumed>) = 1 [pid 5824] write(3, "314572800", 9 [pid 5821] <... close resumed>) = 0 [pid 5826] <... close resumed>) = 0 [pid 5824] <... write resumed>) = 9 [pid 5823] write(3, "314572800", 9 [pid 5821] openat(AT_FDCWD, "/syzcgroup/cpu/syz0/memory.limit_in_bytes", O_WRONLY|O_CLOEXEC [pid 5825] close(3 [pid 5826] mkdir("./0", 0777 [pid 5825] <... close resumed>) = 0 [pid 5821] <... openat resumed>) = 3 [pid 5824] close(3 [pid 5825] mkdir("./0", 0777 [pid 5823] <... write resumed>) = 9 [pid 5826] <... mkdir resumed>) = 0 [pid 5825] <... mkdir resumed>) = 0 [pid 5825] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5826] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5824] <... close resumed>) = 0 [pid 5823] close(3 [pid 5821] write(3, "314572800", 9 [pid 5825] <... openat resumed>) = 3 [pid 5824] mkdir("/syzcgroup/net/syz1", 0777 [pid 5823] <... close resumed>) = 0 [pid 5821] <... write resumed>) = 9 [pid 5825] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5825] close(3 [pid 5826] <... openat resumed>) = 3 [pid 5824] <... mkdir resumed>) = 0 [pid 5823] mkdir("/syzcgroup/net/syz2", 0777 [pid 5821] close(3 [pid 5826] ioctl(3, LOOP_CLR_FD [pid 5823] <... mkdir resumed>) = 0 [pid 5826] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5825] <... close resumed>) = 0 [pid 5824] openat(AT_FDCWD, "/syzcgroup/net/syz1/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 5821] <... close resumed>) = 0 [pid 5826] close(3 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5824] <... openat resumed>) = 3 [pid 5826] <... close resumed>) = 0 [pid 5821] mkdir("/syzcgroup/net/syz0", 0777 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5821] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 5833 attached [pid 5833] set_robust_list(0x55558159a660, 24 [pid 5825] <... clone resumed>, child_tidptr=0x55558159a650) = 2 [pid 5824] write(3, "1", 1./strace-static-x86_64: Process 5834 attached [pid 5833] <... set_robust_list resumed>) = 0 [pid 5824] <... write resumed>) = 1 [ 63.893394][ T5826] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [pid 5823] openat(AT_FDCWD, "/syzcgroup/net/syz2/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 5824] close(3 [pid 5823] <... openat resumed>) = 3 [pid 5824] <... close resumed>) = 0 [pid 5823] write(3, "1", 1 [pid 5824] mkdir("./0", 0777 [pid 5823] <... write resumed>) = 1 [pid 5824] <... mkdir resumed>) = 0 [pid 5821] openat(AT_FDCWD, "/syzcgroup/net/syz0/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 5823] close(3 [pid 5821] <... openat resumed>) = 3 [pid 5834] set_robust_list(0x55558159a660, 24 [pid 5833] chdir("./0" [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5823] <... close resumed>) = 0 [pid 5821] write(3, "1", 1 [pid 5834] <... set_robust_list resumed>) = 0 [pid 5833] <... chdir resumed>) = 0 [pid 5826] <... clone resumed>, child_tidptr=0x55558159a650) = 2 [pid 5824] <... openat resumed>) = 3 [pid 5823] mkdir("./0", 0777 [pid 5834] chdir("./0" [pid 5833] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5824] ioctl(3, LOOP_CLR_FD [pid 5823] <... mkdir resumed>) = 0 [pid 5821] <... write resumed>) = 1 [pid 5834] <... chdir resumed>) = 0 [pid 5833] <... prctl resumed>) = 0 [pid 5824] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5823] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5833] setpgid(0, 0 [pid 5824] close(3 [pid 5821] close(3 [pid 5833] <... setpgid resumed>) = 0 [pid 5824] <... close resumed>) = 0 [pid 5823] <... openat resumed>) = 3 [pid 5821] <... close resumed>) = 0 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5823] ioctl(3, LOOP_CLR_FD [pid 5821] mkdir("./0", 0777 [pid 5834] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5833] symlink("/syzcgroup/unified/syz3", "./cgroup" [pid 5823] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5821] <... mkdir resumed>) = 0 [pid 5833] <... symlink resumed>) = 0 [pid 5834] <... prctl resumed>) = 0 [pid 5834] setpgid(0, 0 [pid 5823] close(3 [pid 5834] <... setpgid resumed>) = 0 [pid 5823] <... close resumed>) = 0 [pid 5821] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5834] symlink("/syzcgroup/unified/syz4", "./cgroup" [pid 5833] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu"./strace-static-x86_64: Process 5835 attached [pid 5834] <... symlink resumed>) = 0 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5821] ioctl(3, LOOP_CLR_FD [pid 5835] set_robust_list(0x55558159a660, 24 [pid 5833] <... symlink resumed>) = 0 [pid 5821] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5821] close(3) = 0 [pid 5821] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5824] <... clone resumed>, child_tidptr=0x55558159a650) = 2 ./strace-static-x86_64: Process 5837 attached [pid 5835] <... set_robust_list resumed>) = 0 [pid 5834] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu" [pid 5833] symlink("/syzcgroup/net/syz3", "./cgroup.net" [pid 5837] set_robust_list(0x55558159a660, 24 [pid 5833] <... symlink resumed>) = 0 [pid 5823] <... clone resumed>, child_tidptr=0x55558159a650) = 2 [pid 5837] <... set_robust_list resumed>) = 0 [pid 5835] chdir("./0" [pid 5834] <... symlink resumed>) = 0 [pid 5833] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5835] <... chdir resumed>) = 0 [pid 5834] symlink("/syzcgroup/net/syz4", "./cgroup.net"./strace-static-x86_64: Process 5836 attached [pid 5837] chdir("./0" [pid 5835] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5834] <... symlink resumed>) = 0 [pid 5833] <... openat resumed>) = 3 [pid 5837] <... chdir resumed>) = 0 [pid 5836] set_robust_list(0x55558159a660, 24 [pid 5835] <... prctl resumed>) = 0 [pid 5834] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5833] write(3, "1000", 4 [pid 5821] <... clone resumed>, child_tidptr=0x55558159a650) = 2 [pid 5836] <... set_robust_list resumed>) = 0 [pid 5835] setpgid(0, 0 [pid 5837] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5836] chdir("./0" [pid 5835] <... setpgid resumed>) = 0 [pid 5834] <... openat resumed>) = 3 [pid 5833] <... write resumed>) = 4 [pid 5837] <... prctl resumed>) = 0 [pid 5836] <... chdir resumed>) = 0 [pid 5837] setpgid(0, 0 [pid 5836] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5835] symlink("/syzcgroup/unified/syz1", "./cgroup" [pid 5834] write(3, "1000", 4 [pid 5833] close(3 [pid 5837] <... setpgid resumed>) = 0 [pid 5836] <... prctl resumed>) = 0 [pid 5834] <... write resumed>) = 4 [pid 5833] <... close resumed>) = 0 [pid 5837] symlink("/syzcgroup/unified/syz2", "./cgroup" [pid 5836] setpgid(0, 0 [pid 5834] close(3 [pid 5833] symlink("/dev/binderfs", "./binderfs" [pid 5837] <... symlink resumed>) = 0 [pid 5836] <... setpgid resumed>) = 0 [pid 5835] <... symlink resumed>) = 0 [pid 5834] <... close resumed>) = 0 [pid 5833] <... symlink resumed>) = 0 [pid 5834] symlink("/dev/binderfs", "./binderfs" [pid 5833] write(1, "executing program\n", 18 executing program [pid 5837] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu" [pid 5836] symlink("/syzcgroup/unified/syz0", "./cgroup" [pid 5835] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu" [pid 5834] <... symlink resumed>) = 0 [pid 5837] <... symlink resumed>) = 0 [pid 5836] <... symlink resumed>) = 0 [pid 5835] <... symlink resumed>) = 0 [pid 5833] <... write resumed>) = 18 [pid 5837] symlink("/syzcgroup/net/syz2", "./cgroup.net" [pid 5836] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu" [pid 5837] <... symlink resumed>) = 0 [pid 5836] <... symlink resumed>) = 0 [pid 5837] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5836] symlink("/syzcgroup/net/syz0", "./cgroup.net" [pid 5837] <... openat resumed>) = 3 [pid 5836] <... symlink resumed>) = 0 [pid 5835] symlink("/syzcgroup/net/syz1", "./cgroup.net" [pid 5837] write(3, "1000", 4 [pid 5836] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5833] memfd_create("syzkaller", 0 [pid 5837] <... write resumed>) = 4 [pid 5836] <... openat resumed>) = 3 [pid 5837] close(3) = 0 [pid 5837] symlink("/dev/binderfs", "./binderfs" [pid 5836] write(3, "1000", 4 [pid 5837] <... symlink resumed>) = 0 [pid 5836] <... write resumed>) = 4 executing program [pid 5837] write(1, "executing program\n", 18 [pid 5836] close(3 [pid 5835] <... symlink resumed>) = 0 [pid 5834] write(1, "executing program\n", 18 [pid 5833] <... memfd_create resumed>) = 3 [pid 5837] <... write resumed>) = 18 [pid 5836] <... close resumed>) = 0 executing program [pid 5837] memfd_create("syzkaller", 0 [pid 5836] symlink("/dev/binderfs", "./binderfs" [pid 5835] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5834] <... write resumed>) = 18 [pid 5833] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5835] <... openat resumed>) = 3 [pid 5834] memfd_create("syzkaller", 0 [pid 5833] <... mmap resumed>) = 0x7fbaaaa00000 [pid 5835] write(3, "1000", 4 [pid 5837] <... memfd_create resumed>) = 3 [pid 5836] <... symlink resumed>) = 0 executing program [pid 5834] <... memfd_create resumed>) = 3 [pid 5837] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5836] write(1, "executing program\n", 18 [pid 5834] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5837] <... mmap resumed>) = 0x7fbaaaa00000 [pid 5836] <... write resumed>) = 18 [pid 5834] <... mmap resumed>) = 0x7fbaaaa00000 [pid 5836] memfd_create("syzkaller", 0) = 3 [pid 5836] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5835] <... write resumed>) = 4 [pid 5836] <... mmap resumed>) = 0x7fbaaaa00000 [pid 5835] close(3) = 0 [pid 5835] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 5835] write(1, "executing program\n", 18) = 18 [pid 5835] memfd_create("syzkaller", 0) = 3 [pid 5835] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaaaa00000 [pid 5837] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 5836] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 5833] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 5835] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 5834] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 5837] <... write resumed>) = 33554432 [pid 5837] munmap(0x7fbaaaa00000, 138412032 [pid 5835] <... write resumed>) = 33554432 [pid 5835] munmap(0x7fbaaaa00000, 138412032 [pid 5834] <... write resumed>) = 33554432 [pid 5837] <... munmap resumed>) = 0 [pid 5837] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5834] munmap(0x7fbaaaa00000, 138412032 [pid 5837] <... openat resumed>) = 4 [pid 5836] <... write resumed>) = 33554432 [pid 5836] munmap(0x7fbaaaa00000, 138412032 [pid 5837] ioctl(4, LOOP_SET_FD, 3 [pid 5836] <... munmap resumed>) = 0 [pid 5835] <... munmap resumed>) = 0 [pid 5834] <... munmap resumed>) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5835] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5836] <... openat resumed>) = 4 [pid 5835] <... openat resumed>) = 4 [pid 5836] ioctl(4, LOOP_SET_FD, 3 [pid 5835] ioctl(4, LOOP_SET_FD, 3 [pid 5837] <... ioctl resumed>) = 0 [pid 5835] <... ioctl resumed>) = 0 [pid 5834] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5835] close(3) = 0 [pid 5835] close(4) = 0 [pid 5835] mkdir("./file0", 0777) = 0 [ 65.351973][ T5837] loop2: detected capacity change from 0 to 65536 [ 65.352292][ T5835] loop1: detected capacity change from 0 to 65536 [ 65.359986][ T5836] loop0: detected capacity change from 0 to 65536 [ 65.367835][ T5835] ======================================================= [ 65.367835][ T5835] WARNING: The mand mount option has been deprecated and [ 65.367835][ T5835] and is ignored by this kernel. Remove the mand [ 65.367835][ T5835] option from the mount to silence this warning. [pid 5835] mount("/dev/loop1", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 5837] close(3 [pid 5836] <... ioctl resumed>) = 0 [pid 5834] <... openat resumed>) = 4 [pid 5837] <... close resumed>) = 0 [pid 5834] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5837] close(4 [pid 5836] close(3 [pid 5834] close(3 [pid 5836] <... close resumed>) = 0 [pid 5836] close(4 [pid 5837] <... close resumed>) = 0 [pid 5836] <... close resumed>) = 0 [pid 5834] <... close resumed>) = 0 [pid 5836] mkdir("./file0", 0777 [pid 5837] mkdir("./file0", 0777 [pid 5836] <... mkdir resumed>) = 0 [pid 5834] close(4 [pid 5833] <... write resumed>) = 33554432 [pid 5837] <... mkdir resumed>) = 0 [ 65.367835][ T5835] ======================================================= [ 65.407960][ T5834] loop4: detected capacity change from 0 to 65536 [pid 5836] mount("/dev/loop0", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 5834] <... close resumed>) = 0 [pid 5833] munmap(0x7fbaaaa00000, 138412032 [pid 5834] mkdir("./file0", 0777) = 0 [pid 5834] mount("/dev/loop4", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 5837] mount("/dev/loop2", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 5833] <... munmap resumed>) = 0 [ 65.465334][ T5835] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 5833] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5833] ioctl(4, LOOP_SET_FD, 3 [pid 5835] <... mount resumed>) = 0 [pid 5833] <... ioctl resumed>) = 0 [pid 5835] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5833] close(3 [pid 5835] <... openat resumed>) = 3 [pid 5833] <... close resumed>) = 0 [pid 5835] chdir("./file0" [pid 5833] close(4 [pid 5835] <... chdir resumed>) = 0 [pid 5835] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5833] <... close resumed>) = 0 [pid 5835] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5833] mkdir("./file0", 0777) = 0 [pid 5835] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [ 65.521522][ T5836] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 65.535999][ T5833] loop3: detected capacity change from 0 to 65536 [ 65.548847][ T5834] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 65.551529][ T5835] XFS (loop1): Ending clean mount [ 65.557951][ T5837] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 5833] mount("/dev/loop3", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 5835] <... open resumed>) = 4 [ 65.584922][ T29] audit: type=1800 audit(1733456363.076:2): pid=5835 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop1" ino=41 res=0 errno=0 [ 65.610101][ T974] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 65.621562][ T974] XFS (loop1): Unmount and run xfs_repair [ 65.631386][ T974] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 65.634997][ T5836] XFS (loop0): Ending clean mount [ 65.639050][ T974] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 65.639081][ T974] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 65.639096][ T974] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 65.639111][ T974] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [pid 5835] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5836] <... mount resumed>) = 0 [pid 5834] <... mount resumed>) = 0 [pid 5837] <... mount resumed>) = 0 [pid 5836] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5834] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5837] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5836] <... openat resumed>) = 3 [pid 5834] <... openat resumed>) = 3 [pid 5837] <... openat resumed>) = 3 [pid 5836] chdir("./file0" [pid 5834] chdir("./file0" [pid 5837] chdir("./file0" [pid 5836] <... chdir resumed>) = 0 [pid 5834] <... chdir resumed>) = 0 [pid 5837] <... chdir resumed>) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5834] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5837] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5836] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5834] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5837] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5836] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 5834] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 5837] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 5836] <... open resumed>) = 4 [pid 5834] <... open resumed>) = 4 [pid 5837] <... open resumed>) = 4 [ 65.639124][ T974] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 65.656171][ T5834] XFS (loop4): Ending clean mount [ 65.664035][ T974] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 65.684669][ T5837] XFS (loop2): Ending clean mount [ 65.691078][ T974] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 65.706550][ T5833] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 5836] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5834] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [ 65.710420][ T29] audit: type=1800 audit(1733456363.196:3): pid=5836 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop0" ino=41 res=0 errno=0 [ 65.722721][ T3075] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 65.726031][ T29] audit: type=1800 audit(1733456363.196:4): pid=5834 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop4" ino=41 res=0 errno=0 [ 65.745925][ T3075] XFS (loop0): Unmount and run xfs_repair [ 65.777825][ T974] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 65.786465][ T8] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 65.801958][ T29] audit: type=1800 audit(1733456363.216:5): pid=5837 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop2" ino=41 res=0 errno=0 [ 65.804749][ T5835] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 65.833909][ T5879] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 65.847070][ T3075] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 65.849787][ T5835] XFS (loop1): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 65.854459][ T3075] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 65.869170][ T5835] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [pid 5837] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5835] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 5835] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000) = -1 EFAULT (Bad address) [pid 5835] close(3) = 0 [pid 5835] close(4 [pid 5833] <... mount resumed>) = 0 [pid 5835] <... close resumed>) = 0 [pid 5833] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5835] close(5 [pid 5833] <... openat resumed>) = 3 [pid 5835] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5833] chdir("./file0" [pid 5835] close(6 [pid 5833] <... chdir resumed>) = 0 [pid 5835] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5833] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5835] close(7 [pid 5833] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5835] <... close resumed>) = -1 EBADF (Bad file descriptor) [ 65.880201][ T5879] XFS (loop2): Unmount and run xfs_repair [ 65.894098][ T5879] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 65.901907][ T5879] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 65.905244][ T5833] XFS (loop3): Ending clean mount [ 65.912532][ T8] XFS (loop4): Unmount and run xfs_repair [ 65.921878][ T3075] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [pid 5833] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 5835] close(8 [pid 5833] <... open resumed>) = 4 [pid 5835] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5835] close(9) = -1 EBADF (Bad file descriptor) [pid 5835] close(10) = -1 EBADF (Bad file descriptor) [pid 5835] close(11) = -1 EBADF (Bad file descriptor) [pid 5835] close(12) = -1 EBADF (Bad file descriptor) [pid 5835] close(13) = -1 EBADF (Bad file descriptor) [pid 5835] close(14) = -1 EBADF (Bad file descriptor) [pid 5835] close(15) = -1 EBADF (Bad file descriptor) [pid 5835] close(16) = -1 EBADF (Bad file descriptor) [pid 5835] close(17) = -1 EBADF (Bad file descriptor) [pid 5833] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5835] close(18) = -1 EBADF (Bad file descriptor) [pid 5835] close(19) = -1 EBADF (Bad file descriptor) [pid 5835] close(20) = -1 EBADF (Bad file descriptor) [pid 5835] close(21) = -1 EBADF (Bad file descriptor) [pid 5835] close(22) = -1 EBADF (Bad file descriptor) [pid 5835] close(23) = -1 EBADF (Bad file descriptor) [pid 5835] close(24) = -1 EBADF (Bad file descriptor) [pid 5835] close(25) = -1 EBADF (Bad file descriptor) [pid 5835] close(26) = -1 EBADF (Bad file descriptor) [pid 5835] close(27) = -1 EBADF (Bad file descriptor) [pid 5835] close(28) = -1 EBADF (Bad file descriptor) [pid 5835] close(29) = -1 EBADF (Bad file descriptor) [ 65.927875][ T29] audit: type=1800 audit(1733456363.426:6): pid=5833 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop3" ino=41 res=0 errno=0 [ 65.931217][ T5879] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 65.960025][ T8] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 65.968272][ T3075] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [pid 5835] exit_group(0) = ? [pid 5835] +++ exited with 0 +++ [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=11 /* 0.11 s */, si_stime=48 /* 0.48 s */} --- [ 65.972351][ T974] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 65.977487][ T8] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 65.997713][ T3075] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 66.000362][ T5835] syz-executor345 (5835) used greatest stack depth: 18072 bytes left [ 66.006563][ T3075] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 66.023540][ T974] XFS (loop3): Unmount and run xfs_repair [ 66.023560][ T974] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 66.030148][ T5879] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 66.045896][ T974] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 66.046157][ T8] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 66.055384][ T974] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 66.064458][ T5879] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [pid 5824] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 66.073856][ T974] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 66.082016][ T3075] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 66.092004][ T974] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 66.099615][ T8] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 66.110503][ T974] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 66.117557][ T5879] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [pid 5824] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5824] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [ 66.128537][ T974] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 66.135442][ T3075] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 66.146403][ T974] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 66.153047][ T8] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 66.171062][ T5879] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [pid 5824] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [ 66.180225][ T5879] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 66.189091][ T974] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 66.189149][ T5833] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 66.198119][ T3075] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 66.218501][ T8] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [pid 5824] umount2("./0/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 66.220431][ T5833] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 66.227618][ T8] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 66.243777][ T5833] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 66.251139][ T5879] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 66.268802][ T5837] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [pid 5833] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 5824] newfstatat(AT_FDCWD, "./0/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./0/cgroup") = 0 [pid 5824] umount2("./0/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5824] newfstatat(AT_FDCWD, "./0/cgroup.cpu", [pid 5833] close(3 [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] <... close resumed>) = 0 [pid 5824] unlink("./0/cgroup.cpu" [pid 5833] close(4 [pid 5824] <... unlink resumed>) = 0 [pid 5833] <... close resumed>) = 0 [pid 5824] umount2("./0/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] close(5 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] newfstatat(AT_FDCWD, "./0/cgroup.net", [pid 5833] close(6 [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] unlink("./0/cgroup.net" [pid 5833] close(7 [pid 5824] <... unlink resumed>) = 0 [pid 5833] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] close(8 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] newfstatat(AT_FDCWD, "./0/binderfs", [pid 5833] close(9 [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] unlink("./0/binderfs" [pid 5833] close(10 [pid 5824] <... unlink resumed>) = 0 [pid 5833] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] close(11) = -1 EBADF (Bad file descriptor) [pid 5833] close(12) = -1 EBADF (Bad file descriptor) [pid 5833] close(13) = -1 EBADF (Bad file descriptor) [pid 5833] close(14) = -1 EBADF (Bad file descriptor) [pid 5833] close(15) = -1 EBADF (Bad file descriptor) [pid 5833] close(16) = -1 EBADF (Bad file descriptor) [pid 5833] close(17) = -1 EBADF (Bad file descriptor) [pid 5833] close(18) = -1 EBADF (Bad file descriptor) [pid 5833] close(19) = -1 EBADF (Bad file descriptor) [pid 5833] close(20) = -1 EBADF (Bad file descriptor) [pid 5833] close(21) = -1 EBADF (Bad file descriptor) [pid 5833] close(22) = -1 EBADF (Bad file descriptor) [pid 5833] close(23) = -1 EBADF (Bad file descriptor) [pid 5833] close(24) = -1 EBADF (Bad file descriptor) [pid 5833] close(25) = -1 EBADF (Bad file descriptor) [pid 5833] close(26) = -1 EBADF (Bad file descriptor) [pid 5833] close(27) = -1 EBADF (Bad file descriptor) [pid 5833] close(28) = -1 EBADF (Bad file descriptor) [pid 5833] close(29) = -1 EBADF (Bad file descriptor) [pid 5833] exit_group(0) = ? [ 66.268819][ T5836] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 66.270629][ T5836] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 66.280391][ T8] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 66.317122][ T5836] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 66.318641][ T5824] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 5836] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 5833] +++ exited with 0 +++ [pid 5836] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000 [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=13 /* 0.13 s */, si_stime=53 /* 0.53 s */} --- [pid 5825] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5837] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5837] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000 [pid 5825] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5837] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5825] <... openat resumed>) = 3 [pid 5825] newfstatat(3, "", [pid 5837] close(3 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5825] umount2("./0/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./0/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./0/cgroup") = 0 [pid 5825] umount2("./0/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./0/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./0/cgroup.cpu") = 0 [pid 5837] <... close resumed>) = 0 [pid 5825] umount2("./0/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5837] close(4 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./0/cgroup.net", [pid 5837] <... close resumed>) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5837] close(5 [pid 5825] unlink("./0/cgroup.net") = 0 [pid 5837] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5837] close(6 [pid 5836] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5825] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5836] close(3 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5836] <... close resumed>) = 0 [pid 5825] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] close(4 [pid 5825] unlink("./0/binderfs") = 0 [pid 5836] <... close resumed>) = 0 [ 66.326914][ T5837] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 66.348863][ T5837] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 66.357465][ T8] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 66.368967][ T5834] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [pid 5825] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5837] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5836] close(5 [pid 5837] close(7 [pid 5836] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5837] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5837] close(8) = -1 EBADF (Bad file descriptor) [pid 5837] close(9) = -1 EBADF (Bad file descriptor) [pid 5837] close(10) = -1 EBADF (Bad file descriptor) [pid 5837] close(11) = -1 EBADF (Bad file descriptor) [pid 5837] close(12) = -1 EBADF (Bad file descriptor) [pid 5837] close(13) = -1 EBADF (Bad file descriptor) [pid 5837] close(14) = -1 EBADF (Bad file descriptor) [pid 5837] close(15) = -1 EBADF (Bad file descriptor) [pid 5837] close(16) = -1 EBADF (Bad file descriptor) [pid 5837] close(17) = -1 EBADF (Bad file descriptor) [pid 5837] close(18) = -1 EBADF (Bad file descriptor) [pid 5837] close(19) = -1 EBADF (Bad file descriptor) [pid 5837] close(20) = -1 EBADF (Bad file descriptor) [pid 5837] close(21) = -1 EBADF (Bad file descriptor) [pid 5837] close(22) = -1 EBADF (Bad file descriptor) [pid 5837] close(23) = -1 EBADF (Bad file descriptor) [pid 5837] close(24) = -1 EBADF (Bad file descriptor) [pid 5837] close(25) = -1 EBADF (Bad file descriptor) [pid 5837] close(26) = -1 EBADF (Bad file descriptor) [pid 5837] close(27) = -1 EBADF (Bad file descriptor) [pid 5837] close(28) = -1 EBADF (Bad file descriptor) [pid 5837] close(29) = -1 EBADF (Bad file descriptor) [pid 5837] exit_group(0) = ? [pid 5837] +++ exited with 0 +++ [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=49 /* 0.49 s */} --- [pid 5823] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5823] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5823] umount2("./0/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./0/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./0/cgroup") = 0 [pid 5836] close(6 [pid 5823] umount2("./0/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5836] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5836] close(7 [pid 5823] newfstatat(AT_FDCWD, "./0/cgroup.cpu", [pid 5836] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] close(8 [pid 5823] unlink("./0/cgroup.cpu" [pid 5836] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5823] <... unlink resumed>) = 0 [pid 5836] close(9 [pid 5823] umount2("./0/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5836] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5836] close(10 [pid 5823] newfstatat(AT_FDCWD, "./0/cgroup.net", [pid 5836] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] close(11 [pid 5823] unlink("./0/cgroup.net" [pid 5836] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5823] <... unlink resumed>) = 0 [pid 5836] close(12 [pid 5823] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5836] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5836] close(13 [ 66.387005][ T5825] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 66.399455][ T5834] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 66.414218][ T5834] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [pid 5823] newfstatat(AT_FDCWD, "./0/binderfs", [pid 5836] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5834] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5834] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000 [pid 5836] close(14 [pid 5834] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5823] unlink("./0/binderfs" [pid 5834] close(3) = 0 [pid 5834] close(4 [pid 5836] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] <... umount2 resumed>) = 0 [pid 5823] <... unlink resumed>) = 0 [pid 5836] close(15 [pid 5823] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5836] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5836] close(16) = -1 EBADF (Bad file descriptor) [pid 5836] close(17) = -1 EBADF (Bad file descriptor) [pid 5836] close(18) = -1 EBADF (Bad file descriptor) [pid 5836] close(19) = -1 EBADF (Bad file descriptor) [pid 5836] close(20) = -1 EBADF (Bad file descriptor) [pid 5836] close(21) = -1 EBADF (Bad file descriptor) [pid 5836] close(22) = -1 EBADF (Bad file descriptor) [pid 5836] close(23) = -1 EBADF (Bad file descriptor) [pid 5836] close(24) = -1 EBADF (Bad file descriptor) [pid 5836] close(25) = -1 EBADF (Bad file descriptor) [pid 5836] close(26) = -1 EBADF (Bad file descriptor) [pid 5836] close(27) = -1 EBADF (Bad file descriptor) [pid 5836] close(28) = -1 EBADF (Bad file descriptor) [pid 5836] close(29) = -1 EBADF (Bad file descriptor) [pid 5836] exit_group(0 [pid 5834] <... close resumed>) = 0 [pid 5824] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5834] close(5 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5834] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] newfstatat(AT_FDCWD, "./0/file0", [pid 5834] close(6 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5834] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5834] close(7 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5834] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5836] <... exit_group resumed>) = ? [pid 5834] close(8 [pid 5824] <... openat resumed>) = 4 [pid 5834] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5825] <... umount2 resumed>) = 0 [pid 5824] newfstatat(4, "", [pid 5834] close(9 [pid 5825] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5836] +++ exited with 0 +++ [pid 5834] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] getdents64(4, [pid 5834] close(10 [pid 5824] <... getdents64 resumed>0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5834] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] getdents64(4, [pid 5834] close(11 [pid 5824] <... getdents64 resumed>0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5834] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] close(4 [pid 5834] close(12 [pid 5825] newfstatat(AT_FDCWD, "./0/file0", [pid 5824] <... close resumed>) = 0 [pid 5821] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=12 /* 0.12 s */, si_stime=47 /* 0.47 s */} --- [pid 5834] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] rmdir("./0/file0" [pid 5834] close(13 [pid 5825] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... rmdir resumed>) = 0 [pid 5821] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5821] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5821] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5821] umount2("./0/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5834] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] getdents64(3, [pid 5821] newfstatat(AT_FDCWD, "./0/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] unlink("./0/cgroup") = 0 [pid 5821] umount2("./0/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./0/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5834] close(14 [pid 5825] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] <... getdents64 resumed>0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5821] unlink("./0/cgroup.cpu") = 0 [pid 5821] umount2("./0/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5834] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5825] <... openat resumed>) = 4 [pid 5824] close(3 [pid 5823] <... umount2 resumed>) = 0 [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5834] close(15 [pid 5825] newfstatat(4, "", [pid 5824] <... close resumed>) = 0 [pid 5821] newfstatat(AT_FDCWD, "./0/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] unlink("./0/cgroup.net") = 0 [pid 5821] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5834] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5824] rmdir("./0" [pid 5823] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] unlink("./0/binderfs" [pid 5834] close(16 [pid 5825] getdents64(4, [pid 5824] <... rmdir resumed>) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5821] <... unlink resumed>) = 0 [ 66.450608][ T5823] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 5821] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5834] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5825] <... getdents64 resumed>0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5824] mkdir("./1", 0777 [pid 5823] newfstatat(AT_FDCWD, "./0/file0", [pid 5834] close(17 [pid 5825] getdents64(4, [pid 5824] <... mkdir resumed>) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5834] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5825] <... getdents64 resumed>0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5834] close(18 [pid 5825] close(4 [pid 5824] <... openat resumed>) = 3 [pid 5823] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5834] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5825] <... close resumed>) = 0 [pid 5824] ioctl(3, LOOP_CLR_FD [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5834] close(19 [pid 5825] rmdir("./0/file0" [pid 5834] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5825] <... rmdir resumed>) = 0 [pid 5824] <... ioctl resumed>) = 0 [pid 5823] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5834] close(20 [pid 5825] getdents64(3, [pid 5823] <... openat resumed>) = 4 [pid 5834] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5825] <... getdents64 resumed>0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5824] close(3 [pid 5823] newfstatat(4, "", [pid 5834] close(21 [pid 5825] close(3 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(4, 0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5823] getdents64(4, 0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5823] close(4) = 0 [pid 5823] rmdir("./0/file0" [pid 5834] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5825] <... close resumed>) = 0 [pid 5823] <... rmdir resumed>) = 0 [pid 5825] rmdir("./0" [pid 5834] close(22 [pid 5825] <... rmdir resumed>) = 0 [pid 5823] getdents64(3, [pid 5834] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5825] mkdir("./1", 0777 [pid 5834] close(23) = -1 EBADF (Bad file descriptor) [pid 5823] <... getdents64 resumed>0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5834] close(24 [pid 5823] close(3 [pid 5834] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5825] <... mkdir resumed>) = 0 [pid 5823] <... close resumed>) = 0 [pid 5823] rmdir("./0" [pid 5834] close(25 [pid 5823] <... rmdir resumed>) = 0 [pid 5834] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5834] close(26 [pid 5825] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5825] ioctl(3, LOOP_CLR_FD) = 0 [ 66.503291][ T5821] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 5825] close(3 [pid 5834] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5823] mkdir("./1", 0777 [pid 5834] close(27) = -1 EBADF (Bad file descriptor) [pid 5823] <... mkdir resumed>) = 0 [pid 5821] <... umount2 resumed>) = 0 [pid 5834] close(28 [pid 5823] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5821] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5834] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5834] close(29 [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5834] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5823] <... openat resumed>) = 3 [pid 5821] newfstatat(AT_FDCWD, "./0/file0", [pid 5834] exit_group(0 [pid 5823] ioctl(3, LOOP_CLR_FD [pid 5821] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5834] <... exit_group resumed>) = ? [pid 5821] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5834] +++ exited with 0 +++ [pid 5823] <... ioctl resumed>) = 0 [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=51 /* 0.51 s */} --- [pid 5821] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] close(3 [pid 5821] <... openat resumed>) = 4 [pid 5821] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5826] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] getdents64(4, [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5821] <... getdents64 resumed>0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5826] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5821] getdents64(4, [pid 5826] <... openat resumed>) = 3 [pid 5821] <... getdents64 resumed>0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5826] newfstatat(3, "", [pid 5821] close(4 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5821] <... close resumed>) = 0 [pid 5821] rmdir("./0/file0") = 0 [pid 5821] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5821] close(3) = 0 [pid 5821] rmdir("./0") = 0 [pid 5821] mkdir("./1", 0777) = 0 [pid 5821] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5826] getdents64(3, [pid 5821] <... openat resumed>) = 3 [pid 5826] <... getdents64 resumed>0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5821] ioctl(3, LOOP_CLR_FD [pid 5826] umount2("./0/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] <... ioctl resumed>) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5821] close(3 [pid 5826] newfstatat(AT_FDCWD, "./0/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./0/cgroup") = 0 [pid 5826] umount2("./0/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./0/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./0/cgroup.cpu") = 0 [pid 5826] umount2("./0/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./0/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./0/cgroup.net") = 0 [pid 5826] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./0/binderfs") = 0 [ 66.817059][ T5826] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 5826] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... close resumed>) = 0 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558159a650) = 3 [pid 5824] <... close resumed>) = 0 ./strace-static-x86_64: Process 5883 attached [pid 5883] set_robust_list(0x55558159a660, 24 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5883] <... set_robust_list resumed>) = 0 [pid 5883] chdir("./1" [pid 5824] <... clone resumed>, child_tidptr=0x55558159a650) = 3 [pid 5883] <... chdir resumed>) = 0 [pid 5883] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5883] setpgid(0, 0) = 0 [pid 5883] symlink("/syzcgroup/unified/syz3", "./cgroup") = 0 executing program [pid 5883] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu") = 0 [pid 5883] symlink("/syzcgroup/net/syz3", "./cgroup.net") = 0 [pid 5883] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5883] write(3, "1000", 4) = 4 [pid 5883] close(3) = 0 [pid 5883] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5883] write(1, "executing program\n", 18) = 18 [pid 5883] memfd_create("syzkaller", 0) = 3 [pid 5883] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaaaa00000 [pid 5823] <... close resumed>) = 0 ./strace-static-x86_64: Process 5884 attached [pid 5884] set_robust_list(0x55558159a660, 24) = 0 [pid 5884] chdir("./1") = 0 [pid 5884] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5884] setpgid(0, 0) = 0 [pid 5884] symlink("/syzcgroup/unified/syz1", "./cgroup") = 0 [pid 5884] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu") = 0 [pid 5884] symlink("/syzcgroup/net/syz1", "./cgroup.net") = 0 [pid 5884] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5884] write(3, "1000", 4) = 4 [pid 5884] close(3) = 0 [pid 5884] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5884] write(1, "executing program\n", 18) = 18 [pid 5884] memfd_create("syzkaller", 0) = 3 [pid 5884] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaaaa00000 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5885 attached [pid 5821] <... close resumed>) = 0 [pid 5885] set_robust_list(0x55558159a660, 24 [pid 5823] <... clone resumed>, child_tidptr=0x55558159a650) = 3 [pid 5821] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5885] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 5886 attached [pid 5885] chdir("./1" [pid 5826] <... umount2 resumed>) = 0 [pid 5886] set_robust_list(0x55558159a660, 24 [pid 5885] <... chdir resumed>) = 0 [pid 5821] <... clone resumed>, child_tidptr=0x55558159a650) = 3 [pid 5886] <... set_robust_list resumed>) = 0 [pid 5885] prctl(PR_SET_PDEATHSIG, SIGKILLexecuting program executing program [pid 5886] chdir("./1" [pid 5885] <... prctl resumed>) = 0 [pid 5826] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5885] setpgid(0, 0) = 0 [pid 5885] symlink("/syzcgroup/unified/syz2", "./cgroup") = 0 [pid 5885] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu") = 0 [pid 5885] symlink("/syzcgroup/net/syz2", "./cgroup.net") = 0 [pid 5885] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5885] write(3, "1000", 4) = 4 [pid 5885] close(3) = 0 [pid 5885] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5885] write(1, "executing program\n", 18) = 18 [pid 5885] memfd_create("syzkaller", 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./0/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5826] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5826] getdents64(4, [pid 5885] <... memfd_create resumed>) = 3 [pid 5826] <... getdents64 resumed>0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5826] getdents64(4, [pid 5885] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5826] <... getdents64 resumed>0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5885] <... mmap resumed>) = 0x7fbaaaa00000 [pid 5826] close(4) = 0 [pid 5826] rmdir("./0/file0" [pid 5886] <... chdir resumed>) = 0 [pid 5886] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5886] setpgid(0, 0 [pid 5826] <... rmdir resumed>) = 0 [pid 5886] <... setpgid resumed>) = 0 [pid 5886] symlink("/syzcgroup/unified/syz0", "./cgroup" [pid 5826] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5826] close(3) = 0 [pid 5826] rmdir("./0" [pid 5886] <... symlink resumed>) = 0 [pid 5826] <... rmdir resumed>) = 0 [pid 5886] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu" [pid 5826] mkdir("./1", 0777 [pid 5886] <... symlink resumed>) = 0 [pid 5826] <... mkdir resumed>) = 0 [pid 5886] symlink("/syzcgroup/net/syz0", "./cgroup.net" [pid 5826] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5826] ioctl(3, LOOP_CLR_FD) = 0 [pid 5826] close(3 [pid 5886] <... symlink resumed>) = 0 [pid 5886] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5886] write(3, "1000", 4) = 4 [pid 5886] close(3) = 0 [pid 5886] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5886] write(1, "executing program\n", 18) = 18 [pid 5886] memfd_create("syzkaller", 0) = 3 [pid 5886] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaaaa00000 [pid 5884] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 5883] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 5884] <... write resumed>) = 33554432 [pid 5884] munmap(0x7fbaaaa00000, 138412032) = 0 [pid 5884] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5826] <... close resumed>) = 0 [pid 5884] ioctl(4, LOOP_SET_FD, 3 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5887 attached [pid 5887] set_robust_list(0x55558159a660, 24 [pid 5826] <... clone resumed>, child_tidptr=0x55558159a650) = 3 [pid 5887] <... set_robust_list resumed>) = 0 [pid 5887] chdir("./1") = 0 [pid 5887] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5887] setpgid(0, 0) = 0 [pid 5887] symlink("/syzcgroup/unified/syz4", "./cgroup") = 0 [pid 5887] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu") = 0 [pid 5887] symlink("/syzcgroup/net/syz4", "./cgroup.net") = 0 [pid 5887] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5887] write(3, "1000", 4) = 4 [pid 5887] close(3) = 0 [pid 5887] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 5887] write(1, "executing program\n", 18) = 18 [pid 5887] memfd_create("syzkaller", 0) = 3 [pid 5887] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaaaa00000 [pid 5885] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 5884] <... ioctl resumed>) = 0 [pid 5884] close(3) = 0 [pid 5884] close(4) = 0 [ 67.707018][ T5884] loop1: detected capacity change from 0 to 65536 [pid 5884] mkdir("./file0", 0777) = 0 [pid 5884] mount("/dev/loop1", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [ 67.917206][ T5884] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 5886] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 5887] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 5886] <... write resumed>) = 33554432 [pid 5886] munmap(0x7fbaaaa00000, 138412032 [pid 5884] <... mount resumed>) = 0 [pid 5884] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5884] chdir("./file0") = 0 [pid 5884] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5884] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 4 [ 68.304245][ T5884] XFS (loop1): Ending clean mount [pid 5884] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5886] <... munmap resumed>) = 0 [pid 5886] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 68.327829][ T29] audit: type=1800 audit(1733456365.826:7): pid=5884 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop1" ino=41 res=0 errno=0 [ 68.330035][ T974] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [pid 5886] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5886] close(3) = 0 [pid 5886] close(4 [pid 5885] <... write resumed>) = 33554432 [pid 5883] <... write resumed>) = 33554432 [pid 5883] munmap(0x7fbaaaa00000, 138412032 [pid 5886] <... close resumed>) = 0 [pid 5885] munmap(0x7fbaaaa00000, 138412032 [pid 5886] mkdir("./file0", 0777) = 0 [ 68.378219][ T5886] loop0: detected capacity change from 0 to 65536 [ 68.387474][ T974] XFS (loop1): Unmount and run xfs_repair [ 68.397042][ T974] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 68.404456][ T974] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [pid 5886] mount("/dev/loop0", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 5885] <... munmap resumed>) = 0 [pid 5883] <... munmap resumed>) = 0 [pid 5885] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5883] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5885] <... openat resumed>) = 4 [pid 5883] <... openat resumed>) = 4 [pid 5885] ioctl(4, LOOP_SET_FD, 3 [pid 5883] ioctl(4, LOOP_SET_FD, 3 [pid 5885] <... ioctl resumed>) = 0 [ 68.443426][ T974] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 68.462914][ T974] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 68.476214][ T5885] loop2: detected capacity change from 0 to 65536 [ 68.476345][ T5883] loop3: detected capacity change from 0 to 65536 [pid 5885] close(3 [pid 5883] <... ioctl resumed>) = 0 [pid 5883] close(3) = 0 [pid 5883] close(4 [pid 5885] <... close resumed>) = 0 [pid 5883] <... close resumed>) = 0 [pid 5885] close(4 [pid 5883] mkdir("./file0", 0777 [pid 5885] <... close resumed>) = 0 [pid 5885] mkdir("./file0", 0777) = 0 [pid 5883] <... mkdir resumed>) = 0 [pid 5885] mount("/dev/loop2", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [ 68.492350][ T974] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 68.492582][ T5886] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 68.548125][ T974] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 68.557139][ T974] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 68.566093][ T974] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 68.575293][ T974] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 68.584543][ T5884] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [pid 5883] mount("/dev/loop3", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 5887] <... write resumed>) = 33554432 [ 68.633547][ T5884] XFS (loop1): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 68.652253][ T5884] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 68.659508][ T5883] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 68.660990][ T5885] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 5887] munmap(0x7fbaaaa00000, 138412032 [pid 5884] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 5883] <... mount resumed>) = 0 [pid 5884] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000 [pid 5883] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5884] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5883] <... openat resumed>) = 3 [pid 5884] close(3 [pid 5883] chdir("./file0" [pid 5884] <... close resumed>) = 0 [pid 5883] <... chdir resumed>) = 0 [pid 5884] close(4 [pid 5883] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5884] <... close resumed>) = 0 [pid 5883] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5884] close(5 [pid 5883] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 5884] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5887] <... munmap resumed>) = 0 [pid 5884] close(6) = -1 EBADF (Bad file descriptor) [pid 5887] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5884] close(7 [pid 5887] <... openat resumed>) = 4 [pid 5884] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5884] close(8) = -1 EBADF (Bad file descriptor) [pid 5884] close(9) = -1 EBADF (Bad file descriptor) [pid 5884] close(10) = -1 EBADF (Bad file descriptor) [pid 5884] close(11) = -1 EBADF (Bad file descriptor) [pid 5884] close(12) = -1 EBADF (Bad file descriptor) [pid 5884] close(13) = -1 EBADF (Bad file descriptor) [pid 5884] close(14) = -1 EBADF (Bad file descriptor) [pid 5884] close(15) = -1 EBADF (Bad file descriptor) [pid 5884] close(16) = -1 EBADF (Bad file descriptor) [pid 5884] close(17) = -1 EBADF (Bad file descriptor) [pid 5884] close(18) = -1 EBADF (Bad file descriptor) [pid 5884] close(19) = -1 EBADF (Bad file descriptor) [pid 5884] close(20) = -1 EBADF (Bad file descriptor) [pid 5884] close(21) = -1 EBADF (Bad file descriptor) [pid 5884] close(22) = -1 EBADF (Bad file descriptor) [pid 5884] close(23) = -1 EBADF (Bad file descriptor) [pid 5884] close(24) = -1 EBADF (Bad file descriptor) [pid 5887] ioctl(4, LOOP_SET_FD, 3 [pid 5884] close(25) = -1 EBADF (Bad file descriptor) [pid 5884] close(26) = -1 EBADF (Bad file descriptor) [pid 5884] close(27) = -1 EBADF (Bad file descriptor) [pid 5884] close(28) = -1 EBADF (Bad file descriptor) [pid 5884] close(29) = -1 EBADF (Bad file descriptor) [pid 5884] exit_group(0) = ? [pid 5884] +++ exited with 0 +++ [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=46 /* 0.46 s */} --- [pid 5824] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5824] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5824] umount2("./1/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./1/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./1/cgroup" [pid 5887] <... ioctl resumed>) = 0 [pid 5887] close(3 [pid 5824] <... unlink resumed>) = 0 [pid 5824] umount2("./1/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./1/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./1/cgroup.cpu") = 0 [pid 5824] umount2("./1/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./1/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./1/cgroup.net") = 0 [pid 5824] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5887] <... close resumed>) = 0 [pid 5887] close(4) = 0 [pid 5887] mkdir("./file0", 0777) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 68.686406][ T5883] XFS (loop3): Ending clean mount [ 68.706386][ T5887] loop4: detected capacity change from 0 to 65536 [pid 5887] mount("/dev/loop4", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 5886] <... mount resumed>) = 0 [pid 5824] newfstatat(AT_FDCWD, "./1/binderfs", [pid 5886] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5886] <... openat resumed>) = 3 [pid 5883] <... open resumed>) = 4 [pid 5886] chdir("./file0") = 0 [pid 5886] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5886] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 4 [ 68.732035][ T5886] XFS (loop0): Ending clean mount [ 68.740282][ T29] audit: type=1800 audit(1733456366.236:8): pid=5883 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop3" ino=41 res=0 errno=0 [ 68.756612][ T5886] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [pid 5886] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5883] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5824] unlink("./1/binderfs" [pid 5885] <... mount resumed>) = 0 [pid 5824] <... unlink resumed>) = 0 [pid 5885] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5885] chdir("./file0" [ 68.760337][ T29] audit: type=1800 audit(1733456366.236:9): pid=5886 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop0" ino=41 res=0 errno=0 [ 68.772758][ T5886] XFS (loop0): Unmount and run xfs_repair [ 68.797076][ T5886] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 68.801942][ T5885] XFS (loop2): Ending clean mount [ 68.808324][ T5886] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 68.819374][ T5886] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [pid 5824] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5885] <... chdir resumed>) = 0 [pid 5885] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [ 68.828698][ T5886] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 68.832470][ T974] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 68.838528][ T5886] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 68.849487][ T974] XFS (loop3): Unmount and run xfs_repair [ 68.858136][ T5824] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 68.863551][ T974] XFS (loop3): First 128 bytes of corrupted metadata buffer: [pid 5885] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 4 [ 68.879704][ T974] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 68.881117][ T29] audit: type=1800 audit(1733456366.376:10): pid=5885 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop2" ino=41 res=0 errno=0 [ 68.889937][ T974] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 68.912426][ T8] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 68.918437][ T974] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 68.938538][ T974] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 68.947578][ T974] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 68.950620][ T5887] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 68.956423][ T974] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 68.966344][ T8] XFS (loop2): Unmount and run xfs_repair [ 68.973975][ T974] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 68.973992][ T974] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 68.974062][ T5883] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 68.988821][ T5886] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 69.000674][ T5883] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [pid 5885] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5883] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 5883] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000) = -1 EFAULT (Bad address) [pid 5883] close(3) = 0 [pid 5883] close(4) = 0 [pid 5883] close(5) = -1 EBADF (Bad file descriptor) [pid 5883] close(6) = -1 EBADF (Bad file descriptor) [pid 5883] close(7) = -1 EBADF (Bad file descriptor) [pid 5883] close(8) = -1 EBADF (Bad file descriptor) [pid 5883] close(9) = -1 EBADF (Bad file descriptor) [pid 5883] close(10) = -1 EBADF (Bad file descriptor) [pid 5883] close(11) = -1 EBADF (Bad file descriptor) [pid 5883] close(12) = -1 EBADF (Bad file descriptor) [pid 5883] close(13) = -1 EBADF (Bad file descriptor) [pid 5883] close(14) = -1 EBADF (Bad file descriptor) [pid 5883] close(15) = -1 EBADF (Bad file descriptor) [pid 5883] close(16) = -1 EBADF (Bad file descriptor) [pid 5883] close(17) = -1 EBADF (Bad file descriptor) [pid 5883] close(18) = -1 EBADF (Bad file descriptor) [pid 5883] close(19) = -1 EBADF (Bad file descriptor) [pid 5883] close(20) = -1 EBADF (Bad file descriptor) [pid 5883] close(21) = -1 EBADF (Bad file descriptor) [pid 5883] close(22) = -1 EBADF (Bad file descriptor) [pid 5883] close(23) = -1 EBADF (Bad file descriptor) [pid 5883] close(24) = -1 EBADF (Bad file descriptor) [pid 5883] close(25) = -1 EBADF (Bad file descriptor) [pid 5883] close(26) = -1 EBADF (Bad file descriptor) [pid 5883] close(27) = -1 EBADF (Bad file descriptor) [pid 5883] close(28) = -1 EBADF (Bad file descriptor) [pid 5883] close(29) = -1 EBADF (Bad file descriptor) [pid 5883] exit_group(0) = ? [pid 5883] +++ exited with 0 +++ [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=60 /* 0.60 s */} --- [pid 5825] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5825] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [ 69.009578][ T8] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 69.017856][ T5883] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 69.032950][ T5886] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 69.057586][ T5886] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 69.066464][ T8] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 69.075465][ T8] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [pid 5825] umount2("./1/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5887] <... mount resumed>) = 0 [pid 5887] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5887] chdir("./file0") = 0 [pid 5887] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5887] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... umount2 resumed>) = 0 [pid 5824] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] newfstatat(AT_FDCWD, "./1/cgroup", [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./1/file0", [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./1/cgroup" [pid 5824] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... unlink resumed>) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] umount2("./1/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... openat resumed>) = 4 [pid 5825] newfstatat(AT_FDCWD, "./1/cgroup.cpu", [pid 5824] newfstatat(4, "", [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5825] unlink("./1/cgroup.cpu" [pid 5824] getdents64(4, 0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5824] getdents64(4, 0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5824] close(4) = 0 [pid 5824] rmdir("./1/file0") = 0 [pid 5824] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5824] close(3) = 0 [pid 5825] <... unlink resumed>) = 0 [pid 5824] rmdir("./1" [pid 5825] umount2("./1/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... rmdir resumed>) = 0 [pid 5824] mkdir("./2", 0777) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5825] newfstatat(AT_FDCWD, "./1/cgroup.net", [pid 5824] <... openat resumed>) = 3 [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 69.083214][ T5887] XFS (loop4): Ending clean mount [ 69.084377][ T8] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 69.098493][ T8] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 69.107481][ T8] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 69.116363][ T8] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 69.125315][ T8] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [pid 5824] ioctl(3, LOOP_CLR_FD [pid 5825] unlink("./1/cgroup.net" [pid 5824] <... ioctl resumed>) = 0 [pid 5825] <... unlink resumed>) = 0 [ 69.134286][ T8] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 69.143278][ T5886] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 69.146648][ T974] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 69.160717][ T5885] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 69.163911][ T974] XFS (loop4): Unmount and run xfs_repair [pid 5824] close(3 [pid 5887] <... open resumed>) = 4 [pid 5825] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5887] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 69.174793][ T29] audit: type=1800 audit(1733456366.646:11): pid=5887 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop4" ino=41 res=0 errno=0 [ 69.180195][ T974] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 69.207471][ T974] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 69.216332][ T974] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 69.225542][ T974] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 69.234455][ T974] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 69.243436][ T974] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 69.252347][ T974] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 69.261234][ T974] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 69.270217][ T974] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 69.279241][ T5887] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 69.290522][ T5886] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [pid 5825] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... close resumed>) = 0 [pid 5887] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 5886] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 5825] unlink("./1/binderfs" [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5887] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000 [pid 5886] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000 [pid 5825] <... unlink resumed>) = 0 [pid 5887] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5886] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5825] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... clone resumed>, child_tidptr=0x55558159a650) = 4 ./strace-static-x86_64: Process 5928 attached [pid 5928] set_robust_list(0x55558159a660, 24 [pid 5887] close(3 [pid 5886] close(3 [pid 5928] <... set_robust_list resumed>) = 0 [pid 5928] chdir("./2") = 0 [ 69.332502][ T5887] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 69.347387][ T5886] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 69.362454][ T5887] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 69.370998][ T5886] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [pid 5928] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5886] <... close resumed>) = 0 [pid 5887] <... close resumed>) = 0 [pid 5928] setpgid(0, 0 [pid 5887] close(4 [pid 5886] close(4 [pid 5887] <... close resumed>) = 0 [pid 5886] <... close resumed>) = 0 [pid 5887] close(5 [pid 5886] close(5 [pid 5887] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5886] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5887] close(6 [pid 5886] close(6 [pid 5887] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5886] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5887] close(7 [pid 5886] close(7 [pid 5887] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5886] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5887] close(8 [pid 5886] close(8 [pid 5887] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5886] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5887] close(9 [pid 5886] close(9 [pid 5887] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5886] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5887] close(10 [pid 5886] close(10 [pid 5887] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5886] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5887] close(11 [pid 5886] close(11 [pid 5887] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5886] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5887] close(12 [pid 5886] close(12 [pid 5887] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5886] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5887] close(13 [pid 5886] close(13 [pid 5887] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5886] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5887] close(14 [pid 5886] close(14 [pid 5887] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5886] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5887] close(15 [pid 5886] close(15 [pid 5887] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5886] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5887] close(16 [pid 5886] close(16 [pid 5887] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5886] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5887] close(17 [pid 5886] close(17 [pid 5887] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5886] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5887] close(18 [pid 5886] close(18 [pid 5887] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5886] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5887] close(19 [pid 5886] close(19 [pid 5887] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5886] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5887] close(20 [pid 5886] close(20 [pid 5887] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5886] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5887] close(21 [pid 5886] close(21 [pid 5887] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5886] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5887] close(22 [pid 5886] close(22 [pid 5887] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5886] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5887] close(23 [pid 5886] close(23 [pid 5887] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5886] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5887] close(24 [pid 5886] close(24 [pid 5887] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5886] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5887] close(25 [pid 5886] close(25 [pid 5887] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5886] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5887] close(26 [pid 5886] close(26 [pid 5887] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5886] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5887] close(27 [pid 5886] close(27 [pid 5887] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5886] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5887] close(28 [pid 5886] close(28 [pid 5887] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5886] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5887] close(29 [pid 5886] close(29 [pid 5887] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5886] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5887] exit_group(0 [pid 5886] exit_group(0 [pid 5887] <... exit_group resumed>) = ? [pid 5886] <... exit_group resumed>) = ? executing program [pid 5928] <... setpgid resumed>) = 0 [pid 5887] +++ exited with 0 +++ [pid 5886] +++ exited with 0 +++ [pid 5885] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 5928] symlink("/syzcgroup/unified/syz1", "./cgroup" [pid 5885] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000 [pid 5928] <... symlink resumed>) = 0 [pid 5885] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5928] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu" [pid 5885] close(3 [pid 5928] <... symlink resumed>) = 0 [pid 5885] <... close resumed>) = 0 [pid 5928] symlink("/syzcgroup/net/syz1", "./cgroup.net") = 0 [pid 5885] close(4 [pid 5928] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5885] <... close resumed>) = 0 [pid 5928] <... openat resumed>) = 3 [pid 5928] write(3, "1000", 4 [pid 5885] close(5 [pid 5928] <... write resumed>) = 4 [pid 5885] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5928] close(3) = 0 [pid 5885] close(6 [pid 5928] symlink("/dev/binderfs", "./binderfs" [pid 5885] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5928] <... symlink resumed>) = 0 [pid 5928] write(1, "executing program\n", 18 [pid 5885] close(7 [pid 5928] <... write resumed>) = 18 [pid 5885] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5928] memfd_create("syzkaller", 0) = 3 [pid 5885] close(8 [pid 5928] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5885] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5928] <... mmap resumed>) = 0x7fbaaaa00000 [pid 5885] close(9 [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=50 /* 0.50 s */} --- [pid 5821] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=63 /* 0.63 s */} --- [pid 5885] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5826] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5885] close(10 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5885] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5826] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5821] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5885] close(11 [pid 5826] <... openat resumed>) = 3 [pid 5821] <... openat resumed>) = 3 [pid 5885] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5826] newfstatat(3, "", [pid 5821] newfstatat(3, "", [pid 5885] close(12 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5821] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5885] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5826] getdents64(3, [pid 5885] close(13 [pid 5826] <... getdents64 resumed>0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5821] getdents64(3, [pid 5885] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5885] close(14) = -1 EBADF (Bad file descriptor) [pid 5826] umount2("./1/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] <... getdents64 resumed>0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5885] close(15 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5821] umount2("./1/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5885] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5826] newfstatat(AT_FDCWD, "./1/cgroup", [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5885] close(16 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] <... umount2 resumed>) = 0 [pid 5821] newfstatat(AT_FDCWD, "./1/cgroup", [pid 5885] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5826] unlink("./1/cgroup" [pid 5821] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5885] close(17 [pid 5826] <... unlink resumed>) = 0 [pid 5821] unlink("./1/cgroup" [pid 5885] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5826] umount2("./1/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] <... unlink resumed>) = 0 [pid 5885] close(18 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5821] umount2("./1/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5885] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5826] newfstatat(AT_FDCWD, "./1/cgroup.cpu", [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5885] close(19 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] newfstatat(AT_FDCWD, "./1/cgroup.cpu", [pid 5885] <... close resumed>) = -1 EBADF (Bad file descriptor) [ 69.396911][ T5885] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 69.412983][ T5885] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 69.413746][ T5825] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 5826] unlink("./1/cgroup.cpu" [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5821] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5885] close(20 [pid 5826] <... unlink resumed>) = 0 [pid 5825] newfstatat(AT_FDCWD, "./1/file0", [pid 5821] unlink("./1/cgroup.cpu" [pid 5885] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5826] umount2("./1/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] <... unlink resumed>) = 0 [pid 5885] close(21 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] umount2("./1/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] newfstatat(AT_FDCWD, "./1/cgroup.net", [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5821] newfstatat(AT_FDCWD, "./1/cgroup.net", [pid 5826] unlink("./1/cgroup.net" [pid 5825] <... openat resumed>) = 4 [pid 5821] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5885] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5826] <... unlink resumed>) = 0 [pid 5825] newfstatat(4, "", [pid 5821] unlink("./1/cgroup.net" [pid 5826] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5821] <... unlink resumed>) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] getdents64(4, [pid 5821] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5885] close(22 [pid 5826] newfstatat(AT_FDCWD, "./1/binderfs", [pid 5825] <... getdents64 resumed>0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] getdents64(4, [pid 5821] newfstatat(AT_FDCWD, "./1/binderfs", [pid 5826] unlink("./1/binderfs" [pid 5825] <... getdents64 resumed>0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5821] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5885] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5826] <... unlink resumed>) = 0 [pid 5825] close(4 [pid 5821] unlink("./1/binderfs" [pid 5885] close(23 [pid 5826] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... close resumed>) = 0 [pid 5821] <... unlink resumed>) = 0 [pid 5885] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5825] rmdir("./1/file0" [pid 5821] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... rmdir resumed>) = 0 [pid 5825] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5825] close(3) = 0 [pid 5825] rmdir("./1") = 0 [pid 5825] mkdir("./2", 0777) = 0 [pid 5825] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5825] ioctl(3, LOOP_CLR_FD [pid 5885] close(24 [pid 5825] <... ioctl resumed>) = 0 [pid 5885] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5825] close(3 [pid 5885] close(25) = -1 EBADF (Bad file descriptor) [pid 5885] close(26) = -1 EBADF (Bad file descriptor) [pid 5885] close(27) = -1 EBADF (Bad file descriptor) [pid 5885] close(28) = -1 EBADF (Bad file descriptor) [pid 5885] close(29) = -1 EBADF (Bad file descriptor) [pid 5885] exit_group(0) = ? [pid 5885] +++ exited with 0 +++ [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=54 /* 0.54 s */} --- [ 69.504287][ T5826] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 69.513323][ T5821] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 5823] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5823] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5823] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5823] umount2("./1/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./1/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./1/cgroup") = 0 [pid 5823] umount2("./1/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./1/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./1/cgroup.cpu") = 0 [pid 5823] umount2("./1/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./1/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./1/cgroup.net") = 0 [pid 5823] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./1/binderfs") = 0 [ 69.592475][ T5823] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 5823] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5928] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 5821] <... umount2 resumed>) = 0 [pid 5821] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./1/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5821] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5821] getdents64(4, 0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5821] getdents64(4, 0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5821] close(4) = 0 [pid 5821] rmdir("./1/file0") = 0 [pid 5821] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5821] close(3) = 0 [pid 5821] rmdir("./1") = 0 [pid 5821] mkdir("./2", 0777) = 0 [pid 5821] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5821] ioctl(3, LOOP_CLR_FD) = 0 [pid 5821] close(3) = 0 [pid 5821] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558159a650) = 4 [pid 5928] <... write resumed>) = 33554432 ./strace-static-x86_64: Process 5929 attached [pid 5928] munmap(0x7fbaaaa00000, 138412032 [pid 5929] set_robust_list(0x55558159a660, 24) = 0 [pid 5929] chdir("./2") = 0 [pid 5929] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5928] <... munmap resumed>) = 0 [pid 5826] <... umount2 resumed>) = 0 [pid 5823] <... umount2 resumed>) = 0 [pid 5929] setpgid(0, 0 [pid 5928] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5826] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5929] <... setpgid resumed>) = 0 [pid 5928] <... openat resumed>) = 4 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5929] symlink("/syzcgroup/unified/syz0", "./cgroup" [pid 5928] ioctl(4, LOOP_SET_FD, 3 [pid 5826] newfstatat(AT_FDCWD, "./1/file0", [pid 5823] newfstatat(AT_FDCWD, "./1/file0", [pid 5929] <... symlink resumed>) = 0 [pid 5929] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu" [pid 5928] <... ioctl resumed>) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5929] <... symlink resumed>) = 0 [pid 5823] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5928] close(3 [pid 5826] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5929] symlink("/syzcgroup/net/syz0", "./cgroup.net" [pid 5928] <... close resumed>) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5928] close(4 [pid 5823] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5928] <... close resumed>) = 0 [pid 5823] <... openat resumed>) = 4 [pid 5929] <... symlink resumed>) = 0 [pid 5928] mkdir("./file0", 0777 [pid 5826] <... openat resumed>) = 4 [pid 5823] newfstatat(4, "", [pid 5929] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5928] <... mkdir resumed>) = 0 [pid 5929] <... openat resumed>) = 3 [pid 5928] mount("/dev/loop1", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 5826] newfstatat(4, "", [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5929] write(3, "1000", 4) = 4 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(4, [pid 5929] close(3 [pid 5826] getdents64(4, [pid 5823] <... getdents64 resumed>0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5929] <... close resumed>) = 0 [pid 5826] <... getdents64 resumed>0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5823] getdents64(4, [pid 5929] symlink("/dev/binderfs", "./binderfs"executing program [pid 5826] getdents64(4, [pid 5929] <... symlink resumed>) = 0 [pid 5823] <... getdents64 resumed>0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5929] write(1, "executing program\n", 18 [pid 5826] <... getdents64 resumed>0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5823] close(4 [pid 5929] <... write resumed>) = 18 [pid 5826] close(4 [pid 5823] <... close resumed>) = 0 [pid 5929] memfd_create("syzkaller", 0 [pid 5826] <... close resumed>) = 0 [ 69.994580][ T5928] loop1: detected capacity change from 0 to 65536 [pid 5823] rmdir("./1/file0" [pid 5929] <... memfd_create resumed>) = 3 [pid 5826] rmdir("./1/file0" [pid 5823] <... rmdir resumed>) = 0 [pid 5929] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5823] getdents64(3, [pid 5826] <... rmdir resumed>) = 0 [pid 5929] <... mmap resumed>) = 0x7fbaaaa00000 [pid 5826] getdents64(3, [pid 5823] <... getdents64 resumed>0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5826] <... getdents64 resumed>0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5823] close(3) = 0 [pid 5826] close(3) = 0 [pid 5823] rmdir("./1" [pid 5825] <... close resumed>) = 0 [pid 5826] rmdir("./1" [pid 5823] <... rmdir resumed>) = 0 [pid 5823] mkdir("./2", 0777) = 0 [pid 5823] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [ 70.055173][ T5928] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 5823] ioctl(3, LOOP_CLR_FD) = 0 [pid 5823] close(3 [pid 5826] <... rmdir resumed>) = 0 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5826] mkdir("./2", 0777) = 0 [pid 5825] <... clone resumed>, child_tidptr=0x55558159a650) = 4 [pid 5928] <... mount resumed>) = 0 [pid 5826] openat(AT_FDCWD, "/dev/loop4", O_RDWR./strace-static-x86_64: Process 5938 attached [pid 5928] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5826] <... openat resumed>) = 3 [pid 5938] set_robust_list(0x55558159a660, 24 [pid 5928] <... openat resumed>) = 3 [pid 5826] ioctl(3, LOOP_CLR_FD [pid 5938] <... set_robust_list resumed>) = 0 [pid 5928] chdir("./file0" [pid 5826] <... ioctl resumed>) = 0 [pid 5938] chdir("./2" [pid 5928] <... chdir resumed>) = 0 [ 70.170826][ T5928] XFS (loop1): Ending clean mount [pid 5826] close(3 [pid 5938] <... chdir resumed>) = 0 [pid 5928] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5938] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5938] setpgid(0, 0) = 0 [pid 5938] symlink("/syzcgroup/unified/syz3", "./cgroup") = 0 [pid 5938] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu") = 0 [pid 5938] symlink("/syzcgroup/net/syz3", "./cgroup.net") = 0 [pid 5938] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5938] write(3, "1000", 4) = 4 [pid 5938] close(3) = 0 [pid 5938] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5938] write(1, "executing program\n", 18) = 18 [pid 5938] memfd_create("syzkaller", 0) = 3 [pid 5938] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaaaa00000 [pid 5938] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 5929] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 5928] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5928] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 5928] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5823] <... close resumed>) = 0 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5939 attached [pid 5939] set_robust_list(0x55558159a660, 24 [pid 5823] <... clone resumed>, child_tidptr=0x55558159a650) = 4 [pid 5939] <... set_robust_list resumed>) = 0 [pid 5939] chdir("./2") = 0 [pid 5939] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5939] setpgid(0, 0) = 0 [pid 5939] symlink("/syzcgroup/unified/syz2", "./cgroup") = 0 [pid 5939] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu") = 0 [pid 5939] symlink("/syzcgroup/net/syz2", "./cgroup.net") = 0 [pid 5939] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5939] write(3, "1000", 4) = 4 [pid 5939] close(3) = 0 [pid 5939] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5939] write(1, "executing program\n", 18) = 18 [pid 5939] memfd_create("syzkaller", 0) = 3 [pid 5939] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaaaa00000 [ 70.518693][ T57] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 70.530943][ T57] XFS (loop1): Unmount and run xfs_repair [ 70.555300][ T57] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 70.582370][ T57] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 70.603265][ T57] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [pid 5826] <... close resumed>) = 0 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5940 attached [ 70.636866][ T57] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 70.653711][ T57] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 70.663354][ T57] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 70.674794][ T57] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [pid 5940] set_robust_list(0x55558159a660, 24 [pid 5826] <... clone resumed>, child_tidptr=0x55558159a650) = 4 [pid 5940] <... set_robust_list resumed>) = 0 [pid 5940] chdir("./2") = 0 [pid 5940] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 70.684904][ T57] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 70.695715][ T57] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 70.705550][ T5928] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 70.719917][ T5928] XFS (loop1): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [pid 5940] setpgid(0, 0 [pid 5928] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 5940] <... setpgid resumed>) = 0 [pid 5940] symlink("/syzcgroup/unified/syz4", "./cgroup" [pid 5928] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000) = -1 EFAULT (Bad address) [pid 5940] <... symlink resumed>) = 0 [pid 5928] close(3 [pid 5940] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu" [pid 5928] <... close resumed>) = 0 [pid 5928] close(4) = 0 [pid 5928] close(5 [pid 5940] <... symlink resumed>) = 0 [pid 5928] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5928] close(6 [pid 5940] symlink("/syzcgroup/net/syz4", "./cgroup.net" [pid 5928] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5928] close(7) = -1 EBADF (Bad file descriptor) [pid 5928] close(8) = -1 EBADF (Bad file descriptor) [pid 5928] close(9) = -1 EBADF (Bad file descriptor) [pid 5928] close(10) = -1 EBADF (Bad file descriptor) [pid 5928] close(11) = -1 EBADF (Bad file descriptor) [pid 5928] close(12) = -1 EBADF (Bad file descriptor) [pid 5928] close(13) = -1 EBADF (Bad file descriptor) [pid 5928] close(14) = -1 EBADF (Bad file descriptor) [pid 5928] close(15) = -1 EBADF (Bad file descriptor) [pid 5928] close(16) = -1 EBADF (Bad file descriptor) [pid 5928] close(17) = -1 EBADF (Bad file descriptor) [pid 5928] close(18) = -1 EBADF (Bad file descriptor) [pid 5928] close(19) = -1 EBADF (Bad file descriptor) [pid 5928] close(20) = -1 EBADF (Bad file descriptor) [pid 5928] close(21) = -1 EBADF (Bad file descriptor) [pid 5928] close(22) = -1 EBADF (Bad file descriptor) [pid 5928] close(23) = -1 EBADF (Bad file descriptor) [pid 5928] close(24) = -1 EBADF (Bad file descriptor) [pid 5928] close(25) = -1 EBADF (Bad file descriptor) [pid 5928] close(26 [pid 5940] <... symlink resumed>) = 0 [pid 5928] <... close resumed>) = -1 EBADF (Bad file descriptor) [ 70.735482][ T5928] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [pid 5940] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5939] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 5928] close(27) = -1 EBADF (Bad file descriptor) [pid 5928] close(28) = -1 EBADF (Bad file descriptor) [pid 5928] close(29 [pid 5940] <... openat resumed>) = 3 [pid 5938] <... write resumed>) = 33554432 [pid 5929] <... write resumed>) = 33554432 [pid 5928] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5938] munmap(0x7fbaaaa00000, 138412032 [pid 5929] munmap(0x7fbaaaa00000, 138412032 [pid 5928] exit_group(0) = ? [pid 5928] +++ exited with 0 +++ [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=45 /* 0.45 s */} --- [pid 5824] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5824] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5824] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5824] umount2("./2/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./2/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./2/cgroup") = 0 [pid 5824] umount2("./2/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./2/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./2/cgroup.cpu") = 0 [pid 5824] umount2("./2/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./2/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./2/cgroup.net") = 0 [pid 5824] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5940] write(3, "1000", 4 [pid 5939] <... write resumed>) = 33554432 [pid 5824] unlink("./2/binderfs" [pid 5940] <... write resumed>) = 4 [pid 5939] munmap(0x7fbaaaa00000, 138412032 [pid 5940] close(3) = 0 [pid 5938] <... munmap resumed>) = 0 [pid 5824] <... unlink resumed>) = 0 [pid 5940] symlink("/dev/binderfs", "./binderfs" [pid 5938] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5824] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5938] <... openat resumed>) = 4 [pid 5938] ioctl(4, LOOP_SET_FD, 3executing program [pid 5940] <... symlink resumed>) = 0 [pid 5938] <... ioctl resumed>) = 0 [pid 5940] write(1, "executing program\n", 18 [pid 5939] <... munmap resumed>) = 0 [pid 5940] <... write resumed>) = 18 [pid 5939] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5938] close(3 [pid 5940] memfd_create("syzkaller", 0 [pid 5939] <... openat resumed>) = 4 [pid 5940] <... memfd_create resumed>) = 3 [pid 5939] ioctl(4, LOOP_SET_FD, 3 [pid 5938] <... close resumed>) = 0 [pid 5929] <... munmap resumed>) = 0 [pid 5940] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaaaa00000 [pid 5939] <... ioctl resumed>) = 0 [pid 5938] close(4 [pid 5929] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5939] close(3) = 0 [pid 5939] close(4) = 0 [pid 5939] mkdir("./file0", 0777) = 0 [pid 5939] mount("/dev/loop2", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 5938] <... close resumed>) = 0 [pid 5929] <... openat resumed>) = 4 [pid 5938] mkdir("./file0", 0777 [ 71.164103][ T5938] loop3: detected capacity change from 0 to 65536 [ 71.172975][ T5824] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 71.183273][ T5939] loop2: detected capacity change from 0 to 65536 [pid 5929] ioctl(4, LOOP_SET_FD, 3 [pid 5938] <... mkdir resumed>) = 0 [pid 5929] <... ioctl resumed>) = 0 [pid 5929] close(3 [pid 5938] mount("/dev/loop3", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 5929] <... close resumed>) = 0 [pid 5929] close(4) = 0 [pid 5929] mkdir("./file0", 0777) = 0 [pid 5929] mount("/dev/loop0", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 5824] <... umount2 resumed>) = 0 [pid 5824] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./2/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5824] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [ 71.242411][ T5929] loop0: detected capacity change from 0 to 65536 [ 71.269745][ T5939] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 5824] getdents64(4, 0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5824] getdents64(4, 0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5824] close(4) = 0 [pid 5824] rmdir("./2/file0") = 0 [pid 5824] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5824] close(3) = 0 [pid 5824] rmdir("./2") = 0 [pid 5824] mkdir("./3", 0777) = 0 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5824] ioctl(3, LOOP_CLR_FD) = 0 [pid 5824] close(3 [pid 5939] <... mount resumed>) = 0 [pid 5939] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5939] chdir("./file0") = 0 [ 71.371318][ T5938] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 71.382688][ T5929] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 71.394962][ T5939] XFS (loop2): Ending clean mount [ 71.421423][ T5938] XFS (loop3): Ending clean mount [pid 5939] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5940] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 5939] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5938] <... mount resumed>) = 0 [pid 5824] <... close resumed>) = 0 [pid 5938] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5939] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5938] <... openat resumed>) = 3 [pid 5929] <... mount resumed>) = 0 [pid 5929] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY./strace-static-x86_64: Process 5965 attached ) = 3 [pid 5965] set_robust_list(0x55558159a660, 24 [pid 5929] chdir("./file0" [pid 5965] <... set_robust_list resumed>) = 0 [pid 5929] <... chdir resumed>) = 0 [pid 5824] <... clone resumed>, child_tidptr=0x55558159a650) = 5 [pid 5965] chdir("./3" [pid 5938] chdir("./file0" [pid 5929] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5965] <... chdir resumed>) = 0 [pid 5938] <... chdir resumed>) = 0 [pid 5929] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5965] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5938] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5929] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 5965] <... prctl resumed>) = 0 [pid 5939] <... open resumed>) = 4 [pid 5938] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5965] setpgid(0, 0 [pid 5939] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5938] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 5965] <... setpgid resumed>) = 0 [pid 5965] symlink("/syzcgroup/unified/syz1", "./cgroup" [pid 5929] <... open resumed>) = 4 [pid 5965] <... symlink resumed>) = 0 [ 71.538455][ T5929] XFS (loop0): Ending clean mount [ 71.550093][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 71.550110][ T29] audit: type=1800 audit(1733456369.046:13): pid=5939 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop2" ino=41 res=0 errno=0 [pid 5929] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5965] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu" [pid 5938] <... open resumed>) = 4 [ 71.582032][ T29] audit: type=1800 audit(1733456369.076:14): pid=5929 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop0" ino=41 res=0 errno=0 [ 71.583875][ T5939] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 71.616876][ T29] audit: type=1800 audit(1733456369.076:15): pid=5938 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop3" ino=41 res=0 errno=0 [pid 5938] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5965] <... symlink resumed>) = 0 [pid 5965] symlink("/syzcgroup/net/syz1", "./cgroup.net") = 0 [pid 5965] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5965] write(3, "1000", 4) = 4 [pid 5965] close(3) = 0 [pid 5965] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [ 71.617229][ T57] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 71.651616][ T974] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 71.656841][ T5939] XFS (loop2): Unmount and run xfs_repair [ 71.663483][ T974] XFS (loop3): Unmount and run xfs_repair [ 71.669009][ T5939] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 71.674467][ T974] XFS (loop3): First 128 bytes of corrupted metadata buffer: [pid 5965] write(1, "executing program\n", 18) = 18 [pid 5965] memfd_create("syzkaller", 0) = 3 [pid 5965] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaaaa00000 [ 71.690822][ T57] XFS (loop0): Unmount and run xfs_repair [ 71.697118][ T57] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 71.704521][ T57] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 71.713499][ T974] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 71.722422][ T5939] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 71.722494][ T974] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 71.740489][ T5939] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 71.741007][ T57] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 71.758658][ T974] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 71.768112][ T57] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 71.776734][ T5939] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 71.777416][ T974] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 71.795002][ T57] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 71.804222][ T57] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 71.806791][ T5939] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 71.813427][ T974] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 71.831457][ T57] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 71.840654][ T57] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 71.849854][ T974] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 71.856853][ T5939] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 71.859171][ T57] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 71.876680][ T5939] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 71.886087][ T974] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 71.895589][ T974] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 71.895630][ T5929] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 71.906245][ T5939] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 71.916644][ T5938] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 71.939867][ T5938] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 71.946861][ T5929] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 71.955161][ T5938] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 71.976771][ T5939] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [pid 5938] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 5938] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000 [pid 5929] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [ 71.996689][ T5939] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 72.007938][ T5929] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [pid 5938] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5938] close(3) = 0 [pid 5938] close(4) = 0 [pid 5938] close(5) = -1 EBADF (Bad file descriptor) [pid 5938] close(6) = -1 EBADF (Bad file descriptor) [pid 5938] close(7) = -1 EBADF (Bad file descriptor) [pid 5938] close(8) = -1 EBADF (Bad file descriptor) [pid 5938] close(9) = -1 EBADF (Bad file descriptor) [pid 5938] close(10) = -1 EBADF (Bad file descriptor) [pid 5938] close(11) = -1 EBADF (Bad file descriptor) [pid 5938] close(12) = -1 EBADF (Bad file descriptor) [pid 5938] close(13) = -1 EBADF (Bad file descriptor) [pid 5938] close(14) = -1 EBADF (Bad file descriptor) [pid 5938] close(15) = -1 EBADF (Bad file descriptor) [pid 5938] close(16) = -1 EBADF (Bad file descriptor) [pid 5938] close(17) = -1 EBADF (Bad file descriptor) [pid 5938] close(18) = -1 EBADF (Bad file descriptor) [pid 5938] close(19) = -1 EBADF (Bad file descriptor) [pid 5938] close(20) = -1 EBADF (Bad file descriptor) [pid 5938] close(21) = -1 EBADF (Bad file descriptor) [pid 5938] close(22) = -1 EBADF (Bad file descriptor) [pid 5938] close(23) = -1 EBADF (Bad file descriptor) [pid 5938] close(24) = -1 EBADF (Bad file descriptor) [pid 5938] close(25) = -1 EBADF (Bad file descriptor) [pid 5938] close(26) = -1 EBADF (Bad file descriptor) [pid 5938] close(27) = -1 EBADF (Bad file descriptor) [pid 5938] close(28) = -1 EBADF (Bad file descriptor) [pid 5938] close(29) = -1 EBADF (Bad file descriptor) [pid 5938] exit_group(0) = ? [pid 5938] +++ exited with 0 +++ [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=47 /* 0.47 s */} --- [pid 5825] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5825] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5825] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5825] umount2("./2/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./2/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./2/cgroup") = 0 [pid 5825] umount2("./2/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5965] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 5929] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./2/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./2/cgroup.cpu") = 0 [pid 5825] umount2("./2/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./2/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./2/cgroup.net") = 0 [pid 5825] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./2/binderfs") = 0 [pid 5825] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5929] <... openat resumed>) = -1 EFAULT (Bad address) [ 72.101033][ T5939] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 72.116210][ T5825] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 5939] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 5929] close(3) = 0 [pid 5929] close(4) = 0 [pid 5929] close(5) = -1 EBADF (Bad file descriptor) [pid 5929] close(6) = -1 EBADF (Bad file descriptor) [pid 5929] close(7) = -1 EBADF (Bad file descriptor) [pid 5929] close(8) = -1 EBADF (Bad file descriptor) [pid 5929] close(9) = -1 EBADF (Bad file descriptor) [pid 5929] close(10) = -1 EBADF (Bad file descriptor) [pid 5929] close(11) = -1 EBADF (Bad file descriptor) [pid 5929] close(12) = -1 EBADF (Bad file descriptor) [pid 5929] close(13) = -1 EBADF (Bad file descriptor) [pid 5929] close(14) = -1 EBADF (Bad file descriptor) [pid 5929] close(15) = -1 EBADF (Bad file descriptor) [pid 5929] close(16) = -1 EBADF (Bad file descriptor) [pid 5929] close(17) = -1 EBADF (Bad file descriptor) [pid 5929] close(18) = -1 EBADF (Bad file descriptor) [pid 5929] close(19) = -1 EBADF (Bad file descriptor) [pid 5929] close(20) = -1 EBADF (Bad file descriptor) [pid 5929] close(21) = -1 EBADF (Bad file descriptor) [pid 5929] close(22) = -1 EBADF (Bad file descriptor) [pid 5929] close(23) = -1 EBADF (Bad file descriptor) [pid 5929] close(24) = -1 EBADF (Bad file descriptor) [pid 5929] close(25) = -1 EBADF (Bad file descriptor) [pid 5929] close(26) = -1 EBADF (Bad file descriptor) [pid 5929] close(27) = -1 EBADF (Bad file descriptor) [pid 5929] close(28) = -1 EBADF (Bad file descriptor) [ 72.146276][ T5939] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [pid 5929] close(29) = -1 EBADF (Bad file descriptor) [pid 5929] exit_group(0) = ? [pid 5929] +++ exited with 0 +++ [pid 5821] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=48 /* 0.48 s */} --- [pid 5939] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000) = -1 EFAULT (Bad address) [pid 5939] close(3 [pid 5821] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5939] <... close resumed>) = 0 [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5939] close(4 [pid 5821] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5939] <... close resumed>) = 0 [pid 5821] <... openat resumed>) = 3 [pid 5939] close(5 [pid 5821] newfstatat(3, "", [pid 5939] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5821] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5939] close(6 [pid 5821] getdents64(3, [pid 5939] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5821] <... getdents64 resumed>0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5939] close(7 [pid 5821] umount2("./2/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5939] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5939] close(8 [pid 5821] newfstatat(AT_FDCWD, "./2/cgroup", [pid 5939] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5821] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5939] close(9 [pid 5821] unlink("./2/cgroup" [pid 5939] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5821] <... unlink resumed>) = 0 [pid 5939] close(10 [pid 5821] umount2("./2/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5939] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5939] close(11 [pid 5821] newfstatat(AT_FDCWD, "./2/cgroup.cpu", [pid 5939] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5821] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5939] close(12 [pid 5821] unlink("./2/cgroup.cpu" [pid 5939] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5821] <... unlink resumed>) = 0 [pid 5939] close(13 [pid 5821] umount2("./2/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./2/cgroup.net", [pid 5939] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5821] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5939] close(14 [pid 5821] unlink("./2/cgroup.net" [pid 5939] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5821] <... unlink resumed>) = 0 [pid 5939] close(15) = -1 EBADF (Bad file descriptor) [pid 5939] close(16) = -1 EBADF (Bad file descriptor) [pid 5939] close(17) = -1 EBADF (Bad file descriptor) [pid 5821] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5939] close(18) = -1 EBADF (Bad file descriptor) [pid 5939] close(19 [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5939] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5939] close(20 [pid 5821] newfstatat(AT_FDCWD, "./2/binderfs", [pid 5939] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5821] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5939] close(21 [pid 5821] unlink("./2/binderfs" [pid 5939] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5939] close(22 [pid 5821] <... unlink resumed>) = 0 [pid 5939] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5939] close(23) = -1 EBADF (Bad file descriptor) [pid 5939] close(24 [pid 5821] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5939] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5939] close(25) = -1 EBADF (Bad file descriptor) [pid 5939] close(26) = -1 EBADF (Bad file descriptor) [pid 5939] close(27) = -1 EBADF (Bad file descriptor) [pid 5939] close(28) = -1 EBADF (Bad file descriptor) [pid 5939] close(29) = -1 EBADF (Bad file descriptor) [pid 5939] exit_group(0) = ? [pid 5939] +++ exited with 0 +++ [pid 5825] <... umount2 resumed>) = 0 [pid 5825] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./2/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5825] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(4, 0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5825] getdents64(4, 0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5825] close(4) = 0 [pid 5825] rmdir("./2/file0") = 0 [pid 5825] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4, si_uid=0, si_status=0, si_utime=11 /* 0.11 s */, si_stime=57 /* 0.57 s */} --- [pid 5825] close(3 [pid 5823] restart_syscall(<... resuming interrupted clone ...> [pid 5825] <... close resumed>) = 0 [pid 5823] <... restart_syscall resumed>) = 0 [pid 5825] rmdir("./2") = 0 [pid 5825] mkdir("./3", 0777 [pid 5823] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... mkdir resumed>) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5823] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] <... openat resumed>) = 3 [pid 5823] <... openat resumed>) = 3 [pid 5825] ioctl(3, LOOP_CLR_FD [pid 5823] newfstatat(3, "", [pid 5940] <... write resumed>) = 33554432 [pid 5825] <... ioctl resumed>) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [ 72.272697][ T5821] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 5825] close(3 [pid 5823] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5823] umount2("./2/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5940] munmap(0x7fbaaaa00000, 138412032 [pid 5823] newfstatat(AT_FDCWD, "./2/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./2/cgroup") = 0 [pid 5823] umount2("./2/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./2/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./2/cgroup.cpu") = 0 [pid 5823] umount2("./2/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./2/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./2/cgroup.net") = 0 [pid 5823] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./2/binderfs") = 0 [pid 5823] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5965] <... write resumed>) = 33554432 [pid 5965] munmap(0x7fbaaaa00000, 138412032 [pid 5940] <... munmap resumed>) = 0 [pid 5821] <... umount2 resumed>) = 0 [pid 5821] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./2/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5821] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5821] getdents64(4, 0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5821] getdents64(4, 0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5821] close(4) = 0 [pid 5821] rmdir("./2/file0") = 0 [pid 5821] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5821] close(3) = 0 [pid 5821] rmdir("./2") = 0 [pid 5821] mkdir("./3", 0777) = 0 [pid 5940] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5821] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5940] <... openat resumed>) = 4 [pid 5821] <... openat resumed>) = 3 [pid 5821] ioctl(3, LOOP_CLR_FD) = 0 [pid 5821] close(3 [pid 5965] <... munmap resumed>) = 0 [ 72.389915][ T5823] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 5940] ioctl(4, LOOP_SET_FD, 3 [pid 5965] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5940] <... ioctl resumed>) = 0 [pid 5965] <... openat resumed>) = 4 [pid 5940] close(3 [pid 5965] ioctl(4, LOOP_SET_FD, 3 [pid 5940] <... close resumed>) = 0 [ 72.435214][ T5940] loop4: detected capacity change from 0 to 65536 [ 72.454625][ T5965] loop1: detected capacity change from 0 to 65536 [pid 5940] close(4) = 0 [pid 5823] <... umount2 resumed>) = 0 [pid 5823] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./2/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5823] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(4, 0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5823] getdents64(4, 0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5823] close(4) = 0 [pid 5823] rmdir("./2/file0") = 0 [pid 5823] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5823] close(3) = 0 [pid 5823] rmdir("./2") = 0 [pid 5823] mkdir("./3", 0777) = 0 [pid 5823] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5823] ioctl(3, LOOP_CLR_FD) = 0 [pid 5823] close(3 [pid 5821] <... close resumed>) = 0 [pid 5965] <... ioctl resumed>) = 0 [pid 5940] mkdir("./file0", 0777 [pid 5965] close(3 [pid 5940] <... mkdir resumed>) = 0 [pid 5821] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5965] <... close resumed>) = 0 [pid 5940] mount("/dev/loop4", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 5965] close(4 [pid 5821] <... clone resumed>, child_tidptr=0x55558159a650) = 5 [pid 5965] <... close resumed>) = 0 [pid 5965] mkdir("./file0", 0777) = 0 [pid 5965] mount("/dev/loop1", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 5825] <... close resumed>) = 0 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5969 attached [pid 5969] set_robust_list(0x55558159a660, 24) = 0 [pid 5825] <... clone resumed>, child_tidptr=0x55558159a650) = 5 [pid 5969] chdir("./3") = 0 [pid 5969] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5969] setpgid(0, 0) = 0 [pid 5969] symlink("/syzcgroup/unified/syz3", "./cgroup" [pid 5823] <... close resumed>) = 0 ./strace-static-x86_64: Process 5967 attached [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5967] set_robust_list(0x55558159a660, 24) = 0 [pid 5823] <... clone resumed>, child_tidptr=0x55558159a650) = 5 [pid 5967] chdir("./3") = 0 [pid 5967] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5967] setpgid(0, 0) = 0 [pid 5967] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5967] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5967] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5967] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5967] write(3, "1000", 4) = 4 [pid 5967] close(3./strace-static-x86_64: Process 5973 attached ) = 0 [pid 5967] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 5967] write(1, "executing program\n", 18) = 18 [pid 5973] set_robust_list(0x55558159a660, 24 [pid 5967] memfd_create("syzkaller", 0 [pid 5973] <... set_robust_list resumed>) = 0 [pid 5967] <... memfd_create resumed>) = 3 [pid 5967] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5973] chdir("./3" [pid 5967] <... mmap resumed>) = 0x7fbaaaa00000 executing program [pid 5973] <... chdir resumed>) = 0 [pid 5969] <... symlink resumed>) = 0 [pid 5973] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5973] setpgid(0, 0 [pid 5969] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu" [pid 5973] <... setpgid resumed>) = 0 [pid 5973] symlink("/syzcgroup/unified/syz2", "./cgroup") = 0 [pid 5973] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu") = 0 [pid 5973] symlink("/syzcgroup/net/syz2", "./cgroup.net") = 0 [pid 5973] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5973] write(3, "1000", 4) = 4 [pid 5973] close(3) = 0 [pid 5973] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5973] write(1, "executing program\n", 18) = 18 [pid 5973] memfd_create("syzkaller", 0) = 3 [pid 5969] <... symlink resumed>) = 0 [pid 5973] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5969] symlink("/syzcgroup/net/syz3", "./cgroup.net" [pid 5973] <... mmap resumed>) = 0x7fbaaaa00000 [pid 5969] <... symlink resumed>) = 0 [pid 5969] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5969] write(3, "1000", 4) = 4 [pid 5969] close(3) = 0 [ 72.799747][ T5940] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 72.834052][ T5965] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 5969] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 5969] write(1, "executing program\n", 18) = 18 [pid 5969] memfd_create("syzkaller", 0) = 3 [pid 5969] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaaaa00000 [pid 5940] <... mount resumed>) = 0 [ 72.917157][ T5940] XFS (loop4): Ending clean mount [pid 5940] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 72.999122][ T5965] XFS (loop1): Ending clean mount [pid 5965] <... mount resumed>) = 0 [pid 5965] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5965] chdir("./file0") = 0 [pid 5965] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5965] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 5965] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5967] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [ 73.021177][ T8] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 73.033259][ T8] XFS (loop1): Unmount and run xfs_repair [ 73.040200][ T29] audit: type=1800 audit(1733456370.516:16): pid=5965 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop1" ino=41 res=0 errno=0 [ 73.070750][ T8] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 73.097374][ T8] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 73.136804][ T8] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 73.145706][ T8] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [pid 5940] chdir("./file0") = 0 [ 73.196774][ T8] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 73.226719][ T8] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [pid 5967] <... write resumed>) = 33554432 [pid 5940] openat(AT_FDCWD, "/dev/loop4", O_RDWR [ 73.256728][ T8] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 73.286630][ T8] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [pid 5967] munmap(0x7fbaaaa00000, 138412032) = 0 [pid 5940] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5967] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5940] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 5967] <... openat resumed>) = 4 [ 73.307868][ T8] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 73.326663][ T5965] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [pid 5967] ioctl(4, LOOP_SET_FD, 3 [pid 5940] <... open resumed>) = 4 [pid 5940] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5967] <... ioctl resumed>) = 0 [pid 5967] close(3) = 0 [pid 5967] close(4) = 0 [pid 5967] mkdir("./file0", 0777) = 0 [ 73.340891][ T29] audit: type=1800 audit(1733456370.836:17): pid=5940 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop4" ino=41 res=0 errno=0 [ 73.361510][ T5967] loop0: detected capacity change from 0 to 65536 [ 73.370202][ T974] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 73.383590][ T5965] XFS (loop1): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 73.386101][ T974] XFS (loop4): Unmount and run xfs_repair [ 73.404267][ T974] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 73.411745][ T974] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 73.420723][ T974] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 73.429811][ T974] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 73.438756][ T974] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 73.447680][ T974] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [pid 5967] mount("/dev/loop0", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 5969] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 5965] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 5965] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000) = -1 EFAULT (Bad address) [pid 5965] close(3) = 0 [pid 5965] close(4) = 0 [pid 5965] close(5) = -1 EBADF (Bad file descriptor) [pid 5965] close(6) = -1 EBADF (Bad file descriptor) [pid 5965] close(7) = -1 EBADF (Bad file descriptor) [pid 5965] close(8) = -1 EBADF (Bad file descriptor) [pid 5965] close(9) = -1 EBADF (Bad file descriptor) [pid 5965] close(10) = -1 EBADF (Bad file descriptor) [pid 5965] close(11) = -1 EBADF (Bad file descriptor) [pid 5965] close(12) = -1 EBADF (Bad file descriptor) [pid 5965] close(13) = -1 EBADF (Bad file descriptor) [pid 5965] close(14) = -1 EBADF (Bad file descriptor) [pid 5965] close(15) = -1 EBADF (Bad file descriptor) [pid 5965] close(16) = -1 EBADF (Bad file descriptor) [pid 5965] close(17) = -1 EBADF (Bad file descriptor) [pid 5965] close(18) = -1 EBADF (Bad file descriptor) [pid 5965] close(19) = -1 EBADF (Bad file descriptor) [pid 5965] close(20) = -1 EBADF (Bad file descriptor) [pid 5965] close(21) = -1 EBADF (Bad file descriptor) [pid 5965] close(22) = -1 EBADF (Bad file descriptor) [pid 5965] close(23) = -1 EBADF (Bad file descriptor) [pid 5965] close(24) = -1 EBADF (Bad file descriptor) [pid 5965] close(25) = -1 EBADF (Bad file descriptor) [pid 5965] close(26) = -1 EBADF (Bad file descriptor) [pid 5965] close(27) = -1 EBADF (Bad file descriptor) [pid 5965] close(28) = -1 EBADF (Bad file descriptor) [pid 5965] close(29) = -1 EBADF (Bad file descriptor) [pid 5965] exit_group(0) = ? [pid 5965] +++ exited with 0 +++ [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5, si_uid=0, si_status=0, si_utime=11 /* 0.11 s */, si_stime=47 /* 0.47 s */} --- [pid 5824] restart_syscall(<... resuming interrupted clone ...> [pid 5973] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 5824] <... restart_syscall resumed>) = 0 [ 73.456546][ T974] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 73.465603][ T974] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 73.474597][ T974] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 73.483559][ T5940] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 73.494929][ T5965] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [pid 5824] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5824] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5824] umount2("./3/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./3/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./3/cgroup") = 0 [pid 5824] umount2("./3/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./3/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./3/cgroup.cpu") = 0 [pid 5824] umount2("./3/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./3/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./3/cgroup.net") = 0 [pid 5824] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./3/binderfs") = 0 [pid 5824] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5940] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 5940] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000) = -1 EFAULT (Bad address) [pid 5940] close(3) = 0 [pid 5940] close(4) = 0 [pid 5940] close(5) = -1 EBADF (Bad file descriptor) [pid 5940] close(6) = -1 EBADF (Bad file descriptor) [pid 5940] close(7) = -1 EBADF (Bad file descriptor) [pid 5940] close(8) = -1 EBADF (Bad file descriptor) [pid 5940] close(9) = -1 EBADF (Bad file descriptor) [pid 5940] close(10) = -1 EBADF (Bad file descriptor) [pid 5940] close(11) = -1 EBADF (Bad file descriptor) [pid 5940] close(12) = -1 EBADF (Bad file descriptor) [pid 5940] close(13) = -1 EBADF (Bad file descriptor) [pid 5940] close(14) = -1 EBADF (Bad file descriptor) [pid 5940] close(15) = -1 EBADF (Bad file descriptor) [pid 5940] close(16) = -1 EBADF (Bad file descriptor) [pid 5940] close(17) = -1 EBADF (Bad file descriptor) [pid 5940] close(18) = -1 EBADF (Bad file descriptor) [pid 5940] close(19) = -1 EBADF (Bad file descriptor) [pid 5940] close(20) = -1 EBADF (Bad file descriptor) [pid 5940] close(21) = -1 EBADF (Bad file descriptor) [pid 5940] close(22) = -1 EBADF (Bad file descriptor) [ 73.549171][ T5940] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 73.564407][ T5967] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 73.564491][ T5940] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 73.582159][ T5824] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 5940] close(23) = -1 EBADF (Bad file descriptor) [pid 5940] close(24 [pid 5967] <... mount resumed>) = 0 [pid 5967] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5967] chdir("./file0") = 0 [pid 5940] <... close resumed>) = -1 EBADF (Bad file descriptor) [ 73.622208][ T5967] XFS (loop0): Ending clean mount [pid 5967] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5940] close(25 [pid 5967] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 4 [ 73.682713][ T974] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 73.696912][ T29] audit: type=1800 audit(1733456371.176:18): pid=5967 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop0" ino=41 res=0 errno=0 [ 73.726799][ T974] XFS (loop0): Unmount and run xfs_repair [pid 5967] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5940] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5940] close(26) = -1 EBADF (Bad file descriptor) [pid 5940] close(27) = -1 EBADF (Bad file descriptor) [pid 5940] close(28) = -1 EBADF (Bad file descriptor) [pid 5940] close(29) = -1 EBADF (Bad file descriptor) [pid 5940] exit_group(0) = ? [pid 5940] +++ exited with 0 +++ [ 73.733352][ T974] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 73.752666][ T974] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 73.773381][ T974] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=41 /* 0.41 s */} --- [pid 5826] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5826] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5826] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5826] umount2("./2/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./2/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./2/cgroup") = 0 [pid 5826] umount2("./2/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./2/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./2/cgroup.cpu") = 0 [pid 5826] umount2("./2/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./2/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./2/cgroup.net") = 0 [pid 5826] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 73.807230][ T974] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 73.816143][ T974] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [pid 5826] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./2/binderfs") = 0 [pid 5826] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5969] <... write resumed>) = 33554432 [pid 5969] munmap(0x7fbaaaa00000, 138412032 [pid 5824] <... umount2 resumed>) = 0 [pid 5824] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./3/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5969] <... munmap resumed>) = 0 [ 73.868317][ T5826] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 73.877708][ T974] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 73.889348][ T974] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 73.904973][ T974] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [pid 5824] <... openat resumed>) = 4 [pid 5824] newfstatat(4, "", [pid 5969] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5969] <... openat resumed>) = 4 [pid 5824] getdents64(4, [pid 5969] ioctl(4, LOOP_SET_FD, 3 [pid 5824] <... getdents64 resumed>0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5824] getdents64(4, [pid 5969] <... ioctl resumed>) = 0 [pid 5824] <... getdents64 resumed>0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5824] close(4 [pid 5826] <... umount2 resumed>) = 0 [pid 5826] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./2/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5826] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5826] getdents64(4, 0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5826] getdents64(4, 0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5826] close(4) = 0 [pid 5826] rmdir("./2/file0") = 0 [pid 5824] <... close resumed>) = 0 [pid 5826] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5826] close(3) = 0 [pid 5826] rmdir("./2") = 0 [pid 5824] rmdir("./3/file0" [pid 5826] mkdir("./3", 0777) = 0 [pid 5826] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5826] ioctl(3, LOOP_CLR_FD) = 0 [pid 5826] close(3 [pid 5824] <... rmdir resumed>) = 0 [pid 5969] close(3 [pid 5824] getdents64(3, [pid 5969] <... close resumed>) = 0 [pid 5824] <... getdents64 resumed>0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5969] close(4 [ 73.923433][ T5969] loop3: detected capacity change from 0 to 65536 [ 73.924099][ T974] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [pid 5824] close(3 [pid 5969] <... close resumed>) = 0 [pid 5824] <... close resumed>) = 0 [pid 5824] rmdir("./3") = 0 [pid 5969] mkdir("./file0", 0777 [pid 5824] mkdir("./4", 0777) = 0 [pid 5969] <... mkdir resumed>) = 0 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5969] mount("/dev/loop3", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 5824] ioctl(3, LOOP_CLR_FD) = 0 [ 73.997221][ T5967] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 74.019104][ T5967] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [pid 5824] close(3 [pid 5967] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 5967] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000) = -1 EFAULT (Bad address) [pid 5967] close(3) = 0 [pid 5967] close(4) = 0 [pid 5967] close(5) = -1 EBADF (Bad file descriptor) [pid 5967] close(6) = -1 EBADF (Bad file descriptor) [pid 5967] close(7) = -1 EBADF (Bad file descriptor) [pid 5967] close(8) = -1 EBADF (Bad file descriptor) [pid 5967] close(9) = -1 EBADF (Bad file descriptor) [pid 5967] close(10) = -1 EBADF (Bad file descriptor) [pid 5967] close(11) = -1 EBADF (Bad file descriptor) [pid 5967] close(12) = -1 EBADF (Bad file descriptor) [pid 5967] close(13) = -1 EBADF (Bad file descriptor) [pid 5967] close(14) = -1 EBADF (Bad file descriptor) [pid 5967] close(15) = -1 EBADF (Bad file descriptor) [pid 5967] close(16) = -1 EBADF (Bad file descriptor) [pid 5967] close(17) = -1 EBADF (Bad file descriptor) [pid 5967] close(18) = -1 EBADF (Bad file descriptor) [pid 5967] close(19) = -1 EBADF (Bad file descriptor) [pid 5967] close(20) = -1 EBADF (Bad file descriptor) [pid 5967] close(21) = -1 EBADF (Bad file descriptor) [pid 5967] close(22) = -1 EBADF (Bad file descriptor) [pid 5967] close(23) = -1 EBADF (Bad file descriptor) [pid 5967] close(24) = -1 EBADF (Bad file descriptor) [pid 5967] close(25) = -1 EBADF (Bad file descriptor) [ 74.073107][ T5967] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 74.078982][ T5969] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 5967] close(26) = -1 EBADF (Bad file descriptor) [pid 5973] <... write resumed>) = 33554432 [pid 5967] close(27 [pid 5973] munmap(0x7fbaaaa00000, 138412032 [pid 5967] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5967] close(28) = -1 EBADF (Bad file descriptor) [pid 5967] close(29) = -1 EBADF (Bad file descriptor) [pid 5967] exit_group(0) = ? [pid 5967] +++ exited with 0 +++ [pid 5821] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=47 /* 0.47 s */} --- [pid 5821] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5821] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5821] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5821] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5821] umount2("./3/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./3/cgroup", [pid 5973] <... munmap resumed>) = 0 [pid 5821] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] unlink("./3/cgroup") = 0 [pid 5973] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5821] umount2("./3/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5973] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... close resumed>) = 0 [pid 5821] newfstatat(AT_FDCWD, "./3/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] unlink("./3/cgroup.cpu") = 0 [pid 5821] umount2("./3/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./3/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] unlink("./3/cgroup.net") = 0 [pid 5821] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./3/binderfs", [pid 5973] close(3 [pid 5821] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] unlink("./3/binderfs") = 0 [pid 5821] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558159a650) = 5 [pid 5973] <... close resumed>) = 0 [pid 5973] close(4) = 0 [pid 5973] mkdir("./file0", 0777) = 0 [pid 5973] mount("/dev/loop2", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 5969] <... mount resumed>) = 0 ./strace-static-x86_64: Process 6002 attached [pid 5969] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [ 74.277371][ T5973] loop2: detected capacity change from 0 to 65536 [ 74.305477][ T5969] XFS (loop3): Ending clean mount [pid 6002] set_robust_list(0x55558159a660, 24) = 0 [pid 5969] <... openat resumed>) = 3 [pid 5824] <... close resumed>) = 0 [pid 6002] chdir("./3") = 0 [pid 5969] chdir("./file0" [pid 6002] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5969] <... chdir resumed>) = 0 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6002] <... prctl resumed>) = 0 [pid 5969] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6002] setpgid(0, 0 [pid 5969] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6002] <... setpgid resumed>) = 0 [pid 5969] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000./strace-static-x86_64: Process 6006 attached [pid 6006] set_robust_list(0x55558159a660, 24) = 0 [pid 6006] chdir("./4") = 0 [pid 6006] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6006] setpgid(0, 0) = 0 [pid 6006] symlink("/syzcgroup/unified/syz1", "./cgroup") = 0 [pid 6006] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu") = 0 [pid 6006] symlink("/syzcgroup/net/syz1", "./cgroup.net") = 0 [pid 5824] <... clone resumed>, child_tidptr=0x55558159a650) = 6 [pid 6006] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6006] write(3, "1000", 4) = 4 [pid 6006] close(3) = 0 [pid 6002] symlink("/syzcgroup/unified/syz4", "./cgroup" [pid 5969] <... open resumed>) = 4 [pid 6006] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6006] write(1, "executing program\n", 18) = 18 [pid 6006] memfd_create("syzkaller", 0) = 3 [pid 6002] <... symlink resumed>) = 0 [pid 5969] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6006] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaaaa00000 [pid 6002] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu") = 0 [ 74.342534][ T5821] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 74.370614][ T29] audit: type=1800 audit(1733456371.866:19): pid=5969 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop3" ino=41 res=0 errno=0 [pid 6002] symlink("/syzcgroup/net/syz4", "./cgroup.net") = 0 [pid 6002] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 74.403005][ T974] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 74.424932][ T974] XFS (loop3): Unmount and run xfs_repair [pid 6002] write(3, "1000", 4) = 4 [pid 6002] close(3) = 0 [pid 6002] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6002] write(1, "executing program\n", 18) = 18 [pid 6002] memfd_create("syzkaller", 0) = 3 [pid 6002] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaaaa00000 [ 74.439355][ T974] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 74.455318][ T974] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 74.509312][ T974] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 74.536956][ T974] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 74.546358][ T5973] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 74.565730][ T974] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [pid 6006] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 5821] <... umount2 resumed>) = 0 [pid 5821] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./3/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5821] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5821] getdents64(4, 0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5821] getdents64(4, 0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5821] close(4) = 0 [pid 5821] rmdir("./3/file0") = 0 [pid 5821] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5821] close(3) = 0 [pid 5821] rmdir("./3") = 0 [pid 5821] mkdir("./4", 0777) = 0 [ 74.586090][ T974] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 74.622477][ T974] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [pid 5821] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5821] ioctl(3, LOOP_CLR_FD [pid 5973] <... mount resumed>) = 0 [pid 5821] <... ioctl resumed>) = 0 [pid 5821] close(3 [pid 5973] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5973] chdir("./file0") = 0 [pid 5973] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5973] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 4 [ 74.635456][ T5973] XFS (loop2): Ending clean mount [ 74.651638][ T57] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 74.664134][ T57] XFS (loop2): Unmount and run xfs_repair [ 74.667007][ T29] audit: type=1800 audit(1733456372.146:20): pid=5973 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop2" ino=41 res=0 errno=0 [ 74.670627][ T974] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 74.698998][ T57] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 74.706396][ T57] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 74.715989][ T57] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 74.725013][ T974] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 74.734453][ T57] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 74.743725][ T5969] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 74.755486][ T57] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 74.764812][ T57] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 74.774677][ T57] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 74.786041][ T5969] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 74.801423][ T5969] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 74.809852][ T57] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 74.819348][ T57] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [pid 5973] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5969] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 5969] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000) = -1 EFAULT (Bad address) [pid 5969] close(3) = 0 [pid 5969] close(4) = 0 [pid 5969] close(5) = -1 EBADF (Bad file descriptor) [pid 5969] close(6) = -1 EBADF (Bad file descriptor) [pid 5969] close(7) = -1 EBADF (Bad file descriptor) [pid 5969] close(8) = -1 EBADF (Bad file descriptor) [pid 5969] close(9) = -1 EBADF (Bad file descriptor) [pid 5969] close(10) = -1 EBADF (Bad file descriptor) [pid 5969] close(11) = -1 EBADF (Bad file descriptor) [pid 5969] close(12) = -1 EBADF (Bad file descriptor) [pid 5969] close(13) = -1 EBADF (Bad file descriptor) [pid 5969] close(14) = -1 EBADF (Bad file descriptor) [pid 5969] close(15) = -1 EBADF (Bad file descriptor) [pid 5969] close(16) = -1 EBADF (Bad file descriptor) [pid 5969] close(17) = -1 EBADF (Bad file descriptor) [pid 5969] close(18) = -1 EBADF (Bad file descriptor) [pid 5969] close(19) = -1 EBADF (Bad file descriptor) [pid 5969] close(20) = -1 EBADF (Bad file descriptor) [pid 5969] close(21) = -1 EBADF (Bad file descriptor) [pid 5969] close(22) = -1 EBADF (Bad file descriptor) [pid 5969] close(23) = -1 EBADF (Bad file descriptor) [pid 5969] close(24) = -1 EBADF (Bad file descriptor) [pid 5969] close(25) = -1 EBADF (Bad file descriptor) [pid 5969] close(26) = -1 EBADF (Bad file descriptor) [pid 5969] close(27) = -1 EBADF (Bad file descriptor) [pid 5969] close(28) = -1 EBADF (Bad file descriptor) [pid 5969] close(29) = -1 EBADF (Bad file descriptor) [pid 5969] exit_group(0) = ? [pid 5969] +++ exited with 0 +++ [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=52 /* 0.52 s */} --- [pid 5825] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5825] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 74.829333][ T5973] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [pid 5825] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 74.956159][ T5973] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 74.971523][ T5973] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [pid 6002] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 5973] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 5825] newfstatat(3, "", [pid 5821] <... close resumed>) = 0 [pid 6006] <... write resumed>) = 33554432 [pid 5973] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5821] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6006] munmap(0x7fbaaaa00000, 138412032) = 0 [pid 6006] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6006] ioctl(4, LOOP_SET_FD, 3) = 0 ./strace-static-x86_64: Process 6012 attached [pid 5973] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5825] getdents64(3, [pid 6006] close(3) = 0 [pid 6006] close(4) = 0 [pid 6006] mkdir("./file0", 0777) = 0 [pid 6006] mount("/dev/loop1", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 6012] set_robust_list(0x55558159a660, 24 [pid 5973] close(3 [pid 5825] <... getdents64 resumed>0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5821] <... clone resumed>, child_tidptr=0x55558159a650) = 6 [pid 6012] <... set_robust_list resumed>) = 0 [pid 5973] <... close resumed>) = 0 [pid 5825] umount2("./3/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6012] chdir("./4" [pid 5973] close(4 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6012] <... chdir resumed>) = 0 [pid 5973] <... close resumed>) = 0 [pid 5825] newfstatat(AT_FDCWD, "./3/cgroup", [pid 6012] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5973] close(5 [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6012] <... prctl resumed>) = 0 [pid 5973] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5825] unlink("./3/cgroup" [pid 6012] setpgid(0, 0 [pid 5973] close(6 [pid 5825] <... unlink resumed>) = 0 [pid 5973] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5825] umount2("./3/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5973] close(7 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5973] <... close resumed>) = -1 EBADF (Bad file descriptor) [ 75.090230][ T6006] loop1: detected capacity change from 0 to 65536 [ 75.126356][ T5825] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 executing program [pid 5825] newfstatat(AT_FDCWD, "./3/cgroup.cpu", [pid 6012] <... setpgid resumed>) = 0 [pid 5973] close(8 [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6012] symlink("/syzcgroup/unified/syz0", "./cgroup" [pid 5973] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5825] unlink("./3/cgroup.cpu" [pid 6012] <... symlink resumed>) = 0 [pid 5973] close(9 [pid 5825] <... unlink resumed>) = 0 [pid 6012] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu" [pid 5973] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5825] umount2("./3/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6012] <... symlink resumed>) = 0 [pid 5973] close(10 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6012] symlink("/syzcgroup/net/syz0", "./cgroup.net" [pid 5973] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5825] newfstatat(AT_FDCWD, "./3/cgroup.net", [pid 6012] <... symlink resumed>) = 0 [pid 5973] close(11 [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6012] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5973] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5825] unlink("./3/cgroup.net" [pid 6012] <... openat resumed>) = 3 [pid 5973] close(12 [pid 5825] <... unlink resumed>) = 0 [pid 6012] write(3, "1000", 4 [pid 5973] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5825] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6012] <... write resumed>) = 4 [pid 5973] close(13 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6012] close(3 [pid 5973] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5825] newfstatat(AT_FDCWD, "./3/binderfs", [pid 6012] <... close resumed>) = 0 [pid 5973] close(14 [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6012] symlink("/dev/binderfs", "./binderfs" [pid 5973] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5825] unlink("./3/binderfs" [pid 6012] <... symlink resumed>) = 0 [pid 5973] close(15 [pid 5825] <... unlink resumed>) = 0 [pid 6012] write(1, "executing program\n", 18 [pid 5973] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5825] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6012] <... write resumed>) = 18 [pid 5973] close(16) = -1 EBADF (Bad file descriptor) [pid 5973] close(17) = -1 EBADF (Bad file descriptor) [pid 5973] close(18 [pid 6012] memfd_create("syzkaller", 0 [pid 5973] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5973] close(19) = -1 EBADF (Bad file descriptor) [pid 5973] close(20) = -1 EBADF (Bad file descriptor) [pid 5973] close(21) = -1 EBADF (Bad file descriptor) [pid 5973] close(22) = -1 EBADF (Bad file descriptor) [pid 5973] close(23) = -1 EBADF (Bad file descriptor) [pid 6012] <... memfd_create resumed>) = 3 [pid 5973] close(24) = -1 EBADF (Bad file descriptor) [pid 6012] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5973] close(25 [pid 6012] <... mmap resumed>) = 0x7fbaaaa00000 [pid 5973] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5973] close(26) = -1 EBADF (Bad file descriptor) [pid 5973] close(27) = -1 EBADF (Bad file descriptor) [pid 5973] close(28) = -1 EBADF (Bad file descriptor) [pid 5973] close(29) = -1 EBADF (Bad file descriptor) [pid 5973] exit_group(0) = ? [pid 5973] +++ exited with 0 +++ [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=52 /* 0.52 s */} --- [pid 5823] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5823] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5823] umount2("./3/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./3/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./3/cgroup") = 0 [pid 5823] umount2("./3/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./3/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./3/cgroup.cpu") = 0 [pid 5823] umount2("./3/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./3/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./3/cgroup.net") = 0 [pid 5823] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./3/binderfs") = 0 [ 75.183996][ T5823] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 5823] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6002] <... write resumed>) = 33554432 [pid 6002] munmap(0x7fbaaaa00000, 138412032) = 0 [pid 6002] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6002] ioctl(4, LOOP_SET_FD, 3 [pid 5825] <... umount2 resumed>) = 0 [pid 6002] <... ioctl resumed>) = 0 [pid 5825] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... umount2 resumed>) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./3/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6002] close(3 [pid 5825] <... openat resumed>) = 4 [pid 6002] <... close resumed>) = 0 [pid 5825] newfstatat(4, "", [pid 5823] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6002] close(4 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 6002] <... close resumed>) = 0 [pid 5825] getdents64(4, [pid 6002] mkdir("./file0", 0777 [pid 5825] <... getdents64 resumed>0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 6002] <... mkdir resumed>) = 0 [pid 5825] getdents64(4, 0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 6002] mount("/dev/loop4", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 5825] close(4) = 0 [pid 5825] rmdir("./3/file0") = 0 [pid 5825] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5825] close(3) = 0 [pid 5825] rmdir("./3") = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] mkdir("./4", 0777) = 0 [pid 5825] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5825] ioctl(3, LOOP_CLR_FD) = 0 [ 75.338767][ T6006] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 75.349334][ T6002] loop4: detected capacity change from 0 to 65536 [pid 5825] close(3 [pid 5823] newfstatat(AT_FDCWD, "./3/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6006] <... mount resumed>) = 0 [pid 5823] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6006] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6006] chdir("./file0") = 0 [pid 5823] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6006] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5823] <... openat resumed>) = 4 [pid 6006] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 5823] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(4, 0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5823] getdents64(4, 0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 6006] <... open resumed>) = 4 [pid 6006] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5823] close(4) = 0 [pid 5823] rmdir("./3/file0") = 0 [pid 5823] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5823] close(3) = 0 [pid 5823] rmdir("./3") = 0 [ 75.403359][ T6006] XFS (loop1): Ending clean mount [ 75.417442][ T29] audit: type=1800 audit(1733456372.916:21): pid=6006 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop1" ino=41 res=0 errno=0 [pid 5823] mkdir("./4", 0777) = 0 [pid 5823] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5823] ioctl(3, LOOP_CLR_FD) = 0 [ 75.460296][ T6002] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 75.486110][ T57] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 75.523075][ T57] XFS (loop1): Unmount and run xfs_repair [ 75.547869][ T57] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 75.576722][ T57] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 75.614810][ T6002] XFS (loop4): Ending clean mount [pid 5823] close(3 [pid 6002] <... mount resumed>) = 0 [pid 5825] <... close resumed>) = 0 [pid 6002] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6002] chdir("./file0") = 0 [pid 6002] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6002] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6029 attached [pid 6029] set_robust_list(0x55558159a660, 24 [pid 5825] <... clone resumed>, child_tidptr=0x55558159a650) = 6 [pid 6002] <... open resumed>) = 4 [pid 6002] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6029] <... set_robust_list resumed>) = 0 [pid 6029] chdir("./4") = 0 [pid 6029] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6029] setpgid(0, 0) = 0 [pid 6029] symlink("/syzcgroup/unified/syz3", "./cgroup") = 0 [ 75.616987][ T57] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 75.628832][ T57] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 75.637739][ T57] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 75.645166][ T8] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 75.646623][ T57] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 75.646641][ T57] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 75.646655][ T57] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 75.669802][ T29] audit: type=1800 audit(1733456373.136:22): pid=6002 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop4" ino=41 res=0 errno=0 [ 75.676429][ T57] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 75.686715][ T8] XFS (loop4): Unmount and run xfs_repair [ 75.719317][ T8] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 75.726789][ T8] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 75.735649][ T8] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 75.744552][ T8] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 75.753472][ T8] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 75.762374][ T8] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [pid 6029] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu") = 0 [pid 6029] symlink("/syzcgroup/net/syz3", "./cgroup.net" [pid 5823] <... close resumed>) = 0 [pid 6029] <... symlink resumed>) = 0 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6030 attached [pid 6029] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6030] set_robust_list(0x55558159a660, 24 [pid 6029] <... openat resumed>) = 3 [pid 5823] <... clone resumed>, child_tidptr=0x55558159a650) = 6 [pid 6030] <... set_robust_list resumed>) = 0 [ 75.771293][ T8] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 75.780286][ T8] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 75.789203][ T8] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [pid 6029] write(3, "1000", 4 [pid 6030] chdir("./4" [pid 6029] <... write resumed>) = 4 [pid 6030] <... chdir resumed>) = 0 [pid 6029] close(3executing program [pid 6030] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6029] <... close resumed>) = 0 [pid 6030] <... prctl resumed>) = 0 [pid 6029] symlink("/dev/binderfs", "./binderfs" [pid 6030] setpgid(0, 0 [pid 6029] <... symlink resumed>) = 0 [pid 6030] <... setpgid resumed>) = 0 [pid 6029] write(1, "executing program\n", 18 [pid 6030] symlink("/syzcgroup/unified/syz2", "./cgroup" [pid 6029] <... write resumed>) = 18 [pid 6030] <... symlink resumed>) = 0 [pid 6029] memfd_create("syzkaller", 0 [pid 6030] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu" [pid 6029] <... memfd_create resumed>) = 3 [pid 6030] <... symlink resumed>) = 0 [pid 6029] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6030] symlink("/syzcgroup/net/syz2", "./cgroup.net" [pid 6029] <... mmap resumed>) = 0x7fbaaaa00000 [pid 6030] <... symlink resumed>) = 0 [pid 6030] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6030] write(3, "1000", 4executing program ) = 4 [pid 6030] close(3) = 0 [pid 6030] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6030] write(1, "executing program\n", 18) = 18 [pid 6030] memfd_create("syzkaller", 0) = 3 [pid 6030] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaaaa00000 [ 75.869859][ T6006] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 75.882022][ T6002] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [pid 6012] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 6002] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 6002] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000) = -1 EFAULT (Bad address) [pid 6002] close(3) = 0 [pid 6002] close(4) = 0 [pid 6002] close(5) = -1 EBADF (Bad file descriptor) [pid 6002] close(6) = -1 EBADF (Bad file descriptor) [pid 6002] close(7) = -1 EBADF (Bad file descriptor) [pid 6002] close(8) = -1 EBADF (Bad file descriptor) [pid 6002] close(9) = -1 EBADF (Bad file descriptor) [pid 6002] close(10) = -1 EBADF (Bad file descriptor) [pid 6002] close(11) = -1 EBADF (Bad file descriptor) [pid 6002] close(12) = -1 EBADF (Bad file descriptor) [pid 6002] close(13) = -1 EBADF (Bad file descriptor) [pid 6002] close(14) = -1 EBADF (Bad file descriptor) [pid 6002] close(15) = -1 EBADF (Bad file descriptor) [pid 6002] close(16) = -1 EBADF (Bad file descriptor) [pid 6002] close(17) = -1 EBADF (Bad file descriptor) [pid 6002] close(18) = -1 EBADF (Bad file descriptor) [pid 6002] close(19) = -1 EBADF (Bad file descriptor) [pid 6002] close(20) = -1 EBADF (Bad file descriptor) [pid 6002] close(21) = -1 EBADF (Bad file descriptor) [pid 6002] close(22) = -1 EBADF (Bad file descriptor) [pid 6002] close(23) = -1 EBADF (Bad file descriptor) [pid 6002] close(24) = -1 EBADF (Bad file descriptor) [pid 6002] close(25) = -1 EBADF (Bad file descriptor) [pid 6002] close(26) = -1 EBADF (Bad file descriptor) [pid 6002] close(27) = -1 EBADF (Bad file descriptor) [pid 6002] close(28) = -1 EBADF (Bad file descriptor) [pid 6002] close(29) = -1 EBADF (Bad file descriptor) [pid 6002] exit_group(0) = ? [pid 6002] +++ exited with 0 +++ [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5, si_uid=0, si_status=0, si_utime=11 /* 0.11 s */, si_stime=41 /* 0.41 s */} --- [ 75.980443][ T6002] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 75.995912][ T6002] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [pid 5826] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5826] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5826] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5826] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5826] umount2("./3/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./3/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./3/cgroup") = 0 [pid 5826] umount2("./3/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./3/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./3/cgroup.cpu") = 0 [pid 5826] umount2("./3/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./3/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./3/cgroup.net") = 0 [pid 5826] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./3/binderfs") = 0 [ 76.065294][ T5826] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 76.087865][ T6006] XFS (loop1): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 76.102949][ T6006] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [pid 5826] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6012] <... write resumed>) = 33554432 [pid 6006] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 6006] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000 [pid 6012] munmap(0x7fbaaaa00000, 138412032 [pid 6006] <... openat resumed>) = -1 EFAULT (Bad address) [pid 6030] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 6029] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 6006] close(3) = 0 [pid 6012] <... munmap resumed>) = 0 [pid 6006] close(4) = 0 [pid 6006] close(5) = -1 EBADF (Bad file descriptor) [pid 6012] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6006] close(6) = -1 EBADF (Bad file descriptor) [pid 6006] close(7) = -1 EBADF (Bad file descriptor) [pid 6006] close(8) = -1 EBADF (Bad file descriptor) [pid 6006] close(9) = -1 EBADF (Bad file descriptor) [pid 6006] close(10) = -1 EBADF (Bad file descriptor) [pid 6006] close(11) = -1 EBADF (Bad file descriptor) [pid 6006] close(12) = -1 EBADF (Bad file descriptor) [pid 6006] close(13) = -1 EBADF (Bad file descriptor) [pid 6006] close(14) = -1 EBADF (Bad file descriptor) [pid 6006] close(15) = -1 EBADF (Bad file descriptor) [pid 6006] close(16) = -1 EBADF (Bad file descriptor) [pid 6006] close(17) = -1 EBADF (Bad file descriptor) [pid 6006] close(18) = -1 EBADF (Bad file descriptor) [pid 6006] close(19) = -1 EBADF (Bad file descriptor) [pid 6006] close(20) = -1 EBADF (Bad file descriptor) [pid 6006] close(21) = -1 EBADF (Bad file descriptor) [pid 6006] close(22) = -1 EBADF (Bad file descriptor) [pid 6006] close(23) = -1 EBADF (Bad file descriptor) [pid 6006] close(24) = -1 EBADF (Bad file descriptor) [pid 6006] close(25) = -1 EBADF (Bad file descriptor) [pid 6006] close(26) = -1 EBADF (Bad file descriptor) [pid 6006] close(27) = -1 EBADF (Bad file descriptor) [pid 6006] close(28) = -1 EBADF (Bad file descriptor) [pid 6006] close(29) = -1 EBADF (Bad file descriptor) [pid 6006] exit_group(0) = ? [pid 6006] +++ exited with 0 +++ [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=48 /* 0.48 s */} --- [pid 5824] restart_syscall(<... resuming interrupted clone ...> [pid 6012] <... openat resumed>) = 4 [pid 5824] <... restart_syscall resumed>) = 0 [pid 6012] ioctl(4, LOOP_SET_FD, 3 [pid 5824] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5824] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5824] umount2("./4/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./4/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./4/cgroup") = 0 [pid 5824] umount2("./4/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./4/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./4/cgroup.cpu") = 0 [pid 5824] umount2("./4/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./4/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./4/cgroup.net") = 0 [pid 5824] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./4/binderfs") = 0 [pid 5824] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6012] <... ioctl resumed>) = 0 [pid 6012] close(3) = 0 [pid 6012] close(4) = 0 [pid 6012] mkdir("./file0", 0777) = 0 [ 76.350741][ T6012] loop0: detected capacity change from 0 to 65536 [ 76.400740][ T5824] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 6012] mount("/dev/loop0", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 6029] <... write resumed>) = 33554432 [pid 5826] <... umount2 resumed>) = 0 [pid 6029] munmap(0x7fbaaaa00000, 138412032 [pid 5824] <... umount2 resumed>) = 0 [pid 5826] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./3/file0", [pid 5824] newfstatat(AT_FDCWD, "./4/file0", [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] <... openat resumed>) = 4 [pid 5824] <... openat resumed>) = 4 [pid 5826] newfstatat(4, "", [pid 5824] newfstatat(4, "", [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5826] getdents64(4, [pid 5824] getdents64(4, [pid 5826] <... getdents64 resumed>0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5824] <... getdents64 resumed>0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5826] getdents64(4, [pid 5824] getdents64(4, [pid 5826] <... getdents64 resumed>0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5824] <... getdents64 resumed>0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5824] close(4) = 0 [pid 5826] close(4 [pid 5824] rmdir("./4/file0" [pid 5826] <... close resumed>) = 0 [pid 5824] <... rmdir resumed>) = 0 [pid 5826] rmdir("./3/file0" [pid 5824] getdents64(3, [pid 5826] <... rmdir resumed>) = 0 [pid 5824] <... getdents64 resumed>0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5826] getdents64(3, [pid 5824] close(3 [pid 5826] <... getdents64 resumed>0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5824] <... close resumed>) = 0 [pid 5826] close(3 [pid 5824] rmdir("./4" [pid 5826] <... close resumed>) = 0 [pid 5824] <... rmdir resumed>) = 0 [pid 6029] <... munmap resumed>) = 0 [pid 5826] rmdir("./3" [pid 5824] mkdir("./5", 0777 [pid 6029] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5826] <... rmdir resumed>) = 0 [pid 5824] <... mkdir resumed>) = 0 [pid 5826] mkdir("./4", 0777 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6029] <... openat resumed>) = 4 [pid 5826] <... mkdir resumed>) = 0 [pid 5824] <... openat resumed>) = 3 [pid 6029] ioctl(4, LOOP_SET_FD, 3 [pid 5826] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5824] ioctl(3, LOOP_CLR_FD [pid 5826] <... openat resumed>) = 3 [pid 5824] <... ioctl resumed>) = 0 [ 76.563962][ T6012] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 5826] ioctl(3, LOOP_CLR_FD [pid 5824] close(3 [pid 6029] <... ioctl resumed>) = 0 [pid 5826] <... ioctl resumed>) = 0 [pid 6029] close(3) = 0 [pid 6029] close(4) = 0 [pid 6029] mkdir("./file0", 0777) = 0 [pid 5826] close(3 [ 76.605822][ T6029] loop3: detected capacity change from 0 to 65536 [pid 6029] mount("/dev/loop3", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 6030] <... write resumed>) = 33554432 [pid 5826] <... close resumed>) = 0 [pid 5824] <... close resumed>) = 0 [pid 6030] munmap(0x7fbaaaa00000, 138412032 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6038 attached [pid 6030] <... munmap resumed>) = 0 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6038] set_robust_list(0x55558159a660, 24 [pid 6030] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5826] <... clone resumed>, child_tidptr=0x55558159a650) = 6 [pid 6030] <... openat resumed>) = 4 ./strace-static-x86_64: Process 6041 attached [pid 6030] ioctl(4, LOOP_SET_FD, 3 [pid 6012] <... mount resumed>) = 0 [pid 6041] set_robust_list(0x55558159a660, 24 [pid 6038] <... set_robust_list resumed>) = 0 [pid 6030] <... ioctl resumed>) = 0 [pid 5824] <... clone resumed>, child_tidptr=0x55558159a650) = 7 [pid 6041] <... set_robust_list resumed>) = 0 [pid 6030] close(3 [pid 6012] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6038] chdir("./4" [pid 6041] chdir("./5" [pid 6030] <... close resumed>) = 0 [pid 6012] <... openat resumed>) = 3 [pid 6030] close(4) = 0 [pid 6030] mkdir("./file0", 0777) = 0 [pid 6030] mount("/dev/loop2", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 6041] <... chdir resumed>) = 0 [pid 6038] <... chdir resumed>) = 0 [pid 6041] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6038] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6041] <... prctl resumed>) = 0 [pid 6038] setpgid(0, 0 [pid 6041] setpgid(0, 0 [pid 6038] <... setpgid resumed>) = 0 [pid 6041] <... setpgid resumed>) = 0 [pid 6038] symlink("/syzcgroup/unified/syz4", "./cgroup" [pid 6041] symlink("/syzcgroup/unified/syz1", "./cgroup" [pid 6038] <... symlink resumed>) = 0 [pid 6012] chdir("./file0" [pid 6041] <... symlink resumed>) = 0 [pid 6038] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu" [pid 6012] <... chdir resumed>) = 0 [pid 6038] <... symlink resumed>) = 0 [ 76.979617][ T6012] XFS (loop0): Ending clean mount [ 76.985986][ T6030] loop2: detected capacity change from 0 to 65536 [pid 6012] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6041] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu" [pid 6038] symlink("/syzcgroup/net/syz4", "./cgroup.net" [pid 6012] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6041] <... symlink resumed>) = 0 [pid 6038] <... symlink resumed>) = 0 [pid 6012] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 6012] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6041] symlink("/syzcgroup/net/syz1", "./cgroup.net" [pid 6038] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6041] <... symlink resumed>) = 0 [pid 6038] <... openat resumed>) = 3 [ 77.037038][ T29] audit: type=1800 audit(1733456374.536:23): pid=6012 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop0" ino=41 res=0 errno=0 [ 77.062253][ T8] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 77.076752][ T8] XFS (loop0): Unmount and run xfs_repair [ 77.082526][ T8] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 77.090921][ T8] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 77.100116][ T8] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 77.109470][ T8] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 77.118611][ T8] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 77.127759][ T8] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 77.137220][ T8] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 77.146101][ T8] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 77.155723][ T8] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 77.164962][ T6012] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 77.178806][ T6012] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 77.193694][ T6012] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [pid 6038] write(3, "1000", 4executing program executing program [pid 6041] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6038] <... write resumed>) = 4 [pid 6041] <... openat resumed>) = 3 [pid 6038] close(3 [pid 6041] write(3, "1000", 4 [pid 6038] <... close resumed>) = 0 [pid 6041] <... write resumed>) = 4 [pid 6038] symlink("/dev/binderfs", "./binderfs" [pid 6012] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 6041] close(3 [pid 6038] <... symlink resumed>) = 0 [pid 6012] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000 [pid 6041] <... close resumed>) = 0 [pid 6038] write(1, "executing program\n", 18 [pid 6012] <... openat resumed>) = -1 EFAULT (Bad address) [pid 6041] symlink("/dev/binderfs", "./binderfs" [pid 6038] <... write resumed>) = 18 [pid 6012] close(3 [pid 6041] <... symlink resumed>) = 0 [pid 6038] memfd_create("syzkaller", 0 [pid 6012] <... close resumed>) = 0 [pid 6041] write(1, "executing program\n", 18 [pid 6038] <... memfd_create resumed>) = 3 [pid 6041] <... write resumed>) = 18 [pid 6038] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6012] close(4 [pid 6041] memfd_create("syzkaller", 0 [pid 6038] <... mmap resumed>) = 0x7fbaaaa00000 [pid 6012] <... close resumed>) = 0 [pid 6041] <... memfd_create resumed>) = 3 [pid 6012] close(5 [pid 6041] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6012] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6012] close(6) = -1 EBADF (Bad file descriptor) [pid 6041] <... mmap resumed>) = 0x7fbaaaa00000 [pid 6012] close(7) = -1 EBADF (Bad file descriptor) [pid 6012] close(8) = -1 EBADF (Bad file descriptor) [pid 6012] close(9) = -1 EBADF (Bad file descriptor) [pid 6012] close(10) = -1 EBADF (Bad file descriptor) [pid 6012] close(11) = -1 EBADF (Bad file descriptor) [pid 6012] close(12) = -1 EBADF (Bad file descriptor) [pid 6012] close(13) = -1 EBADF (Bad file descriptor) [pid 6012] close(14) = -1 EBADF (Bad file descriptor) [pid 6012] close(15) = -1 EBADF (Bad file descriptor) [pid 6012] close(16) = -1 EBADF (Bad file descriptor) [pid 6012] close(17) = -1 EBADF (Bad file descriptor) [pid 6012] close(18) = -1 EBADF (Bad file descriptor) [pid 6012] close(19) = -1 EBADF (Bad file descriptor) [pid 6012] close(20) = -1 EBADF (Bad file descriptor) [pid 6012] close(21) = -1 EBADF (Bad file descriptor) [pid 6012] close(22) = -1 EBADF (Bad file descriptor) [pid 6012] close(23) = -1 EBADF (Bad file descriptor) [pid 6012] close(24) = -1 EBADF (Bad file descriptor) [pid 6012] close(25) = -1 EBADF (Bad file descriptor) [pid 6012] close(26) = -1 EBADF (Bad file descriptor) [pid 6012] close(27) = -1 EBADF (Bad file descriptor) [pid 6012] close(28) = -1 EBADF (Bad file descriptor) [pid 6012] close(29) = -1 EBADF (Bad file descriptor) [pid 6012] exit_group(0) = ? [pid 6012] +++ exited with 0 +++ [pid 5821] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=52 /* 0.52 s */} --- [pid 5821] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5821] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5821] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5821] umount2("./4/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./4/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] unlink("./4/cgroup") = 0 [pid 5821] umount2("./4/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./4/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] unlink("./4/cgroup.cpu") = 0 [pid 5821] umount2("./4/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./4/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] unlink("./4/cgroup.net") = 0 [pid 5821] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] unlink("./4/binderfs") = 0 [pid 5821] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6030] <... mount resumed>) = 0 [pid 6030] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6030] chdir("./file0") = 0 [ 77.362946][ T6030] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 77.378380][ T6029] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 77.397408][ T5821] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 77.407374][ T6030] XFS (loop2): Ending clean mount [pid 6030] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6030] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 6030] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6041] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [ 77.511632][ T29] audit: type=1800 audit(1733456375.006:24): pid=6030 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop2" ino=41 res=0 errno=0 [ 77.534752][ T974] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 77.547066][ T974] XFS (loop2): Unmount and run xfs_repair [pid 6038] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 5821] <... umount2 resumed>) = 0 [pid 5821] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./4/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6029] <... mount resumed>) = 0 [pid 5821] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6029] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5821] <... openat resumed>) = 4 [pid 6029] <... openat resumed>) = 3 [pid 5821] newfstatat(4, "", [pid 6029] chdir("./file0" [pid 5821] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 6029] <... chdir resumed>) = 0 [pid 5821] getdents64(4, [pid 6029] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5821] <... getdents64 resumed>0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 6029] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5821] getdents64(4, [pid 6029] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 5821] <... getdents64 resumed>0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5821] close(4) = 0 [pid 5821] rmdir("./4/file0" [pid 6029] <... open resumed>) = 4 [pid 5821] <... rmdir resumed>) = 0 [pid 5821] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5821] close(3) = 0 [ 77.566714][ T974] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 77.583779][ T6029] XFS (loop3): Ending clean mount [ 77.595958][ T974] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [pid 5821] rmdir("./4") = 0 [pid 5821] mkdir("./5", 0777) = 0 [pid 5821] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5821] ioctl(3, LOOP_CLR_FD) = 0 [ 77.618389][ T29] audit: type=1800 audit(1733456375.116:25): pid=6029 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop3" ino=41 res=0 errno=0 [ 77.648498][ T974] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 77.665320][ T8] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 77.666650][ T974] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 77.685394][ T974] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 77.694323][ T974] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 77.703239][ T974] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 77.706815][ T8] XFS (loop3): Unmount and run xfs_repair [pid 5821] close(3 [ 77.712119][ T974] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 77.726733][ T974] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 77.738333][ T6030] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 77.749606][ T8] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 77.768393][ T6030] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 77.783224][ T8] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 77.796715][ T6030] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [pid 6029] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6030] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 6030] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000) = -1 EFAULT (Bad address) [pid 6030] close(3) = 0 [pid 6030] close(4) = 0 [pid 6030] close(5) = -1 EBADF (Bad file descriptor) [pid 6030] close(6) = -1 EBADF (Bad file descriptor) [pid 6030] close(7) = -1 EBADF (Bad file descriptor) [pid 6030] close(8) = -1 EBADF (Bad file descriptor) [pid 6030] close(9) = -1 EBADF (Bad file descriptor) [pid 6030] close(10) = -1 EBADF (Bad file descriptor) [pid 6030] close(11) = -1 EBADF (Bad file descriptor) [pid 6030] close(12) = -1 EBADF (Bad file descriptor) [pid 6030] close(13) = -1 EBADF (Bad file descriptor) [pid 6030] close(14) = -1 EBADF (Bad file descriptor) [pid 6030] close(15) = -1 EBADF (Bad file descriptor) [pid 6030] close(16) = -1 EBADF (Bad file descriptor) [pid 6030] close(17) = -1 EBADF (Bad file descriptor) [pid 6030] close(18) = -1 EBADF (Bad file descriptor) [pid 6030] close(19) = -1 EBADF (Bad file descriptor) [pid 6030] close(20) = -1 EBADF (Bad file descriptor) [pid 6030] close(21) = -1 EBADF (Bad file descriptor) [pid 6030] close(22) = -1 EBADF (Bad file descriptor) [pid 6030] close(23) = -1 EBADF (Bad file descriptor) [pid 6030] close(24) = -1 EBADF (Bad file descriptor) [pid 6030] close(25) = -1 EBADF (Bad file descriptor) [pid 6030] close(26) = -1 EBADF (Bad file descriptor) [pid 6030] close(27) = -1 EBADF (Bad file descriptor) [pid 6030] close(28) = -1 EBADF (Bad file descriptor) [pid 6030] close(29) = -1 EBADF (Bad file descriptor) [pid 6030] exit_group(0) = ? [pid 6030] +++ exited with 0 +++ [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6, si_uid=0, si_status=0, si_utime=11 /* 0.11 s */, si_stime=50 /* 0.50 s */} --- [pid 5823] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5823] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5823] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5823] umount2("./4/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./4/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./4/cgroup") = 0 [pid 5823] umount2("./4/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./4/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 77.816698][ T8] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 77.825590][ T8] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 77.845177][ T8] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [pid 5823] unlink("./4/cgroup.cpu") = 0 [pid 5821] <... close resumed>) = 0 [pid 5823] umount2("./4/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./4/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./4/cgroup.net") = 0 [pid 5823] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./4/binderfs") = 0 [pid 5823] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6057 attached [pid 6057] set_robust_list(0x55558159a660, 24 [pid 5821] <... clone resumed>, child_tidptr=0x55558159a650) = 7 [pid 6057] <... set_robust_list resumed>) = 0 [pid 6057] chdir("./5") = 0 [ 77.896509][ T8] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 77.910356][ T5823] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 77.930731][ T8] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [pid 6057] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6057] setpgid(0, 0) = 0 [pid 6057] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6057] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6057] symlink("/syzcgroup/net/syz0", "./cgroup.net" [pid 5823] <... umount2 resumed>) = 0 [pid 6057] <... symlink resumed>) = 0 [pid 5823] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6057] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6057] <... openat resumed>) = 3 [pid 5823] newfstatat(AT_FDCWD, "./4/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6057] write(3, "1000", 4) = 4 [pid 5823] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW [ 77.962050][ T8] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 77.986418][ T8] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [pid 6057] close(3) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6057] symlink("/dev/binderfs", "./binderfs" [pid 5823] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORYexecuting program [pid 6057] <... symlink resumed>) = 0 [pid 5823] <... openat resumed>) = 4 [pid 5823] newfstatat(4, "", [pid 6057] write(1, "executing program\n", 18) = 18 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 6057] memfd_create("syzkaller", 0 [pid 5823] getdents64(4, [pid 6057] <... memfd_create resumed>) = 3 [pid 5823] <... getdents64 resumed>0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5823] getdents64(4, [pid 6057] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5823] <... getdents64 resumed>0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5823] close(4) = 0 [pid 5823] rmdir("./4/file0") = 0 [pid 6057] <... mmap resumed>) = 0x7fbaaaa00000 [pid 5823] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5823] close(3) = 0 [pid 5823] rmdir("./4") = 0 [pid 5823] mkdir("./5", 0777) = 0 [pid 5823] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5823] ioctl(3, LOOP_CLR_FD) = 0 [ 78.007598][ T6029] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 78.026363][ T6029] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [pid 5823] close(3 [pid 6029] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 6029] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000) = -1 EFAULT (Bad address) [pid 6029] close(3) = 0 [pid 6029] close(4) = 0 [pid 6029] close(5) = -1 EBADF (Bad file descriptor) [pid 6029] close(6) = -1 EBADF (Bad file descriptor) [pid 6029] close(7) = -1 EBADF (Bad file descriptor) [pid 6029] close(8) = -1 EBADF (Bad file descriptor) [pid 6029] close(9) = -1 EBADF (Bad file descriptor) [pid 6029] close(10) = -1 EBADF (Bad file descriptor) [pid 6029] close(11) = -1 EBADF (Bad file descriptor) [pid 6029] close(12) = -1 EBADF (Bad file descriptor) [pid 6029] close(13) = -1 EBADF (Bad file descriptor) [pid 6029] close(14) = -1 EBADF (Bad file descriptor) [pid 6029] close(15) = -1 EBADF (Bad file descriptor) [pid 6029] close(16) = -1 EBADF (Bad file descriptor) [pid 6029] close(17) = -1 EBADF (Bad file descriptor) [pid 6029] close(18) = -1 EBADF (Bad file descriptor) [pid 6029] close(19) = -1 EBADF (Bad file descriptor) [pid 6029] close(20) = -1 EBADF (Bad file descriptor) [pid 6029] close(21) = -1 EBADF (Bad file descriptor) [pid 6029] close(22) = -1 EBADF (Bad file descriptor) [pid 6029] close(23) = -1 EBADF (Bad file descriptor) [pid 6029] close(24) = -1 EBADF (Bad file descriptor) [pid 6029] close(25) = -1 EBADF (Bad file descriptor) [pid 6029] close(26) = -1 EBADF (Bad file descriptor) [pid 6029] close(27) = -1 EBADF (Bad file descriptor) [pid 6029] close(28) = -1 EBADF (Bad file descriptor) [pid 6029] close(29) = -1 EBADF (Bad file descriptor) [pid 6029] exit_group(0) = ? [pid 6029] +++ exited with 0 +++ [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=49 /* 0.49 s */} --- [ 78.079277][ T6029] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [pid 5825] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5825] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5825] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5825] umount2("./4/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./4/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./4/cgroup") = 0 [pid 5825] umount2("./4/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./4/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./4/cgroup.cpu") = 0 [pid 5825] umount2("./4/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./4/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./4/cgroup.net") = 0 [pid 5825] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./4/binderfs") = 0 [ 78.157664][ T5825] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 5825] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5825] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./4/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5825] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(4, 0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5825] getdents64(4, 0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5825] close(4) = 0 [pid 5825] rmdir("./4/file0") = 0 [pid 5825] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5825] close(3) = 0 [pid 5825] rmdir("./4") = 0 [pid 5825] mkdir("./5", 0777) = 0 [pid 5825] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5825] ioctl(3, LOOP_CLR_FD) = 0 [pid 5825] close(3 [pid 6041] <... write resumed>) = 33554432 [pid 5823] <... close resumed>) = 0 [pid 6041] munmap(0x7fbaaaa00000, 138412032 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDexecuting program ./strace-static-x86_64: Process 6058 attached [pid 6038] <... write resumed>) = 33554432 [pid 6058] set_robust_list(0x55558159a660, 24 [pid 6038] munmap(0x7fbaaaa00000, 138412032 [pid 5823] <... clone resumed>, child_tidptr=0x55558159a650) = 7 [pid 6058] <... set_robust_list resumed>) = 0 [pid 6058] chdir("./5") = 0 [pid 6058] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6058] setpgid(0, 0) = 0 [pid 6058] symlink("/syzcgroup/unified/syz2", "./cgroup") = 0 [pid 6058] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu") = 0 [pid 6058] symlink("/syzcgroup/net/syz2", "./cgroup.net") = 0 [pid 6058] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6058] write(3, "1000", 4) = 4 [pid 6058] close(3) = 0 [pid 6058] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6058] write(1, "executing program\n", 18) = 18 [pid 6058] memfd_create("syzkaller", 0) = 3 [pid 6058] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaaaa00000 [pid 6038] <... munmap resumed>) = 0 [pid 6041] <... munmap resumed>) = 0 [pid 6038] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6038] ioctl(4, LOOP_SET_FD, 3 [pid 6057] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 6041] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6041] ioctl(4, LOOP_SET_FD, 3 [pid 6038] <... ioctl resumed>) = 0 [pid 6038] close(3) = 0 [pid 6038] close(4 [pid 6041] <... ioctl resumed>) = 0 [pid 6038] <... close resumed>) = 0 [pid 6041] close(3) = 0 [pid 6038] mkdir("./file0", 0777 [pid 6041] close(4 [pid 6038] <... mkdir resumed>) = 0 [pid 6038] mount("/dev/loop4", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 6041] <... close resumed>) = 0 [pid 6041] mkdir("./file0", 0777) = 0 [ 78.524850][ T6038] loop4: detected capacity change from 0 to 65536 [ 78.545092][ T6041] loop1: detected capacity change from 0 to 65536 [ 78.669995][ T6041] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 78.678916][ T6038] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 6041] mount("/dev/loop1", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid") = 0 [pid 6041] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6041] chdir("./file0") = 0 [pid 6041] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [ 78.716471][ T6041] XFS (loop1): Ending clean mount [ 78.748731][ T29] audit: type=1800 audit(1733456376.246:26): pid=6041 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop1" ino=41 res=0 errno=0 [ 78.750230][ T974] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 78.779708][ T974] XFS (loop1): Unmount and run xfs_repair [ 78.785440][ T974] XFS (loop1): First 128 bytes of corrupted metadata buffer: [pid 6041] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 6041] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6038] <... mount resumed>) = 0 [pid 6038] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6038] chdir("./file0") = 0 [pid 6038] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [ 78.792899][ T974] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 78.801784][ T974] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 78.810864][ T974] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 78.818314][ T6038] XFS (loop4): Ending clean mount [ 78.819784][ T974] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 78.833818][ T974] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [pid 6038] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 4 [ 78.842789][ T974] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 78.852440][ T974] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 78.861763][ T974] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 78.870766][ T29] audit: type=1800 audit(1733456376.346:27): pid=6038 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop4" ino=41 res=0 errno=0 [ 78.889072][ T8] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 78.891351][ T6041] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 78.920356][ T8] XFS (loop4): Unmount and run xfs_repair [ 78.926117][ T8] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 78.946649][ T8] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 78.955613][ T8] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 78.976776][ T8] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 78.985668][ T8] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [pid 6038] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5825] <... close resumed>) = 0 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558159a650) = 7 [pid 6058] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432./strace-static-x86_64: Process 6075 attached [pid 6075] set_robust_list(0x55558159a660, 24 [pid 6041] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 6075] <... set_robust_list resumed>) = 0 [pid 6075] chdir("./5") = 0 [pid 6075] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6075] setpgid(0, 0) = 0 [ 78.999751][ T6041] XFS (loop1): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 79.005157][ T8] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 79.025813][ T6041] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [pid 6075] symlink("/syzcgroup/unified/syz3", "./cgroup") = 0 [pid 6075] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu") = 0 [pid 6075] symlink("/syzcgroup/net/syz3", "./cgroup.net") = 0 [pid 6075] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6075] write(3, "1000", 4) = 4 [pid 6075] close(3) = 0 [pid 6075] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6075] write(1, "executing program\n", 18) = 18 [pid 6075] memfd_create("syzkaller", 0) = 3 [pid 6075] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaaaa00000 [ 79.045560][ T8] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 79.064740][ T8] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 79.086635][ T8] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [pid 6057] <... write resumed>) = 33554432 [pid 6041] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000 [pid 6057] munmap(0x7fbaaaa00000, 138412032 [pid 6041] <... openat resumed>) = -1 EFAULT (Bad address) [pid 6038] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 6041] close(3 [pid 6038] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000 [pid 6041] <... close resumed>) = 0 [pid 6038] <... openat resumed>) = -1 EFAULT (Bad address) [pid 6041] close(4) = 0 [pid 6041] close(5) = -1 EBADF (Bad file descriptor) [pid 6041] close(6) = -1 EBADF (Bad file descriptor) [pid 6041] close(7) = -1 EBADF (Bad file descriptor) [pid 6041] close(8) = -1 EBADF (Bad file descriptor) [pid 6041] close(9) = -1 EBADF (Bad file descriptor) [pid 6041] close(10) = -1 EBADF (Bad file descriptor) [pid 6041] close(11) = -1 EBADF (Bad file descriptor) [pid 6041] close(12) = -1 EBADF (Bad file descriptor) [pid 6041] close(13) = -1 EBADF (Bad file descriptor) [pid 6041] close(14) = -1 EBADF (Bad file descriptor) [pid 6041] close(15) = -1 EBADF (Bad file descriptor) [pid 6041] close(16) = -1 EBADF (Bad file descriptor) [pid 6041] close(17) = -1 EBADF (Bad file descriptor) [pid 6041] close(18) = -1 EBADF (Bad file descriptor) [pid 6041] close(19) = -1 EBADF (Bad file descriptor) [pid 6038] close(3) = 0 [pid 6038] close(4 [pid 6041] close(20 [pid 6038] <... close resumed>) = 0 [pid 6041] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6038] close(5 [pid 6041] close(21 [pid 6038] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6041] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6041] close(22) = -1 EBADF (Bad file descriptor) [pid 6041] close(23) = -1 EBADF (Bad file descriptor) [pid 6041] close(24) = -1 EBADF (Bad file descriptor) [pid 6041] close(25) = -1 EBADF (Bad file descriptor) [pid 6041] close(26) = -1 EBADF (Bad file descriptor) [pid 6041] close(27) = -1 EBADF (Bad file descriptor) [pid 6041] close(28) = -1 EBADF (Bad file descriptor) [pid 6041] close(29) = -1 EBADF (Bad file descriptor) [pid 6041] exit_group(0) = ? [pid 6041] +++ exited with 0 +++ [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=54 /* 0.54 s */} --- [pid 5824] restart_syscall(<... resuming interrupted clone ...> [pid 6038] close(6) = -1 EBADF (Bad file descriptor) [pid 6038] close(7) = -1 EBADF (Bad file descriptor) [pid 6038] close(8) = -1 EBADF (Bad file descriptor) [pid 6038] close(9) = -1 EBADF (Bad file descriptor) [pid 6038] close(10) = -1 EBADF (Bad file descriptor) [pid 6038] close(11 [pid 5824] <... restart_syscall resumed>) = 0 [pid 6038] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6038] close(12) = -1 EBADF (Bad file descriptor) [pid 5824] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6038] close(13) = -1 EBADF (Bad file descriptor) [pid 6038] close(14 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6038] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6038] close(15 [pid 5824] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6057] <... munmap resumed>) = 0 [pid 6038] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] <... openat resumed>) = 3 [pid 6038] close(16 [pid 5824] newfstatat(3, "", [pid 6038] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6038] close(17 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 6038] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6038] close(18) = -1 EBADF (Bad file descriptor) [pid 5824] getdents64(3, [ 79.157319][ T6038] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 79.170666][ T6038] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 79.186350][ T6038] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [pid 6038] close(19) = -1 EBADF (Bad file descriptor) [pid 5824] <... getdents64 resumed>0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 6038] close(20 [pid 6057] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6057] ioctl(4, LOOP_SET_FD, 3 [pid 6038] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] umount2("./5/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6038] close(21 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6038] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] newfstatat(AT_FDCWD, "./5/cgroup", [pid 6038] close(22 [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6038] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] unlink("./5/cgroup" [pid 6038] close(23 [pid 5824] <... unlink resumed>) = 0 [pid 6038] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6038] close(24) = -1 EBADF (Bad file descriptor) [pid 6038] close(25 [pid 5824] umount2("./5/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6038] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6038] close(26) = -1 EBADF (Bad file descriptor) [pid 6038] close(27 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6038] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] newfstatat(AT_FDCWD, "./5/cgroup.cpu", [pid 6038] close(28) = -1 EBADF (Bad file descriptor) [pid 6038] close(29) = -1 EBADF (Bad file descriptor) [pid 6038] exit_group(0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6057] <... ioctl resumed>) = 0 [pid 6038] <... exit_group resumed>) = ? [pid 6057] close(3) = 0 [pid 6057] close(4) = 0 [pid 6038] +++ exited with 0 +++ [pid 5824] unlink("./5/cgroup.cpu" [pid 6057] mkdir("./file0", 0777 [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=51 /* 0.51 s */} --- [pid 6057] <... mkdir resumed>) = 0 [pid 5826] restart_syscall(<... resuming interrupted clone ...> [pid 5824] <... unlink resumed>) = 0 [pid 6057] mount("/dev/loop0", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 5826] <... restart_syscall resumed>) = 0 [pid 5824] umount2("./5/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] newfstatat(AT_FDCWD, "./5/cgroup.net", [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] unlink("./5/cgroup.net" [pid 5826] <... openat resumed>) = 3 [pid 5824] <... unlink resumed>) = 0 [pid 5826] newfstatat(3, "", [pid 5824] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] getdents64(3, [pid 5824] newfstatat(AT_FDCWD, "./5/binderfs", [pid 5826] <... getdents64 resumed>0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5826] umount2("./4/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./5/binderfs" [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... unlink resumed>) = 0 [pid 5826] newfstatat(AT_FDCWD, "./4/cgroup", [pid 5824] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./4/cgroup") = 0 [pid 5826] umount2("./4/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./4/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./4/cgroup.cpu") = 0 [pid 5826] umount2("./4/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./4/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./4/cgroup.net") = 0 [pid 5826] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./4/binderfs") = 0 [ 79.241018][ T6057] loop0: detected capacity change from 0 to 65536 [ 79.297131][ T5824] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 79.307645][ T5826] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 5826] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6075] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 6058] <... write resumed>) = 33554432 [pid 6058] munmap(0x7fbaaaa00000, 138412032 [pid 5826] <... umount2 resumed>) = 0 [pid 5826] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./4/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5826] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5826] getdents64(4, 0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5826] getdents64(4, 0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5826] close(4) = 0 [pid 5826] rmdir("./4/file0") = 0 [pid 5824] <... umount2 resumed>) = 0 [pid 5826] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5824] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6058] <... munmap resumed>) = 0 [pid 5826] close(3 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 79.508668][ T6057] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 6058] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5826] <... close resumed>) = 0 [pid 5824] newfstatat(AT_FDCWD, "./5/file0", [pid 6058] <... openat resumed>) = 4 [pid 5826] rmdir("./4" [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6058] ioctl(4, LOOP_SET_FD, 3 [pid 5826] <... rmdir resumed>) = 0 [pid 5826] mkdir("./5", 0777 [pid 5824] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6057] <... mount resumed>) = 0 [pid 5826] <... mkdir resumed>) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6057] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5826] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5824] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6057] <... openat resumed>) = 3 [pid 5826] <... openat resumed>) = 3 [pid 5824] <... openat resumed>) = 4 [pid 6057] chdir("./file0" [pid 5826] ioctl(3, LOOP_CLR_FD [pid 5824] newfstatat(4, "", [pid 6057] <... chdir resumed>) = 0 [pid 5826] <... ioctl resumed>) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 6057] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5826] close(3 [pid 5824] getdents64(4, [pid 6057] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5824] <... getdents64 resumed>0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 6057] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 5824] getdents64(4, 0x5555815a3730 /* 0 entries */, 32768) = 0 [ 79.573885][ T6058] loop2: detected capacity change from 0 to 65536 [ 79.583739][ T6057] XFS (loop0): Ending clean mount [pid 5824] close(4) = 0 [pid 5824] rmdir("./5/file0" [pid 6057] <... open resumed>) = 4 [pid 5824] <... rmdir resumed>) = 0 [pid 6057] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5824] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [ 79.621308][ T29] audit: type=1800 audit(1733456377.116:28): pid=6057 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop0" ino=41 res=0 errno=0 [ 79.658262][ T57] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [pid 6058] <... ioctl resumed>) = 0 [pid 6058] close(3) = 0 [pid 5824] close(3 [pid 6058] close(4) = 0 [pid 5824] <... close resumed>) = 0 [pid 6058] mkdir("./file0", 0777) = 0 [pid 5824] rmdir("./5" [pid 6058] mount("/dev/loop2", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 5824] <... rmdir resumed>) = 0 [pid 5824] mkdir("./6", 0777) = 0 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5824] ioctl(3, LOOP_CLR_FD) = 0 [ 79.717476][ T57] XFS (loop0): Unmount and run xfs_repair [ 79.740370][ T6058] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 79.751033][ T57] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 79.758943][ T57] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 79.767879][ T57] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 79.776830][ T57] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 79.785688][ T57] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 79.794782][ T57] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 79.803908][ T57] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 79.812812][ T57] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 79.821883][ T57] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 79.830846][ T6057] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 79.881352][ T6057] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 79.896107][ T6057] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [pid 5824] close(3 [pid 6057] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 5824] <... close resumed>) = 0 [pid 6075] <... write resumed>) = 33554432 [pid 6057] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6075] munmap(0x7fbaaaa00000, 138412032 [pid 6057] <... openat resumed>) = -1 EFAULT (Bad address) [pid 6075] <... munmap resumed>) = 0 [pid 6057] close(3 [pid 5826] <... close resumed>) = 0 [pid 5824] <... clone resumed>, child_tidptr=0x55558159a650) = 8 [pid 6075] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6057] <... close resumed>) = 0 ./strace-static-x86_64: Process 6091 attached [pid 6075] <... openat resumed>) = 4 [pid 6057] close(4 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6093 attached [pid 6091] set_robust_list(0x55558159a660, 24 [pid 6075] ioctl(4, LOOP_SET_FD, 3 [pid 6057] <... close resumed>) = 0 [pid 6093] set_robust_list(0x55558159a660, 24 [pid 6091] <... set_robust_list resumed>) = 0 [pid 6075] <... ioctl resumed>) = 0 [pid 6057] close(5 [pid 5826] <... clone resumed>, child_tidptr=0x55558159a650) = 7 [pid 6093] <... set_robust_list resumed>) = 0 [pid 6091] chdir("./6" [pid 6075] close(3 [pid 6057] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6093] chdir("./5" [pid 6091] <... chdir resumed>) = 0 [pid 6075] <... close resumed>) = 0 [pid 6057] close(6 [pid 6093] <... chdir resumed>) = 0 [pid 6091] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6075] close(4 [pid 6057] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6093] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6091] <... prctl resumed>) = 0 [pid 6075] <... close resumed>) = 0 [pid 6057] close(7 [pid 6075] mkdir("./file0", 0777 [pid 6057] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6093] <... prctl resumed>) = 0 [pid 6091] setpgid(0, 0 [pid 6075] <... mkdir resumed>) = 0 [pid 6093] setpgid(0, 0 [pid 6091] <... setpgid resumed>) = 0 [pid 6075] mount("/dev/loop3", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 6058] <... mount resumed>) = 0 [pid 6057] close(8 [pid 6093] <... setpgid resumed>) = 0 [pid 6091] symlink("/syzcgroup/unified/syz1", "./cgroup" [pid 6058] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6057] <... close resumed>) = -1 EBADF (Bad file descriptor) [ 80.182727][ T6075] loop3: detected capacity change from 0 to 65536 [ 80.209864][ T6058] XFS (loop2): Ending clean mount [pid 6058] <... openat resumed>) = 3 [pid 6093] symlink("/syzcgroup/unified/syz4", "./cgroup" [pid 6091] <... symlink resumed>) = 0 [pid 6057] close(9 [pid 6058] chdir("./file0") = 0 [pid 6058] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6093] <... symlink resumed>) = 0 [pid 6091] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu" [pid 6057] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6093] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu" [pid 6091] <... symlink resumed>) = 0 [pid 6058] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6057] close(10 [pid 6058] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 6093] <... symlink resumed>) = 0 [pid 6091] symlink("/syzcgroup/net/syz1", "./cgroup.net" [pid 6057] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6093] symlink("/syzcgroup/net/syz4", "./cgroup.net") = 0 [pid 6091] <... symlink resumed>) = 0 [pid 6058] <... open resumed>) = 4 [pid 6057] close(11 [pid 6058] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6093] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6091] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6057] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6093] <... openat resumed>) = 3 [pid 6091] <... openat resumed>) = 3 [pid 6057] close(12 [pid 6093] write(3, "1000", 4 [pid 6091] write(3, "1000", 4 [pid 6057] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6093] <... write resumed>) = 4 [ 80.239619][ T6075] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 80.261728][ T29] audit: type=1800 audit(1733456377.756:29): pid=6058 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop2" ino=41 res=0 errno=0 [pid 6091] <... write resumed>) = 4 [pid 6057] close(13 [pid 6093] close(3 [pid 6091] close(3 [pid 6057] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6093] <... close resumed>) = 0 [pid 6091] <... close resumed>) = 0 [pid 6057] close(14 [pid 6093] symlink("/dev/binderfs", "./binderfs"executing program executing program [pid 6091] symlink("/dev/binderfs", "./binderfs" [pid 6057] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6093] <... symlink resumed>) = 0 [pid 6091] <... symlink resumed>) = 0 [pid 6057] close(15 [pid 6093] write(1, "executing program\n", 18 [pid 6091] write(1, "executing program\n", 18 [pid 6057] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6093] <... write resumed>) = 18 [pid 6091] <... write resumed>) = 18 [pid 6057] close(16 [pid 6093] memfd_create("syzkaller", 0 [pid 6091] memfd_create("syzkaller", 0 [pid 6057] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6093] <... memfd_create resumed>) = 3 [pid 6091] <... memfd_create resumed>) = 3 [pid 6057] close(17 [pid 6093] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6091] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6057] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6093] <... mmap resumed>) = 0x7fbaaaa00000 [pid 6091] <... mmap resumed>) = 0x7fbaaaa00000 [pid 6057] close(18) = -1 EBADF (Bad file descriptor) [pid 6075] <... mount resumed>) = 0 [pid 6057] close(19) = -1 EBADF (Bad file descriptor) [pid 6057] close(20 [pid 6075] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6057] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6057] close(21) = -1 EBADF (Bad file descriptor) [pid 6057] close(22) = -1 EBADF (Bad file descriptor) [pid 6057] close(23) = -1 EBADF (Bad file descriptor) [pid 6057] close(24) = -1 EBADF (Bad file descriptor) [pid 6057] close(25) = -1 EBADF (Bad file descriptor) [pid 6057] close(26) = -1 EBADF (Bad file descriptor) [pid 6057] close(27) = -1 EBADF (Bad file descriptor) [pid 6057] close(28) = -1 EBADF (Bad file descriptor) [pid 6057] close(29) = -1 EBADF (Bad file descriptor) [pid 6057] exit_group(0) = ? [pid 6057] +++ exited with 0 +++ [pid 6075] <... openat resumed>) = 3 [pid 5821] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7, si_uid=0, si_status=0, si_utime=11 /* 0.11 s */, si_stime=55 /* 0.55 s */} --- [pid 5821] restart_syscall(<... resuming interrupted clone ...> [pid 6075] chdir("./file0") = 0 [pid 5821] <... restart_syscall resumed>) = 0 [pid 6075] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5821] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6075] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 80.263619][ T5879] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 80.293435][ T5879] XFS (loop2): Unmount and run xfs_repair [ 80.299274][ T5879] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 80.307007][ T5879] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 80.309946][ T6075] XFS (loop3): Ending clean mount [ 80.315868][ T5879] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 80.330664][ T5879] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [pid 5821] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6075] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 5821] <... openat resumed>) = 3 [pid 5821] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5821] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5821] umount2("./5/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./5/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] unlink("./5/cgroup") = 0 [pid 5821] umount2("./5/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./5/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] unlink("./5/cgroup.cpu") = 0 [pid 5821] umount2("./5/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./5/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] unlink("./5/cgroup.net") = 0 [pid 5821] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] unlink("./5/binderfs") = 0 [pid 5821] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6075] <... open resumed>) = 4 [ 80.367294][ T5821] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 80.376724][ T29] audit: type=1800 audit(1733456377.866:30): pid=6075 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop3" ino=41 res=0 errno=0 [ 80.379151][ T8] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 80.426656][ T5879] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 80.435553][ T5879] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 80.444549][ T8] XFS (loop3): Unmount and run xfs_repair [ 80.450338][ T8] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 80.457800][ T5879] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 80.466714][ T8] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 80.475577][ T8] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 80.484543][ T5879] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 80.493514][ T5879] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 80.502461][ T8] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 80.511412][ T8] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 80.520345][ T8] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 80.529309][ T8] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 80.536945][ T6058] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 80.538201][ T8] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 80.558381][ T8] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [pid 6075] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6058] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 6058] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000) = -1 EFAULT (Bad address) [pid 6058] close(3) = 0 [pid 6058] close(4) = 0 [pid 6058] close(5) = -1 EBADF (Bad file descriptor) [pid 6058] close(6) = -1 EBADF (Bad file descriptor) [pid 6058] close(7) = -1 EBADF (Bad file descriptor) [pid 6058] close(8) = -1 EBADF (Bad file descriptor) [pid 6058] close(9) = -1 EBADF (Bad file descriptor) [pid 6058] close(10) = -1 EBADF (Bad file descriptor) [pid 6058] close(11) = -1 EBADF (Bad file descriptor) [pid 6058] close(12) = -1 EBADF (Bad file descriptor) [pid 6058] close(13) = -1 EBADF (Bad file descriptor) [pid 6058] close(14) = -1 EBADF (Bad file descriptor) [pid 6058] close(15) = -1 EBADF (Bad file descriptor) [pid 6058] close(16) = -1 EBADF (Bad file descriptor) [pid 6058] close(17) = -1 EBADF (Bad file descriptor) [pid 6058] close(18) = -1 EBADF (Bad file descriptor) [pid 6058] close(19) = -1 EBADF (Bad file descriptor) [pid 6058] close(20) = -1 EBADF (Bad file descriptor) [pid 6058] close(21) = -1 EBADF (Bad file descriptor) [pid 6058] close(22) = -1 EBADF (Bad file descriptor) [pid 6058] close(23) = -1 EBADF (Bad file descriptor) [pid 6058] close(24) = -1 EBADF (Bad file descriptor) [pid 6058] close(25) = -1 EBADF (Bad file descriptor) [pid 6058] close(26) = -1 EBADF (Bad file descriptor) [pid 6058] close(27) = -1 EBADF (Bad file descriptor) [pid 6058] close(28) = -1 EBADF (Bad file descriptor) [pid 6058] close(29) = -1 EBADF (Bad file descriptor) [pid 6058] exit_group(0) = ? [pid 6058] +++ exited with 0 +++ [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=47 /* 0.47 s */} --- [pid 5823] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5823] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5823] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5823] umount2("./5/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./5/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./5/cgroup") = 0 [pid 5823] umount2("./5/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./5/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./5/cgroup.cpu") = 0 [pid 5823] umount2("./5/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./5/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./5/cgroup.net") = 0 [pid 5823] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./5/binderfs") = 0 [ 80.567697][ T6075] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 80.570762][ T6058] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 80.594315][ T6058] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [pid 5823] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6075] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 6075] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000) = -1 EFAULT (Bad address) [pid 6075] close(3) = 0 [pid 5821] <... umount2 resumed>) = 0 [pid 5821] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./5/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5821] newfstatat(4, "", [pid 6075] close(4 [pid 5821] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5821] getdents64(4, 0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5821] getdents64(4, 0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5821] close(4) = 0 [pid 5821] rmdir("./5/file0") = 0 [pid 5821] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5821] close(3) = 0 [pid 5821] rmdir("./5") = 0 [ 80.637437][ T6075] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 80.652725][ T5823] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 80.656673][ T6075] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [pid 5821] mkdir("./6", 0777 [pid 6075] <... close resumed>) = 0 [pid 5823] <... umount2 resumed>) = 0 [pid 6075] close(5) = -1 EBADF (Bad file descriptor) [pid 6075] close(6 [pid 5823] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] <... mkdir resumed>) = 0 [pid 6075] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6075] close(7) = -1 EBADF (Bad file descriptor) [pid 6075] close(8 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5821] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6075] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5823] newfstatat(AT_FDCWD, "./5/file0", [pid 6075] close(9 [pid 5821] <... openat resumed>) = 3 [pid 6075] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6075] close(10) = -1 EBADF (Bad file descriptor) [pid 5823] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] ioctl(3, LOOP_CLR_FD [pid 6075] close(11 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6075] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5821] <... ioctl resumed>) = 0 [pid 6075] close(12 [pid 5823] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5821] close(3 [pid 6075] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6075] close(13 [pid 5823] <... openat resumed>) = 4 [pid 6075] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5823] newfstatat(4, "", [pid 6075] close(14) = -1 EBADF (Bad file descriptor) [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 6075] close(15 [pid 5823] getdents64(4, [pid 6075] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6075] close(16 [pid 5823] <... getdents64 resumed>0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 6075] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6075] close(17 [pid 5823] getdents64(4, [pid 6075] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6075] close(18 [pid 5823] <... getdents64 resumed>0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 6075] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5823] close(4 [pid 6075] close(19) = -1 EBADF (Bad file descriptor) [pid 5823] <... close resumed>) = 0 [pid 6075] close(20) = -1 EBADF (Bad file descriptor) [pid 5823] rmdir("./5/file0" [pid 6075] close(21) = -1 EBADF (Bad file descriptor) [pid 6075] close(22) = -1 EBADF (Bad file descriptor) [pid 5823] <... rmdir resumed>) = 0 [pid 6075] close(23) = -1 EBADF (Bad file descriptor) [pid 5823] getdents64(3, [pid 6075] close(24) = -1 EBADF (Bad file descriptor) [pid 5823] <... getdents64 resumed>0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 6075] close(25) = -1 EBADF (Bad file descriptor) [pid 5823] close(3 [pid 6075] close(26) = -1 EBADF (Bad file descriptor) [pid 5823] <... close resumed>) = 0 [pid 6075] close(27 [pid 5823] rmdir("./5" [pid 6075] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6075] close(28) = -1 EBADF (Bad file descriptor) [pid 5823] <... rmdir resumed>) = 0 [pid 6075] close(29) = -1 EBADF (Bad file descriptor) [pid 5823] mkdir("./6", 0777 [pid 6075] exit_group(0) = ? [pid 6075] +++ exited with 0 +++ [pid 5823] <... mkdir resumed>) = 0 [pid 5823] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=56 /* 0.56 s */} --- [pid 5825] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... openat resumed>) = 3 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] ioctl(3, LOOP_CLR_FD) = 0 [pid 5823] close(3 [pid 5825] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6093] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 5825] <... openat resumed>) = 3 [pid 5825] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5825] umount2("./5/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./5/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./5/cgroup") = 0 [pid 5825] umount2("./5/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./5/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./5/cgroup.cpu") = 0 [pid 5825] umount2("./5/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./5/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./5/cgroup.net") = 0 [pid 5825] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./5/binderfs") = 0 [pid 5825] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW [ 80.851641][ T5825] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 6091] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 5825] <... umount2 resumed>) = 0 [pid 5825] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./5/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5825] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(4, 0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5825] getdents64(4, 0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5825] close(4) = 0 [pid 5825] rmdir("./5/file0") = 0 [pid 5825] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5825] close(3) = 0 [pid 5825] rmdir("./5") = 0 [pid 5825] mkdir("./6", 0777) = 0 [pid 5825] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5825] ioctl(3, LOOP_CLR_FD) = 0 [pid 5825] close(3 [pid 5821] <... close resumed>) = 0 [pid 5823] <... close resumed>) = 0 [pid 5821] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5821] <... clone resumed>, child_tidptr=0x55558159a650) = 8 [pid 5823] <... clone resumed>, child_tidptr=0x55558159a650) = 8 [pid 5825] <... close resumed>) = 0 ./strace-static-x86_64: Process 6102 attached [pid 6102] set_robust_list(0x55558159a660, 24 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6102] <... set_robust_list resumed>) = 0 [pid 5825] <... clone resumed>, child_tidptr=0x55558159a650) = 8 [pid 6102] chdir("./6") = 0 [pid 6102] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6102] setpgid(0, 0) = 0 [pid 6102] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6102] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6102] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6102] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6102] write(3, "1000", 4) = 4 [pid 6102] close(3) = 0 [pid 6102] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6102] write(1, "executing program\n", 18executing program ) = 18 [pid 6102] memfd_create("syzkaller", 0) = 3 [pid 6102] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaaaa00000 ./strace-static-x86_64: Process 6104 attached [pid 6104] set_robust_list(0x55558159a660, 24) = 0 [pid 6104] chdir("./6") = 0 [pid 6104] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6104] setpgid(0, 0) = 0 [pid 6104] symlink("/syzcgroup/unified/syz3", "./cgroup") = 0 [pid 6104] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu"./strace-static-x86_64: Process 6103 attached ) = 0 [pid 6091] <... write resumed>) = 33554432 [pid 6104] symlink("/syzcgroup/net/syz3", "./cgroup.net" [pid 6103] set_robust_list(0x55558159a660, 24 [pid 6091] munmap(0x7fbaaaa00000, 138412032 [pid 6103] <... set_robust_list resumed>) = 0 [pid 6104] <... symlink resumed>) = 0 [pid 6104] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6104] write(3, "1000", 4) = 4 [pid 6104] close(3) = 0 [pid 6104] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 6104] write(1, "executing program\n", 18) = 18 [pid 6104] memfd_create("syzkaller", 0) = 3 [pid 6104] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaaaa00000 [pid 6103] chdir("./6") = 0 [pid 6103] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6103] setpgid(0, 0) = 0 [pid 6103] symlink("/syzcgroup/unified/syz2", "./cgroup" [pid 6091] <... munmap resumed>) = 0 [pid 6103] <... symlink resumed>) = 0 [pid 6091] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6103] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu" [pid 6091] <... openat resumed>) = 4 [pid 6103] <... symlink resumed>) = 0 [pid 6091] ioctl(4, LOOP_SET_FD, 3 [pid 6103] symlink("/syzcgroup/net/syz2", "./cgroup.net") = 0 [pid 6091] <... ioctl resumed>) = 0 [pid 6103] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6091] close(3 [pid 6103] <... openat resumed>) = 3 [pid 6091] <... close resumed>) = 0 [pid 6103] write(3, "1000", 4 [pid 6091] close(4 [pid 6103] <... write resumed>) = 4 [pid 6091] <... close resumed>) = 0 [pid 6103] close(3 [pid 6091] mkdir("./file0", 0777 [pid 6103] <... close resumed>) = 0 [pid 6103] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6091] <... mkdir resumed>) = 0 [pid 6103] write(1, "executing program\n", 18executing program ) = 18 [pid 6091] mount("/dev/loop1", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 6103] memfd_create("syzkaller", 0) = 3 [pid 6103] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaaaa00000 [ 81.468100][ T6091] loop1: detected capacity change from 0 to 65536 [pid 6093] <... write resumed>) = 33554432 [ 81.556287][ T6091] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 6093] munmap(0x7fbaaaa00000, 138412032 [pid 6091] <... mount resumed>) = 0 [pid 6091] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6091] chdir("./file0") = 0 [pid 6091] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6091] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 4 [ 81.634981][ T6091] XFS (loop1): Ending clean mount [ 81.655060][ T29] audit: type=1800 audit(1733456379.146:31): pid=6091 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop1" ino=41 res=0 errno=0 [ 81.657311][ T8] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [pid 6091] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6093] <... munmap resumed>) = 0 [pid 6093] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6093] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6093] close(3) = 0 [pid 6093] close(4) = 0 [pid 6093] mkdir("./file0", 0777) = 0 [pid 6093] mount("/dev/loop4", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [ 81.739124][ T6093] loop4: detected capacity change from 0 to 65536 [ 81.770050][ T8] XFS (loop1): Unmount and run xfs_repair [ 81.782030][ T6093] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 81.829218][ T9] cfg80211: failed to load regulatory.db [ 81.836825][ T8] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 81.844241][ T8] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 81.861589][ T8] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 81.869990][ T6093] XFS (loop4): Ending clean mount [ 81.870748][ T8] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 81.880946][ T29] audit: type=1800 audit(1733456379.376:32): pid=6093 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop4" ino=41 res=0 errno=0 [ 81.884593][ T8] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 81.913217][ T57] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 81.913296][ T57] XFS (loop4): Unmount and run xfs_repair [ 81.913310][ T57] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 81.913327][ T57] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 81.913342][ T57] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 81.913357][ T57] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 81.913371][ T57] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [pid 6103] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 6093] <... mount resumed>) = 0 [pid 6093] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6093] chdir("./file0") = 0 [pid 6093] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6093] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 4 [ 81.913385][ T57] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 81.913398][ T57] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 81.913412][ T57] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 81.924560][ T8] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 81.966739][ T57] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 81.974281][ T8] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 81.997635][ T6093] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 82.000840][ T8] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 82.047727][ T8] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 82.059710][ T6093] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 82.066775][ T6091] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 82.159563][ T6093] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 82.170319][ T6091] XFS (loop1): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 82.185044][ T6091] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [pid 6093] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6104] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 6102] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 6093] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 6091] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 6093] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000 [pid 6091] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000 [pid 6093] <... openat resumed>) = -1 EFAULT (Bad address) [pid 6091] <... openat resumed>) = -1 EFAULT (Bad address) [pid 6093] close(3 [pid 6091] close(3 [pid 6093] <... close resumed>) = 0 [pid 6091] <... close resumed>) = 0 [pid 6093] close(4 [pid 6091] close(4 [pid 6093] <... close resumed>) = 0 [pid 6091] <... close resumed>) = 0 [pid 6093] close(5 [pid 6091] close(5 [pid 6093] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6091] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6093] close(6 [pid 6091] close(6 [pid 6093] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6091] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6093] close(7 [pid 6091] close(7 [pid 6093] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6091] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6093] close(8 [pid 6091] close(8 [pid 6093] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6091] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6093] close(9 [pid 6091] close(9 [pid 6093] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6091] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6093] close(10 [pid 6091] close(10 [pid 6093] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6091] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6093] close(11 [pid 6091] close(11 [pid 6093] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6091] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6093] close(12 [pid 6091] close(12 [pid 6093] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6091] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6093] close(13 [pid 6091] close(13 [pid 6093] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6091] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6093] close(14 [pid 6091] close(14 [pid 6093] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6091] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6093] close(15 [pid 6091] close(15 [pid 6093] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6091] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6093] close(16 [pid 6091] close(16 [pid 6093] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6091] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6093] close(17 [pid 6091] close(17 [pid 6093] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6091] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6093] close(18 [pid 6091] close(18 [pid 6093] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6091] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6093] close(19 [pid 6091] close(19 [pid 6093] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6091] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6093] close(20 [pid 6091] close(20 [pid 6093] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6091] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6093] close(21 [pid 6091] close(21 [pid 6093] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6091] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6093] close(22 [pid 6091] close(22 [pid 6093] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6091] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6093] close(23 [pid 6091] close(23 [pid 6093] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6091] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6093] close(24 [pid 6091] close(24 [pid 6093] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6091] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6093] close(25 [pid 6091] close(25 [pid 6093] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6091] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6093] close(26 [pid 6091] close(26 [pid 6093] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6091] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6093] close(27 [pid 6091] close(27 [pid 6093] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6091] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6093] close(28 [pid 6091] close(28 [pid 6093] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6091] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6093] close(29 [pid 6091] close(29 [pid 6093] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6091] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6093] exit_group(0 [pid 6091] exit_group(0 [pid 6093] <... exit_group resumed>) = ? [pid 6091] <... exit_group resumed>) = ? [pid 6093] +++ exited with 0 +++ [pid 6091] +++ exited with 0 +++ [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=47 /* 0.47 s */} --- [pid 5824] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5824] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5824] umount2("./6/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./6/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./6/cgroup" [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7, si_uid=0, si_status=0, si_utime=14 /* 0.14 s */, si_stime=46 /* 0.46 s */} --- [pid 5824] <... unlink resumed>) = 0 [pid 5824] umount2("./6/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./6/cgroup.cpu", [pid 5826] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] <... openat resumed>) = 3 [pid 5824] unlink("./6/cgroup.cpu" [pid 5826] newfstatat(3, "", [pid 5824] <... unlink resumed>) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5824] umount2("./6/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] getdents64(3, [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... getdents64 resumed>0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5824] newfstatat(AT_FDCWD, "./6/cgroup.net", [pid 5826] umount2("./5/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] unlink("./6/cgroup.net" [pid 5826] newfstatat(AT_FDCWD, "./5/cgroup", [pid 5824] <... unlink resumed>) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] unlink("./5/cgroup" [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... unlink resumed>) = 0 [pid 5824] newfstatat(AT_FDCWD, "./6/binderfs", [pid 5826] umount2("./5/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] unlink("./6/binderfs" [pid 5826] newfstatat(AT_FDCWD, "./5/cgroup.cpu", [pid 5824] <... unlink resumed>) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] unlink("./5/cgroup.cpu") = 0 [pid 5826] umount2("./5/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./5/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./5/cgroup.net") = 0 [pid 5826] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./5/binderfs") = 0 [pid 5826] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6103] <... write resumed>) = 33554432 [pid 6103] munmap(0x7fbaaaa00000, 138412032) = 0 [ 82.289702][ T5824] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 82.299832][ T5826] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 6103] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5824] <... umount2 resumed>) = 0 [pid 6103] <... openat resumed>) = 4 [pid 5826] <... umount2 resumed>) = 0 [pid 5824] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6103] ioctl(4, LOOP_SET_FD, 3 [pid 5826] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW [ 82.371105][ T6103] loop2: detected capacity change from 0 to 65536 [pid 5824] newfstatat(AT_FDCWD, "./6/file0", [pid 6103] <... ioctl resumed>) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6103] close(3 [pid 5826] newfstatat(AT_FDCWD, "./5/file0", [pid 6103] <... close resumed>) = 0 [pid 5824] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6103] close(4 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6103] <... close resumed>) = 0 [pid 5826] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6103] mkdir("./file0", 0777) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... openat resumed>) = 4 [pid 6103] mount("/dev/loop2", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 5826] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] newfstatat(4, "", [pid 5826] <... openat resumed>) = 4 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5826] newfstatat(4, "", [pid 5824] getdents64(4, [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5824] <... getdents64 resumed>0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5826] getdents64(4, [pid 5824] getdents64(4, [pid 5826] <... getdents64 resumed>0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5824] <... getdents64 resumed>0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5826] getdents64(4, [pid 5824] close(4 [pid 5826] <... getdents64 resumed>0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5824] <... close resumed>) = 0 [pid 5826] close(4 [pid 5824] rmdir("./6/file0" [pid 5826] <... close resumed>) = 0 [pid 5824] <... rmdir resumed>) = 0 [pid 5826] rmdir("./5/file0" [pid 5824] getdents64(3, [pid 5826] <... rmdir resumed>) = 0 [pid 5824] <... getdents64 resumed>0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5826] getdents64(3, [pid 5824] close(3 [pid 5826] <... getdents64 resumed>0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5824] <... close resumed>) = 0 [pid 5826] close(3 [pid 5824] rmdir("./6" [pid 5826] <... close resumed>) = 0 [pid 5824] <... rmdir resumed>) = 0 [pid 5826] rmdir("./5" [pid 5824] mkdir("./7", 0777 [pid 5826] <... rmdir resumed>) = 0 [pid 5824] <... mkdir resumed>) = 0 [pid 5826] mkdir("./6", 0777 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5826] <... mkdir resumed>) = 0 [pid 5824] <... openat resumed>) = 3 [pid 5826] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5824] ioctl(3, LOOP_CLR_FD [pid 5826] <... openat resumed>) = 3 [pid 5824] <... ioctl resumed>) = 0 [pid 5826] ioctl(3, LOOP_CLR_FD [pid 5824] close(3 [pid 6104] <... write resumed>) = 33554432 [pid 5826] <... ioctl resumed>) = 0 [pid 6104] munmap(0x7fbaaaa00000, 138412032) = 0 [pid 6104] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5826] close(3 [pid 5824] <... close resumed>) = 0 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558159a650) = 9 ./strace-static-x86_64: Process 6125 attached [pid 6104] ioctl(4, LOOP_SET_FD, 3 [pid 6125] set_robust_list(0x55558159a660, 24) = 0 [pid 6125] chdir("./7") = 0 [pid 6125] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6125] setpgid(0, 0) = 0 [pid 6125] symlink("/syzcgroup/unified/syz1", "./cgroup" [pid 6104] <... ioctl resumed>) = 0 [pid 6125] <... symlink resumed>) = 0 [pid 6104] close(3 executing program [pid 6125] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu" [pid 6104] <... close resumed>) = 0 [pid 6125] <... symlink resumed>) = 0 [pid 6104] close(4) = 0 [pid 6104] mkdir("./file0", 0777) = 0 [pid 6104] mount("/dev/loop3", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 6125] symlink("/syzcgroup/net/syz1", "./cgroup.net") = 0 [pid 6125] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6125] write(3, "1000", 4) = 4 [pid 6125] close(3) = 0 [pid 6125] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6125] write(1, "executing program\n", 18) = 18 [pid 6125] memfd_create("syzkaller", 0) = 3 [pid 6125] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaaaa00000 [ 82.702055][ T6104] loop3: detected capacity change from 0 to 65536 [ 82.736394][ T6103] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 5826] <... close resumed>) = 0 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558159a650) = 8 [pid 6102] <... write resumed>) = 33554432 [pid 6102] munmap(0x7fbaaaa00000, 138412032./strace-static-x86_64: Process 6131 attached [pid 6131] set_robust_list(0x55558159a660, 24) = 0 [pid 6131] chdir("./6") = 0 [pid 6131] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6131] setpgid(0, 0 [pid 6103] <... mount resumed>) = 0 [pid 6103] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6131] <... setpgid resumed>) = 0 [pid 6103] <... openat resumed>) = 3 [pid 6103] chdir("./file0" [pid 6131] symlink("/syzcgroup/unified/syz4", "./cgroup" [pid 6103] <... chdir resumed>) = 0 [pid 6103] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6131] <... symlink resumed>) = 0 [pid 6103] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 82.934747][ T6104] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 82.965577][ T6103] XFS (loop2): Ending clean mount [pid 6131] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu" [pid 6103] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 6131] <... symlink resumed>) = 0 [pid 6103] <... open resumed>) = 4 [pid 6103] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6131] symlink("/syzcgroup/net/syz4", "./cgroup.net" [pid 6104] <... mount resumed>) = 0 [pid 6104] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6104] chdir("./file0") = 0 [pid 6104] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [ 82.982160][ T29] audit: type=1800 audit(1733456380.476:33): pid=6103 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop2" ino=41 res=0 errno=0 [ 82.984278][ T6104] XFS (loop3): Ending clean mount [ 83.009775][ T57] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [pid 6104] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 4 [ 83.028268][ T974] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 83.046876][ T57] XFS (loop2): Unmount and run xfs_repair [ 83.053300][ T57] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 83.062042][ T974] XFS (loop3): Unmount and run xfs_repair [pid 6104] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6131] <... symlink resumed>) = 0 [pid 6102] <... munmap resumed>) = 0 [pid 6131] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6102] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 83.067899][ T29] audit: type=1800 audit(1733456380.516:34): pid=6104 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop3" ino=41 res=0 errno=0 [ 83.093101][ T57] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 83.103288][ T974] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 83.111346][ T974] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 83.123345][ T57] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [pid 6102] ioctl(4, LOOP_SET_FD, 3 [pid 6125] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 6131] <... openat resumed>) = 3 [pid 6102] <... ioctl resumed>) = 0 [pid 6102] close(3) = 0 [pid 6102] close(4) = 0 [pid 6102] mkdir("./file0", 0777) = 0 [ 83.132747][ T6102] loop0: detected capacity change from 0 to 65536 [ 83.142665][ T974] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 83.152534][ T57] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 83.166256][ T974] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 83.176212][ T57] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [pid 6102] mount("/dev/loop0", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [ 83.185927][ T974] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 83.195056][ T57] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 83.204003][ T974] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 83.212920][ T57] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 83.221953][ T974] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [pid 6131] write(3, "1000", 4) = 4 [ 83.232016][ T57] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 83.241504][ T974] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 83.269079][ T57] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [pid 6131] close(3) = 0 [ 83.278888][ T974] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 83.290951][ T6103] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 83.305958][ T6103] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 83.322631][ T6104] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [pid 6131] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6103] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 6131] write(1, "executing program\n", 18executing program [pid 6104] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 6131] <... write resumed>) = 18 [pid 6103] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000 [pid 6131] memfd_create("syzkaller", 0 [pid 6104] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000) = -1 EFAULT (Bad address) [pid 6103] <... openat resumed>) = -1 EFAULT (Bad address) [pid 6131] <... memfd_create resumed>) = 3 [pid 6104] close(3 [pid 6103] close(3 [pid 6131] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6104] <... close resumed>) = 0 [pid 6103] <... close resumed>) = 0 [pid 6131] <... mmap resumed>) = 0x7fbaaaa00000 [pid 6104] close(4 [ 83.338691][ T6104] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 83.354822][ T6102] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 83.356660][ T6103] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 83.364326][ T6104] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [pid 6103] close(4 [pid 6104] <... close resumed>) = 0 [pid 6103] <... close resumed>) = 0 [pid 6104] close(5 [pid 6103] close(5 [pid 6104] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6103] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6104] close(6 [pid 6103] close(6 [pid 6104] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6103] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6104] close(7 [pid 6103] close(7 [pid 6125] <... write resumed>) = 33554432 [pid 6104] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6103] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6104] close(8 [pid 6103] close(8 [pid 6125] munmap(0x7fbaaaa00000, 138412032 [pid 6104] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6103] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6104] close(9 [pid 6103] close(9 [pid 6104] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6103] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6104] close(10 [pid 6103] close(10 [pid 6104] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6103] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6104] close(11 [pid 6103] close(11 [pid 6104] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6103] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6104] close(12 [pid 6103] close(12 [pid 6104] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6103] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6104] close(13 [pid 6103] close(13 [pid 6104] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6103] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6104] close(14 [pid 6103] close(14 [pid 6104] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6103] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6104] close(15 [pid 6103] close(15 [pid 6104] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6103] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6104] close(16 [pid 6103] close(16 [pid 6104] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6103] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6104] close(17 [pid 6103] close(17 [pid 6104] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6103] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6104] close(18 [pid 6103] close(18 [pid 6104] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6103] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6104] close(19 [pid 6103] close(19 [pid 6104] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6103] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6104] close(20 [pid 6103] close(20 [pid 6104] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6103] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6104] close(21 [pid 6103] close(21 [pid 6104] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6103] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6104] close(22 [pid 6103] close(22 [pid 6104] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6103] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6104] close(23 [pid 6103] close(23 [pid 6104] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6103] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6104] close(24 [pid 6103] close(24 [pid 6104] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6103] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6104] close(25 [pid 6103] close(25 [pid 6104] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6103] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6104] close(26 [pid 6103] close(26 [pid 6104] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6103] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6104] close(27 [pid 6103] close(27 [pid 6125] <... munmap resumed>) = 0 [pid 6104] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6103] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6104] close(28 [pid 6103] close(28 [pid 6104] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6103] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6104] close(29 [pid 6103] close(29 [pid 6104] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6103] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6104] exit_group(0 [pid 6103] exit_group(0 [pid 6104] <... exit_group resumed>) = ? [pid 6103] <... exit_group resumed>) = ? [pid 6104] +++ exited with 0 +++ [pid 6103] +++ exited with 0 +++ [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=53 /* 0.53 s */} --- [pid 5825] restart_syscall(<... resuming interrupted clone ...> [pid 6125] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5825] <... restart_syscall resumed>) = 0 [pid 5825] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=48 /* 0.48 s */} --- [pid 6125] <... openat resumed>) = 4 [pid 5825] <... openat resumed>) = 3 [pid 5823] restart_syscall(<... resuming interrupted clone ...> [pid 6125] ioctl(4, LOOP_SET_FD, 3 [pid 5825] newfstatat(3, "", [pid 5823] <... restart_syscall resumed>) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5823] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] umount2("./6/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] newfstatat(AT_FDCWD, "./6/cgroup", [pid 5823] <... openat resumed>) = 3 [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6125] <... ioctl resumed>) = 0 [pid 5823] newfstatat(3, "", [pid 6125] close(3 [pid 6102] <... mount resumed>) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 6125] <... close resumed>) = 0 [pid 6102] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5823] getdents64(3, [pid 6125] close(4 [pid 6102] <... openat resumed>) = 3 [pid 5823] <... getdents64 resumed>0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 6125] <... close resumed>) = 0 [pid 6102] chdir("./file0" [pid 5823] umount2("./6/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6125] mkdir("./file0", 0777 [pid 6102] <... chdir resumed>) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6125] <... mkdir resumed>) = 0 [pid 6102] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5823] newfstatat(AT_FDCWD, "./6/cgroup", [pid 6125] mount("/dev/loop1", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 6102] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6102] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 5823] unlink("./6/cgroup") = 0 [pid 5823] umount2("./6/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./6/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./6/cgroup.cpu") = 0 [pid 5823] umount2("./6/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./6/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./6/cgroup.net") = 0 [pid 5823] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./6/binderfs") = 0 [ 83.475716][ T6125] loop1: detected capacity change from 0 to 65536 [ 83.489967][ T6102] XFS (loop0): Ending clean mount [pid 5823] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] unlink("./6/cgroup" [pid 6102] <... open resumed>) = 4 [pid 6102] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5825] <... unlink resumed>) = 0 [pid 5825] umount2("./6/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./6/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./6/cgroup.cpu") = 0 [pid 5825] umount2("./6/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./6/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./6/cgroup.net") = 0 [pid 5825] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./6/binderfs") = 0 [ 83.517710][ T5823] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 83.528787][ T9] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 83.535834][ T29] audit: type=1800 audit(1733456381.026:35): pid=6102 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop0" ino=41 res=0 errno=0 [ 83.541049][ T9] XFS (loop0): Unmount and run xfs_repair [pid 5825] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... umount2 resumed>) = 0 [pid 5823] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./6/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5823] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(4, 0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5823] getdents64(4, 0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5823] close(4) = 0 [pid 5823] rmdir("./6/file0") = 0 [pid 5823] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5823] close(3) = 0 [pid 5823] rmdir("./6") = 0 [pid 5823] mkdir("./7", 0777) = 0 [pid 5823] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [ 83.588222][ T5825] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 83.601859][ T6125] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 5823] ioctl(3, LOOP_CLR_FD) = 0 [pid 5823] close(3 [pid 5825] <... umount2 resumed>) = 0 [pid 5825] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./6/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5825] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(4, 0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5825] getdents64(4, 0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5825] close(4) = 0 [ 83.665456][ T9] XFS (loop0): First 128 bytes of corrupted metadata buffer: [pid 5825] rmdir("./6/file0") = 0 [ 83.729905][ T9] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 83.739350][ T9] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 83.748280][ T9] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 83.757255][ T9] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 83.766161][ T9] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [pid 5825] getdents64(3, [pid 6131] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 5825] <... getdents64 resumed>0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5825] close(3) = 0 [pid 5825] rmdir("./6") = 0 [pid 5825] mkdir("./7", 0777) = 0 [ 83.775171][ T9] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 83.784119][ T9] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 83.787779][ T6125] XFS (loop1): Ending clean mount [ 83.793259][ T9] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 83.808550][ T6102] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [pid 6125] <... mount resumed>) = 0 [pid 5825] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6102] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 6102] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000) = -1 EFAULT (Bad address) [pid 6102] close(3) = 0 [pid 6102] close(4) = 0 [pid 6102] close(5) = -1 EBADF (Bad file descriptor) [pid 6102] close(6) = -1 EBADF (Bad file descriptor) [pid 6102] close(7) = -1 EBADF (Bad file descriptor) [pid 6102] close(8) = -1 EBADF (Bad file descriptor) [pid 6102] close(9) = -1 EBADF (Bad file descriptor) [pid 6102] close(10) = -1 EBADF (Bad file descriptor) [pid 6102] close(11) = -1 EBADF (Bad file descriptor) [pid 6102] close(12) = -1 EBADF (Bad file descriptor) [pid 6102] close(13) = -1 EBADF (Bad file descriptor) [pid 6102] close(14) = -1 EBADF (Bad file descriptor) [pid 6102] close(15) = -1 EBADF (Bad file descriptor) [pid 6102] close(16) = -1 EBADF (Bad file descriptor) [pid 6102] close(17) = -1 EBADF (Bad file descriptor) [pid 6102] close(18) = -1 EBADF (Bad file descriptor) [pid 6102] close(19) = -1 EBADF (Bad file descriptor) [pid 6102] close(20) = -1 EBADF (Bad file descriptor) [pid 6102] close(21) = -1 EBADF (Bad file descriptor) [pid 6102] close(22) = -1 EBADF (Bad file descriptor) [pid 6102] close(23) = -1 EBADF (Bad file descriptor) [pid 6102] close(24) = -1 EBADF (Bad file descriptor) [pid 6102] close(25) = -1 EBADF (Bad file descriptor) [pid 6102] close(26) = -1 EBADF (Bad file descriptor) [pid 6102] close(27) = -1 EBADF (Bad file descriptor) [pid 6102] close(28) = -1 EBADF (Bad file descriptor) [pid 6102] close(29) = -1 EBADF (Bad file descriptor) [pid 6102] exit_group(0) = ? [pid 6102] +++ exited with 0 +++ [pid 6125] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5821] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=55 /* 0.55 s */} --- [pid 6125] chdir("./file0") = 0 [pid 6125] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5821] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6125] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6125] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 5821] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 83.827838][ T6102] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 83.843064][ T6102] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [pid 5821] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5821] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5821] umount2("./6/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./6/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] unlink("./6/cgroup") = 0 [pid 5821] umount2("./6/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./6/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] unlink("./6/cgroup.cpu") = 0 [pid 5821] umount2("./6/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./6/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] unlink("./6/cgroup.net") = 0 [pid 5821] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] unlink("./6/binderfs") = 0 [pid 5821] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6125] <... open resumed>) = 4 [pid 5825] <... openat resumed>) = 3 [pid 5823] <... close resumed>) = 0 [pid 6125] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5825] ioctl(3, LOOP_CLR_FD [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6155 attached [pid 5825] <... ioctl resumed>) = 0 [pid 6155] set_robust_list(0x55558159a660, 24 [pid 5825] close(3 [pid 5823] <... clone resumed>, child_tidptr=0x55558159a650) = 9 [ 83.946295][ T5879] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 83.947541][ T29] audit: type=1800 audit(1733456381.436:36): pid=6125 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop1" ino=41 res=0 errno=0 [ 83.959534][ T5821] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 83.988658][ T5879] XFS (loop1): Unmount and run xfs_repair [pid 6155] <... set_robust_list resumed>) = 0 [pid 6155] chdir("./7") = 0 [pid 6155] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6155] setpgid(0, 0) = 0 [ 83.995093][ T5879] XFS (loop1): First 128 bytes of corrupted metadata buffer: [pid 6155] symlink("/syzcgroup/unified/syz2", "./cgroup") = 0 [pid 6155] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu") = 0 [pid 6155] symlink("/syzcgroup/net/syz2", "./cgroup.net") = 0 [pid 6155] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6155] write(3, "1000", 4) = 4 [pid 6155] close(3) = 0 [pid 6155] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 5821] <... umount2 resumed>) = 0 [pid 6155] write(1, "executing program\n", 18) = 18 [pid 5821] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6155] memfd_create("syzkaller", 0) = 3 [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6155] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaaaa00000 [pid 5821] newfstatat(AT_FDCWD, "./6/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5821] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5821] getdents64(4, 0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5821] getdents64(4, 0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5821] close(4) = 0 [pid 5821] rmdir("./6/file0") = 0 [pid 5821] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5821] close(3) = 0 [pid 5821] rmdir("./6") = 0 [pid 5821] mkdir("./7", 0777) = 0 [pid 5821] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5821] ioctl(3, LOOP_CLR_FD) = 0 [ 84.027805][ T5879] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 84.046239][ T5879] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 84.093880][ T5879] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 84.136172][ T5879] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 84.165515][ T5879] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 84.211617][ T5879] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 84.236895][ T5879] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 84.245813][ T5879] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 84.289014][ T6125] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 84.312438][ T6125] XFS (loop1): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [pid 5821] close(3 [pid 6125] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 6125] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000) = -1 EFAULT (Bad address) [pid 6125] close(3) = 0 [pid 6125] close(4) = 0 [pid 6125] close(5 [pid 5825] <... close resumed>) = 0 [pid 6125] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6125] close(6) = -1 EBADF (Bad file descriptor) [pid 6125] close(7) = -1 EBADF (Bad file descriptor) [pid 6125] close(8) = -1 EBADF (Bad file descriptor) [pid 6125] close(9) = -1 EBADF (Bad file descriptor) [pid 6125] close(10) = -1 EBADF (Bad file descriptor) [pid 6125] close(11) = -1 EBADF (Bad file descriptor) [pid 6125] close(12./strace-static-x86_64: Process 6156 attached ) = -1 EBADF (Bad file descriptor) [pid 5825] <... clone resumed>, child_tidptr=0x55558159a650) = 9 [pid 6156] set_robust_list(0x55558159a660, 24 [pid 6125] close(13 [pid 6156] <... set_robust_list resumed>) = 0 [pid 6125] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6125] close(14) = -1 EBADF (Bad file descriptor) [pid 6156] chdir("./7" [pid 6125] close(15 [pid 6156] <... chdir resumed>) = 0 [pid 6156] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6125] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6156] <... prctl resumed>) = 0 [pid 6125] close(16 [pid 6156] setpgid(0, 0 [pid 6125] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6125] close(17) = -1 EBADF (Bad file descriptor) [pid 6125] close(18) = -1 EBADF (Bad file descriptor) [pid 6125] close(19) = -1 EBADF (Bad file descriptor) [pid 6125] close(20) = -1 EBADF (Bad file descriptor) [pid 6125] close(21) = -1 EBADF (Bad file descriptor) [pid 6125] close(22) = -1 EBADF (Bad file descriptor) [pid 6125] close(23) = -1 EBADF (Bad file descriptor) [pid 6125] close(24) = -1 EBADF (Bad file descriptor) [pid 6125] close(25) = -1 EBADF (Bad file descriptor) [pid 6125] close(26) = -1 EBADF (Bad file descriptor) [pid 6125] close(27) = -1 EBADF (Bad file descriptor) [pid 6125] close(28) = -1 EBADF (Bad file descriptor) [pid 6125] close(29) = -1 EBADF (Bad file descriptor) [pid 6125] exit_group(0) = ? [pid 6125] +++ exited with 0 +++ [pid 6156] <... setpgid resumed>) = 0 [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=49 /* 0.49 s */} --- [pid 6156] symlink("/syzcgroup/unified/syz3", "./cgroup" [pid 5824] restart_syscall(<... resuming interrupted clone ...>) = 0 [ 84.356793][ T6125] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [pid 6156] <... symlink resumed>) = 0 [pid 5824] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6156] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu" [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5824] newfstatat(3, "", [pid 6156] <... symlink resumed>) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 6156] symlink("/syzcgroup/net/syz3", "./cgroup.net" [pid 5824] getdents64(3, [pid 6156] <... symlink resumed>) = 0 [pid 5824] <... getdents64 resumed>0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 6156] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5824] umount2("./7/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6156] <... openat resumed>) = 3 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./7/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./7/cgroup") = 0 [pid 5824] umount2("./7/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./7/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 executing program [pid 5824] unlink("./7/cgroup.cpu") = 0 [pid 5824] umount2("./7/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./7/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./7/cgroup.net") = 0 [pid 5824] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./7/binderfs") = 0 [pid 5824] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6156] write(3, "1000", 4) = 4 [pid 6156] close(3) = 0 [pid 6156] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6156] write(1, "executing program\n", 18) = 18 [pid 6156] memfd_create("syzkaller", 0) = 3 [pid 6156] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaaaa00000 [pid 5821] <... close resumed>) = 0 [ 84.466000][ T5824] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 5821] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6157 attached [pid 6131] <... write resumed>) = 33554432 [pid 5821] <... clone resumed>, child_tidptr=0x55558159a650) = 9 [pid 6157] set_robust_list(0x55558159a660, 24 [pid 6131] munmap(0x7fbaaaa00000, 138412032 [pid 6157] <... set_robust_list resumed>) = 0 [pid 5824] <... umount2 resumed>) = 0 [pid 6157] chdir("./7") = 0 [pid 6157] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5824] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6157] <... prctl resumed>) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6157] setpgid(0, 0 [pid 5824] newfstatat(AT_FDCWD, "./7/file0", [pid 6157] <... setpgid resumed>) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6157] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6157] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6157] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6157] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6157] write(3, "1000", 4) = 4 [pid 6157] close(3) = 0 [pid 5824] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6157] symlink("/dev/binderfs", "./binderfs" [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6157] <... symlink resumed>) = 0 [pid 5824] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORYexecuting program [pid 6157] write(1, "executing program\n", 18 [pid 5824] <... openat resumed>) = 4 [pid 6157] <... write resumed>) = 18 [pid 5824] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 6157] memfd_create("syzkaller", 0 [pid 6155] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 6131] <... munmap resumed>) = 0 [pid 5824] getdents64(4, [pid 6157] <... memfd_create resumed>) = 3 [pid 6131] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6157] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6131] <... openat resumed>) = 4 [pid 5824] <... getdents64 resumed>0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 6157] <... mmap resumed>) = 0x7fbaaaa00000 [pid 6131] ioctl(4, LOOP_SET_FD, 3 [pid 5824] getdents64(4, [pid 6131] <... ioctl resumed>) = 0 [pid 5824] <... getdents64 resumed>0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5824] close(4) = 0 [pid 5824] rmdir("./7/file0" [pid 6131] close(3 [pid 5824] <... rmdir resumed>) = 0 [pid 6131] <... close resumed>) = 0 [pid 5824] getdents64(3, [pid 6131] close(4 [pid 5824] <... getdents64 resumed>0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 6131] <... close resumed>) = 0 [pid 5824] close(3) = 0 [pid 5824] rmdir("./7" [pid 6131] mkdir("./file0", 0777 [pid 5824] <... rmdir resumed>) = 0 [pid 6131] <... mkdir resumed>) = 0 [pid 5824] mkdir("./8", 0777 [pid 6131] mount("/dev/loop4", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 5824] <... mkdir resumed>) = 0 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [ 84.627966][ T6131] loop4: detected capacity change from 0 to 65536 [pid 5824] ioctl(3, LOOP_CLR_FD) = 0 [ 84.726104][ T6131] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 84.937857][ T6131] XFS (loop4): Ending clean mount [pid 5824] close(3 [pid 6131] <... mount resumed>) = 0 [pid 6157] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 6156] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 5824] <... close resumed>) = 0 [pid 6131] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6131] <... openat resumed>) = 3 [pid 6131] chdir("./file0") = 0 [pid 6131] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6131] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 5824] <... clone resumed>, child_tidptr=0x55558159a650) = 10 [pid 6131] <... open resumed>) = 4 [ 85.035674][ T5879] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [pid 6131] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6155] <... write resumed>) = 33554432 ./strace-static-x86_64: Process 6166 attached [pid 6166] set_robust_list(0x55558159a660, 24 [pid 6155] munmap(0x7fbaaaa00000, 138412032 [pid 6166] <... set_robust_list resumed>) = 0 [ 85.067148][ T29] audit: type=1800 audit(1733456382.526:37): pid=6131 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop4" ino=41 res=0 errno=0 [ 85.091935][ T5879] XFS (loop4): Unmount and run xfs_repair [ 85.106860][ T5879] XFS (loop4): First 128 bytes of corrupted metadata buffer: [pid 6155] <... munmap resumed>) = 0 [pid 6166] chdir("./8") = 0 [pid 6155] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6166] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6155] <... openat resumed>) = 4 [pid 6166] <... prctl resumed>) = 0 [pid 6155] ioctl(4, LOOP_SET_FD, 3 [pid 6166] setpgid(0, 0) = 0 [pid 6155] <... ioctl resumed>) = 0 [pid 6166] symlink("/syzcgroup/unified/syz1", "./cgroup" [pid 6155] close(3 [pid 6166] <... symlink resumed>) = 0 [pid 6166] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu" [pid 6155] <... close resumed>) = 0 [pid 6166] <... symlink resumed>) = 0 [pid 6155] close(4 [pid 6166] symlink("/syzcgroup/net/syz1", "./cgroup.net" [pid 6155] <... close resumed>) = 0 [pid 6166] <... symlink resumed>) = 0 [pid 6155] mkdir("./file0", 0777 [pid 6166] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6155] <... mkdir resumed>) = 0 [pid 6166] <... openat resumed>) = 3 [pid 6155] mount("/dev/loop2", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [ 85.136967][ T5879] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 85.159113][ T6155] loop2: detected capacity change from 0 to 65536 [ 85.160022][ T5879] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [pid 6166] write(3, "1000", 4) = 4 [pid 6166] close(3) = 0 [pid 6166] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 6166] write(1, "executing program\n", 18) = 18 [pid 6166] memfd_create("syzkaller", 0) = 3 [pid 6166] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaaaa00000 [ 85.237053][ T6155] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 85.237689][ T5879] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 85.255689][ T5879] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 85.268364][ T5879] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 85.316627][ T5879] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 85.337555][ T5879] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 85.346539][ T5879] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 85.366766][ T6131] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 85.380996][ T6131] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 85.397287][ T6131] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [pid 6155] <... mount resumed>) = 0 [pid 6155] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6155] chdir("./file0") = 0 [pid 6155] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6131] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 6131] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000 [pid 6155] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 6131] <... openat resumed>) = -1 EFAULT (Bad address) [pid 6131] close(3) = 0 [pid 6131] close(4) = 0 [pid 6131] close(5) = -1 EBADF (Bad file descriptor) [pid 6131] close(6) = -1 EBADF (Bad file descriptor) [pid 6131] close(7) = -1 EBADF (Bad file descriptor) [pid 6131] close(8) = -1 EBADF (Bad file descriptor) [pid 6131] close(9) = -1 EBADF (Bad file descriptor) [pid 6131] close(10) = -1 EBADF (Bad file descriptor) [pid 6131] close(11) = -1 EBADF (Bad file descriptor) [pid 6131] close(12) = -1 EBADF (Bad file descriptor) [ 85.418803][ T6155] XFS (loop2): Ending clean mount [pid 6155] <... open resumed>) = 4 [pid 6131] close(13 [pid 6155] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6131] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6131] close(14) = -1 EBADF (Bad file descriptor) [pid 6131] close(15) = -1 EBADF (Bad file descriptor) [ 85.458039][ T29] audit: type=1800 audit(1733456382.956:38): pid=6155 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop2" ino=41 res=0 errno=0 [ 85.482571][ T974] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 85.496643][ T974] XFS (loop2): Unmount and run xfs_repair [pid 6131] close(16) = -1 EBADF (Bad file descriptor) [ 85.502398][ T974] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 85.509859][ T974] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 85.518938][ T974] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 85.528025][ T974] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 85.536939][ T974] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 85.545797][ T974] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [pid 6131] close(17) = -1 EBADF (Bad file descriptor) [pid 6131] close(18) = -1 EBADF (Bad file descriptor) [pid 6131] close(19) = -1 EBADF (Bad file descriptor) [pid 6131] close(20) = -1 EBADF (Bad file descriptor) [pid 6131] close(21) = -1 EBADF (Bad file descriptor) [ 85.554709][ T974] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 85.563604][ T974] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 85.572549][ T974] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 85.582934][ T6155] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [pid 6131] close(22) = -1 EBADF (Bad file descriptor) [pid 6131] close(23) = -1 EBADF (Bad file descriptor) [pid 6131] close(24) = -1 EBADF (Bad file descriptor) [pid 6131] close(25) = -1 EBADF (Bad file descriptor) [pid 6131] close(26) = -1 EBADF (Bad file descriptor) [pid 6131] close(27) = -1 EBADF (Bad file descriptor) [pid 6131] close(28) = -1 EBADF (Bad file descriptor) [pid 6131] close(29) = -1 EBADF (Bad file descriptor) [pid 6131] exit_group(0) = ? [pid 6131] +++ exited with 0 +++ [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=52 /* 0.52 s */} --- [pid 5826] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5826] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6155] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 5826] <... openat resumed>) = 3 [pid 5826] newfstatat(3, "", [pid 6155] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 6155] <... openat resumed>) = -1 EFAULT (Bad address) [pid 6155] close(3 [pid 5826] getdents64(3, [pid 6155] <... close resumed>) = 0 [pid 5826] <... getdents64 resumed>0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 6155] close(4) = 0 [pid 5826] umount2("./6/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6155] close(5) = -1 EBADF (Bad file descriptor) [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6155] close(6) = -1 EBADF (Bad file descriptor) [pid 5826] newfstatat(AT_FDCWD, "./6/cgroup", [pid 6155] close(7) = -1 EBADF (Bad file descriptor) [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6155] close(8) = -1 EBADF (Bad file descriptor) [pid 5826] unlink("./6/cgroup" [pid 6155] close(9) = -1 EBADF (Bad file descriptor) [pid 5826] <... unlink resumed>) = 0 [pid 6155] close(10) = -1 EBADF (Bad file descriptor) [pid 5826] umount2("./6/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6155] close(11) = -1 EBADF (Bad file descriptor) [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6155] close(12) = -1 EBADF (Bad file descriptor) [pid 5826] newfstatat(AT_FDCWD, "./6/cgroup.cpu", [pid 6155] close(13) = -1 EBADF (Bad file descriptor) [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6155] close(14) = -1 EBADF (Bad file descriptor) [pid 5826] unlink("./6/cgroup.cpu" [pid 6155] close(15) = -1 EBADF (Bad file descriptor) [pid 5826] <... unlink resumed>) = 0 [pid 6155] close(16) = -1 EBADF (Bad file descriptor) [pid 5826] umount2("./6/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6155] close(17) = -1 EBADF (Bad file descriptor) [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6155] close(18) = -1 EBADF (Bad file descriptor) [pid 5826] newfstatat(AT_FDCWD, "./6/cgroup.net", [pid 6155] close(19) = -1 EBADF (Bad file descriptor) [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6155] close(20) = -1 EBADF (Bad file descriptor) [pid 5826] unlink("./6/cgroup.net" [pid 6155] close(21) = -1 EBADF (Bad file descriptor) [pid 5826] <... unlink resumed>) = 0 [pid 6155] close(22) = -1 EBADF (Bad file descriptor) [pid 5826] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6155] close(23) = -1 EBADF (Bad file descriptor) [pid 5826] newfstatat(AT_FDCWD, "./6/binderfs", [pid 6155] close(24 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6155] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5826] unlink("./6/binderfs" [pid 6155] close(25) = -1 EBADF (Bad file descriptor) [pid 5826] <... unlink resumed>) = 0 [pid 6155] close(26) = -1 EBADF (Bad file descriptor) [pid 5826] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6155] close(27) = -1 EBADF (Bad file descriptor) [pid 6155] close(28) = -1 EBADF (Bad file descriptor) [pid 6155] close(29) = -1 EBADF (Bad file descriptor) [pid 6155] exit_group(0 [pid 6157] <... write resumed>) = 33554432 [pid 6155] <... exit_group resumed>) = ? [pid 6157] munmap(0x7fbaaaa00000, 138412032 [pid 6155] +++ exited with 0 +++ [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=54 /* 0.54 s */} --- [pid 5823] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5823] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5823] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5823] umount2("./7/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 85.599834][ T6155] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 85.614578][ T6155] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 85.636763][ T5826] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 5823] newfstatat(AT_FDCWD, "./7/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./7/cgroup") = 0 [pid 5823] umount2("./7/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./7/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] <... umount2 resumed>) = 0 [pid 5823] unlink("./7/cgroup.cpu" [pid 5826] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... unlink resumed>) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] umount2("./7/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] newfstatat(AT_FDCWD, "./6/file0", [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] newfstatat(AT_FDCWD, "./7/cgroup.net", [pid 5826] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] unlink("./7/cgroup.net" [pid 5826] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] <... unlink resumed>) = 0 [pid 5826] <... openat resumed>) = 4 [pid 5823] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] newfstatat(4, "", [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5823] newfstatat(AT_FDCWD, "./7/binderfs", [pid 5826] getdents64(4, [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] <... getdents64 resumed>0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5823] unlink("./7/binderfs" [pid 5826] getdents64(4, [pid 5823] <... unlink resumed>) = 0 [pid 5826] <... getdents64 resumed>0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5823] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6157] <... munmap resumed>) = 0 [pid 5826] close(4) = 0 [pid 5826] rmdir("./6/file0") = 0 [pid 5826] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5826] close(3 [pid 6157] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5826] <... close resumed>) = 0 [pid 6157] <... openat resumed>) = 4 [pid 6157] ioctl(4, LOOP_SET_FD, 3 [pid 5826] rmdir("./6") = 0 [pid 5826] mkdir("./7", 0777) = 0 [pid 5826] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5826] ioctl(3, LOOP_CLR_FD) = 0 [pid 5826] close(3 [pid 6157] <... ioctl resumed>) = 0 [pid 6157] close(3) = 0 [pid 6157] close(4) = 0 [pid 6157] mkdir("./file0", 0777) = 0 [ 85.702975][ T6157] loop0: detected capacity change from 0 to 65536 [ 85.727064][ T5823] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 6157] mount("/dev/loop0", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 5823] <... umount2 resumed>) = 0 [pid 5823] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./7/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5823] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(4, 0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5823] getdents64(4, 0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5823] close(4) = 0 [pid 5823] rmdir("./7/file0") = 0 [pid 5823] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5823] close(3) = 0 [pid 5823] rmdir("./7") = 0 [pid 5823] mkdir("./8", 0777) = 0 [pid 5823] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5823] ioctl(3, LOOP_CLR_FD) = 0 [ 85.843210][ T6157] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 5823] close(3 [pid 6166] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 5826] <... close resumed>) = 0 [pid 5823] <... close resumed>) = 0 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558159a650) = 10 [pid 6157] <... mount resumed>) = 0 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558159a650) = 9 [pid 6157] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6157] chdir("./file0") = 0 [pid 6157] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 86.099355][ T6157] XFS (loop0): Ending clean mount [pid 6157] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 4 [ 86.123155][ T29] audit: type=1800 audit(1733456383.616:39): pid=6157 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop0" ino=41 res=0 errno=0 [ 86.147422][ T974] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [pid 6157] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6156] <... write resumed>) = 33554432 [ 86.170011][ T974] XFS (loop0): Unmount and run xfs_repair [ 86.186714][ T974] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 86.211551][ T974] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [pid 6156] munmap(0x7fbaaaa00000, 138412032./strace-static-x86_64: Process 6183 attached [pid 6183] set_robust_list(0x55558159a660, 24) = 0 [pid 6183] chdir("./8") = 0 [pid 6183] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6183] setpgid(0, 0) = 0 [pid 6183] symlink("/syzcgroup/unified/syz2", "./cgroup") = 0 [pid 6183] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu") = 0 [pid 6183] symlink("/syzcgroup/net/syz2", "./cgroup.net") = 0 [pid 6183] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6183] write(3, "1000", 4./strace-static-x86_64: Process 6184 attached ) = 4 [pid 6166] <... write resumed>) = 33554432 [pid 6184] set_robust_list(0x55558159a660, 24 [pid 6183] close(3 [ 86.240375][ T974] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 86.276674][ T974] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [pid 6166] munmap(0x7fbaaaa00000, 138412032 [pid 6184] <... set_robust_list resumed>) = 0 [pid 6183] <... close resumed>) = 0 [pid 6166] <... munmap resumed>) = 0 [pid 6184] chdir("./7" [pid 6166] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6184] <... chdir resumed>) = 0 [pid 6166] <... openat resumed>) = 4 [pid 6184] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6166] ioctl(4, LOOP_SET_FD, 3 [pid 6184] <... prctl resumed>) = 0 [pid 6184] setpgid(0, 0 [pid 6183] symlink("/dev/binderfs", "./binderfs" [pid 6184] <... setpgid resumed>) = 0 [pid 6184] symlink("/syzcgroup/unified/syz4", "./cgroup" [pid 6183] <... symlink resumed>) = 0 [pid 6184] <... symlink resumed>) = 0 [pid 6184] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu" [pid 6183] write(1, "executing program\n", 18 [pid 6184] <... symlink resumed>) = 0 [pid 6184] symlink("/syzcgroup/net/syz4", "./cgroup.net") = 0 [pid 6184] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6184] write(3, "1000", 4) = 4 [pid 6184] close(3) = 0 [pid 6184] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 executing program [pid 6183] <... write resumed>) = 18 [pid 6184] write(1, "executing program\n", 18) = 18 [pid 6184] memfd_create("syzkaller", 0) = 3 [pid 6184] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaaaa00000 [pid 6183] memfd_create("syzkaller", 0 [pid 6156] <... munmap resumed>) = 0 [pid 6183] <... memfd_create resumed>) = 3 [pid 6156] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6183] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6166] <... ioctl resumed>) = 0 [pid 6156] <... openat resumed>) = 4 [pid 6166] close(3) = 0 [ 86.285573][ T974] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 86.295537][ T6166] loop1: detected capacity change from 0 to 65536 [ 86.318594][ T974] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 86.327990][ T974] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [pid 6166] close(4 [pid 6183] <... mmap resumed>) = 0x7fbaaaa00000 [pid 6156] ioctl(4, LOOP_SET_FD, 3 [pid 6166] <... close resumed>) = 0 [pid 6166] mkdir("./file0", 0777) = 0 [pid 6166] mount("/dev/loop1", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 6156] <... ioctl resumed>) = 0 [pid 6156] close(3) = 0 [pid 6156] close(4) = 0 [pid 6156] mkdir("./file0", 0777) = 0 [ 86.337900][ T974] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 86.347584][ T6156] loop3: detected capacity change from 0 to 65536 [ 86.398202][ T6166] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 86.411631][ T6156] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 86.431162][ T974] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 86.473615][ T6157] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 86.510556][ T6157] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [pid 6156] mount("/dev/loop3", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 6166] <... mount resumed>) = 0 [pid 6156] <... mount resumed>) = 0 [pid 6166] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6166] chdir("./file0" [pid 6156] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6166] <... chdir resumed>) = 0 [pid 6166] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6156] <... openat resumed>) = 3 [pid 6166] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6166] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 6156] chdir("./file0" [pid 6166] <... open resumed>) = 4 [pid 6166] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6156] <... chdir resumed>) = 0 [pid 6156] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [ 86.549386][ T6166] XFS (loop1): Ending clean mount [ 86.555892][ T6156] XFS (loop3): Ending clean mount [ 86.570288][ T29] audit: type=1800 audit(1733456384.066:40): pid=6166 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop1" ino=41 res=0 errno=0 [pid 6156] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 6156] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6184] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 6157] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 6157] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000) = -1 EFAULT (Bad address) [ 86.598863][ T974] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 86.611723][ T6157] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 86.628849][ T57] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [pid 6157] close(3) = 0 [pid 6157] close(4) = 0 [pid 6157] close(5) = -1 EBADF (Bad file descriptor) [pid 6157] close(6) = -1 EBADF (Bad file descriptor) [pid 6157] close(7) = -1 EBADF (Bad file descriptor) [ 86.651848][ T974] XFS (loop1): Unmount and run xfs_repair [ 86.659218][ T57] XFS (loop3): Unmount and run xfs_repair [ 86.664976][ T57] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 86.666668][ T29] audit: type=1800 audit(1733456384.116:41): pid=6156 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop3" ino=41 res=0 errno=0 [ 86.673324][ T974] XFS (loop1): First 128 bytes of corrupted metadata buffer: [pid 6157] close(8) = -1 EBADF (Bad file descriptor) [pid 6157] close(9) = -1 EBADF (Bad file descriptor) [pid 6157] close(10) = -1 EBADF (Bad file descriptor) [pid 6157] close(11) = -1 EBADF (Bad file descriptor) [pid 6157] close(12) = -1 EBADF (Bad file descriptor) [pid 6157] close(13) = -1 EBADF (Bad file descriptor) [pid 6157] close(14) = -1 EBADF (Bad file descriptor) [pid 6157] close(15) = -1 EBADF (Bad file descriptor) [pid 6157] close(16) = -1 EBADF (Bad file descriptor) [ 86.700875][ T57] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 86.711305][ T57] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 86.722990][ T974] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 86.733365][ T57] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 86.743641][ T974] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [pid 6157] close(17) = -1 EBADF (Bad file descriptor) [pid 6157] close(18) = -1 EBADF (Bad file descriptor) [pid 6157] close(19) = -1 EBADF (Bad file descriptor) [pid 6157] close(20 [pid 6183] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 6157] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6157] close(21) = -1 EBADF (Bad file descriptor) [pid 6157] close(22) = -1 EBADF (Bad file descriptor) [ 86.754234][ T57] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 86.765331][ T974] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 86.775275][ T57] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 86.784431][ T974] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 86.793365][ T57] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [pid 6157] close(23) = -1 EBADF (Bad file descriptor) [pid 6157] close(24) = -1 EBADF (Bad file descriptor) [pid 6157] close(25) = -1 EBADF (Bad file descriptor) [pid 6157] close(26) = -1 EBADF (Bad file descriptor) [pid 6157] close(27) = -1 EBADF (Bad file descriptor) [pid 6157] close(28) = -1 EBADF (Bad file descriptor) [pid 6157] close(29) = -1 EBADF (Bad file descriptor) [pid 6157] exit_group(0) = ? [pid 6157] +++ exited with 0 +++ [ 86.803509][ T974] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 86.813955][ T57] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 86.824501][ T974] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 86.834299][ T57] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 86.844427][ T974] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [pid 5821] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9, si_uid=0, si_status=0, si_utime=11 /* 0.11 s */, si_stime=45 /* 0.45 s */} --- [pid 5821] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 86.854618][ T6156] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 86.868787][ T6156] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 86.884214][ T974] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 86.893660][ T6166] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [pid 5821] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6156] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 5821] <... openat resumed>) = 3 [pid 6156] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000 [pid 5821] newfstatat(3, "", [pid 6156] <... openat resumed>) = -1 EFAULT (Bad address) [pid 6156] close(3 [pid 5821] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 6156] <... close resumed>) = 0 [pid 5821] getdents64(3, [pid 6156] close(4 [pid 5821] <... getdents64 resumed>0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 6156] <... close resumed>) = 0 [pid 5821] umount2("./7/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6156] close(5) = -1 EBADF (Bad file descriptor) [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6156] close(6 [pid 5821] newfstatat(AT_FDCWD, "./7/cgroup", [pid 6156] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5821] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6156] close(7 [pid 5821] unlink("./7/cgroup" [pid 6156] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6156] close(8 [pid 5821] <... unlink resumed>) = 0 [pid 6156] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5821] umount2("./7/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6156] close(9 [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6156] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5821] newfstatat(AT_FDCWD, "./7/cgroup.cpu", [pid 6156] close(10) = -1 EBADF (Bad file descriptor) [pid 5821] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6156] close(11 [pid 5821] unlink("./7/cgroup.cpu" [pid 6156] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6156] close(12 [pid 5821] <... unlink resumed>) = 0 [pid 6156] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5821] umount2("./7/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6156] close(13 [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6156] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5821] newfstatat(AT_FDCWD, "./7/cgroup.net", [pid 6156] close(14) = -1 EBADF (Bad file descriptor) [pid 5821] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6156] close(15 [pid 5821] unlink("./7/cgroup.net" [pid 6156] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6156] close(16 [pid 5821] <... unlink resumed>) = 0 [pid 6156] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6156] close(17 [pid 5821] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6156] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6156] close(18 [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6156] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5821] newfstatat(AT_FDCWD, "./7/binderfs", [pid 6156] close(19) = -1 EBADF (Bad file descriptor) [pid 5821] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6156] close(20 [pid 5821] unlink("./7/binderfs" [pid 6156] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6156] close(21 [pid 5821] <... unlink resumed>) = 0 [pid 6156] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5821] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6156] close(22) = -1 EBADF (Bad file descriptor) [pid 6166] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 6166] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000) = -1 EFAULT (Bad address) [ 86.905631][ T6156] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 86.918109][ T6166] XFS (loop1): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 86.946807][ T6166] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [pid 6166] close(3) = 0 [pid 6166] close(4) = 0 [pid 6166] close(5) = -1 EBADF (Bad file descriptor) [pid 6166] close(6) = -1 EBADF (Bad file descriptor) [pid 6166] close(7) = -1 EBADF (Bad file descriptor) [pid 6166] close(8) = -1 EBADF (Bad file descriptor) [pid 6166] close(9) = -1 EBADF (Bad file descriptor) [pid 6166] close(10) = -1 EBADF (Bad file descriptor) [pid 6166] close(11) = -1 EBADF (Bad file descriptor) [pid 6166] close(12) = -1 EBADF (Bad file descriptor) [pid 6166] close(13) = -1 EBADF (Bad file descriptor) [pid 6166] close(14) = -1 EBADF (Bad file descriptor) [pid 6166] close(15) = -1 EBADF (Bad file descriptor) [pid 6166] close(16) = -1 EBADF (Bad file descriptor) [pid 6166] close(17) = -1 EBADF (Bad file descriptor) [pid 6166] close(18) = -1 EBADF (Bad file descriptor) [pid 6166] close(19) = -1 EBADF (Bad file descriptor) [pid 6166] close(20) = -1 EBADF (Bad file descriptor) [pid 6166] close(21 [pid 6156] close(23) = -1 EBADF (Bad file descriptor) [pid 6156] close(24) = -1 EBADF (Bad file descriptor) [pid 6156] close(25) = -1 EBADF (Bad file descriptor) [pid 6156] close(26 [pid 6166] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6156] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6166] close(22 [pid 6156] close(27) = -1 EBADF (Bad file descriptor) [pid 6166] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6156] close(28) = -1 EBADF (Bad file descriptor) [pid 6166] close(23 [pid 6156] close(29) = -1 EBADF (Bad file descriptor) [pid 6166] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6156] exit_group(0 [pid 6166] close(24) = -1 EBADF (Bad file descriptor) [pid 6166] close(25) = -1 EBADF (Bad file descriptor) [pid 6166] close(26 [pid 6156] <... exit_group resumed>) = ? [pid 6166] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6166] close(27) = -1 EBADF (Bad file descriptor) [pid 6166] close(28) = -1 EBADF (Bad file descriptor) [pid 6166] close(29) = -1 EBADF (Bad file descriptor) [pid 6166] exit_group(0) = ? [pid 6156] +++ exited with 0 +++ [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=55 /* 0.55 s */} --- [pid 6166] +++ exited with 0 +++ [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10, si_uid=0, si_status=0, si_utime=11 /* 0.11 s */, si_stime=46 /* 0.46 s */} --- [pid 5824] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5824] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5824] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5824] umount2("./8/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./8/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./8/cgroup") = 0 [pid 5824] umount2("./8/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./8/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./8/cgroup.cpu") = 0 [pid 5824] umount2("./8/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./8/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./8/cgroup.net" [pid 5825] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] <... unlink resumed>) = 0 [pid 5824] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./8/binderfs") = 0 [pid 5824] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] <... umount2 resumed>) = 0 [pid 5825] <... openat resumed>) = 3 [ 86.970519][ T5821] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 5825] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5821] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] getdents64(3, [pid 5821] newfstatat(AT_FDCWD, "./7/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] <... getdents64 resumed>0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5825] umount2("./7/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./7/cgroup", [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5821] newfstatat(4, "", [pid 5825] unlink("./7/cgroup") = 0 [pid 5821] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5825] umount2("./7/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./7/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] getdents64(4, [pid 5825] unlink("./7/cgroup.cpu" [pid 5821] <... getdents64 resumed>0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5821] getdents64(4, 0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5821] close(4 [pid 5825] <... unlink resumed>) = 0 [pid 5821] <... close resumed>) = 0 [pid 5824] <... umount2 resumed>) = 0 [pid 5821] rmdir("./7/file0" [pid 5825] umount2("./7/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5821] <... rmdir resumed>) = 0 [pid 5824] newfstatat(AT_FDCWD, "./8/file0", [pid 5825] newfstatat(AT_FDCWD, "./7/cgroup.net", [pid 5821] getdents64(3, [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] <... getdents64 resumed>0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5825] unlink("./7/cgroup.net" [pid 5824] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] close(3 [pid 5825] <... unlink resumed>) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5821] <... close resumed>) = 0 [pid 5821] rmdir("./7" [pid 5825] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5821] <... rmdir resumed>) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... openat resumed>) = 4 [ 87.022706][ T5824] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 5821] mkdir("./8", 0777 [pid 5825] newfstatat(AT_FDCWD, "./7/binderfs", [pid 5824] newfstatat(4, "", [pid 5821] <... mkdir resumed>) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5821] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5825] unlink("./7/binderfs" [pid 5824] getdents64(4, 0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5821] <... openat resumed>) = 3 [pid 5825] <... unlink resumed>) = 0 [pid 5825] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] getdents64(4, [pid 5821] ioctl(3, LOOP_CLR_FD [pid 5824] <... getdents64 resumed>0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5821] <... ioctl resumed>) = 0 [pid 5824] close(4 [pid 5821] close(3 [pid 5824] <... close resumed>) = 0 [pid 5824] rmdir("./8/file0") = 0 [pid 5824] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5824] close(3) = 0 [pid 5824] rmdir("./8") = 0 [pid 5824] mkdir("./9", 0777) = 0 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5824] ioctl(3, LOOP_CLR_FD) = 0 [pid 5824] close(3 [pid 5825] <... umount2 resumed>) = 0 [ 87.110626][ T5825] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 5825] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./7/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5825] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(4, 0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5825] getdents64(4, 0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5825] close(4) = 0 [pid 5825] rmdir("./7/file0") = 0 [pid 5825] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5825] close(3) = 0 [pid 5825] rmdir("./7") = 0 [pid 5825] mkdir("./8", 0777) = 0 [pid 5825] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5825] ioctl(3, LOOP_CLR_FD) = 0 [pid 5825] close(3 [pid 6184] <... write resumed>) = 33554432 [pid 6184] munmap(0x7fbaaaa00000, 138412032 [pid 6183] <... write resumed>) = 33554432 [pid 6183] munmap(0x7fbaaaa00000, 138412032 [pid 6184] <... munmap resumed>) = 0 [pid 6184] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6184] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6183] <... munmap resumed>) = 0 [pid 6183] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6183] ioctl(4, LOOP_SET_FD, 3 [pid 6184] close(3) = 0 [pid 6184] close(4) = 0 [pid 6184] mkdir("./file0", 0777) = 0 [pid 6184] mount("/dev/loop4", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 6183] <... ioctl resumed>) = 0 [pid 5821] <... close resumed>) = 0 [ 87.539414][ T6184] loop4: detected capacity change from 0 to 65536 [ 87.577207][ T6183] loop2: detected capacity change from 0 to 65536 [pid 6183] close(3 [pid 5821] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6183] <... close resumed>) = 0 [pid 6183] close(4) = 0 [pid 6183] mkdir("./file0", 0777) = 0 [pid 6183] mount("/dev/loop2", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid"./strace-static-x86_64: Process 6207 attached [pid 6207] set_robust_list(0x55558159a660, 24 [pid 5821] <... clone resumed>, child_tidptr=0x55558159a650) = 10 [pid 6207] <... set_robust_list resumed>) = 0 [pid 6207] chdir("./8") = 0 [pid 6207] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6207] setpgid(0, 0) = 0 [pid 6207] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6207] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6207] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6207] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6207] write(3, "1000", 4) = 4 [pid 6207] close(3) = 0 [pid 6207] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6207] write(1, "executing program\n", 18executing program ) = 18 [pid 6207] memfd_create("syzkaller", 0) = 3 [pid 6207] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaaaa00000 [ 87.599339][ T6184] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 87.616350][ T6183] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 5825] <... close resumed>) = 0 [pid 5824] <... close resumed>) = 0 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558159a650) = 10 ./strace-static-x86_64: Process 6218 attached [pid 6184] <... mount resumed>) = 0 [ 87.678444][ T6184] XFS (loop4): Ending clean mount [pid 6218] set_robust_list(0x55558159a660, 24 [pid 6184] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6183] <... mount resumed>) = 0 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6218] <... set_robust_list resumed>) = 0 [pid 6184] <... openat resumed>) = 3 [pid 6184] chdir("./file0" [pid 6183] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6184] <... chdir resumed>) = 0 [pid 6218] chdir("./8" [pid 6184] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6183] <... openat resumed>) = 3 [pid 6218] <... chdir resumed>) = 0 [pid 6184] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6184] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 6183] chdir("./file0" [pid 6218] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6218] setpgid(0, 0) = 0 [pid 6183] <... chdir resumed>) = 0 [pid 6218] symlink("/syzcgroup/unified/syz3", "./cgroup" [pid 6183] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6218] <... symlink resumed>) = 0 [pid 6218] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu" [pid 6183] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6218] <... symlink resumed>) = 0 [pid 6184] <... open resumed>) = 4 [pid 6183] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 6184] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6218] symlink("/syzcgroup/net/syz3", "./cgroup.net") = 0 [pid 6218] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 87.714578][ T6183] XFS (loop2): Ending clean mount [ 87.734147][ T29] audit: type=1800 audit(1733456385.226:42): pid=6184 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop4" ino=41 res=0 errno=0 [pid 6218] write(3, "1000", 4 [pid 6183] <... open resumed>) = 4 ./strace-static-x86_64: Process 6219 attached [pid 6218] <... write resumed>) = 4 [pid 5824] <... clone resumed>, child_tidptr=0x55558159a650) = 11 [pid 6218] close(3 [pid 6219] set_robust_list(0x55558159a660, 24 [pid 6183] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6218] <... close resumed>) = 0 [pid 6219] <... set_robust_list resumed>) = 0 [pid 6218] symlink("/dev/binderfs", "./binderfs" [pid 6219] chdir("./9") = 0 [pid 6219] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6219] setpgid(0, 0) = 0 [pid 6219] symlink("/syzcgroup/unified/syz1", "./cgroup") = 0 [ 87.734262][ T974] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 87.769245][ T974] XFS (loop4): Unmount and run xfs_repair [ 87.776505][ T974] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 87.785906][ T5879] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 87.797249][ T5879] XFS (loop2): Unmount and run xfs_repair [ 87.803169][ T5879] XFS (loop2): First 128 bytes of corrupted metadata buffer: [pid 6219] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu") = 0 [pid 6219] symlink("/syzcgroup/net/syz1", "./cgroup.net") = 0 [pid 6219] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6219] write(3, "1000", 4) = 4 [ 87.806680][ T974] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 87.819585][ T5879] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 87.828785][ T5879] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 87.837975][ T5879] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 87.847088][ T5879] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 87.855953][ T5879] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 87.856652][ T974] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 87.865909][ T5879] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 87.882985][ T5879] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 87.886677][ T974] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 87.901383][ T5879] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [pid 6219] close(3 [pid 6218] <... symlink resumed>) = 0 [pid 6183] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 6219] <... close resumed>) = 0 [pid 6218] write(1, "executing program\n", 18executing program [pid 6183] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000 [pid 6219] symlink("/dev/binderfs", "./binderfs" [pid 6218] <... write resumed>) = 18 [pid 6183] <... openat resumed>) = -1 EFAULT (Bad address) [pid 6219] <... symlink resumed>) = 0 [pid 6218] memfd_create("syzkaller", 0 [pid 6183] close(3 executing program [pid 6219] write(1, "executing program\n", 18 [pid 6218] <... memfd_create resumed>) = 3 [pid 6183] <... close resumed>) = 0 [pid 6219] <... write resumed>) = 18 [pid 6218] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6183] close(4 [pid 6219] memfd_create("syzkaller", 0 [pid 6218] <... mmap resumed>) = 0x7fbaaaa00000 [pid 6183] <... close resumed>) = 0 [pid 6219] <... memfd_create resumed>) = 3 [pid 6219] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaaaa00000 [pid 6183] close(5) = -1 EBADF (Bad file descriptor) [pid 6183] close(6) = -1 EBADF (Bad file descriptor) [ 87.911050][ T6183] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 87.916691][ T974] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 87.924442][ T6183] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 87.946056][ T6183] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 87.946615][ T974] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [pid 6183] close(7 [pid 6207] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 6183] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6183] close(8) = -1 EBADF (Bad file descriptor) [pid 6183] close(9) = -1 EBADF (Bad file descriptor) [pid 6183] close(10) = -1 EBADF (Bad file descriptor) [pid 6183] close(11) = -1 EBADF (Bad file descriptor) [pid 6183] close(12) = -1 EBADF (Bad file descriptor) [pid 6183] close(13) = -1 EBADF (Bad file descriptor) [pid 6183] close(14) = -1 EBADF (Bad file descriptor) [pid 6183] close(15) = -1 EBADF (Bad file descriptor) [pid 6183] close(16) = -1 EBADF (Bad file descriptor) [pid 6183] close(17) = -1 EBADF (Bad file descriptor) [pid 6183] close(18) = -1 EBADF (Bad file descriptor) [pid 6183] close(19) = -1 EBADF (Bad file descriptor) [pid 6183] close(20) = -1 EBADF (Bad file descriptor) [pid 6183] close(21) = -1 EBADF (Bad file descriptor) [pid 6183] close(22) = -1 EBADF (Bad file descriptor) [pid 6183] close(23) = -1 EBADF (Bad file descriptor) [pid 6183] close(24) = -1 EBADF (Bad file descriptor) [pid 6183] close(25) = -1 EBADF (Bad file descriptor) [pid 6183] close(26) = -1 EBADF (Bad file descriptor) [pid 6183] close(27) = -1 EBADF (Bad file descriptor) [pid 6183] close(28) = -1 EBADF (Bad file descriptor) [pid 6183] close(29) = -1 EBADF (Bad file descriptor) [pid 6183] exit_group(0) = ? [pid 6183] +++ exited with 0 +++ [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10, si_uid=0, si_status=0, si_utime=13 /* 0.13 s */, si_stime=52 /* 0.52 s */} --- [pid 5823] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 87.982315][ T974] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 87.991967][ T974] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 88.000994][ T974] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 88.016673][ T6184] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [pid 5823] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5823] umount2("./8/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./8/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./8/cgroup") = 0 [pid 5823] umount2("./8/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./8/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./8/cgroup.cpu") = 0 [pid 5823] umount2("./8/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./8/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./8/cgroup.net") = 0 [pid 5823] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./8/binderfs") = 0 [ 88.039840][ T6184] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [pid 5823] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6184] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 6184] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000) = -1 EFAULT (Bad address) [pid 6184] close(3) = 0 [pid 6184] close(4) = 0 [pid 6184] close(5) = -1 EBADF (Bad file descriptor) [pid 6184] close(6) = -1 EBADF (Bad file descriptor) [pid 6184] close(7) = -1 EBADF (Bad file descriptor) [pid 6184] close(8) = -1 EBADF (Bad file descriptor) [pid 6184] close(9) = -1 EBADF (Bad file descriptor) [pid 6184] close(10) = -1 EBADF (Bad file descriptor) [pid 6184] close(11) = -1 EBADF (Bad file descriptor) [pid 6184] close(12) = -1 EBADF (Bad file descriptor) [pid 6184] close(13) = -1 EBADF (Bad file descriptor) [pid 6184] close(14) = -1 EBADF (Bad file descriptor) [pid 6184] close(15) = -1 EBADF (Bad file descriptor) [pid 6184] close(16) = -1 EBADF (Bad file descriptor) [pid 6184] close(17) = -1 EBADF (Bad file descriptor) [pid 6184] close(18) = -1 EBADF (Bad file descriptor) [pid 6184] close(19) = -1 EBADF (Bad file descriptor) [pid 6184] close(20) = -1 EBADF (Bad file descriptor) [pid 6184] close(21) = -1 EBADF (Bad file descriptor) [pid 6184] close(22) = -1 EBADF (Bad file descriptor) [pid 6184] close(23) = -1 EBADF (Bad file descriptor) [pid 6184] close(24) = -1 EBADF (Bad file descriptor) [pid 6184] close(25) = -1 EBADF (Bad file descriptor) [pid 6184] close(26) = -1 EBADF (Bad file descriptor) [pid 6184] close(27) = -1 EBADF (Bad file descriptor) [pid 6184] close(28) = -1 EBADF (Bad file descriptor) [pid 6184] close(29) = -1 EBADF (Bad file descriptor) [pid 6184] exit_group(0) = ? [ 88.086655][ T6184] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [pid 6184] +++ exited with 0 +++ [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=48 /* 0.48 s */} --- [pid 5826] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5826] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5826] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5826] umount2("./7/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./7/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./7/cgroup") = 0 [pid 5826] umount2("./7/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./7/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./7/cgroup.cpu") = 0 [pid 5826] umount2("./7/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./7/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./7/cgroup.net") = 0 [pid 5826] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./7/binderfs") = 0 [ 88.127303][ T5823] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 5826] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6207] <... write resumed>) = 33554432 [ 88.242421][ T5826] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 5823] <... umount2 resumed>) = 0 [pid 5823] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./8/file0", [pid 6207] munmap(0x7fbaaaa00000, 138412032 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5823] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(4, 0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5823] getdents64(4, 0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5823] close(4) = 0 [pid 5823] rmdir("./8/file0") = 0 [pid 5823] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5823] close(3) = 0 [pid 5823] rmdir("./8") = 0 [pid 5823] mkdir("./9", 0777) = 0 [pid 5823] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5823] ioctl(3, LOOP_CLR_FD) = 0 [pid 5823] close(3 [pid 6207] <... munmap resumed>) = 0 [pid 6207] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6207] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6207] close(3) = 0 [pid 6207] close(4) = 0 [pid 6207] mkdir("./file0", 0777) = 0 [ 88.368400][ T6207] loop0: detected capacity change from 0 to 65536 [pid 6207] mount("/dev/loop0", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 6219] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 6207] <... mount resumed>) = 0 [pid 6207] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6207] chdir("./file0") = 0 [ 88.441171][ T6207] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 88.465865][ T6207] XFS (loop0): Ending clean mount [pid 6207] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6207] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 4 [ 88.544419][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 88.544436][ T29] audit: type=1800 audit(1733456386.036:44): pid=6207 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop0" ino=41 res=0 errno=0 [ 88.583594][ T57] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [pid 6207] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5826] <... umount2 resumed>) = 0 [pid 5826] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./7/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5826] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5826] getdents64(4, 0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5826] getdents64(4, 0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5826] close(4) = 0 [pid 5826] rmdir("./7/file0") = 0 [pid 5826] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5826] close(3) = 0 [pid 5826] rmdir("./7") = 0 [pid 5826] mkdir("./8", 0777) = 0 [pid 5826] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5826] ioctl(3, LOOP_CLR_FD) = 0 [ 88.606657][ T57] XFS (loop0): Unmount and run xfs_repair [ 88.612430][ T57] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 88.646141][ T57] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 88.663589][ T57] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 88.683028][ T57] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 88.702777][ T57] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 88.722412][ T57] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 88.740335][ T57] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [pid 5826] close(3 [ 88.776765][ T57] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 88.785791][ T57] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 88.809232][ T6207] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [pid 6218] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 5823] <... close resumed>) = 0 [pid 6207] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558159a650) = 11 [ 88.828850][ T6207] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 88.866431][ T6207] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [pid 6207] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000) = -1 EFAULT (Bad address) [pid 6207] close(3) = 0 [pid 6207] close(4) = 0 [pid 6207] close(5) = -1 EBADF (Bad file descriptor) [pid 6207] close(6) = -1 EBADF (Bad file descriptor) [pid 6207] close(7) = -1 EBADF (Bad file descriptor) [pid 6207] close(8) = -1 EBADF (Bad file descriptor) [pid 6207] close(9) = -1 EBADF (Bad file descriptor) [pid 6207] close(10) = -1 EBADF (Bad file descriptor) [pid 6207] close(11) = -1 EBADF (Bad file descriptor) [pid 6207] close(12) = -1 EBADF (Bad file descriptor) [pid 6207] close(13) = -1 EBADF (Bad file descriptor) [pid 6207] close(14) = -1 EBADF (Bad file descriptor) [pid 6207] close(15) = -1 EBADF (Bad file descriptor) [pid 6207] close(16) = -1 EBADF (Bad file descriptor) [pid 6207] close(17) = -1 EBADF (Bad file descriptor) [pid 6207] close(18) = -1 EBADF (Bad file descriptor) [pid 6207] close(19) = -1 EBADF (Bad file descriptor) [pid 6207] close(20) = -1 EBADF (Bad file descriptor) [pid 6207] close(21) = -1 EBADF (Bad file descriptor) [pid 6207] close(22) = -1 EBADF (Bad file descriptor) [pid 6207] close(23) = -1 EBADF (Bad file descriptor) [pid 6207] close(24) = -1 EBADF (Bad file descriptor) [pid 6207] close(25) = -1 EBADF (Bad file descriptor) [pid 6207] close(26) = -1 EBADF (Bad file descriptor) [pid 6207] close(27) = -1 EBADF (Bad file descriptor) [pid 6207] close(28) = -1 EBADF (Bad file descriptor) [pid 6207] close(29) = -1 EBADF (Bad file descriptor) [pid 6207] exit_group(0) = ? [pid 6207] +++ exited with 0 +++ [pid 5826] <... close resumed>) = 0 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6229 attached [pid 6229] set_robust_list(0x55558159a660, 24 [pid 5826] <... clone resumed>, child_tidptr=0x55558159a650) = 10 [pid 6229] <... set_robust_list resumed>) = 0 [pid 6229] chdir("./8") = 0 [pid 6229] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6229] setpgid(0, 0) = 0 [pid 6229] symlink("/syzcgroup/unified/syz4", "./cgroup" [pid 6219] <... write resumed>) = 33554432 [pid 6219] munmap(0x7fbaaaa00000, 138412032 [pid 6229] <... symlink resumed>) = 0 [pid 6229] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu" [pid 5821] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=42 /* 0.42 s */} --- [pid 6229] <... symlink resumed>) = 0 [pid 6229] symlink("/syzcgroup/net/syz4", "./cgroup.net") = 0 [pid 6229] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6229] write(3, "1000", 4) = 4 [pid 6229] close(3) = 0 [pid 6229] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6229] write(1, "executing program\n", 18) = 18 [pid 6229] memfd_create("syzkaller", 0 [pid 5821] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5821] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5821] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5821] umount2("./8/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6229] <... memfd_create resumed>) = 3 [pid 5821] newfstatat(AT_FDCWD, "./8/cgroup", [pid 6229] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5821] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] unlink("./8/cgroup" [pid 6229] <... mmap resumed>) = 0x7fbaaaa00000 [pid 5821] <... unlink resumed>) = 0 [pid 5821] umount2("./8/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./8/cgroup.cpu", [pid 6219] <... munmap resumed>) = 0 [pid 5821] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] unlink("./8/cgroup.cpu") = 0 [pid 5821] umount2("./8/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./8/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] unlink("./8/cgroup.net") = 0 [pid 5821] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] unlink("./8/binderfs") = 0 [pid 5821] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6219] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6219] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6219] close(3) = 0 [pid 6219] close(4) = 0 [pid 6219] mkdir("./file0", 0777) = 0 [pid 6218] <... write resumed>) = 33554432 ./strace-static-x86_64: Process 6228 attached [pid 6219] mount("/dev/loop1", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 6218] munmap(0x7fbaaaa00000, 138412032 [pid 6228] set_robust_list(0x55558159a660, 24) = 0 [pid 6228] chdir("./9") = 0 [pid 6218] <... munmap resumed>) = 0 [pid 6228] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6218] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6228] setpgid(0, 0 [ 89.107840][ T6219] loop1: detected capacity change from 0 to 65536 [ 89.133661][ T5821] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 6218] ioctl(4, LOOP_SET_FD, 3 [pid 6228] <... setpgid resumed>) = 0 [pid 6218] <... ioctl resumed>) = 0 [pid 6228] symlink("/syzcgroup/unified/syz2", "./cgroup" [pid 6218] close(3 [pid 6228] <... symlink resumed>) = 0 [pid 6218] <... close resumed>) = 0 [pid 6218] close(4 [pid 6228] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu" [pid 6218] <... close resumed>) = 0 [pid 6228] <... symlink resumed>) = 0 [pid 6218] mkdir("./file0", 0777 [pid 6228] symlink("/syzcgroup/net/syz2", "./cgroup.net" [pid 6218] <... mkdir resumed>) = 0 [pid 6228] <... symlink resumed>) = 0 [pid 6228] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6218] mount("/dev/loop3", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 6228] <... openat resumed>) = 3 [pid 6228] write(3, "1000", 4) = 4 [pid 6228] close(3) = 0 [pid 6228] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 6228] write(1, "executing program\n", 18) = 18 [pid 6228] memfd_create("syzkaller", 0) = 3 [pid 6228] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaaaa00000 [ 89.177820][ T6218] loop3: detected capacity change from 0 to 65536 [ 89.237436][ T6219] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 6219] <... mount resumed>) = 0 [pid 6219] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6219] chdir("./file0") = 0 [pid 6219] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6219] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 5821] <... umount2 resumed>) = 0 [pid 5821] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./8/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5821] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [ 89.314203][ T6219] XFS (loop1): Ending clean mount [pid 5821] getdents64(4, 0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5821] getdents64(4, 0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5821] close(4) = 0 [pid 5821] rmdir("./8/file0") = 0 [pid 5821] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5821] close(3) = 0 [pid 5821] rmdir("./8") = 0 [pid 6219] <... open resumed>) = 4 [pid 5821] mkdir("./9", 0777) = 0 [pid 5821] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5821] ioctl(3, LOOP_CLR_FD) = 0 [pid 5821] close(3 [pid 6229] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [ 89.350936][ T6218] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 89.374084][ T29] audit: type=1800 audit(1733456386.866:45): pid=6219 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop1" ino=41 res=0 errno=0 [ 89.423803][ T5879] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [pid 6219] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6218] <... mount resumed>) = 0 [pid 6218] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6218] chdir("./file0") = 0 [pid 6218] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [ 89.479989][ T5879] XFS (loop1): Unmount and run xfs_repair [ 89.485768][ T5879] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 89.498203][ T6218] XFS (loop3): Ending clean mount [pid 6218] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 4 [ 89.545472][ T9] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 89.574990][ T5879] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 89.586743][ T9] XFS (loop3): Unmount and run xfs_repair [ 89.592504][ T9] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 89.610750][ T5879] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 89.632442][ T9] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 89.647746][ T5879] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 89.677211][ T9] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 89.683982][ T29] audit: type=1800 audit(1733456387.036:46): pid=6218 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop3" ino=41 res=0 errno=0 [ 89.686083][ T9] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 89.715304][ T5879] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 89.736641][ T5879] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [pid 6218] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6229] <... write resumed>) = 33554432 [pid 6229] munmap(0x7fbaaaa00000, 138412032 [ 89.745526][ T5879] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 89.766624][ T5879] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 89.775520][ T5879] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [pid 6228] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 6229] <... munmap resumed>) = 0 [pid 6229] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 89.796644][ T9] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 89.805548][ T9] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 89.826659][ T9] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 89.835555][ T9] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [pid 6229] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6229] close(3) = 0 [pid 6229] close(4) = 0 [pid 6229] mkdir("./file0", 0777) = 0 [pid 5821] <... close resumed>) = 0 [ 89.851173][ T6229] loop4: detected capacity change from 0 to 65536 [ 89.866622][ T9] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 89.879077][ T6219] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [pid 6229] mount("/dev/loop4", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 5821] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6249 attached [pid 6249] set_robust_list(0x55558159a660, 24 [pid 5821] <... clone resumed>, child_tidptr=0x55558159a650) = 11 [pid 6249] <... set_robust_list resumed>) = 0 [pid 6249] chdir("./9") = 0 [pid 6249] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6249] setpgid(0, 0) = 0 [pid 6249] symlink("/syzcgroup/unified/syz0", "./cgroup" [pid 6219] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 6249] <... symlink resumed>) = 0 [pid 6249] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6249] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6249] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6219] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000) = -1 EFAULT (Bad address) [pid 6219] close(3) = 0 [pid 6219] close(4) = 0 [pid 6219] close(5) = -1 EBADF (Bad file descriptor) [pid 6219] close(6) = -1 EBADF (Bad file descriptor) [pid 6219] close(7) = -1 EBADF (Bad file descriptor) [pid 6219] close(8) = -1 EBADF (Bad file descriptor) [pid 6219] close(9) = -1 EBADF (Bad file descriptor) [pid 6219] close(10) = -1 EBADF (Bad file descriptor) [pid 6219] close(11) = -1 EBADF (Bad file descriptor) [pid 6219] close(12) = -1 EBADF (Bad file descriptor) [pid 6219] close(13) = -1 EBADF (Bad file descriptor) [pid 6219] close(14) = -1 EBADF (Bad file descriptor) [pid 6219] close(15) = -1 EBADF (Bad file descriptor) [pid 6219] close(16) = -1 EBADF (Bad file descriptor) [pid 6219] close(17) = -1 EBADF (Bad file descriptor) [pid 6219] close(18) = -1 EBADF (Bad file descriptor) [pid 6219] close(19) = -1 EBADF (Bad file descriptor) [pid 6219] close(20) = -1 EBADF (Bad file descriptor) [pid 6219] close(21) = -1 EBADF (Bad file descriptor) [pid 6219] close(22) = -1 EBADF (Bad file descriptor) [pid 6219] close(23) = -1 EBADF (Bad file descriptor) [pid 6219] close(24) = -1 EBADF (Bad file descriptor) [pid 6219] close(25) = -1 EBADF (Bad file descriptor) [pid 6219] close(26) = -1 EBADF (Bad file descriptor) [pid 6219] close(27) = -1 EBADF (Bad file descriptor) [pid 6219] close(28) = -1 EBADF (Bad file descriptor) [pid 6219] close(29) = -1 EBADF (Bad file descriptor) [pid 6219] exit_group(0) = ? [pid 6249] write(3, "1000", 4) = 4 [pid 6249] close(3) = 0 [pid 6249] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6219] +++ exited with 0 +++ [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=11, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=56 /* 0.56 s */} --- [pid 5824] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5824] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5824] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5824] umount2("./9/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./9/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./9/cgroup") = 0 [pid 5824] umount2("./9/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./9/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./9/cgroup.cpu") = 0 [pid 5824] umount2("./9/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./9/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./9/cgroup.net") = 0 [pid 5824] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./9/binderfs") = 0 [ 89.896822][ T6218] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 89.904333][ T6219] XFS (loop1): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 89.922912][ T6219] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [pid 5824] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6249] write(1, "executing program\n", 18executing program ) = 18 [pid 6249] memfd_create("syzkaller", 0) = 3 [pid 6249] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaaaa00000 [ 89.960690][ T5824] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 89.988484][ T6218] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [pid 6218] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [ 90.010778][ T6229] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 90.019521][ T6218] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [pid 6218] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000) = -1 EFAULT (Bad address) [pid 6218] close(3) = 0 [pid 6229] <... mount resumed>) = 0 [pid 6218] close(4 [pid 6229] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6218] <... close resumed>) = 0 [pid 6229] <... openat resumed>) = 3 [pid 6229] chdir("./file0" [pid 6218] close(5 [pid 6229] <... chdir resumed>) = 0 [pid 6218] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6229] openat(AT_FDCWD, "/dev/loop4", O_RDWR [ 90.086763][ T6229] XFS (loop4): Ending clean mount [pid 6218] close(6 [pid 6229] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6218] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6229] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 6218] close(7) = -1 EBADF (Bad file descriptor) [pid 6229] <... open resumed>) = 4 [pid 6218] close(8 [pid 6229] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6218] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] <... umount2 resumed>) = 0 [pid 6218] close(9 [pid 5824] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6218] <... close resumed>) = -1 EBADF (Bad file descriptor) [ 90.139223][ T29] audit: type=1800 audit(1733456387.636:47): pid=6229 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop4" ino=41 res=0 errno=0 [pid 6218] close(10 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6218] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6218] close(11) = -1 EBADF (Bad file descriptor) [pid 6218] close(12 [pid 5824] newfstatat(AT_FDCWD, "./9/file0", [pid 6249] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6218] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6218] close(13) = -1 EBADF (Bad file descriptor) [pid 6228] <... write resumed>) = 33554432 [pid 6218] close(14 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6228] munmap(0x7fbaaaa00000, 138412032 [pid 6218] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6218] close(15 [pid 5824] <... openat resumed>) = 4 [pid 6218] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] newfstatat(4, "", [pid 6218] close(16 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 6218] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] getdents64(4, [pid 6218] close(17 [pid 5824] <... getdents64 resumed>0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 6218] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] getdents64(4, [pid 6218] close(18 [pid 5824] <... getdents64 resumed>0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 6218] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] close(4 [pid 6218] close(19 [pid 5824] <... close resumed>) = 0 [pid 6218] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] rmdir("./9/file0" [pid 6218] close(20 [pid 5824] <... rmdir resumed>) = 0 [pid 6218] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] getdents64(3, [pid 6218] close(21 [pid 5824] <... getdents64 resumed>0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 6218] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] close(3 [pid 6218] close(22 [pid 5824] <... close resumed>) = 0 [pid 6218] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] rmdir("./9" [pid 6218] close(23 [pid 5824] <... rmdir resumed>) = 0 [pid 6218] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] mkdir("./10", 0777 [pid 6218] close(24 [pid 5824] <... mkdir resumed>) = 0 [pid 6218] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6218] close(25 [pid 5824] <... openat resumed>) = 3 [pid 6218] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] ioctl(3, LOOP_CLR_FD [pid 6218] close(26 [pid 5824] <... ioctl resumed>) = 0 [pid 6218] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6218] close(27) = -1 EBADF (Bad file descriptor) [ 90.247282][ T9] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 90.258649][ T9] XFS (loop4): Unmount and run xfs_repair [ 90.264411][ T9] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 90.271926][ T9] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 90.280911][ T9] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [pid 6218] close(28 [pid 5824] close(3 [pid 6218] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6218] close(29) = -1 EBADF (Bad file descriptor) [pid 6218] exit_group(0) = ? [pid 6218] +++ exited with 0 +++ [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=47 /* 0.47 s */} --- [pid 5825] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5825] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5825] umount2("./8/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./8/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./8/cgroup") = 0 [pid 5825] umount2("./8/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./8/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./8/cgroup.cpu") = 0 [pid 5825] umount2("./8/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./8/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 90.289860][ T9] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 90.298822][ T9] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 90.307765][ T9] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 90.316728][ T9] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 90.325610][ T9] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 90.334544][ T9] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [pid 5825] unlink("./8/cgroup.net") = 0 [pid 5825] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./8/binderfs") = 0 [pid 5825] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6228] <... munmap resumed>) = 0 [pid 6228] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [ 90.343551][ T6229] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 90.393951][ T6228] loop2: detected capacity change from 0 to 65536 [ 90.403589][ T6229] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [pid 6228] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6228] close(3) = 0 [pid 6228] close(4) = 0 [pid 6228] mkdir("./file0", 0777) = 0 [pid 6228] mount("/dev/loop2", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 6229] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 6229] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000) = -1 EFAULT (Bad address) [pid 6229] close(3) = 0 [pid 6229] close(4) = 0 [pid 6229] close(5) = -1 EBADF (Bad file descriptor) [pid 6229] close(6) = -1 EBADF (Bad file descriptor) [pid 6229] close(7) = -1 EBADF (Bad file descriptor) [pid 6229] close(8) = -1 EBADF (Bad file descriptor) [pid 6229] close(9) = -1 EBADF (Bad file descriptor) [pid 6229] close(10) = -1 EBADF (Bad file descriptor) [pid 6229] close(11) = -1 EBADF (Bad file descriptor) [pid 6229] close(12) = -1 EBADF (Bad file descriptor) [pid 6229] close(13) = -1 EBADF (Bad file descriptor) [pid 6229] close(14) = -1 EBADF (Bad file descriptor) [pid 6229] close(15) = -1 EBADF (Bad file descriptor) [pid 6229] close(16) = -1 EBADF (Bad file descriptor) [pid 6229] close(17) = -1 EBADF (Bad file descriptor) [pid 6229] close(18) = -1 EBADF (Bad file descriptor) [pid 6229] close(19) = -1 EBADF (Bad file descriptor) [pid 6229] close(20) = -1 EBADF (Bad file descriptor) [pid 6229] close(21) = -1 EBADF (Bad file descriptor) [pid 6229] close(22) = -1 EBADF (Bad file descriptor) [pid 6229] close(23) = -1 EBADF (Bad file descriptor) [pid 6229] close(24) = -1 EBADF (Bad file descriptor) [pid 6229] close(25) = -1 EBADF (Bad file descriptor) [pid 6229] close(26) = -1 EBADF (Bad file descriptor) [pid 6229] close(27) = -1 EBADF (Bad file descriptor) [pid 6229] close(28) = -1 EBADF (Bad file descriptor) [pid 6229] close(29) = -1 EBADF (Bad file descriptor) [pid 6229] exit_group(0) = ? [pid 6229] +++ exited with 0 +++ [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10, si_uid=0, si_status=0, si_utime=11 /* 0.11 s */, si_stime=45 /* 0.45 s */} --- [pid 5826] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5824] <... close resumed>) = 0 [ 90.472212][ T5825] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 90.506546][ T6229] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5826] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5826] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5826] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 ./strace-static-x86_64: Process 6257 attached [pid 5826] umount2("./8/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6257] set_robust_list(0x55558159a660, 24 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... clone resumed>, child_tidptr=0x55558159a650) = 12 [pid 6257] <... set_robust_list resumed>) = 0 [pid 5826] newfstatat(AT_FDCWD, "./8/cgroup", [pid 5825] <... umount2 resumed>) = 0 [pid 6257] chdir("./10" [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6257] <... chdir resumed>) = 0 [pid 5826] unlink("./8/cgroup" [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6257] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5826] <... unlink resumed>) = 0 [pid 5825] newfstatat(AT_FDCWD, "./8/file0", [pid 6257] <... prctl resumed>) = 0 [pid 5826] umount2("./8/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6257] setpgid(0, 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6257] <... setpgid resumed>) = 0 [pid 6257] symlink("/syzcgroup/unified/syz1", "./cgroup" [pid 5826] newfstatat(AT_FDCWD, "./8/cgroup.cpu", [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6257] <... symlink resumed>) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6257] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu" [pid 5826] unlink("./8/cgroup.cpu" [pid 5825] <... openat resumed>) = 4 [pid 6257] <... symlink resumed>) = 0 [pid 5826] <... unlink resumed>) = 0 [pid 5825] newfstatat(4, "", [pid 6257] symlink("/syzcgroup/net/syz1", "./cgroup.net" [pid 5826] umount2("./8/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 6257] <... symlink resumed>) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] getdents64(4, [pid 6257] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5826] newfstatat(AT_FDCWD, "./8/cgroup.net", [pid 5825] <... getdents64 resumed>0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 6257] <... openat resumed>) = 3 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] getdents64(4, [pid 6257] write(3, "1000", 4 [pid 5826] unlink("./8/cgroup.net" [pid 5825] <... getdents64 resumed>0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 6257] <... write resumed>) = 4 [pid 5826] <... unlink resumed>) = 0 [pid 5825] close(4 [pid 6257] close(3 [pid 5826] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... close resumed>) = 0 [pid 6257] <... close resumed>) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] rmdir("./8/file0" [pid 6257] symlink("/dev/binderfs", "./binderfs" [pid 5826] newfstatat(AT_FDCWD, "./8/binderfs", [pid 5825] <... rmdir resumed>) = 0 [pid 6257] <... symlink resumed>) = 0 [ 90.583608][ T6228] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 executing program [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] getdents64(3, [pid 6257] write(1, "executing program\n", 18 [pid 5826] unlink("./8/binderfs" [pid 5825] <... getdents64 resumed>0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 6257] <... write resumed>) = 18 [pid 5826] <... unlink resumed>) = 0 [pid 5825] close(3 [pid 6257] memfd_create("syzkaller", 0 [pid 5826] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... close resumed>) = 0 [pid 6257] <... memfd_create resumed>) = 3 [pid 5825] rmdir("./8" [pid 6257] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5825] <... rmdir resumed>) = 0 [pid 6257] <... mmap resumed>) = 0x7fbaaaa00000 [pid 5825] mkdir("./9", 0777) = 0 [pid 5825] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5826] <... umount2 resumed>) = 0 [pid 5825] ioctl(3, LOOP_CLR_FD) = 0 [pid 5825] close(3 [pid 5826] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./8/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 90.635777][ T5826] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 5826] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5826] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5826] getdents64(4, 0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5826] getdents64(4, 0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5826] close(4) = 0 [pid 5826] rmdir("./8/file0") = 0 [pid 5826] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5826] close(3) = 0 [pid 5826] rmdir("./8") = 0 [pid 5826] mkdir("./9", 0777) = 0 [pid 5826] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5826] ioctl(3, LOOP_CLR_FD) = 0 [ 90.722311][ T6228] XFS (loop2): Ending clean mount [pid 5826] close(3 [pid 6228] <... mount resumed>) = 0 [pid 6228] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6228] chdir("./file0") = 0 [pid 6228] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6228] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 6228] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5825] <... close resumed>) = 0 [ 90.774121][ T57] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 90.797238][ T29] audit: type=1800 audit(1733456388.266:48): pid=6228 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop2" ino=41 res=0 errno=0 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6264 attached [pid 6264] set_robust_list(0x55558159a660, 24) = 0 [pid 6264] chdir("./9") = 0 [pid 6264] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6264] setpgid(0, 0) = 0 [pid 6264] symlink("/syzcgroup/unified/syz3", "./cgroup") = 0 [pid 6264] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu") = 0 [pid 6264] symlink("/syzcgroup/net/syz3", "./cgroup.net") = 0 [pid 6264] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6264] write(3, "1000", 4) = 4 [pid 6264] close(3) = 0 [pid 6264] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 6264] write(1, "executing program\n", 18) = 18 [pid 6264] memfd_create("syzkaller", 0) = 3 [pid 6264] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6249] <... write resumed>) = 33554432 [pid 6264] <... mmap resumed>) = 0x7fbaaaa00000 [ 90.836678][ T57] XFS (loop2): Unmount and run xfs_repair [ 90.853452][ T57] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 90.923420][ T57] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 90.957334][ T57] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [pid 6249] munmap(0x7fbaaaa00000, 138412032 [pid 6257] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 5825] <... clone resumed>, child_tidptr=0x55558159a650) = 11 [ 90.966334][ T57] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [pid 6249] <... munmap resumed>) = 0 [pid 6249] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 91.036792][ T57] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 91.066650][ T57] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [pid 6249] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6249] close(3) = 0 [pid 6249] close(4) = 0 [pid 6249] mkdir("./file0", 0777) = 0 [ 91.089559][ T6249] loop0: detected capacity change from 0 to 65536 [ 91.119939][ T57] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 91.160290][ T57] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 91.187559][ T57] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 91.197654][ T6228] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 91.298299][ T6228] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [pid 6249] mount("/dev/loop0", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 6257] <... write resumed>) = 33554432 [pid 5826] <... close resumed>) = 0 [pid 6257] munmap(0x7fbaaaa00000, 138412032) = 0 [pid 6257] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6257] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6257] close(3) = 0 [pid 6257] close(4 [ 91.355114][ T6257] loop1: detected capacity change from 0 to 65536 [ 91.375560][ T6228] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [pid 6264] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6228] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) ./strace-static-x86_64: Process 6270 attached [pid 6270] set_robust_list(0x55558159a660, 24 [pid 5826] <... clone resumed>, child_tidptr=0x55558159a650) = 11 [pid 6270] <... set_robust_list resumed>) = 0 [pid 6270] chdir("./9") = 0 [pid 6228] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000 [pid 6257] <... close resumed>) = 0 [pid 6270] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6228] <... openat resumed>) = -1 EFAULT (Bad address) [pid 6257] mkdir("./file0", 0777) = 0 [ 91.416846][ T6249] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 6257] mount("/dev/loop1", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 6270] <... prctl resumed>) = 0 [pid 6228] close(3 [pid 6270] setpgid(0, 0 [pid 6228] <... close resumed>) = 0 [pid 6270] <... setpgid resumed>) = 0 [pid 6228] close(4 [pid 6270] symlink("/syzcgroup/unified/syz4", "./cgroup" [pid 6228] <... close resumed>) = 0 [pid 6270] <... symlink resumed>) = 0 [pid 6228] close(5 [pid 6270] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu" [pid 6228] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6270] <... symlink resumed>) = 0 [pid 6228] close(6 [pid 6270] symlink("/syzcgroup/net/syz4", "./cgroup.net" [pid 6228] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6270] <... symlink resumed>) = 0 [pid 6228] close(7 [pid 6270] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6228] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6270] <... openat resumed>) = 3 [pid 6228] close(8 [pid 6270] write(3, "1000", 4 [pid 6228] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6270] <... write resumed>) = 4 [pid 6228] close(9 [pid 6270] close(3 [pid 6228] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6270] <... close resumed>) = 0 [pid 6228] close(10 [pid 6270] symlink("/dev/binderfs", "./binderfs" [pid 6228] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6270] <... symlink resumed>) = 0 [pid 6228] close(11executing program [pid 6270] write(1, "executing program\n", 18 [pid 6228] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6270] <... write resumed>) = 18 [pid 6228] close(12) = -1 EBADF (Bad file descriptor) [pid 6270] memfd_create("syzkaller", 0 [pid 6228] close(13 [pid 6270] <... memfd_create resumed>) = 3 [pid 6228] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6228] close(14) = -1 EBADF (Bad file descriptor) [pid 6270] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaaaa00000 [pid 6228] close(15 [pid 6249] <... mount resumed>) = 0 [pid 6228] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6249] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6249] chdir("./file0") = 0 [pid 6249] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 91.459204][ T6257] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 91.496896][ T6249] XFS (loop0): Ending clean mount [pid 6249] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 6228] close(16 [pid 6257] <... mount resumed>) = 0 [pid 6249] <... open resumed>) = 4 [pid 6228] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6249] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6257] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6257] chdir("./file0") = 0 [pid 6257] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6257] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [ 91.537722][ T6257] XFS (loop1): Ending clean mount [ 91.544737][ T29] audit: type=1800 audit(1733456389.036:49): pid=6249 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop0" ino=41 res=0 errno=0 [pid 6228] close(17) = -1 EBADF (Bad file descriptor) [pid 6257] <... open resumed>) = 4 [pid 6257] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [ 91.588070][ T57] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 91.603034][ T974] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 91.614713][ T974] XFS (loop1): Unmount and run xfs_repair [ 91.621509][ T57] XFS (loop0): Unmount and run xfs_repair [pid 6228] close(18) = -1 EBADF (Bad file descriptor) [ 91.628755][ T29] audit: type=1800 audit(1733456389.096:50): pid=6257 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop1" ino=41 res=0 errno=0 [ 91.649742][ T974] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 91.657223][ T57] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 91.664615][ T57] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 91.676760][ T974] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [pid 6228] close(19 [pid 6270] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 6228] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6228] close(20) = -1 EBADF (Bad file descriptor) [pid 6228] close(21) = -1 EBADF (Bad file descriptor) [ 91.685652][ T974] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 91.701825][ T57] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 91.716620][ T974] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 91.725706][ T57] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [pid 6228] close(22) = -1 EBADF (Bad file descriptor) [pid 6228] close(23) = -1 EBADF (Bad file descriptor) [pid 6228] close(24) = -1 EBADF (Bad file descriptor) [pid 6228] close(25) = -1 EBADF (Bad file descriptor) [pid 6228] close(26) = -1 EBADF (Bad file descriptor) [pid 6228] close(27) = -1 EBADF (Bad file descriptor) [pid 6228] close(28) = -1 EBADF (Bad file descriptor) [pid 6228] close(29) = -1 EBADF (Bad file descriptor) [pid 6228] exit_group(0) = ? [pid 6228] +++ exited with 0 +++ [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=11, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=53 /* 0.53 s */} --- [pid 5823] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5823] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5823] umount2("./9/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./9/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./9/cgroup") = 0 [pid 5823] umount2("./9/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./9/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./9/cgroup.cpu") = 0 [pid 5823] umount2("./9/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./9/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./9/cgroup.net") = 0 [pid 5823] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./9/binderfs") = 0 [ 91.745519][ T974] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 91.755161][ T57] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 91.764746][ T974] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 91.774543][ T57] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 91.786646][ T974] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 91.796216][ T57] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 91.805880][ T5823] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 91.815205][ T974] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 91.824678][ T57] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 91.833831][ T974] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 91.842816][ T57] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 91.851893][ T6249] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 91.857510][ T6257] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 91.865594][ T6249] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [pid 5823] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6249] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 6249] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000 [pid 5823] <... umount2 resumed>) = 0 [pid 5823] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./9/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5823] newfstatat(4, "", [pid 6249] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(4, 0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5823] getdents64(4, 0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5823] close(4) = 0 [pid 5823] rmdir("./9/file0") = 0 [pid 5823] getdents64(3, [pid 6249] close(3 [pid 5823] <... getdents64 resumed>0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5823] close(3) = 0 [pid 5823] rmdir("./9") = 0 [pid 5823] mkdir("./10", 0777) = 0 [pid 5823] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5823] ioctl(3, LOOP_CLR_FD [pid 6249] <... close resumed>) = 0 [pid 5823] <... ioctl resumed>) = 0 [ 91.889267][ T6249] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 91.907008][ T6257] XFS (loop1): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [pid 5823] close(3 [pid 6249] close(4) = 0 [pid 6249] close(5) = -1 EBADF (Bad file descriptor) [pid 6249] close(6) = -1 EBADF (Bad file descriptor) [pid 6249] close(7) = -1 EBADF (Bad file descriptor) [pid 6249] close(8) = -1 EBADF (Bad file descriptor) [pid 6249] close(9) = -1 EBADF (Bad file descriptor) [pid 6249] close(10) = -1 EBADF (Bad file descriptor) [pid 6249] close(11) = -1 EBADF (Bad file descriptor) [pid 6249] close(12) = -1 EBADF (Bad file descriptor) [pid 6249] close(13) = -1 EBADF (Bad file descriptor) [pid 6249] close(14) = -1 EBADF (Bad file descriptor) [pid 6249] close(15) = -1 EBADF (Bad file descriptor) [pid 6249] close(16) = -1 EBADF (Bad file descriptor) [pid 6249] close(17) = -1 EBADF (Bad file descriptor) [pid 6249] close(18) = -1 EBADF (Bad file descriptor) [pid 6249] close(19) = -1 EBADF (Bad file descriptor) [pid 6249] close(20) = -1 EBADF (Bad file descriptor) [pid 6249] close(21) = -1 EBADF (Bad file descriptor) [pid 6249] close(22) = -1 EBADF (Bad file descriptor) [pid 6249] close(23) = -1 EBADF (Bad file descriptor) [pid 6249] close(24) = -1 EBADF (Bad file descriptor) [pid 6249] close(25) = -1 EBADF (Bad file descriptor) [pid 6249] close(26 [pid 6257] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 6249] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6249] close(27 [pid 6257] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000 [pid 6249] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6249] close(28 [pid 6257] <... openat resumed>) = -1 EFAULT (Bad address) [pid 6249] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6257] close(3) = 0 [pid 6257] close(4) = 0 [pid 6257] close(5) = -1 EBADF (Bad file descriptor) [pid 6257] close(6) = -1 EBADF (Bad file descriptor) [pid 6257] close(7) = -1 EBADF (Bad file descriptor) [pid 6257] close(8 [pid 6249] close(29) = -1 EBADF (Bad file descriptor) [pid 6249] exit_group(0) = ? [pid 6257] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6257] close(9) = -1 EBADF (Bad file descriptor) [pid 6257] close(10) = -1 EBADF (Bad file descriptor) [pid 6257] close(11) = -1 EBADF (Bad file descriptor) [pid 6257] close(12) = -1 EBADF (Bad file descriptor) [pid 6257] close(13 [pid 6249] +++ exited with 0 +++ [pid 6257] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6257] close(14 [pid 5821] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=11, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=49 /* 0.49 s */} --- [pid 6257] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5821] restart_syscall(<... resuming interrupted clone ...> [pid 6257] close(15) = -1 EBADF (Bad file descriptor) [pid 6257] close(16) = -1 EBADF (Bad file descriptor) [pid 6257] close(17) = -1 EBADF (Bad file descriptor) [pid 6257] close(18) = -1 EBADF (Bad file descriptor) [pid 6257] close(19) = -1 EBADF (Bad file descriptor) [pid 6257] close(20) = -1 EBADF (Bad file descriptor) [pid 6257] close(21) = -1 EBADF (Bad file descriptor) [pid 6257] close(22) = -1 EBADF (Bad file descriptor) [pid 6257] close(23) = -1 EBADF (Bad file descriptor) [ 91.978049][ T6257] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [pid 6257] close(24) = -1 EBADF (Bad file descriptor) [pid 5821] <... restart_syscall resumed>) = 0 [pid 6257] close(25) = -1 EBADF (Bad file descriptor) [pid 5821] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6257] close(26 [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6257] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5821] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6257] close(27) = -1 EBADF (Bad file descriptor) [pid 5821] <... openat resumed>) = 3 [pid 6257] close(28) = -1 EBADF (Bad file descriptor) [pid 5821] newfstatat(3, "", [pid 6257] close(29) = -1 EBADF (Bad file descriptor) [pid 5821] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5821] getdents64(3, [pid 6257] exit_group(0 [pid 5821] <... getdents64 resumed>0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 6257] <... exit_group resumed>) = ? [pid 5821] umount2("./9/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6257] +++ exited with 0 +++ [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./9/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] unlink("./9/cgroup") = 0 [pid 5821] umount2("./9/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./9/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] unlink("./9/cgroup.cpu" [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=49 /* 0.49 s */} --- [pid 5824] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] <... unlink resumed>) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5821] umount2("./9/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... openat resumed>) = 3 [pid 5821] newfstatat(AT_FDCWD, "./9/cgroup.net", [pid 5824] newfstatat(3, "", [pid 5821] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5821] unlink("./9/cgroup.net" [pid 5824] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5821] <... unlink resumed>) = 0 [pid 5824] umount2("./10/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./10/cgroup", [pid 5821] newfstatat(AT_FDCWD, "./9/binderfs", [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./10/cgroup" [pid 5821] unlink("./9/binderfs" [pid 5824] <... unlink resumed>) = 0 [pid 5821] <... unlink resumed>) = 0 [pid 5824] umount2("./10/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./10/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./10/cgroup.cpu") = 0 [pid 5824] umount2("./10/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./10/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./10/cgroup.net") = 0 [pid 5824] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./10/binderfs") = 0 [pid 5824] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] <... umount2 resumed>) = 0 [pid 5821] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./9/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5821] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5821] getdents64(4, 0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5821] getdents64(4, 0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5821] close(4) = 0 [pid 5821] rmdir("./9/file0") = 0 [pid 5821] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5821] close(3) = 0 [pid 5821] rmdir("./9") = 0 [pid 5821] mkdir("./10", 0777) = 0 [pid 5821] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5821] ioctl(3, LOOP_CLR_FD) = 0 [ 92.079241][ T5821] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 92.107886][ T5824] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 5821] close(3 [pid 6270] <... write resumed>) = 33554432 [pid 5823] <... close resumed>) = 0 executing program [pid 6270] munmap(0x7fbaaaa00000, 138412032 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6282 attached [pid 6282] set_robust_list(0x55558159a660, 24 [pid 5823] <... clone resumed>, child_tidptr=0x55558159a650) = 12 [pid 6282] <... set_robust_list resumed>) = 0 [pid 6282] chdir("./10") = 0 [pid 6282] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6282] setpgid(0, 0) = 0 [pid 6282] symlink("/syzcgroup/unified/syz2", "./cgroup") = 0 [pid 6282] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu") = 0 [pid 6282] symlink("/syzcgroup/net/syz2", "./cgroup.net") = 0 [pid 6282] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6282] write(3, "1000", 4) = 4 [pid 6282] close(3) = 0 [pid 6282] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6282] write(1, "executing program\n", 18) = 18 [pid 6282] memfd_create("syzkaller", 0) = 3 [pid 6282] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaaaa00000 [pid 6264] <... write resumed>) = 33554432 [pid 6270] <... munmap resumed>) = 0 [pid 6264] munmap(0x7fbaaaa00000, 138412032 [pid 6270] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6270] ioctl(4, LOOP_SET_FD, 3 [pid 5824] <... umount2 resumed>) = 0 [pid 5824] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./10/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6270] <... ioctl resumed>) = 0 [pid 5824] <... openat resumed>) = 4 [pid 6270] close(3 [pid 5824] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(4, 0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5824] getdents64(4, 0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5824] close(4) = 0 [pid 5824] rmdir("./10/file0") = 0 [pid 5824] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5824] close(3) = 0 [pid 5824] rmdir("./10") = 0 [pid 6270] <... close resumed>) = 0 [pid 5824] mkdir("./11", 0777 [pid 6270] close(4 [pid 6264] <... munmap resumed>) = 0 [pid 5824] <... mkdir resumed>) = 0 [pid 6270] <... close resumed>) = 0 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5824] ioctl(3, LOOP_CLR_FD) = 0 [pid 5824] close(3 [pid 6270] mkdir("./file0", 0777 [pid 6264] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6270] <... mkdir resumed>) = 0 [ 92.339978][ T6270] loop4: detected capacity change from 0 to 65536 [pid 6264] ioctl(4, LOOP_SET_FD, 3 [pid 6270] mount("/dev/loop4", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 6264] <... ioctl resumed>) = 0 [pid 6264] close(3) = 0 [pid 6264] close(4) = 0 [pid 6264] mkdir("./file0", 0777) = 0 [ 92.394840][ T6264] loop3: detected capacity change from 0 to 65536 [ 92.483949][ T6264] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 92.486449][ T6270] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 6264] mount("/dev/loop3", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 6270] <... mount resumed>) = 0 [pid 6270] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6270] chdir("./file0") = 0 [ 92.598333][ T6270] XFS (loop4): Ending clean mount [pid 6270] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6270] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 4 [ 92.649630][ T29] audit: type=1800 audit(1733456390.146:51): pid=6270 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop4" ino=41 res=0 errno=0 [ 92.685568][ T5879] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [pid 6270] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6282] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 5821] <... close resumed>) = 0 [pid 5821] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6299 attached [pid 6299] set_robust_list(0x55558159a660, 24 [pid 5821] <... clone resumed>, child_tidptr=0x55558159a650) = 12 [pid 6299] <... set_robust_list resumed>) = 0 [pid 6299] chdir("./10") = 0 [pid 6299] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6299] setpgid(0, 0) = 0 [ 92.706818][ T5879] XFS (loop4): Unmount and run xfs_repair [ 92.712599][ T5879] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 92.736646][ T5879] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 92.746501][ T5879] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [pid 6299] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6299] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6299] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6299] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6299] write(3, "1000", 4) = 4 [pid 6299] close(3) = 0 [pid 6299] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6299] write(1, "executing program\n", 18) = 18 [pid 6299] memfd_create("syzkaller", 0) = 3 [pid 6299] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaaaa00000 [pid 5824] <... close resumed>) = 0 [ 92.776658][ T5879] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 92.785563][ T5879] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 92.806623][ T5879] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 92.815525][ T5879] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [pid 6264] <... mount resumed>) = 0 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6264] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY./strace-static-x86_64: Process 6300 attached [pid 6300] set_robust_list(0x55558159a660, 24) = 0 [pid 6300] chdir("./11") = 0 [pid 6300] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6264] <... openat resumed>) = 3 [pid 6300] <... prctl resumed>) = 0 [pid 5824] <... clone resumed>, child_tidptr=0x55558159a650) = 13 [pid 6300] setpgid(0, 0) = 0 [pid 6300] symlink("/syzcgroup/unified/syz1", "./cgroup") = 0 [pid 6300] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu") = 0 [pid 6300] symlink("/syzcgroup/net/syz1", "./cgroup.net") = 0 [pid 6300] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6300] write(3, "1000", 4) = 4 [ 92.829817][ T5879] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 92.838993][ T5879] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 92.848487][ T6264] XFS (loop3): Ending clean mount [ 92.856787][ T6270] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 92.922345][ T29] audit: type=1800 audit(1733456390.416:52): pid=6264 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop3" ino=41 res=0 errno=0 [ 92.936835][ T6270] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 92.944336][ T5966] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [pid 6300] close(3 [pid 6264] chdir("./file0") = 0 [pid 6264] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6264] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 6264] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6300] <... close resumed>) = 0 [pid 6300] symlink("/dev/binderfs", "./binderfs" [pid 6270] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 6300] <... symlink resumed>) = 0 [pid 6270] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000) = -1 EFAULT (Bad address) [pid 6270] close(3) = 0 executing program [pid 6300] write(1, "executing program\n", 18 [pid 6270] close(4 [pid 6300] <... write resumed>) = 18 [pid 6270] <... close resumed>) = 0 [pid 6300] memfd_create("syzkaller", 0 [pid 6270] close(5 [pid 6300] <... memfd_create resumed>) = 3 [pid 6270] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6300] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6270] close(6 [pid 6300] <... mmap resumed>) = 0x7fbaaaa00000 [pid 6270] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6270] close(7) = -1 EBADF (Bad file descriptor) [pid 6270] close(8) = -1 EBADF (Bad file descriptor) [pid 6270] close(9) = -1 EBADF (Bad file descriptor) [pid 6270] close(10) = -1 EBADF (Bad file descriptor) [ 92.968283][ T6270] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [pid 6270] close(11) = -1 EBADF (Bad file descriptor) [pid 6270] close(12) = -1 EBADF (Bad file descriptor) [pid 6270] close(13) = -1 EBADF (Bad file descriptor) [pid 6270] close(14) = -1 EBADF (Bad file descriptor) [pid 6270] close(15) = -1 EBADF (Bad file descriptor) [pid 6270] close(16) = -1 EBADF (Bad file descriptor) [pid 6270] close(17) = -1 EBADF (Bad file descriptor) [pid 6270] close(18) = -1 EBADF (Bad file descriptor) [pid 6270] close(19) = -1 EBADF (Bad file descriptor) [pid 6270] close(20) = -1 EBADF (Bad file descriptor) [pid 6270] close(21) = -1 EBADF (Bad file descriptor) [pid 6270] close(22) = -1 EBADF (Bad file descriptor) [pid 6270] close(23) = -1 EBADF (Bad file descriptor) [pid 6270] close(24) = -1 EBADF (Bad file descriptor) [pid 6270] close(25) = -1 EBADF (Bad file descriptor) [pid 6270] close(26) = -1 EBADF (Bad file descriptor) [pid 6270] close(27) = -1 EBADF (Bad file descriptor) [pid 6270] close(28) = -1 EBADF (Bad file descriptor) [pid 6270] close(29) = -1 EBADF (Bad file descriptor) [pid 6270] exit_group(0) = ? [pid 6270] +++ exited with 0 +++ [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=11, si_uid=0, si_status=0, si_utime=13 /* 0.13 s */, si_stime=41 /* 0.41 s */} --- [pid 5826] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5826] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5826] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5826] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5826] umount2("./9/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./9/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./9/cgroup") = 0 [pid 5826] umount2("./9/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./9/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./9/cgroup.cpu") = 0 [pid 5826] umount2("./9/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./9/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./9/cgroup.net") = 0 [pid 5826] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./9/binderfs") = 0 [ 93.033757][ T5966] XFS (loop3): Unmount and run xfs_repair [ 93.053273][ T5826] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 93.062046][ T5966] XFS (loop3): First 128 bytes of corrupted metadata buffer: [pid 5826] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6282] <... write resumed>) = 33554432 [ 93.085159][ T5966] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 93.119404][ T5966] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [pid 6282] munmap(0x7fbaaaa00000, 138412032) = 0 [pid 6282] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6282] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6282] close(3) = 0 [pid 6282] close(4) = 0 [pid 6282] mkdir("./file0", 0777) = 0 [ 93.129097][ T5966] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 93.138221][ T5966] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 93.147791][ T5966] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 93.148219][ T6282] loop2: detected capacity change from 0 to 65536 [ 93.156703][ T5966] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 93.156719][ T5966] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [pid 6282] mount("/dev/loop2", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 5826] <... umount2 resumed>) = 0 [pid 5826] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./9/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5826] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5826] getdents64(4, 0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5826] getdents64(4, 0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5826] close(4) = 0 [pid 5826] rmdir("./9/file0") = 0 [pid 5826] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5826] close(3) = 0 [pid 5826] rmdir("./9") = 0 [pid 5826] mkdir("./10", 0777) = 0 [pid 5826] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5826] ioctl(3, LOOP_CLR_FD) = 0 [ 93.156733][ T5966] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 93.191332][ T6264] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 93.217144][ T6264] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [pid 5826] close(3 [pid 6264] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 6264] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000) = -1 EFAULT (Bad address) [pid 6264] close(3) = 0 [pid 6264] close(4) = 0 [pid 6264] close(5) = -1 EBADF (Bad file descriptor) [pid 6264] close(6) = -1 EBADF (Bad file descriptor) [pid 6264] close(7) = -1 EBADF (Bad file descriptor) [pid 6264] close(8) = -1 EBADF (Bad file descriptor) [pid 6264] close(9) = -1 EBADF (Bad file descriptor) [pid 6264] close(10) = -1 EBADF (Bad file descriptor) [pid 6264] close(11) = -1 EBADF (Bad file descriptor) [pid 6264] close(12) = -1 EBADF (Bad file descriptor) [pid 6264] close(13) = -1 EBADF (Bad file descriptor) [pid 6264] close(14) = -1 EBADF (Bad file descriptor) [pid 6264] close(15) = -1 EBADF (Bad file descriptor) [pid 6264] close(16) = -1 EBADF (Bad file descriptor) [pid 6264] close(17) = -1 EBADF (Bad file descriptor) [pid 6264] close(18) = -1 EBADF (Bad file descriptor) [pid 6264] close(19) = -1 EBADF (Bad file descriptor) [pid 6264] close(20) = -1 EBADF (Bad file descriptor) [pid 6264] close(21) = -1 EBADF (Bad file descriptor) [pid 6264] close(22) = -1 EBADF (Bad file descriptor) [pid 6264] close(23) = -1 EBADF (Bad file descriptor) [pid 6264] close(24) = -1 EBADF (Bad file descriptor) [pid 6264] close(25) = -1 EBADF (Bad file descriptor) [pid 6264] close(26) = -1 EBADF (Bad file descriptor) [pid 6264] close(27) = -1 EBADF (Bad file descriptor) [pid 6264] close(28) = -1 EBADF (Bad file descriptor) [pid 6264] close(29) = -1 EBADF (Bad file descriptor) [pid 6264] exit_group(0) = ? [pid 6264] +++ exited with 0 +++ [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=11, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=53 /* 0.53 s */} --- [ 93.237096][ T6264] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 93.259008][ T6282] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 5825] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5825] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5825] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5825] umount2("./9/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./9/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./9/cgroup") = 0 [pid 5825] umount2("./9/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./9/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./9/cgroup.cpu") = 0 [pid 5825] umount2("./9/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./9/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./9/cgroup.net") = 0 [pid 6282] <... mount resumed>) = 0 [pid 5825] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6282] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6282] <... openat resumed>) = 3 [pid 5825] newfstatat(AT_FDCWD, "./9/binderfs", [pid 6282] chdir("./file0" [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6282] <... chdir resumed>) = 0 [ 93.348031][ T6282] XFS (loop2): Ending clean mount [pid 5825] unlink("./9/binderfs" [pid 6282] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5825] <... unlink resumed>) = 0 [pid 5825] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6282] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6282] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 4 [ 93.377805][ T5825] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 93.391356][ T29] audit: type=1800 audit(1733456390.886:53): pid=6282 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop2" ino=41 res=0 errno=0 [ 93.393635][ T9] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [pid 6282] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [ 93.476664][ T9] XFS (loop2): Unmount and run xfs_repair [ 93.482443][ T9] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 93.506679][ T9] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 93.515577][ T9] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 93.536774][ T9] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 93.556518][ T9] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 93.573794][ T9] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [pid 6300] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [ 93.582795][ T9] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 93.592105][ T9] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 93.601062][ T9] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 93.618813][ T6282] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [pid 6299] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 6282] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 6282] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000) = -1 EFAULT (Bad address) [pid 6282] close(3) = 0 [pid 6282] close(4) = 0 [pid 6282] close(5) = -1 EBADF (Bad file descriptor) [pid 6282] close(6) = -1 EBADF (Bad file descriptor) [pid 6282] close(7) = -1 EBADF (Bad file descriptor) [pid 6282] close(8) = -1 EBADF (Bad file descriptor) [pid 6282] close(9) = -1 EBADF (Bad file descriptor) [ 93.652994][ T6282] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 93.685243][ T6282] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [pid 6282] close(10) = -1 EBADF (Bad file descriptor) [pid 6282] close(11) = -1 EBADF (Bad file descriptor) [pid 6282] close(12) = -1 EBADF (Bad file descriptor) [pid 6282] close(13) = -1 EBADF (Bad file descriptor) [pid 6282] close(14) = -1 EBADF (Bad file descriptor) [pid 6282] close(15) = -1 EBADF (Bad file descriptor) [pid 6282] close(16) = -1 EBADF (Bad file descriptor) [pid 6282] close(17) = -1 EBADF (Bad file descriptor) [pid 6282] close(18) = -1 EBADF (Bad file descriptor) [pid 6282] close(19) = -1 EBADF (Bad file descriptor) [pid 6282] close(20) = -1 EBADF (Bad file descriptor) [pid 6282] close(21) = -1 EBADF (Bad file descriptor) [pid 6282] close(22) = -1 EBADF (Bad file descriptor) [pid 6282] close(23) = -1 EBADF (Bad file descriptor) [pid 6282] close(24) = -1 EBADF (Bad file descriptor) [pid 6282] close(25) = -1 EBADF (Bad file descriptor) [pid 6282] close(26) = -1 EBADF (Bad file descriptor) [pid 6282] close(27) = -1 EBADF (Bad file descriptor) [pid 6282] close(28) = -1 EBADF (Bad file descriptor) [pid 6282] close(29) = -1 EBADF (Bad file descriptor) [pid 6282] exit_group(0) = ? [pid 6282] +++ exited with 0 +++ [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=50 /* 0.50 s */} --- [pid 5823] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5823] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5823] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5826] <... close resumed>) = 0 [pid 5823] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5823] umount2("./10/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./10/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./10/cgroup") = 0 [pid 5823] umount2("./10/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./10/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./10/cgroup.cpu") = 0 [pid 5823] umount2("./10/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6309 attached [pid 5823] newfstatat(AT_FDCWD, "./10/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./10/cgroup.net") = 0 [pid 5823] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./10/binderfs") = 0 [pid 5823] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6309] set_robust_list(0x55558159a660, 24 [pid 5826] <... clone resumed>, child_tidptr=0x55558159a650) = 12 [pid 6309] <... set_robust_list resumed>) = 0 [pid 6309] chdir("./10") = 0 [pid 6309] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6309] setpgid(0, 0) = 0 [pid 6309] symlink("/syzcgroup/unified/syz4", "./cgroup") = 0 [pid 6309] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu") = 0 [pid 6309] symlink("/syzcgroup/net/syz4", "./cgroup.net") = 0 [pid 6309] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6309] write(3, "1000", 4) = 4 [pid 6309] close(3) = 0 [pid 6309] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6309] write(1, "executing program\n", 18) = 18 [pid 6309] memfd_create("syzkaller", 0) = 3 [pid 6309] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaaaa00000 [pid 5825] <... umount2 resumed>) = 0 [pid 5825] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./9/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5825] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(4, 0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5825] getdents64(4, 0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5825] close(4) = 0 [pid 5825] rmdir("./9/file0") = 0 [pid 5825] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5825] close(3) = 0 [pid 5825] rmdir("./9") = 0 [ 93.783677][ T5823] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 5825] mkdir("./10", 0777) = 0 [pid 5825] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5825] ioctl(3, LOOP_CLR_FD) = 0 [pid 5825] close(3 [pid 6299] <... write resumed>) = 33554432 [pid 6299] munmap(0x7fbaaaa00000, 138412032 [pid 5823] <... umount2 resumed>) = 0 [pid 6299] <... munmap resumed>) = 0 [pid 5823] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./10/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5823] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(4, 0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5823] getdents64(4, 0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5823] close(4 [pid 6299] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5823] <... close resumed>) = 0 [pid 6299] ioctl(4, LOOP_SET_FD, 3 [pid 5823] rmdir("./10/file0") = 0 [pid 5823] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5823] close(3) = 0 [pid 5823] rmdir("./10") = 0 [pid 5823] mkdir("./11", 0777) = 0 [pid 5823] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5823] ioctl(3, LOOP_CLR_FD) = 0 [pid 5823] close(3 [pid 6299] <... ioctl resumed>) = 0 [ 93.967647][ T6299] loop0: detected capacity change from 0 to 65536 [pid 6299] close(3) = 0 [pid 6299] close(4) = 0 [pid 6299] mkdir("./file0", 0777) = 0 [pid 6299] mount("/dev/loop0", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 6300] <... write resumed>) = 33554432 [pid 5825] <... close resumed>) = 0 [pid 6309] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 6300] munmap(0x7fbaaaa00000, 138412032 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6314 attached [pid 6300] <... munmap resumed>) = 0 [pid 6314] set_robust_list(0x55558159a660, 24) = 0 [pid 6314] chdir("./10") = 0 [pid 6314] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6314] setpgid(0, 0) = 0 [pid 6314] symlink("/syzcgroup/unified/syz3", "./cgroup") = 0 [pid 6314] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu") = 0 [pid 6314] symlink("/syzcgroup/net/syz3", "./cgroup.net") = 0 [pid 6314] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6314] write(3, "1000", 4) = 4 [pid 6314] close(3) = 0 [pid 6314] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6314] write(1, "executing program\n", 18executing program ) = 18 [pid 6314] memfd_create("syzkaller", 0) = 3 [pid 6314] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaaaa00000 [pid 5823] <... close resumed>) = 0 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6315 attached [pid 6300] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5825] <... clone resumed>, child_tidptr=0x55558159a650) = 12 [pid 6315] set_robust_list(0x55558159a660, 24 [pid 6300] <... openat resumed>) = 4 [pid 5823] <... clone resumed>, child_tidptr=0x55558159a650) = 13 [pid 6315] <... set_robust_list resumed>) = 0 [pid 6315] chdir("./11" [pid 6300] ioctl(4, LOOP_SET_FD, 3 [pid 6315] <... chdir resumed>) = 0 [pid 6315] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6315] setpgid(0, 0) = 0 [pid 6315] symlink("/syzcgroup/unified/syz2", "./cgroup") = 0 [pid 6315] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu") = 0 [pid 6315] symlink("/syzcgroup/net/syz2", "./cgroup.net") = 0 [pid 6315] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6315] write(3, "1000", 4) = 4 [ 94.413757][ T6300] loop1: detected capacity change from 0 to 65536 [pid 6315] close(3executing program ) = 0 [pid 6315] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6315] write(1, "executing program\n", 18) = 18 [pid 6315] memfd_create("syzkaller", 0) = 3 [pid 6315] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaaaa00000 [pid 6309] <... write resumed>) = 33554432 [pid 6300] <... ioctl resumed>) = 0 [pid 6309] munmap(0x7fbaaaa00000, 138412032 [pid 6300] close(3) = 0 [pid 6309] <... munmap resumed>) = 0 [pid 6300] close(4 [pid 6309] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6300] <... close resumed>) = 0 [pid 6309] <... openat resumed>) = 4 [pid 6300] mkdir("./file0", 0777 [pid 6309] ioctl(4, LOOP_SET_FD, 3 [pid 6300] <... mkdir resumed>) = 0 [pid 6309] <... ioctl resumed>) = 0 [pid 6300] mount("/dev/loop1", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 6309] close(3) = 0 [pid 6309] close(4) = 0 [pid 6309] mkdir("./file0", 0777) = 0 [pid 6309] mount("/dev/loop4", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [ 94.609553][ T6299] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 94.629385][ T6309] loop4: detected capacity change from 0 to 65536 [pid 6314] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 6315] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 6299] <... mount resumed>) = 0 [pid 6299] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6299] chdir("./file0") = 0 [pid 6299] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6299] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 4 [ 94.923891][ T6299] XFS (loop0): Ending clean mount [ 94.939921][ T29] audit: type=1800 audit(1733456392.436:54): pid=6299 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop0" ino=41 res=0 errno=0 [ 94.968670][ T57] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 94.986945][ T57] XFS (loop0): Unmount and run xfs_repair [ 95.005500][ T57] XFS (loop0): First 128 bytes of corrupted metadata buffer: [pid 6299] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6315] <... write resumed>) = 33554432 [ 95.026815][ T57] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 95.036774][ T57] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 95.045656][ T57] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 95.065908][ T57] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [pid 6315] munmap(0x7fbaaaa00000, 138412032) = 0 [pid 6315] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [ 95.080623][ T57] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 95.095156][ T57] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 95.107110][ T6300] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 95.118150][ T6315] loop2: detected capacity change from 0 to 65536 [pid 6315] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6315] close(3) = 0 [pid 6315] close(4) = 0 [pid 6315] mkdir("./file0", 0777) = 0 [ 95.120288][ T57] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [pid 6315] mount("/dev/loop2", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 6314] <... write resumed>) = 33554432 [ 95.154132][ T6309] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 6314] munmap(0x7fbaaaa00000, 138412032 [pid 6300] <... mount resumed>) = 0 [pid 6300] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6300] chdir("./file0") = 0 [pid 6300] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6300] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 6314] <... munmap resumed>) = 0 [ 95.195377][ T57] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 95.199822][ T6300] XFS (loop1): Ending clean mount [ 95.204870][ T6299] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 95.230351][ T6299] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [pid 6314] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6314] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6300] <... open resumed>) = 4 [pid 6299] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 6314] close(3) = 0 [pid 6314] close(4) = 0 [pid 6314] mkdir("./file0", 0777) = 0 [pid 6314] mount("/dev/loop3", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 6300] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6299] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000) = -1 EFAULT (Bad address) [ 95.245253][ T6299] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 95.247967][ T6314] loop3: detected capacity change from 0 to 65536 [ 95.255993][ T29] audit: type=1800 audit(1733456392.756:55): pid=6300 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop1" ino=41 res=0 errno=0 [ 95.279550][ T6309] XFS (loop4): Ending clean mount [pid 6309] <... mount resumed>) = 0 [pid 6299] close(3 [pid 6309] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6299] <... close resumed>) = 0 [ 95.292943][ T6315] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 95.296022][ T9] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 95.306000][ T6314] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 95.313396][ T9] XFS (loop1): Unmount and run xfs_repair [ 95.327673][ T9] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 95.335092][ T9] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [pid 6309] <... openat resumed>) = 3 [pid 6299] close(4) = 0 [pid 6309] chdir("./file0" [pid 6299] close(5 [pid 6309] <... chdir resumed>) = 0 [pid 6309] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6299] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6309] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6299] close(6 [pid 6309] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 6299] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6299] close(7) = -1 EBADF (Bad file descriptor) [pid 6299] close(8) = -1 EBADF (Bad file descriptor) [pid 6299] close(9) = -1 EBADF (Bad file descriptor) [pid 6299] close(10) = -1 EBADF (Bad file descriptor) [pid 6299] close(11) = -1 EBADF (Bad file descriptor) [pid 6299] close(12) = -1 EBADF (Bad file descriptor) [pid 6299] close(13 [pid 6309] <... open resumed>) = 4 [pid 6299] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6299] close(14) = -1 EBADF (Bad file descriptor) [ 95.344234][ T9] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 95.353507][ T9] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 95.362608][ T9] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 95.371704][ T9] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 95.380708][ T9] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [pid 6299] close(15) = -1 EBADF (Bad file descriptor) [pid 6299] close(16) = -1 EBADF (Bad file descriptor) [pid 6299] close(17) = -1 EBADF (Bad file descriptor) [pid 6309] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6299] close(18) = -1 EBADF (Bad file descriptor) [pid 6299] close(19) = -1 EBADF (Bad file descriptor) [ 95.389644][ T9] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 95.398650][ T9] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 95.404736][ T6309] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 95.407713][ T29] audit: type=1800 audit(1733456392.886:56): pid=6309 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop4" ino=41 res=0 errno=0 [ 95.419180][ T6309] XFS (loop4): Unmount and run xfs_repair [pid 6299] close(20) = -1 EBADF (Bad file descriptor) [pid 6299] close(21) = -1 EBADF (Bad file descriptor) [pid 6299] close(22) = -1 EBADF (Bad file descriptor) [pid 6299] close(23) = -1 EBADF (Bad file descriptor) [pid 6299] close(24 [pid 6300] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 6299] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6300] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000 [pid 6299] close(25 [pid 6300] <... openat resumed>) = -1 EFAULT (Bad address) [pid 6299] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6300] close(3 [pid 6299] close(26) = -1 EBADF (Bad file descriptor) [ 95.439224][ T6300] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 95.445107][ T6309] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 95.461681][ T6300] XFS (loop1): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 95.464075][ T6309] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 95.477668][ T6300] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [pid 6300] <... close resumed>) = 0 [pid 6300] close(4) = 0 [pid 6300] close(5) = -1 EBADF (Bad file descriptor) [pid 6300] close(6) = -1 EBADF (Bad file descriptor) [pid 6299] close(27 [pid 6300] close(7) = -1 EBADF (Bad file descriptor) [pid 6300] close(8) = -1 EBADF (Bad file descriptor) [pid 6300] close(9) = -1 EBADF (Bad file descriptor) [pid 6300] close(10) = -1 EBADF (Bad file descriptor) [pid 6300] close(11) = -1 EBADF (Bad file descriptor) [pid 6300] close(12) = -1 EBADF (Bad file descriptor) [pid 6300] close(13) = -1 EBADF (Bad file descriptor) [pid 6300] close(14) = -1 EBADF (Bad file descriptor) [pid 6300] close(15) = -1 EBADF (Bad file descriptor) [pid 6300] close(16 [pid 6299] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6300] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6300] close(17) = -1 EBADF (Bad file descriptor) [pid 6300] close(18) = -1 EBADF (Bad file descriptor) [pid 6300] close(19) = -1 EBADF (Bad file descriptor) [pid 6300] close(20) = -1 EBADF (Bad file descriptor) [pid 6300] close(21) = -1 EBADF (Bad file descriptor) [ 95.496719][ T6309] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 95.505736][ T6309] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 95.515147][ T6309] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 95.524321][ T6309] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 95.534204][ T6309] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [pid 6300] close(22) = -1 EBADF (Bad file descriptor) [pid 6300] close(23) = -1 EBADF (Bad file descriptor) [pid 6300] close(24) = -1 EBADF (Bad file descriptor) [pid 6300] close(25) = -1 EBADF (Bad file descriptor) [pid 6300] close(26) = -1 EBADF (Bad file descriptor) [pid 6300] close(27) = -1 EBADF (Bad file descriptor) [pid 6300] close(28) = -1 EBADF (Bad file descriptor) [pid 6300] close(29) = -1 EBADF (Bad file descriptor) [pid 6300] exit_group(0) = ? [pid 6300] +++ exited with 0 +++ [pid 6299] close(28) = -1 EBADF (Bad file descriptor) [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=13, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=48 /* 0.48 s */} --- [pid 5824] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 6299] close(29 [pid 5824] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 6315] <... mount resumed>) = 0 [pid 5824] umount2("./11/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6315] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6314] <... mount resumed>) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6315] <... openat resumed>) = 3 [pid 6314] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5824] newfstatat(AT_FDCWD, "./11/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./11/cgroup") = 0 [pid 5824] umount2("./11/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./11/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6314] <... openat resumed>) = 3 [pid 5824] unlink("./11/cgroup.cpu" [pid 6315] chdir("./file0" [pid 6314] chdir("./file0" [pid 5824] <... unlink resumed>) = 0 [pid 6314] <... chdir resumed>) = 0 [pid 5824] umount2("./11/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6314] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6314] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5824] newfstatat(AT_FDCWD, "./11/cgroup.net", [pid 6314] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6315] <... chdir resumed>) = 0 [pid 5824] unlink("./11/cgroup.net" [pid 6315] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6314] <... open resumed>) = 4 [pid 6299] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] <... unlink resumed>) = 0 [pid 6315] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6314] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5824] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6315] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./11/binderfs") = 0 [ 95.537664][ T6314] XFS (loop3): Ending clean mount [ 95.543395][ T6309] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 95.557292][ T6309] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 95.563750][ T6315] XFS (loop2): Ending clean mount [ 95.566234][ T6309] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 95.583856][ T29] audit: type=1800 audit(1733456393.086:57): pid=6314 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop3" ino=41 res=0 errno=0 [ 95.591836][ T57] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 95.615002][ T57] XFS (loop3): Unmount and run xfs_repair [ 95.621011][ T57] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 95.622471][ T6309] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [pid 5824] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6309] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 6299] exit_group(0 [pid 6309] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000 [pid 6299] <... exit_group resumed>) = ? [pid 6309] <... openat resumed>) = -1 EFAULT (Bad address) [pid 6299] +++ exited with 0 +++ [pid 6309] close(3) = 0 [pid 6309] close(4) = 0 [pid 6309] close(5) = -1 EBADF (Bad file descriptor) [pid 6309] close(6) = -1 EBADF (Bad file descriptor) [pid 6309] close(7) = -1 EBADF (Bad file descriptor) [pid 6309] close(8) = -1 EBADF (Bad file descriptor) [pid 6309] close(9) = -1 EBADF (Bad file descriptor) [pid 6309] close(10) = -1 EBADF (Bad file descriptor) [pid 6309] close(11) = -1 EBADF (Bad file descriptor) [pid 6309] close(12) = -1 EBADF (Bad file descriptor) [pid 6309] close(13) = -1 EBADF (Bad file descriptor) [pid 5821] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=47 /* 0.47 s */} --- [pid 5821] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5821] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5821] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5821] umount2("./10/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./10/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] unlink("./10/cgroup") = 0 [pid 5821] umount2("./10/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6309] close(14) = -1 EBADF (Bad file descriptor) [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./10/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] unlink("./10/cgroup.cpu") = 0 [pid 6309] close(15) = -1 EBADF (Bad file descriptor) [pid 6309] close(16 [pid 5821] umount2("./10/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6309] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6309] close(17 [pid 5821] newfstatat(AT_FDCWD, "./10/cgroup.net", [pid 6309] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5821] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6309] close(18 [pid 5821] unlink("./10/cgroup.net" [pid 6309] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5821] <... unlink resumed>) = 0 [pid 5821] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./10/binderfs", [pid 6309] close(19 [pid 5821] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6309] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5821] unlink("./10/binderfs" [pid 6309] close(20 [pid 5821] <... unlink resumed>) = 0 [pid 6309] <... close resumed>) = -1 EBADF (Bad file descriptor) [ 95.628493][ T57] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 95.643194][ T6309] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 95.652034][ T57] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 95.670329][ T57] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 95.670760][ T5824] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 95.680166][ T57] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [pid 5821] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6309] close(21) = -1 EBADF (Bad file descriptor) [pid 6309] close(22) = -1 EBADF (Bad file descriptor) [pid 6309] close(23) = -1 EBADF (Bad file descriptor) [pid 6309] close(24) = -1 EBADF (Bad file descriptor) [pid 6309] close(25) = -1 EBADF (Bad file descriptor) [pid 6309] close(26) = -1 EBADF (Bad file descriptor) [pid 6309] close(27) = -1 EBADF (Bad file descriptor) [pid 6309] close(28) = -1 EBADF (Bad file descriptor) [pid 6309] close(29) = -1 EBADF (Bad file descriptor) [pid 6309] exit_group(0) = ? [ 95.697099][ T57] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 95.706725][ T57] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 95.707060][ T5821] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 95.715575][ T57] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 95.715592][ T57] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [pid 6315] <... open resumed>) = 4 [pid 6309] +++ exited with 0 +++ [pid 6315] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=64 /* 0.64 s */} --- [pid 5826] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5826] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5826] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5826] umount2("./10/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./10/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./10/cgroup") = 0 [pid 5826] umount2("./10/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./10/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./10/cgroup.cpu") = 0 [pid 5826] umount2("./10/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./10/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./10/cgroup.net") = 0 [pid 5826] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./10/binderfs") = 0 [ 95.717139][ T6314] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 95.725396][ T29] audit: type=1800 audit(1733456393.206:58): pid=6315 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop2" ino=41 res=0 errno=0 [ 95.755161][ T6314] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 95.788631][ T6314] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [pid 5826] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6314] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 6314] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000) = -1 EFAULT (Bad address) [pid 6314] close(3) = 0 [pid 6314] close(4) = 0 [pid 6314] close(5) = -1 EBADF (Bad file descriptor) [pid 6314] close(6) = -1 EBADF (Bad file descriptor) [pid 6314] close(7) = -1 EBADF (Bad file descriptor) [ 95.800580][ T5826] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 95.835196][ T57] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 95.847604][ T57] XFS (loop2): Unmount and run xfs_repair [ 95.853397][ T57] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 95.860887][ T57] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 95.869810][ T57] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 95.879522][ T57] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 95.888522][ T57] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [pid 6314] close(8) = -1 EBADF (Bad file descriptor) [pid 6314] close(9) = -1 EBADF (Bad file descriptor) [pid 6314] close(10) = -1 EBADF (Bad file descriptor) [pid 6314] close(11) = -1 EBADF (Bad file descriptor) [pid 6314] close(12) = -1 EBADF (Bad file descriptor) [pid 6314] close(13) = -1 EBADF (Bad file descriptor) [pid 6314] close(14) = -1 EBADF (Bad file descriptor) [pid 6314] close(15) = -1 EBADF (Bad file descriptor) [pid 6314] close(16) = -1 EBADF (Bad file descriptor) [pid 6314] close(17) = -1 EBADF (Bad file descriptor) [pid 6314] close(18) = -1 EBADF (Bad file descriptor) [pid 6314] close(19) = -1 EBADF (Bad file descriptor) [pid 6314] close(20) = -1 EBADF (Bad file descriptor) [pid 6314] close(21) = -1 EBADF (Bad file descriptor) [pid 6314] close(22) = -1 EBADF (Bad file descriptor) [pid 6314] close(23) = -1 EBADF (Bad file descriptor) [pid 6314] close(24) = -1 EBADF (Bad file descriptor) [pid 6314] close(25) = -1 EBADF (Bad file descriptor) [pid 6314] close(26) = -1 EBADF (Bad file descriptor) [pid 6314] close(27) = -1 EBADF (Bad file descriptor) [pid 6314] close(28) = -1 EBADF (Bad file descriptor) [pid 6314] close(29) = -1 EBADF (Bad file descriptor) [pid 6314] exit_group(0) = ? [pid 6314] +++ exited with 0 +++ [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=55 /* 0.55 s */} --- [pid 5825] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5825] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5825] umount2("./10/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./10/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./10/cgroup") = 0 [pid 5825] umount2("./10/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./10/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./10/cgroup.cpu") = 0 [pid 5825] umount2("./10/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./10/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./10/cgroup.net") = 0 [pid 5825] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./10/binderfs" [pid 5824] <... umount2 resumed>) = 0 [pid 5821] <... umount2 resumed>) = 0 [pid 5825] <... unlink resumed>) = 0 [pid 5824] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./11/file0", [pid 5821] newfstatat(AT_FDCWD, "./10/file0", [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW [ 95.897683][ T57] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 95.906890][ T57] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 95.916768][ T57] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 95.926862][ T57] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 95.939707][ T6315] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [pid 5821] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... umount2 resumed>) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... openat resumed>) = 4 [pid 5821] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] newfstatat(AT_FDCWD, "./10/file0", [pid 5824] newfstatat(4, "", [pid 5821] <... openat resumed>) = 4 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5826] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] getdents64(4, [pid 5821] newfstatat(4, "", [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... getdents64 resumed>0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5821] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5826] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] getdents64(4, [pid 5821] getdents64(4, [pid 5826] <... openat resumed>) = 4 [pid 5824] <... getdents64 resumed>0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5821] <... getdents64 resumed>0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5826] newfstatat(4, "", [pid 5824] close(4 [pid 5821] getdents64(4, [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5824] <... close resumed>) = 0 [pid 5821] <... getdents64 resumed>0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5826] getdents64(4, [pid 5824] rmdir("./11/file0" [pid 5821] close(4 [pid 5826] <... getdents64 resumed>0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5824] <... rmdir resumed>) = 0 [pid 5821] <... close resumed>) = 0 [pid 5826] getdents64(4, [pid 5824] getdents64(3, [pid 5821] rmdir("./10/file0" [pid 5826] <... getdents64 resumed>0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5824] <... getdents64 resumed>0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5821] <... rmdir resumed>) = 0 [pid 5826] close(4 [pid 5824] close(3 [pid 5826] <... close resumed>) = 0 [pid 5824] <... close resumed>) = 0 [pid 5821] getdents64(3, [pid 5826] rmdir("./10/file0" [pid 5824] rmdir("./11" [pid 6315] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 5826] <... rmdir resumed>) = 0 [pid 5824] <... rmdir resumed>) = 0 [pid 5821] <... getdents64 resumed>0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5826] getdents64(3, [pid 5824] mkdir("./12", 0777 [pid 5821] close(3 [pid 6315] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000 [pid 5826] <... getdents64 resumed>0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5824] <... mkdir resumed>) = 0 [pid 5821] <... close resumed>) = 0 [pid 5826] close(3 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5821] rmdir("./10" [pid 5826] <... close resumed>) = 0 [pid 5824] <... openat resumed>) = 3 [pid 5821] <... rmdir resumed>) = 0 [pid 5826] rmdir("./10" [pid 5824] ioctl(3, LOOP_CLR_FD [pid 5821] mkdir("./11", 0777 [pid 5826] <... rmdir resumed>) = 0 [pid 5824] <... ioctl resumed>) = 0 [pid 5821] <... mkdir resumed>) = 0 [pid 5826] mkdir("./11", 0777 [pid 5824] close(3 [pid 5821] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6315] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5826] <... mkdir resumed>) = 0 [pid 5826] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5826] ioctl(3, LOOP_CLR_FD) = 0 [pid 5826] close(3 [pid 5821] <... openat resumed>) = 3 [pid 6315] close(3 [pid 5825] <... umount2 resumed>) = 0 [pid 5821] ioctl(3, LOOP_CLR_FD) = 0 [pid 5821] close(3 [pid 6315] <... close resumed>) = 0 [pid 6315] close(4 [pid 5825] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./10/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 95.952672][ T5825] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 95.957107][ T6315] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 95.977096][ T6315] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [pid 5825] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6315] <... close resumed>) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6315] close(5) = -1 EBADF (Bad file descriptor) [pid 5825] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6315] close(6 [pid 5825] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(4, 0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5825] getdents64(4, 0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5825] close(4) = 0 [pid 6315] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6315] close(7 [pid 5825] rmdir("./10/file0" [pid 6315] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6315] close(8 [pid 5825] <... rmdir resumed>) = 0 [pid 6315] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5825] getdents64(3, [pid 6315] close(9) = -1 EBADF (Bad file descriptor) [pid 5825] <... getdents64 resumed>0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 6315] close(10) = -1 EBADF (Bad file descriptor) [pid 5825] close(3 [pid 6315] close(11 [pid 5825] <... close resumed>) = 0 [pid 6315] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6315] close(12 [pid 5825] rmdir("./10" [pid 6315] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5825] <... rmdir resumed>) = 0 [pid 6315] close(13 [pid 5825] mkdir("./11", 0777 [pid 6315] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5825] <... mkdir resumed>) = 0 [pid 6315] close(14) = -1 EBADF (Bad file descriptor) [pid 6315] close(15) = -1 EBADF (Bad file descriptor) [pid 6315] close(16) = -1 EBADF (Bad file descriptor) [pid 6315] close(17) = -1 EBADF (Bad file descriptor) [pid 6315] close(18) = -1 EBADF (Bad file descriptor) [pid 6315] close(19) = -1 EBADF (Bad file descriptor) [pid 6315] close(20 [pid 5825] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5825] ioctl(3, LOOP_CLR_FD) = 0 [pid 5825] close(3 [pid 6315] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6315] close(21) = -1 EBADF (Bad file descriptor) [pid 6315] close(22) = -1 EBADF (Bad file descriptor) [pid 6315] close(23) = -1 EBADF (Bad file descriptor) [pid 6315] close(24) = -1 EBADF (Bad file descriptor) [pid 6315] close(25) = -1 EBADF (Bad file descriptor) [pid 6315] close(26) = -1 EBADF (Bad file descriptor) [pid 6315] close(27) = -1 EBADF (Bad file descriptor) [pid 6315] close(28) = -1 EBADF (Bad file descriptor) [pid 6315] close(29) = -1 EBADF (Bad file descriptor) [pid 6315] exit_group(0) = ? [pid 6315] +++ exited with 0 +++ [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=13, si_uid=0, si_status=0, si_utime=11 /* 0.11 s */, si_stime=45 /* 0.45 s */} --- [pid 5823] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5823] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5823] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5823] umount2("./11/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./11/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./11/cgroup") = 0 [pid 5823] umount2("./11/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./11/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./11/cgroup.cpu") = 0 [pid 5823] umount2("./11/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./11/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./11/cgroup.net") = 0 [pid 5823] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./11/binderfs") = 0 [pid 5823] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... close resumed>) = 0 [pid 5826] <... close resumed>) = 0 [pid 5821] <... close resumed>) = 0 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5821] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6353 attached ./strace-static-x86_64: Process 6352 attached [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6354 attached [pid 6353] set_robust_list(0x55558159a660, 24 [pid 6352] set_robust_list(0x55558159a660, 24 [pid 5824] <... clone resumed>, child_tidptr=0x55558159a650) = 14 [pid 5821] <... clone resumed>, child_tidptr=0x55558159a650) = 13 [ 96.403346][ T5823] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 6352] <... set_robust_list resumed>) = 0 [pid 6354] set_robust_list(0x55558159a660, 24 [pid 6353] <... set_robust_list resumed>) = 0 [pid 5826] <... clone resumed>, child_tidptr=0x55558159a650) = 13 [pid 6354] <... set_robust_list resumed>) = 0 [pid 6354] chdir("./11") = 0 [pid 6354] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6354] setpgid(0, 0) = 0 [pid 6354] symlink("/syzcgroup/unified/syz4", "./cgroup") = 0 [pid 6354] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu") = 0 [pid 6354] symlink("/syzcgroup/net/syz4", "./cgroup.net") = 0 [pid 6354] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5823] <... umount2 resumed>) = 0 [pid 6354] write(3, "1000", 4 [pid 5823] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6354] <... write resumed>) = 4 [pid 6354] close(3 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6354] <... close resumed>) = 0 [pid 5823] newfstatat(AT_FDCWD, "./11/file0", [pid 6354] symlink("/dev/binderfs", "./binderfs"executing program executing program executing program [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6354] <... symlink resumed>) = 0 [pid 6353] chdir("./12" [pid 6352] chdir("./11" [pid 6354] write(1, "executing program\n", 18 [pid 5823] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6354] <... write resumed>) = 18 [pid 6353] <... chdir resumed>) = 0 [pid 6352] <... chdir resumed>) = 0 [pid 6354] memfd_create("syzkaller", 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6354] <... memfd_create resumed>) = 3 [pid 6353] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6352] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6354] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6353] <... prctl resumed>) = 0 [pid 6352] <... prctl resumed>) = 0 [pid 5823] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6354] <... mmap resumed>) = 0x7fbaaaa00000 [pid 6353] setpgid(0, 0 [pid 6352] setpgid(0, 0 [pid 5823] <... openat resumed>) = 4 [pid 6353] <... setpgid resumed>) = 0 [pid 6352] <... setpgid resumed>) = 0 [pid 5823] newfstatat(4, "", [pid 6353] symlink("/syzcgroup/unified/syz1", "./cgroup" [pid 6352] symlink("/syzcgroup/unified/syz0", "./cgroup" [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 6353] <... symlink resumed>) = 0 [pid 6352] <... symlink resumed>) = 0 [pid 5823] getdents64(4, [pid 6353] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu" [pid 6352] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu" [pid 5823] <... getdents64 resumed>0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 6353] <... symlink resumed>) = 0 [pid 6352] <... symlink resumed>) = 0 [pid 5823] getdents64(4, [pid 6353] symlink("/syzcgroup/net/syz1", "./cgroup.net" [pid 6352] symlink("/syzcgroup/net/syz0", "./cgroup.net" [pid 5823] <... getdents64 resumed>0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 6353] <... symlink resumed>) = 0 [pid 6352] <... symlink resumed>) = 0 [pid 5823] close(4 [pid 6353] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6352] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5823] <... close resumed>) = 0 [pid 6353] <... openat resumed>) = 3 [pid 6352] <... openat resumed>) = 3 [pid 5823] rmdir("./11/file0" [pid 6353] write(3, "1000", 4 [pid 6352] write(3, "1000", 4 [pid 5823] <... rmdir resumed>) = 0 [pid 6353] <... write resumed>) = 4 [pid 6352] <... write resumed>) = 4 [pid 5823] getdents64(3, [pid 6353] close(3 [pid 6352] close(3 [pid 5823] <... getdents64 resumed>0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 6353] <... close resumed>) = 0 [pid 6352] <... close resumed>) = 0 [pid 5823] close(3 [pid 6353] symlink("/dev/binderfs", "./binderfs" [pid 6352] symlink("/dev/binderfs", "./binderfs" [pid 5823] <... close resumed>) = 0 [pid 6353] <... symlink resumed>) = 0 [pid 6352] <... symlink resumed>) = 0 [pid 5823] rmdir("./11" [pid 6353] write(1, "executing program\n", 18 [pid 6352] write(1, "executing program\n", 18 [pid 5823] <... rmdir resumed>) = 0 [pid 6353] <... write resumed>) = 18 [pid 6352] <... write resumed>) = 18 [pid 5823] mkdir("./12", 0777 [pid 6353] memfd_create("syzkaller", 0 [pid 6352] memfd_create("syzkaller", 0 [pid 5823] <... mkdir resumed>) = 0 [pid 6353] <... memfd_create resumed>) = 3 [pid 6352] <... memfd_create resumed>) = 3 [pid 5825] <... close resumed>) = 0 [pid 5823] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6353] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6352] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5823] <... openat resumed>) = 3 [pid 6353] <... mmap resumed>) = 0x7fbaaaa00000 [pid 6352] <... mmap resumed>) = 0x7fbaaaa00000 [pid 5823] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 6355 attached ) = 0 [pid 6355] set_robust_list(0x55558159a660, 24 [pid 5825] <... clone resumed>, child_tidptr=0x55558159a650) = 13 [pid 5823] close(3 [pid 6355] <... set_robust_list resumed>) = 0 [pid 6355] chdir("./11") = 0 [pid 6355] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6355] setpgid(0, 0) = 0 [pid 6355] symlink("/syzcgroup/unified/syz3", "./cgroup") = 0 [pid 6355] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu") = 0 [pid 6355] symlink("/syzcgroup/net/syz3", "./cgroup.net") = 0 [pid 6352] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 6355] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6355] write(3, "1000", 4) = 4 [pid 6355] close(3) = 0 [pid 6355] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6355] write(1, "executing program\n", 18) = 18 [pid 6355] memfd_create("syzkaller", 0) = 3 [pid 6355] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6354] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 6353] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 5823] <... close resumed>) = 0 [pid 6355] <... mmap resumed>) = 0x7fbaaaa00000 [pid 6352] <... write resumed>) = 33554432 [pid 6352] munmap(0x7fbaaaa00000, 138412032 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558159a650) = 14 [pid 6352] <... munmap resumed>) = 0 ./strace-static-x86_64: Process 6356 attached [pid 6353] <... write resumed>) = 33554432 [pid 6352] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6356] set_robust_list(0x55558159a660, 24 [pid 6353] munmap(0x7fbaaaa00000, 138412032 [pid 6352] <... openat resumed>) = 4 [pid 6356] <... set_robust_list resumed>) = 0 [pid 6352] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6356] chdir("./12" [pid 6352] close(3 [pid 6356] <... chdir resumed>) = 0 [pid 6352] <... close resumed>) = 0 [pid 6356] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6352] close(4 [pid 6356] setpgid(0, 0 [pid 6352] <... close resumed>) = 0 [pid 6352] mkdir("./file0", 0777 [pid 6356] <... setpgid resumed>) = 0 [pid 6353] <... munmap resumed>) = 0 [pid 6352] <... mkdir resumed>) = 0 [pid 6356] symlink("/syzcgroup/unified/syz2", "./cgroup" [pid 6353] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6352] mount("/dev/loop0", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 6356] <... symlink resumed>) = 0 [pid 6353] <... openat resumed>) = 4 [pid 6356] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu" [pid 6353] ioctl(4, LOOP_SET_FD, 3 [pid 6356] <... symlink resumed>) = 0 [pid 6356] symlink("/syzcgroup/net/syz2", "./cgroup.net" [pid 6353] <... ioctl resumed>) = 0 [pid 6353] close(3 [pid 6356] <... symlink resumed>) = 0 [ 97.318905][ T6352] loop0: detected capacity change from 0 to 65536 [ 97.354544][ T6353] loop1: detected capacity change from 0 to 65536 [pid 6353] <... close resumed>) = 0 [pid 6356] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6355] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 6353] close(4 [pid 6356] <... openat resumed>) = 3 [pid 6356] write(3, "1000", 4) = 4 [pid 6356] close(3) = 0 [pid 6356] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6353] <... close resumed>) = 0 [pid 6356] write(1, "executing program\n", 18) = 18 [pid 6353] mkdir("./file0", 0777) = 0 [pid 6353] mount("/dev/loop1", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid"executing program [pid 6356] memfd_create("syzkaller", 0) = 3 [ 97.457814][ T6352] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 6356] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6354] <... write resumed>) = 33554432 [pid 6356] <... mmap resumed>) = 0x7fbaaaa00000 [pid 6354] munmap(0x7fbaaaa00000, 138412032) = 0 [pid 6354] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6354] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6354] close(3) = 0 [pid 6354] close(4) = 0 [pid 6354] mkdir("./file0", 0777) = 0 [ 97.633216][ T6354] loop4: detected capacity change from 0 to 65536 [pid 6354] mount("/dev/loop4", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 6355] <... write resumed>) = 33554432 [pid 6355] munmap(0x7fbaaaa00000, 138412032) = 0 [pid 6352] <... mount resumed>) = 0 [pid 6355] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6352] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6355] ioctl(4, LOOP_SET_FD, 3 [pid 6352] <... openat resumed>) = 3 [pid 6352] chdir("./file0") = 0 [pid 6352] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6352] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 6355] <... ioctl resumed>) = 0 [pid 6352] <... open resumed>) = 4 [ 97.761564][ T6352] XFS (loop0): Ending clean mount [ 97.770147][ T6355] loop3: detected capacity change from 0 to 65536 [ 97.776708][ T29] audit: type=1800 audit(1733456395.266:59): pid=6352 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop0" ino=41 res=0 errno=0 [ 97.779190][ T5966] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [pid 6352] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6355] close(3) = 0 [pid 6355] close(4) = 0 [pid 6355] mkdir("./file0", 0777) = 0 [ 97.808051][ T5966] XFS (loop0): Unmount and run xfs_repair [ 97.813789][ T5966] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 97.821459][ T5966] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 97.830468][ T5966] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 97.839907][ T5966] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 97.848867][ T5966] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 97.857824][ T5966] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 97.866754][ T5966] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 97.875631][ T5966] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 97.884574][ T5966] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 97.894255][ T6352] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [pid 6355] mount("/dev/loop3", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 6356] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 6352] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [ 97.925223][ T6354] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 97.934241][ T6353] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 97.944947][ T6352] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 97.960209][ T6352] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [pid 6352] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000) = -1 EFAULT (Bad address) [pid 6352] close(3) = 0 [pid 6352] close(4) = 0 [pid 6352] close(5) = -1 EBADF (Bad file descriptor) [pid 6352] close(6) = -1 EBADF (Bad file descriptor) [pid 6352] close(7) = -1 EBADF (Bad file descriptor) [pid 6352] close(8) = -1 EBADF (Bad file descriptor) [pid 6352] close(9) = -1 EBADF (Bad file descriptor) [pid 6352] close(10) = -1 EBADF (Bad file descriptor) [pid 6352] close(11) = -1 EBADF (Bad file descriptor) [pid 6352] close(12) = -1 EBADF (Bad file descriptor) [pid 6352] close(13) = -1 EBADF (Bad file descriptor) [pid 6352] close(14) = -1 EBADF (Bad file descriptor) [pid 6352] close(15) = -1 EBADF (Bad file descriptor) [pid 6352] close(16) = -1 EBADF (Bad file descriptor) [pid 6352] close(17) = -1 EBADF (Bad file descriptor) [pid 6352] close(18) = -1 EBADF (Bad file descriptor) [pid 6352] close(19) = -1 EBADF (Bad file descriptor) [pid 6352] close(20) = -1 EBADF (Bad file descriptor) [pid 6352] close(21) = -1 EBADF (Bad file descriptor) [pid 6352] close(22) = -1 EBADF (Bad file descriptor) [pid 6352] close(23) = -1 EBADF (Bad file descriptor) [pid 6352] close(24) = -1 EBADF (Bad file descriptor) [pid 6352] close(25) = -1 EBADF (Bad file descriptor) [pid 6352] close(26) = -1 EBADF (Bad file descriptor) [pid 6352] close(27) = -1 EBADF (Bad file descriptor) [pid 6352] close(28) = -1 EBADF (Bad file descriptor) [pid 6352] close(29) = -1 EBADF (Bad file descriptor) [pid 6352] exit_group(0) = ? [pid 6352] +++ exited with 0 +++ [pid 6353] <... mount resumed>) = 0 [pid 6353] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5821] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=13, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=47 /* 0.47 s */} --- [pid 6353] <... openat resumed>) = 3 [pid 6353] chdir("./file0") = 0 [ 97.984853][ T6355] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 98.017383][ T6353] XFS (loop1): Ending clean mount [pid 6354] <... mount resumed>) = 0 [pid 6353] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5821] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6354] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6353] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6354] <... openat resumed>) = 3 [pid 5821] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6354] chdir("./file0" [pid 6353] <... open resumed>) = 4 [ 98.038641][ T6354] XFS (loop4): Ending clean mount [ 98.049696][ T29] audit: type=1800 audit(1733456395.546:60): pid=6353 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop1" ino=41 res=0 errno=0 [pid 6354] <... chdir resumed>) = 0 [pid 6353] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5821] <... openat resumed>) = 3 [pid 6354] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5821] newfstatat(3, "", [pid 6354] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5821] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 6354] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 5821] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5821] umount2("./11/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6355] <... mount resumed>) = 0 [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./11/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6355] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5821] unlink("./11/cgroup" [pid 6355] <... openat resumed>) = 3 [pid 6355] chdir("./file0" [pid 5821] <... unlink resumed>) = 0 [pid 5821] umount2("./11/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6355] <... chdir resumed>) = 0 [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6355] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6354] <... open resumed>) = 4 [pid 6355] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6354] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5821] newfstatat(AT_FDCWD, "./11/cgroup.cpu", [pid 6355] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 5821] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] unlink("./11/cgroup.cpu") = 0 [pid 5821] umount2("./11/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./11/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] unlink("./11/cgroup.net") = 0 [ 98.082440][ T9] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 98.098800][ T9] XFS (loop1): Unmount and run xfs_repair [ 98.108925][ T6355] XFS (loop3): Ending clean mount [ 98.124188][ T5879] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [pid 5821] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6355] <... open resumed>) = 4 [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./11/binderfs", [pid 6355] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5821] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] unlink("./11/binderfs") = 0 [ 98.138590][ T9] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 98.148729][ T8] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 98.161098][ T8] XFS (loop3): Unmount and run xfs_repair [ 98.167667][ T9] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 98.178307][ T29] audit: type=1800 audit(1733456395.616:61): pid=6354 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop4" ino=41 res=0 errno=0 [ 98.198822][ T5821] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 98.207528][ T5879] XFS (loop4): Unmount and run xfs_repair [ 98.213326][ T8] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 98.216632][ T29] audit: type=1800 audit(1733456395.636:62): pid=6355 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop3" ino=41 res=0 errno=0 [ 98.220819][ T5879] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 98.249270][ T9] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 98.258660][ T8] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 98.278734][ T9] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [pid 5821] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6356] <... write resumed>) = 33554432 [pid 5821] <... umount2 resumed>) = 0 [ 98.288372][ T8] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 98.311248][ T9] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 98.320554][ T8] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 98.329653][ T5879] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [pid 6356] munmap(0x7fbaaaa00000, 138412032 [pid 5821] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6356] <... munmap resumed>) = 0 [pid 5821] newfstatat(AT_FDCWD, "./11/file0", [pid 6356] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6356] ioctl(4, LOOP_SET_FD, 3 [pid 5821] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 98.339734][ T9] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 98.349810][ T8] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 98.362559][ T5879] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 98.371938][ T9] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 98.378835][ T6356] loop2: detected capacity change from 0 to 65536 [pid 6356] <... ioctl resumed>) = 0 [pid 5821] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6356] close(3) = 0 [pid 6356] close(4 [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5821] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6356] <... close resumed>) = 0 [pid 6356] mkdir("./file0", 0777 [pid 5821] newfstatat(4, "", [pid 6356] <... mkdir resumed>) = 0 [pid 5821] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 6356] mount("/dev/loop2", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 5821] getdents64(4, 0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5821] getdents64(4, 0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5821] close(4) = 0 [pid 5821] rmdir("./11/file0") = 0 [pid 5821] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5821] close(3) = 0 [ 98.381049][ T8] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 98.396175][ T5879] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 98.405195][ T9] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 98.417145][ T8] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 98.426158][ T8] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [pid 5821] rmdir("./11") = 0 [pid 5821] mkdir("./12", 0777) = 0 [pid 5821] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5821] ioctl(3, LOOP_CLR_FD) = 0 [ 98.435655][ T5879] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 98.444680][ T9] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 98.453949][ T8] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 98.463613][ T5879] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 98.487359][ T6353] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 98.503788][ T5879] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 98.503936][ T6353] XFS (loop1): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 98.526654][ T5879] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 98.528401][ T6355] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 98.536250][ T5879] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 98.557064][ T6354] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 98.559675][ T6356] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 98.569196][ T6353] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 98.592475][ T6355] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 98.609030][ T6354] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 98.629259][ T6355] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [pid 5821] close(3 [pid 6353] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 6353] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000) = -1 EFAULT (Bad address) [pid 6353] close(3) = 0 [pid 6353] close(4) = 0 [pid 6353] close(5) = -1 EBADF (Bad file descriptor) [pid 6353] close(6) = -1 EBADF (Bad file descriptor) [pid 6353] close(7) = -1 EBADF (Bad file descriptor) [pid 6353] close(8) = -1 EBADF (Bad file descriptor) [pid 6353] close(9) = -1 EBADF (Bad file descriptor) [pid 6353] close(10) = -1 EBADF (Bad file descriptor) [pid 6353] close(11) = -1 EBADF (Bad file descriptor) [pid 6353] close(12) = -1 EBADF (Bad file descriptor) [pid 6353] close(13) = -1 EBADF (Bad file descriptor) [pid 6353] close(14) = -1 EBADF (Bad file descriptor) [pid 6353] close(15) = -1 EBADF (Bad file descriptor) [pid 6353] close(16) = -1 EBADF (Bad file descriptor) [pid 6353] close(17) = -1 EBADF (Bad file descriptor) [pid 6353] close(18) = -1 EBADF (Bad file descriptor) [pid 6353] close(19) = -1 EBADF (Bad file descriptor) [pid 6353] close(20) = -1 EBADF (Bad file descriptor) [pid 6353] close(21) = -1 EBADF (Bad file descriptor) [pid 6353] close(22) = -1 EBADF (Bad file descriptor) [pid 6353] close(23) = -1 EBADF (Bad file descriptor) [pid 6353] close(24) = -1 EBADF (Bad file descriptor) [pid 6353] close(25) = -1 EBADF (Bad file descriptor) [pid 6353] close(26) = -1 EBADF (Bad file descriptor) [pid 6353] close(27) = -1 EBADF (Bad file descriptor) [pid 6353] close(28) = -1 EBADF (Bad file descriptor) [pid 6353] close(29) = -1 EBADF (Bad file descriptor) [pid 6353] exit_group(0) = ? [pid 6353] +++ exited with 0 +++ [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=14, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=52 /* 0.52 s */} --- [pid 5824] restart_syscall(<... resuming interrupted clone ...> [pid 6355] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 5824] <... restart_syscall resumed>) = 0 [pid 5824] umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6355] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6355] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5824] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6355] close(3 [pid 5824] <... openat resumed>) = 3 [pid 6355] <... close resumed>) = 0 [pid 5824] newfstatat(3, "", [pid 6355] close(4 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 6355] <... close resumed>) = 0 [pid 5824] getdents64(3, [pid 6355] close(5 [pid 5824] <... getdents64 resumed>0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 6355] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] umount2("./12/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6355] close(6 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6355] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] newfstatat(AT_FDCWD, "./12/cgroup", [pid 6355] close(7 [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6355] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] unlink("./12/cgroup" [pid 6355] close(8 [pid 5824] <... unlink resumed>) = 0 [pid 6355] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] umount2("./12/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6355] close(9 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6355] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] newfstatat(AT_FDCWD, "./12/cgroup.cpu", [pid 6355] close(10 [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6355] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] unlink("./12/cgroup.cpu" [pid 6355] close(11 [pid 5824] <... unlink resumed>) = 0 [pid 6355] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] umount2("./12/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6355] close(12 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6355] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] newfstatat(AT_FDCWD, "./12/cgroup.net", [pid 6355] close(13 [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6355] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] unlink("./12/cgroup.net" [pid 6355] close(14 [pid 5824] <... unlink resumed>) = 0 [pid 6355] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6355] close(15 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6355] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] newfstatat(AT_FDCWD, "./12/binderfs", [pid 6355] close(16 [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6355] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] unlink("./12/binderfs" [pid 6355] close(17 [pid 5824] <... unlink resumed>) = 0 [pid 6355] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6355] close(18) = -1 EBADF (Bad file descriptor) [pid 6355] close(19) = -1 EBADF (Bad file descriptor) [pid 6355] close(20) = -1 EBADF (Bad file descriptor) [pid 6355] close(21) = -1 EBADF (Bad file descriptor) [pid 6355] close(22) = -1 EBADF (Bad file descriptor) [pid 6355] close(23) = -1 EBADF (Bad file descriptor) [pid 6355] close(24) = -1 EBADF (Bad file descriptor) [pid 6355] close(25) = -1 EBADF (Bad file descriptor) [pid 6355] close(26) = -1 EBADF (Bad file descriptor) [pid 6355] close(27) = -1 EBADF (Bad file descriptor) [pid 6355] close(28) = -1 EBADF (Bad file descriptor) [pid 6355] close(29) = -1 EBADF (Bad file descriptor) [pid 6355] exit_group(0) = ? [pid 6355] +++ exited with 0 +++ [pid 6354] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 6354] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000 [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=13, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=48 /* 0.48 s */} --- [pid 6354] <... openat resumed>) = -1 EFAULT (Bad address) [pid 6354] close(3 [pid 5821] <... close resumed>) = 0 [pid 6354] <... close resumed>) = 0 [pid 5825] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6397 attached [pid 6354] close(4 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6397] set_robust_list(0x55558159a660, 24 [pid 6354] <... close resumed>) = 0 [pid 5825] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5821] <... clone resumed>, child_tidptr=0x55558159a650) = 14 [pid 6397] <... set_robust_list resumed>) = 0 [pid 6354] close(5 [pid 5825] <... openat resumed>) = 3 [pid 6397] chdir("./12" [pid 6354] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5825] newfstatat(3, "", [pid 6397] <... chdir resumed>) = 0 [pid 6397] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6354] close(6 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 6397] <... prctl resumed>) = 0 [pid 6354] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5825] getdents64(3, [pid 6397] setpgid(0, 0 [pid 5825] <... getdents64 resumed>0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 6397] <... setpgid resumed>) = 0 [pid 6354] close(7 [pid 5825] umount2("./11/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6397] symlink("/syzcgroup/unified/syz0", "./cgroup" [pid 6354] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6397] <... symlink resumed>) = 0 [pid 6354] close(8 [pid 5825] newfstatat(AT_FDCWD, "./11/cgroup", [pid 6397] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu" [pid 6354] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6354] close(9 [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6354] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5825] unlink("./11/cgroup" [pid 6354] close(10 [pid 6397] <... symlink resumed>) = 0 [pid 6354] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5825] <... unlink resumed>) = 0 [pid 6397] symlink("/syzcgroup/net/syz0", "./cgroup.net" [pid 6354] close(11 [pid 5825] umount2("./11/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6397] <... symlink resumed>) = 0 [pid 6354] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... umount2 resumed>) = 0 [pid 5825] newfstatat(AT_FDCWD, "./11/cgroup.cpu", [pid 6354] close(12 [pid 6397] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6354] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6397] <... openat resumed>) = 3 [pid 6354] close(13 [pid 5825] unlink("./11/cgroup.cpu" [pid 6354] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6397] write(3, "1000", 4 [pid 6354] close(14 [pid 5825] <... unlink resumed>) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6397] <... write resumed>) = 4 [pid 6354] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] newfstatat(AT_FDCWD, "./12/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 98.643032][ T6354] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 98.672043][ T5824] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 5824] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5824] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(4, 0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 6397] close(3 [pid 6354] close(15 [pid 5824] getdents64(4, [pid 6354] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] <... getdents64 resumed>0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 6354] close(16 [pid 6397] <... close resumed>) = 0 [pid 6354] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6397] symlink("/dev/binderfs", "./binderfs" [pid 6354] close(17 [pid 5825] umount2("./11/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6354] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6397] <... symlink resumed>) = 0 [pid 6354] close(18 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] close(4 [pid 6397] write(1, "executing program\n", 18 [pid 6356] <... mount resumed>) = 0 [pid 6354] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5825] newfstatat(AT_FDCWD, "./11/cgroup.net", [pid 5824] <... close resumed>) = 0 [pid 5824] rmdir("./12/file0") = 0 [pid 5824] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 executing program [pid 5824] close(3 [pid 6397] <... write resumed>) = 18 [pid 6356] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6354] close(19 [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... close resumed>) = 0 [pid 6397] memfd_create("syzkaller", 0 [pid 6356] <... openat resumed>) = 3 [pid 6397] <... memfd_create resumed>) = 3 [pid 6354] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5825] unlink("./11/cgroup.net" [pid 5824] rmdir("./12" [pid 6397] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6356] chdir("./file0" [pid 6354] close(20 [pid 5825] <... unlink resumed>) = 0 [pid 5824] <... rmdir resumed>) = 0 [pid 6397] <... mmap resumed>) = 0x7fbaaaa00000 [pid 6356] <... chdir resumed>) = 0 [pid 6354] <... close resumed>) = -1 EBADF (Bad file descriptor) [ 98.714880][ T6356] XFS (loop2): Ending clean mount [pid 5825] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] mkdir("./13", 0777 [pid 6356] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6354] close(21 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6356] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6354] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] <... mkdir resumed>) = 0 [pid 6356] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 6354] close(22 [pid 5825] newfstatat(AT_FDCWD, "./11/binderfs", [pid 6354] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6354] close(23 [pid 5825] unlink("./11/binderfs" [pid 6354] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6354] close(24) = -1 EBADF (Bad file descriptor) [pid 5825] <... unlink resumed>) = 0 [pid 6356] <... open resumed>) = 4 [pid 6354] close(25 [pid 5825] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6356] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6354] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6354] close(26) = -1 EBADF (Bad file descriptor) [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6354] close(27) = -1 EBADF (Bad file descriptor) [pid 6354] close(28) = -1 EBADF (Bad file descriptor) [pid 6354] close(29) = -1 EBADF (Bad file descriptor) [pid 6354] exit_group(0) = ? [pid 6354] +++ exited with 0 +++ [pid 5824] <... openat resumed>) = 3 [ 98.760336][ T29] audit: type=1800 audit(1733456396.256:63): pid=6356 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop2" ino=41 res=0 errno=0 [ 98.772471][ T8] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 98.796468][ T5825] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 5824] ioctl(3, LOOP_CLR_FD) = 0 [pid 5824] close(3 [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=13, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=49 /* 0.49 s */} --- [pid 5826] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5826] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5826] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5826] umount2("./11/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./11/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./11/cgroup") = 0 [pid 5826] umount2("./11/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./11/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./11/cgroup.cpu") = 0 [pid 5826] umount2("./11/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./11/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./11/cgroup.net") = 0 [pid 5826] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./11/binderfs") = 0 [ 98.808078][ T8] XFS (loop2): Unmount and run xfs_repair [ 98.813838][ T8] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 98.827829][ T8] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 98.851404][ T5826] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 98.877602][ T8] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 98.886774][ T8] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 98.895655][ T8] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 98.904843][ T8] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 98.914394][ T8] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 98.923538][ T8] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 98.932690][ T8] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 98.943277][ T6356] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 98.958162][ T6356] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [pid 5826] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6356] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 6356] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000) = -1 EFAULT (Bad address) [pid 6356] close(3) = 0 [pid 6356] close(4) = 0 [pid 6356] close(5) = -1 EBADF (Bad file descriptor) [pid 6356] close(6) = -1 EBADF (Bad file descriptor) [pid 6356] close(7) = -1 EBADF (Bad file descriptor) [pid 6356] close(8) = -1 EBADF (Bad file descriptor) [pid 6356] close(9) = -1 EBADF (Bad file descriptor) [pid 6356] close(10) = -1 EBADF (Bad file descriptor) [pid 6356] close(11) = -1 EBADF (Bad file descriptor) [pid 6356] close(12) = -1 EBADF (Bad file descriptor) [pid 6356] close(13) = -1 EBADF (Bad file descriptor) [pid 6356] close(14) = -1 EBADF (Bad file descriptor) [pid 6356] close(15) = -1 EBADF (Bad file descriptor) [pid 6356] close(16) = -1 EBADF (Bad file descriptor) [pid 6356] close(17) = -1 EBADF (Bad file descriptor) [pid 6356] close(18) = -1 EBADF (Bad file descriptor) [pid 6356] close(19) = -1 EBADF (Bad file descriptor) [pid 6356] close(20) = -1 EBADF (Bad file descriptor) [pid 6356] close(21) = -1 EBADF (Bad file descriptor) [pid 5826] <... umount2 resumed>) = 0 [pid 5825] <... umount2 resumed>) = 0 [pid 6356] close(22) = -1 EBADF (Bad file descriptor) [pid 6356] close(23) = -1 EBADF (Bad file descriptor) [pid 6356] close(24) = -1 EBADF (Bad file descriptor) [pid 6356] close(25) = -1 EBADF (Bad file descriptor) [pid 6356] close(26) = -1 EBADF (Bad file descriptor) [pid 6356] close(27) = -1 EBADF (Bad file descriptor) [pid 6356] close(28) = -1 EBADF (Bad file descriptor) [pid 6356] close(29) = -1 EBADF (Bad file descriptor) [pid 6356] exit_group(0 [pid 5826] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6356] <... exit_group resumed>) = ? [pid 6356] +++ exited with 0 +++ [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=14, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=52 /* 0.52 s */} --- [pid 5823] umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... openat resumed>) = 3 [pid 5825] newfstatat(AT_FDCWD, "./11/file0", [pid 5826] newfstatat(AT_FDCWD, "./11/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] newfstatat(3, "", [pid 5825] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5826] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] <... openat resumed>) = 4 [ 98.972877][ T6356] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [pid 5826] <... openat resumed>) = 4 [pid 5825] newfstatat(4, "", [pid 5823] getdents64(3, [pid 5826] newfstatat(4, "", [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5824] <... close resumed>) = 0 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558159a650) = 15 [pid 5823] <... getdents64 resumed>0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(4, [pid 5823] umount2("./12/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./12/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./12/cgroup") = 0 [pid 5823] umount2("./12/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./12/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./12/cgroup.cpu") = 0 [pid 5823] umount2("./12/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6397] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 5823] newfstatat(AT_FDCWD, "./12/cgroup.net", ./strace-static-x86_64: Process 6398 attached {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./12/cgroup.net") = 0 [pid 5823] umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] getdents64(4, [pid 5825] <... getdents64 resumed>0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5823] newfstatat(AT_FDCWD, "./12/binderfs", [pid 5826] <... getdents64 resumed>0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5825] getdents64(4, [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] getdents64(4, [pid 5825] <... getdents64 resumed>0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5823] unlink("./12/binderfs" [pid 5826] <... getdents64 resumed>0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5825] close(4 [pid 5823] <... unlink resumed>) = 0 [pid 5826] close(4 [pid 5825] <... close resumed>) = 0 [pid 5823] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... close resumed>) = 0 [pid 5825] rmdir("./11/file0" [pid 5826] rmdir("./11/file0" [pid 5825] <... rmdir resumed>) = 0 [pid 5826] <... rmdir resumed>) = 0 [pid 5825] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5825] close(3) = 0 [pid 5826] getdents64(3, [pid 5825] rmdir("./11") = 0 [pid 5825] mkdir("./12", 0777) = 0 [pid 5826] <... getdents64 resumed>0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5825] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5826] close(3 [pid 5825] <... openat resumed>) = 3 [pid 5826] <... close resumed>) = 0 [pid 5825] ioctl(3, LOOP_CLR_FD [pid 5826] rmdir("./11" [pid 5825] <... ioctl resumed>) = 0 [pid 5826] <... rmdir resumed>) = 0 [pid 5825] close(3 [pid 5826] mkdir("./12", 0777) = 0 [pid 5826] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5826] ioctl(3, LOOP_CLR_FD) = 0 [ 99.141357][ T5823] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 5826] close(3 [pid 6398] set_robust_list(0x55558159a660, 24 [pid 6397] <... write resumed>) = 33554432 [pid 5826] <... close resumed>) = 0 [pid 6397] munmap(0x7fbaaaa00000, 138412032 [pid 6398] <... set_robust_list resumed>) = 0 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6400 attached , child_tidptr=0x55558159a650) = 14 [pid 6398] chdir("./13" [pid 6400] set_robust_list(0x55558159a660, 24) = 0 [pid 6398] <... chdir resumed>) = 0 [pid 6397] <... munmap resumed>) = 0 [pid 6400] chdir("./12" [pid 6398] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6400] <... chdir resumed>) = 0 [pid 6400] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6398] setpgid(0, 0) = 0 [pid 6400] <... prctl resumed>) = 0 [pid 6398] symlink("/syzcgroup/unified/syz1", "./cgroup") = 0 [pid 5823] <... umount2 resumed>) = 0 [pid 6398] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu" [pid 6400] setpgid(0, 0 [pid 6398] <... symlink resumed>) = 0 [pid 6397] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5823] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6400] <... setpgid resumed>) = 0 [pid 6398] symlink("/syzcgroup/net/syz1", "./cgroup.net" [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6400] symlink("/syzcgroup/unified/syz4", "./cgroup" [pid 6398] <... symlink resumed>) = 0 [pid 6397] <... openat resumed>) = 4 [pid 5823] newfstatat(AT_FDCWD, "./12/file0", [pid 6398] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6400] <... symlink resumed>) = 0 [pid 6398] <... openat resumed>) = 3 [pid 6397] ioctl(4, LOOP_SET_FD, 3 [pid 5823] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6400] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu" [pid 6398] write(3, "1000", 4 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6398] <... write resumed>) = 4 [pid 5823] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6398] close(3 [pid 6400] <... symlink resumed>) = 0 [pid 6398] <... close resumed>) = 0 [pid 6397] <... ioctl resumed>) = 0 [pid 5823] <... openat resumed>) = 4 [pid 6398] symlink("/dev/binderfs", "./binderfs" [pid 5823] newfstatat(4, "", [pid 6400] symlink("/syzcgroup/net/syz4", "./cgroup.net" [pid 6398] <... symlink resumed>) = 0 [pid 6397] close(3 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 executing program [pid 6400] <... symlink resumed>) = 0 [pid 6398] write(1, "executing program\n", 18 [pid 6397] <... close resumed>) = 0 [pid 5823] getdents64(4, [pid 6400] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6398] <... write resumed>) = 18 [pid 5823] <... getdents64 resumed>0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 6400] <... openat resumed>) = 3 [pid 6398] memfd_create("syzkaller", 0 [pid 6397] close(4 [pid 5823] getdents64(4, [pid 6400] write(3, "1000", 4 [pid 6398] <... memfd_create resumed>) = 3 [pid 5823] <... getdents64 resumed>0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 6400] <... write resumed>) = 4 [pid 6398] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5823] close(4 [pid 6400] close(3) = 0 [pid 6397] <... close resumed>) = 0 [pid 5823] <... close resumed>) = 0 [pid 6397] mkdir("./file0", 0777) = 0 [pid 6397] mount("/dev/loop0", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 5823] rmdir("./12/file0") = 0 [pid 6400] symlink("/dev/binderfs", "./binderfs" [pid 6398] <... mmap resumed>) = 0x7fbaaaa00000 [pid 5823] getdents64(3, [pid 6400] <... symlink resumed>) = 0 [pid 5823] <... getdents64 resumed>0x55558159b6f0 /* 0 entries */, 32768) = 0 [ 99.486273][ T6397] loop0: detected capacity change from 0 to 65536 [pid 6400] write(1, "executing program\n", 18 [pid 5823] close(3executing program [pid 6400] <... write resumed>) = 18 [pid 5823] <... close resumed>) = 0 [pid 6400] memfd_create("syzkaller", 0 [pid 5823] rmdir("./12" [pid 6400] <... memfd_create resumed>) = 3 [pid 5823] <... rmdir resumed>) = 0 [pid 6400] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5823] mkdir("./13", 0777) = 0 [pid 6400] <... mmap resumed>) = 0x7fbaaaa00000 [pid 5825] <... close resumed>) = 0 [pid 5823] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5823] ioctl(3, LOOP_CLR_FD) = 0 [pid 5823] close(3 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558159a650) = 14 ./strace-static-x86_64: Process 6406 attached [pid 6406] set_robust_list(0x55558159a660, 24) = 0 [pid 6406] chdir("./12") = 0 [pid 5823] <... close resumed>) = 0 [pid 6406] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6408 attached [pid 6406] <... prctl resumed>) = 0 [pid 5823] <... clone resumed>, child_tidptr=0x55558159a650) = 15 [pid 6408] set_robust_list(0x55558159a660, 24 [pid 6406] setpgid(0, 0 [pid 6408] <... set_robust_list resumed>) = 0 [pid 6406] <... setpgid resumed>) = 0 [pid 6406] symlink("/syzcgroup/unified/syz3", "./cgroup" [pid 6408] chdir("./13" [pid 6406] <... symlink resumed>) = 0 [pid 6408] <... chdir resumed>) = 0 [pid 6408] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6408] setpgid(0, 0 [pid 6406] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu" [pid 6408] <... setpgid resumed>) = 0 [pid 6408] symlink("/syzcgroup/unified/syz2", "./cgroup" [pid 6406] <... symlink resumed>) = 0 [pid 6408] <... symlink resumed>) = 0 [pid 6406] symlink("/syzcgroup/net/syz3", "./cgroup.net" [pid 6408] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu" [pid 6406] <... symlink resumed>) = 0 [pid 6408] <... symlink resumed>) = 0 [pid 6406] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6408] symlink("/syzcgroup/net/syz2", "./cgroup.net" [pid 6406] <... openat resumed>) = 3 [pid 6408] <... symlink resumed>) = 0 [pid 6406] write(3, "1000", 4 [pid 6408] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6406] <... write resumed>) = 4 [pid 6406] close(3executing program ) = 0 [pid 6406] symlink("/dev/binderfs", "./binderfs" [pid 6408] <... openat resumed>) = 3 [pid 6406] <... symlink resumed>) = 0 [pid 6408] write(3, "1000", 4) = 4 [pid 6406] write(1, "executing program\n", 18) = 18 [pid 6406] memfd_create("syzkaller", 0 [pid 6408] close(3 [pid 6406] <... memfd_create resumed>) = 3 [pid 6408] <... close resumed>) = 0 [pid 6406] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaaaa00000 [pid 6408] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6408] write(1, "executing program\n", 18executing program ) = 18 [ 99.908355][ T6397] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 6408] memfd_create("syzkaller", 0) = 3 [pid 6400] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 6398] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 6408] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaaaa00000 [pid 6397] <... mount resumed>) = 0 [ 100.018144][ T6397] XFS (loop0): Ending clean mount [pid 6397] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6397] chdir("./file0" [pid 6406] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 6397] <... chdir resumed>) = 0 [pid 6397] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6397] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 4 [ 100.163981][ T5879] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 100.175457][ T5879] XFS (loop0): Unmount and run xfs_repair [ 100.187005][ T29] audit: type=1800 audit(1733456397.656:64): pid=6397 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop0" ino=41 res=0 errno=0 [ 100.226064][ T5879] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 100.256660][ T5879] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 100.266948][ T5879] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 100.286265][ T5879] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 100.306786][ T5879] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 100.336736][ T5879] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 100.345745][ T5879] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 100.377201][ T5879] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 100.386104][ T5879] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [pid 6397] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6398] <... write resumed>) = 33554432 [ 100.437268][ T6397] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 100.472419][ T6397] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [pid 6408] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [ 100.496168][ T6397] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [pid 6398] munmap(0x7fbaaaa00000, 138412032) = 0 [pid 6398] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6398] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6398] close(3) = 0 [pid 6398] close(4) = 0 [pid 6398] mkdir("./file0", 0777) = 0 [pid 6398] mount("/dev/loop1", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 6397] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 6397] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000) = -1 EFAULT (Bad address) [pid 6397] close(3) = 0 [pid 6397] close(4) = 0 [pid 6397] close(5) = -1 EBADF (Bad file descriptor) [pid 6397] close(6) = -1 EBADF (Bad file descriptor) [pid 6397] close(7) = -1 EBADF (Bad file descriptor) [pid 6397] close(8) = -1 EBADF (Bad file descriptor) [pid 6397] close(9) = -1 EBADF (Bad file descriptor) [pid 6397] close(10) = -1 EBADF (Bad file descriptor) [pid 6397] close(11) = -1 EBADF (Bad file descriptor) [pid 6397] close(12) = -1 EBADF (Bad file descriptor) [pid 6397] close(13) = -1 EBADF (Bad file descriptor) [ 100.560405][ T6398] loop1: detected capacity change from 0 to 65536 [pid 6397] close(14) = -1 EBADF (Bad file descriptor) [pid 6397] close(15) = -1 EBADF (Bad file descriptor) [pid 6397] close(16) = -1 EBADF (Bad file descriptor) [pid 6397] close(17) = -1 EBADF (Bad file descriptor) [pid 6397] close(18) = -1 EBADF (Bad file descriptor) [pid 6397] close(19) = -1 EBADF (Bad file descriptor) [pid 6397] close(20) = -1 EBADF (Bad file descriptor) [pid 6397] close(21) = -1 EBADF (Bad file descriptor) [pid 6397] close(22) = -1 EBADF (Bad file descriptor) [pid 6397] close(23) = -1 EBADF (Bad file descriptor) [pid 6397] close(24) = -1 EBADF (Bad file descriptor) [pid 6397] close(25) = -1 EBADF (Bad file descriptor) [pid 6397] close(26) = -1 EBADF (Bad file descriptor) [pid 6397] close(27) = -1 EBADF (Bad file descriptor) [pid 6397] close(28) = -1 EBADF (Bad file descriptor) [pid 6397] close(29) = -1 EBADF (Bad file descriptor) [pid 6397] exit_group(0) = ? [pid 6397] +++ exited with 0 +++ [pid 5821] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=14, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=47 /* 0.47 s */} --- [pid 5821] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5821] umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5821] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5821] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5821] umount2("./12/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./12/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] unlink("./12/cgroup") = 0 [pid 5821] umount2("./12/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./12/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] unlink("./12/cgroup.cpu") = 0 [pid 5821] umount2("./12/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./12/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] unlink("./12/cgroup.net") = 0 [pid 5821] umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] unlink("./12/binderfs") = 0 [pid 5821] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6400] <... write resumed>) = 33554432 [ 100.674439][ T5821] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 6400] munmap(0x7fbaaaa00000, 138412032) = 0 [pid 6400] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6400] ioctl(4, LOOP_SET_FD, 3 [pid 6406] <... write resumed>) = 33554432 [pid 6406] munmap(0x7fbaaaa00000, 138412032 [pid 6400] <... ioctl resumed>) = 0 [pid 6400] close(3 [pid 5821] <... umount2 resumed>) = 0 [pid 6400] <... close resumed>) = 0 [pid 5821] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6406] <... munmap resumed>) = 0 [pid 6400] close(4 [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6406] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6400] <... close resumed>) = 0 [ 100.835659][ T6400] loop4: detected capacity change from 0 to 65536 [ 100.844119][ T6398] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 5821] newfstatat(AT_FDCWD, "./12/file0", [pid 6406] <... openat resumed>) = 4 [pid 6400] mkdir("./file0", 0777 [pid 5821] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6406] ioctl(4, LOOP_SET_FD, 3 [pid 6400] <... mkdir resumed>) = 0 [pid 5821] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6400] mount("/dev/loop4", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 5821] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5821] getdents64(4, 0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5821] getdents64(4, 0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5821] close(4) = 0 [pid 5821] rmdir("./12/file0") = 0 [pid 5821] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5821] close(3 [pid 6406] <... ioctl resumed>) = 0 [pid 5821] <... close resumed>) = 0 [pid 5821] rmdir("./12") = 0 [pid 6406] close(3 [pid 5821] mkdir("./13", 0777 [pid 6406] <... close resumed>) = 0 [pid 5821] <... mkdir resumed>) = 0 [pid 5821] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5821] ioctl(3, LOOP_CLR_FD) = 0 [pid 5821] close(3 [pid 6406] close(4 [pid 6398] <... mount resumed>) = 0 [pid 6406] <... close resumed>) = 0 [ 100.910735][ T6406] loop3: detected capacity change from 0 to 65536 [ 100.922801][ T6398] XFS (loop1): Ending clean mount [ 100.983895][ T6400] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 101.005467][ T29] audit: type=1800 audit(1733456398.496:65): pid=6398 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop1" ino=41 res=0 errno=0 [pid 6398] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6406] mkdir("./file0", 0777 [pid 6398] <... openat resumed>) = 3 [pid 6406] <... mkdir resumed>) = 0 [pid 6398] chdir("./file0" [pid 6406] mount("/dev/loop3", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 6398] <... chdir resumed>) = 0 [pid 6398] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6398] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 6398] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6408] <... write resumed>) = 33554432 [ 101.007010][ T5966] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [pid 6408] munmap(0x7fbaaaa00000, 138412032) = 0 [pid 6408] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [ 101.070743][ T5966] XFS (loop1): Unmount and run xfs_repair [ 101.087176][ T5966] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 101.095146][ T5966] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 101.100150][ T6408] loop2: detected capacity change from 0 to 65536 [ 101.104262][ T5966] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [pid 6408] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6400] <... mount resumed>) = 0 [pid 6408] close(3 [pid 6400] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6408] <... close resumed>) = 0 [pid 6400] <... openat resumed>) = 3 [pid 6408] close(4 [pid 6400] chdir("./file0" [pid 6408] <... close resumed>) = 0 [pid 6400] <... chdir resumed>) = 0 [pid 6408] mkdir("./file0", 0777 [pid 6400] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6408] <... mkdir resumed>) = 0 [pid 6400] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6408] mount("/dev/loop2", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [ 101.119842][ T5966] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 101.122264][ T6400] XFS (loop4): Ending clean mount [ 101.128785][ T5966] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 101.143473][ T5966] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 101.152861][ T5966] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 101.161843][ T5966] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 101.171070][ T5966] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 101.185472][ T6398] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 101.203611][ T6406] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 6400] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 6398] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 6398] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000 [pid 6400] <... open resumed>) = 4 [pid 6398] <... openat resumed>) = -1 EFAULT (Bad address) [pid 6398] close(3) = 0 [pid 6398] close(4) = 0 [pid 6398] close(5) = -1 EBADF (Bad file descriptor) [pid 6398] close(6) = -1 EBADF (Bad file descriptor) [pid 6398] close(7) = -1 EBADF (Bad file descriptor) [pid 6398] close(8) = -1 EBADF (Bad file descriptor) [pid 6398] close(9) = -1 EBADF (Bad file descriptor) [pid 6398] close(10) = -1 EBADF (Bad file descriptor) [pid 6398] close(11) = -1 EBADF (Bad file descriptor) [pid 6398] close(12) = -1 EBADF (Bad file descriptor) [pid 6398] close(13) = -1 EBADF (Bad file descriptor) [pid 6398] close(14) = -1 EBADF (Bad file descriptor) [pid 6398] close(15) = -1 EBADF (Bad file descriptor) [pid 6398] close(16) = -1 EBADF (Bad file descriptor) [pid 6398] close(17) = -1 EBADF (Bad file descriptor) [pid 6398] close(18) = -1 EBADF (Bad file descriptor) [pid 6398] close(19) = -1 EBADF (Bad file descriptor) [pid 6398] close(20) = -1 EBADF (Bad file descriptor) [pid 6398] close(21 [pid 6400] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6398] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6398] close(22) = -1 EBADF (Bad file descriptor) [pid 6398] close(23) = -1 EBADF (Bad file descriptor) [pid 6398] close(24) = -1 EBADF (Bad file descriptor) [ 101.205539][ T6398] XFS (loop1): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 101.227433][ T6398] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 101.239689][ T29] audit: type=1800 audit(1733456398.736:66): pid=6400 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop4" ino=41 res=0 errno=0 [pid 6398] close(25 [pid 5821] <... close resumed>) = 0 [pid 5821] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558159a650) = 15 ./strace-static-x86_64: Process 6442 attached [pid 6398] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6442] set_robust_list(0x55558159a660, 24) = 0 [pid 6442] chdir("./13") = 0 [pid 6442] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6442] setpgid(0, 0) = 0 [pid 6442] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6442] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu" [pid 6398] close(26 [pid 6442] <... symlink resumed>) = 0 [pid 6398] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6442] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6398] close(27 [pid 6442] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [ 101.263331][ T5966] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 101.274839][ T5966] XFS (loop4): Unmount and run xfs_repair [ 101.280854][ T5966] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 101.288304][ T5966] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 101.297215][ T5966] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 101.306676][ T5966] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [pid 6398] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6442] <... openat resumed>) = 3 [pid 6398] close(28) = -1 EBADF (Bad file descriptor) [pid 6442] write(3, "1000", 4 [pid 6398] close(29 [pid 6442] <... write resumed>) = 4 [pid 6398] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6442] close(3 [pid 6398] exit_group(0 [pid 6442] <... close resumed>) = 0 [pid 6398] <... exit_group resumed>) = ? [ 101.316751][ T5966] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 101.326874][ T5966] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 101.336604][ T5966] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 101.345474][ T5966] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 101.354410][ T5966] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [pid 6442] symlink("/dev/binderfs", "./binderfs" [pid 6398] +++ exited with 0 +++ [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=15, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=49 /* 0.49 s */} --- [pid 6442] <... symlink resumed>) = 0 executing program [pid 6406] <... mount resumed>) = 0 [pid 5824] umount2("./13", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6442] write(1, "executing program\n", 18 [pid 6406] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6442] <... write resumed>) = 18 [pid 6406] <... openat resumed>) = 3 [pid 6442] memfd_create("syzkaller", 0 [pid 6406] chdir("./file0" [pid 6442] <... memfd_create resumed>) = 3 [pid 6442] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaaaa00000 [pid 6406] <... chdir resumed>) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6406] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [ 101.364351][ T6400] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 101.365356][ T6406] XFS (loop3): Ending clean mount [ 101.384085][ T6408] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 101.395203][ T6400] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 101.409938][ T6400] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [pid 6406] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 6400] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 5824] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6400] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000 [pid 6406] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6400] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5824] <... openat resumed>) = 3 [pid 6400] close(3 [pid 5824] newfstatat(3, "", [pid 6400] <... close resumed>) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 6400] close(4 [pid 5824] getdents64(3, [pid 6400] <... close resumed>) = 0 [pid 6400] close(5 [pid 5824] <... getdents64 resumed>0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 6400] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] umount2("./13/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6400] close(6) = -1 EBADF (Bad file descriptor) [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6400] close(7) = -1 EBADF (Bad file descriptor) [pid 5824] newfstatat(AT_FDCWD, "./13/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6400] close(8) = -1 EBADF (Bad file descriptor) [pid 5824] unlink("./13/cgroup" [pid 6400] close(9) = -1 EBADF (Bad file descriptor) [pid 5824] <... unlink resumed>) = 0 [pid 6400] close(10 [pid 5824] umount2("./13/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6400] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6400] close(11 [pid 5824] newfstatat(AT_FDCWD, "./13/cgroup.cpu", [pid 6400] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6400] close(12 [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6400] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6400] close(13) = -1 EBADF (Bad file descriptor) [pid 6400] close(14) = -1 EBADF (Bad file descriptor) [pid 6400] close(15) = -1 EBADF (Bad file descriptor) [pid 6400] close(16) = -1 EBADF (Bad file descriptor) [pid 6400] close(17) = -1 EBADF (Bad file descriptor) [pid 6400] close(18) = -1 EBADF (Bad file descriptor) [pid 6400] close(19) = -1 EBADF (Bad file descriptor) [pid 6400] close(20) = -1 EBADF (Bad file descriptor) [pid 6400] close(21) = -1 EBADF (Bad file descriptor) [pid 6400] close(22) = -1 EBADF (Bad file descriptor) [pid 6400] close(23) = -1 EBADF (Bad file descriptor) [pid 6400] close(24) = -1 EBADF (Bad file descriptor) [ 101.421497][ T29] audit: type=1800 audit(1733456398.916:67): pid=6406 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop3" ino=41 res=0 errno=0 [ 101.449312][ T5966] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 101.461414][ T5966] XFS (loop3): Unmount and run xfs_repair [pid 6400] close(25) = -1 EBADF (Bad file descriptor) [pid 6400] close(26) = -1 EBADF (Bad file descriptor) [pid 6400] close(27) = -1 EBADF (Bad file descriptor) [pid 5824] unlink("./13/cgroup.cpu" [pid 6400] close(28 [pid 5824] <... unlink resumed>) = 0 [pid 6400] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] umount2("./13/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6400] close(29 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6400] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] newfstatat(AT_FDCWD, "./13/cgroup.net", [pid 6400] exit_group(0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6400] <... exit_group resumed>) = ? [pid 5824] unlink("./13/cgroup.net") = 0 [pid 5824] umount2("./13/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./13/binderfs") = 0 [pid 6408] <... mount resumed>) = 0 [pid 5824] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6408] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6408] chdir("./file0") = 0 [ 101.467256][ T5966] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 101.473794][ T6408] XFS (loop2): Ending clean mount [ 101.474633][ T5966] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 101.490124][ T5966] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 101.499054][ T5966] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 101.508043][ T5966] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [pid 6408] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6400] +++ exited with 0 +++ [pid 6408] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6408] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=14, si_uid=0, si_status=0, si_utime=11 /* 0.11 s */, si_stime=50 /* 0.50 s */} --- [ 101.517939][ T5966] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 101.527250][ T5966] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 101.536129][ T5966] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 101.536259][ T5824] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 101.545063][ T5966] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [pid 6408] <... open resumed>) = 4 [pid 5826] umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6408] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5826] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5826] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [ 101.562586][ T6406] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 101.578883][ T6406] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 101.596323][ T29] audit: type=1800 audit(1733456399.076:68): pid=6408 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop2" ino=41 res=0 errno=0 [pid 5826] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 6406] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 5826] umount2("./12/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6406] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./12/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./12/cgroup") = 0 [pid 5826] umount2("./12/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./12/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./12/cgroup.cpu") = 0 [pid 5826] umount2("./12/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./12/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./12/cgroup.net") = 0 [pid 5826] umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./12/binderfs") = 0 [pid 5826] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6406] <... openat resumed>) = -1 EFAULT (Bad address) [pid 6406] close(3) = 0 [pid 6406] close(4) = 0 [pid 6406] close(5) = -1 EBADF (Bad file descriptor) [pid 6406] close(6) = -1 EBADF (Bad file descriptor) [pid 6406] close(7) = -1 EBADF (Bad file descriptor) [pid 6406] close(8) = -1 EBADF (Bad file descriptor) [pid 6406] close(9) = -1 EBADF (Bad file descriptor) [pid 6406] close(10) = -1 EBADF (Bad file descriptor) [ 101.596613][ T57] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 101.617019][ T6406] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 101.635912][ T57] XFS (loop2): Unmount and run xfs_repair [ 101.642510][ T57] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 101.651214][ T57] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 101.660188][ T57] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [pid 6406] close(11) = -1 EBADF (Bad file descriptor) [pid 6406] close(12) = -1 EBADF (Bad file descriptor) [pid 6406] close(13) = -1 EBADF (Bad file descriptor) [pid 6406] close(14) = -1 EBADF (Bad file descriptor) [pid 6406] close(15) = -1 EBADF (Bad file descriptor) [pid 6406] close(16) = -1 EBADF (Bad file descriptor) [pid 6406] close(17) = -1 EBADF (Bad file descriptor) [pid 6406] close(18) = -1 EBADF (Bad file descriptor) [pid 6406] close(19) = -1 EBADF (Bad file descriptor) [pid 6406] close(20) = -1 EBADF (Bad file descriptor) [pid 6406] close(21) = -1 EBADF (Bad file descriptor) [pid 6406] close(22) = -1 EBADF (Bad file descriptor) [pid 6406] close(23) = -1 EBADF (Bad file descriptor) [pid 6406] close(24) = -1 EBADF (Bad file descriptor) [pid 6406] close(25) = -1 EBADF (Bad file descriptor) [pid 6406] close(26) = -1 EBADF (Bad file descriptor) [pid 6406] close(27) = -1 EBADF (Bad file descriptor) [pid 6406] close(28) = -1 EBADF (Bad file descriptor) [pid 6406] close(29) = -1 EBADF (Bad file descriptor) [pid 6406] exit_group(0) = ? [pid 6406] +++ exited with 0 +++ [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=14, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=54 /* 0.54 s */} --- [ 101.669266][ T57] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 101.678360][ T57] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 101.687550][ T57] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 101.692077][ T5826] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 101.696683][ T57] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 101.713935][ T57] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [pid 5825] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5825] umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5825] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5825] umount2("./12/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./12/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./12/cgroup") = 0 [pid 5825] umount2("./12/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./12/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... umount2 resumed>) = 0 [pid 5825] unlink("./12/cgroup.cpu" [pid 5824] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./13/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... unlink resumed>) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] umount2("./12/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... openat resumed>) = 4 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(4, "", [pid 5825] newfstatat(AT_FDCWD, "./12/cgroup.net", [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [ 101.722951][ T57] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 101.731969][ T6408] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] getdents64(4, 0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5824] getdents64(4, 0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5824] close(4) = 0 [pid 5824] rmdir("./13/file0") = 0 [pid 5825] unlink("./12/cgroup.net" [pid 5824] getdents64(3, [pid 5825] <... unlink resumed>) = 0 [pid 5824] <... getdents64 resumed>0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5825] umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] close(3 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... close resumed>) = 0 [pid 5825] newfstatat(AT_FDCWD, "./12/binderfs", [pid 5824] rmdir("./13" [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... rmdir resumed>) = 0 [pid 5825] unlink("./12/binderfs" [pid 5824] mkdir("./14", 0777 [pid 5825] <... unlink resumed>) = 0 [pid 5824] <... mkdir resumed>) = 0 [pid 5825] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5824] ioctl(3, LOOP_CLR_FD) = 0 [ 101.771453][ T6408] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [pid 5824] close(3 [pid 6408] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 6408] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000) = -1 EFAULT (Bad address) [pid 6408] close(3) = 0 [pid 6408] close(4) = 0 [pid 6408] close(5) = -1 EBADF (Bad file descriptor) [pid 6408] close(6) = -1 EBADF (Bad file descriptor) [pid 6408] close(7) = -1 EBADF (Bad file descriptor) [pid 6408] close(8) = -1 EBADF (Bad file descriptor) [pid 6408] close(9) = -1 EBADF (Bad file descriptor) [pid 6408] close(10) = -1 EBADF (Bad file descriptor) [pid 6408] close(11) = -1 EBADF (Bad file descriptor) [pid 6408] close(12) = -1 EBADF (Bad file descriptor) [pid 6408] close(13) = -1 EBADF (Bad file descriptor) [pid 6408] close(14) = -1 EBADF (Bad file descriptor) [pid 6408] close(15) = -1 EBADF (Bad file descriptor) [pid 6408] close(16) = -1 EBADF (Bad file descriptor) [pid 6408] close(17) = -1 EBADF (Bad file descriptor) [pid 6408] close(18) = -1 EBADF (Bad file descriptor) [pid 6408] close(19) = -1 EBADF (Bad file descriptor) [pid 6408] close(20) = -1 EBADF (Bad file descriptor) [pid 6408] close(21) = -1 EBADF (Bad file descriptor) [pid 6408] close(22) = -1 EBADF (Bad file descriptor) [pid 6408] close(23) = -1 EBADF (Bad file descriptor) [pid 6408] close(24) = -1 EBADF (Bad file descriptor) [pid 6408] close(25) = -1 EBADF (Bad file descriptor) [pid 6408] close(26) = -1 EBADF (Bad file descriptor) [pid 6408] close(27) = -1 EBADF (Bad file descriptor) [pid 6408] close(28) = -1 EBADF (Bad file descriptor) [pid 6408] close(29) = -1 EBADF (Bad file descriptor) [pid 6408] exit_group(0) = ? [pid 6408] +++ exited with 0 +++ [pid 6442] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=15, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=48 /* 0.48 s */} --- [pid 5823] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5823] umount2("./13", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 101.817807][ T6408] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [pid 5823] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5823] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5823] umount2("./13/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./13/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./13/cgroup") = 0 [pid 5823] umount2("./13/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./13/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./13/cgroup.cpu") = 0 [pid 5823] umount2("./13/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./13/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./13/cgroup.net") = 0 [pid 5823] umount2("./13/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./13/binderfs") = 0 [ 101.917979][ T5825] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 101.934550][ T5823] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 5823] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6442] <... write resumed>) = 33554432 [pid 6442] munmap(0x7fbaaaa00000, 138412032 [pid 5825] <... umount2 resumed>) = 0 [pid 5823] <... umount2 resumed>) = 0 [pid 5823] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./13/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5825] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(4, 0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5823] getdents64(4, 0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5823] close(4) = 0 [pid 5823] rmdir("./13/file0") = 0 [pid 5823] getdents64(3, [pid 5826] <... umount2 resumed>) = 0 [pid 5823] <... getdents64 resumed>0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5823] close(3) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] rmdir("./13" [pid 5825] newfstatat(AT_FDCWD, "./12/file0", [pid 5823] <... rmdir resumed>) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] mkdir("./14", 0777) = 0 [pid 5823] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5823] ioctl(3, LOOP_CLR_FD) = 0 [pid 5823] close(3 [pid 6442] <... munmap resumed>) = 0 [pid 6442] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5825] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6442] <... openat resumed>) = 4 [pid 5824] <... close resumed>) = 0 [pid 6442] ioctl(4, LOOP_SET_FD, 3 [pid 5826] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... openat resumed>) = 4 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5826] newfstatat(AT_FDCWD, "./12/file0", [pid 5825] newfstatat(4, "", [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 6449 attached [pid 5826] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] getdents64(4, [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... clone resumed>, child_tidptr=0x55558159a650) = 16 [pid 5826] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6449] set_robust_list(0x55558159a660, 24 [pid 5826] <... openat resumed>) = 4 [pid 5825] <... getdents64 resumed>0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5826] newfstatat(4, "", [pid 6449] <... set_robust_list resumed>) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(4, [pid 6449] chdir("./14" [pid 5826] getdents64(4, [pid 5825] <... getdents64 resumed>0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 6442] <... ioctl resumed>) = 0 [pid 5826] <... getdents64 resumed>0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 6442] close(3 [pid 5826] getdents64(4, [pid 6442] <... close resumed>) = 0 [pid 5826] <... getdents64 resumed>0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 6442] close(4 [pid 5826] close(4 [pid 6449] <... chdir resumed>) = 0 [pid 6442] <... close resumed>) = 0 [pid 5826] <... close resumed>) = 0 [pid 5825] close(4 [pid 6442] mkdir("./file0", 0777 [pid 5826] rmdir("./12/file0" [pid 6449] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6442] <... mkdir resumed>) = 0 [pid 5826] <... rmdir resumed>) = 0 [pid 5825] <... close resumed>) = 0 [pid 5826] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 6442] mount("/dev/loop0", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 5826] close(3 [pid 6449] <... prctl resumed>) = 0 [pid 5826] <... close resumed>) = 0 [pid 5825] rmdir("./12/file0" [pid 5826] rmdir("./12" [pid 6449] setpgid(0, 0 [pid 5826] <... rmdir resumed>) = 0 [pid 5825] <... rmdir resumed>) = 0 [pid 5826] mkdir("./13", 0777 [pid 6449] <... setpgid resumed>) = 0 [pid 5826] <... mkdir resumed>) = 0 [pid 5825] getdents64(3, [pid 5826] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6449] symlink("/syzcgroup/unified/syz1", "./cgroup" [pid 5826] <... openat resumed>) = 3 [pid 5825] <... getdents64 resumed>0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5826] ioctl(3, LOOP_CLR_FD [pid 6449] <... symlink resumed>) = 0 [pid 5826] <... ioctl resumed>) = 0 [pid 5825] close(3 [pid 5826] close(3 [pid 6449] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu" [pid 5825] <... close resumed>) = 0 [pid 6449] <... symlink resumed>) = 0 [pid 5825] rmdir("./12" [pid 6449] symlink("/syzcgroup/net/syz1", "./cgroup.net" [pid 5825] <... rmdir resumed>) = 0 [pid 6449] <... symlink resumed>) = 0 [pid 5825] mkdir("./13", 0777 [pid 6449] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5825] <... mkdir resumed>) = 0 [pid 6449] <... openat resumed>) = 3 [pid 5825] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6449] write(3, "1000", 4 [pid 5825] <... openat resumed>) = 3 [pid 6449] <... write resumed>) = 4 [pid 5825] ioctl(3, LOOP_CLR_FD [pid 6449] close(3 [pid 5825] <... ioctl resumed>) = 0 [pid 6449] <... close resumed>) = 0 [pid 5825] close(3 [ 102.185410][ T6442] loop0: detected capacity change from 0 to 65536 [pid 6449] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6449] write(1, "executing program\n", 18) = 18 [pid 6449] memfd_create("syzkaller", 0) = 3 [pid 6449] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaaaa00000 [ 102.263573][ T6442] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 102.326970][ T6442] XFS (loop0): Ending clean mount [pid 6442] <... mount resumed>) = 0 [pid 6442] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6442] chdir("./file0") = 0 [pid 6442] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5826] <... close resumed>) = 0 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6442] <... openat resumed>) = -1 EBUSY (Device or resource busy) ./strace-static-x86_64: Process 6458 attached [pid 6458] set_robust_list(0x55558159a660, 24 [pid 6449] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 6442] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 5826] <... clone resumed>, child_tidptr=0x55558159a650) = 15 [pid 6458] <... set_robust_list resumed>) = 0 [pid 6442] <... open resumed>) = 4 [pid 6458] chdir("./13" [pid 6442] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5825] <... close resumed>) = 0 [ 102.596839][ T29] audit: type=1800 audit(1733456400.076:69): pid=6442 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop0" ino=41 res=0 errno=0 executing program [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6459 attached [pid 6459] set_robust_list(0x55558159a660, 24 [pid 5825] <... clone resumed>, child_tidptr=0x55558159a650) = 15 [pid 6459] <... set_robust_list resumed>) = 0 [pid 6459] chdir("./13") = 0 [pid 6459] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6459] setpgid(0, 0) = 0 [pid 6459] symlink("/syzcgroup/unified/syz3", "./cgroup") = 0 [pid 6459] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu") = 0 [pid 6459] symlink("/syzcgroup/net/syz3", "./cgroup.net") = 0 [pid 6459] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6459] write(3, "1000", 4) = 4 [pid 6459] close(3) = 0 [pid 6459] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6459] write(1, "executing program\n", 18) = 18 [pid 6459] memfd_create("syzkaller", 0) = 3 [pid 6459] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaaaa00000 [ 102.641605][ T5879] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 102.653533][ T5879] XFS (loop0): Unmount and run xfs_repair [ 102.659722][ T5879] XFS (loop0): First 128 bytes of corrupted metadata buffer: [pid 6458] <... chdir resumed>) = 0 [ 102.686623][ T5879] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 102.695521][ T5879] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 102.726660][ T5879] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 102.735552][ T5879] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 102.776654][ T5879] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [pid 6458] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5823] <... close resumed>) = 0 [pid 6458] <... prctl resumed>) = 0 [ 102.785565][ T5879] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 102.807158][ T5879] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 102.826920][ T5879] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [pid 6458] setpgid(0, 0 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6459] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 6458] <... setpgid resumed>) = 0 ./strace-static-x86_64: Process 6460 attached [ 102.835878][ T6442] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [pid 6458] symlink("/syzcgroup/unified/syz4", "./cgroup" [pid 6460] set_robust_list(0x55558159a660, 24 [pid 6458] <... symlink resumed>) = 0 [pid 5823] <... clone resumed>, child_tidptr=0x55558159a650) = 16 [ 102.908774][ T6442] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 102.986695][ T6442] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [pid 6460] <... set_robust_list resumed>) = 0 [pid 6458] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu" [pid 6442] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 6460] chdir("./14" [pid 6458] <... symlink resumed>) = 0 [pid 6449] <... write resumed>) = 33554432 [pid 6442] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000 [pid 6460] <... chdir resumed>) = 0 [pid 6458] symlink("/syzcgroup/net/syz4", "./cgroup.net" [pid 6449] munmap(0x7fbaaaa00000, 138412032 [pid 6442] <... openat resumed>) = -1 EFAULT (Bad address) [pid 6460] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6458] <... symlink resumed>) = 0 [pid 6449] <... munmap resumed>) = 0 [pid 6442] close(3 [pid 6460] <... prctl resumed>) = 0 [pid 6458] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6449] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6442] <... close resumed>) = 0 [pid 6460] setpgid(0, 0 [pid 6458] <... openat resumed>) = 3 [pid 6449] <... openat resumed>) = 4 [pid 6442] close(4 [pid 6460] <... setpgid resumed>) = 0 [pid 6458] write(3, "1000", 4 [pid 6449] ioctl(4, LOOP_SET_FD, 3 [pid 6442] <... close resumed>) = 0 [pid 6460] symlink("/syzcgroup/unified/syz2", "./cgroup" [pid 6458] <... write resumed>) = 4 [pid 6442] close(5 [pid 6458] close(3 [pid 6442] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6458] <... close resumed>) = 0 [pid 6442] close(6 [pid 6458] symlink("/dev/binderfs", "./binderfs" [pid 6442] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6460] <... symlink resumed>) = 0 [pid 6458] <... symlink resumed>) = 0 [pid 6442] close(7executing program [pid 6460] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu" [pid 6458] write(1, "executing program\n", 18 [pid 6442] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6460] <... symlink resumed>) = 0 [pid 6458] <... write resumed>) = 18 [pid 6442] close(8 [pid 6458] memfd_create("syzkaller", 0 [pid 6442] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6458] <... memfd_create resumed>) = 3 [pid 6442] close(9 [pid 6458] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6442] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6458] <... mmap resumed>) = 0x7fbaaaa00000 [pid 6442] close(10) = -1 EBADF (Bad file descriptor) [pid 6460] symlink("/syzcgroup/net/syz2", "./cgroup.net" [pid 6442] close(11 [pid 6460] <... symlink resumed>) = 0 [pid 6442] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6460] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6442] close(12 [pid 6460] <... openat resumed>) = 3 [pid 6442] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6442] close(13) = -1 EBADF (Bad file descriptor) [pid 6442] close(14) = -1 EBADF (Bad file descriptor) [pid 6442] close(15) = -1 EBADF (Bad file descriptor) [pid 6460] write(3, "1000", 4 [pid 6442] close(16 [pid 6460] <... write resumed>) = 4 [pid 6442] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6460] close(3 [pid 6442] close(17 [pid 6460] <... close resumed>) = 0 executing program [pid 6442] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6460] symlink("/dev/binderfs", "./binderfs" [pid 6442] close(18 [pid 6460] <... symlink resumed>) = 0 [pid 6442] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6460] write(1, "executing program\n", 18 [pid 6442] close(19 [pid 6460] <... write resumed>) = 18 [pid 6442] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6460] memfd_create("syzkaller", 0 [pid 6442] close(20 [pid 6460] <... memfd_create resumed>) = 3 [pid 6442] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6442] close(21) = -1 EBADF (Bad file descriptor) [pid 6442] close(22) = -1 EBADF (Bad file descriptor) [pid 6442] close(23) = -1 EBADF (Bad file descriptor) [pid 6442] close(24) = -1 EBADF (Bad file descriptor) [pid 6442] close(25) = -1 EBADF (Bad file descriptor) [pid 6442] close(26) = -1 EBADF (Bad file descriptor) [pid 6442] close(27 [pid 6449] <... ioctl resumed>) = 0 [pid 6442] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6460] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6449] close(3 [pid 6442] close(28 [pid 6460] <... mmap resumed>) = 0x7fbaaaa00000 [pid 6449] <... close resumed>) = 0 [pid 6442] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6449] close(4 [pid 6459] <... write resumed>) = 33554432 [pid 6449] <... close resumed>) = 0 [pid 6442] close(29) = -1 EBADF (Bad file descriptor) [pid 6442] exit_group(0) = ? [pid 6442] +++ exited with 0 +++ [pid 5821] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=15, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=43 /* 0.43 s */} --- [pid 6449] mkdir("./file0", 0777 [pid 5821] restart_syscall(<... resuming interrupted clone ...> [pid 6449] <... mkdir resumed>) = 0 [pid 6449] mount("/dev/loop1", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 6459] munmap(0x7fbaaaa00000, 138412032 [pid 5821] <... restart_syscall resumed>) = 0 [pid 5821] umount2("./13", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 103.103646][ T6449] loop1: detected capacity change from 0 to 65536 [pid 5821] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5821] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5821] umount2("./13/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./13/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] unlink("./13/cgroup") = 0 [pid 5821] umount2("./13/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./13/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] unlink("./13/cgroup.cpu") = 0 [pid 5821] umount2("./13/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./13/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] unlink("./13/cgroup.net" [pid 6459] <... munmap resumed>) = 0 [pid 6459] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5821] <... unlink resumed>) = 0 [pid 6459] <... openat resumed>) = 4 [pid 5821] umount2("./13/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6459] ioctl(4, LOOP_SET_FD, 3 [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6459] <... ioctl resumed>) = 0 [pid 5821] newfstatat(AT_FDCWD, "./13/binderfs", [pid 6459] close(3) = 0 [pid 6459] close(4) = 0 [pid 5821] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6459] mkdir("./file0", 0777 [pid 5821] unlink("./13/binderfs" [pid 6459] <... mkdir resumed>) = 0 [pid 6459] mount("/dev/loop3", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 5821] <... unlink resumed>) = 0 [ 103.207322][ T6459] loop3: detected capacity change from 0 to 65536 [ 103.249344][ T6449] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 103.262387][ T6459] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 103.283464][ T5821] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 5821] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6459] <... mount resumed>) = 0 [pid 6459] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6459] chdir("./file0") = 0 [pid 6459] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5821] <... umount2 resumed>) = 0 [pid 6459] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 5821] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 103.320330][ T6459] XFS (loop3): Ending clean mount [pid 6459] <... open resumed>) = 4 [pid 5821] newfstatat(AT_FDCWD, "./13/file0", [pid 6459] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5821] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5821] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5821] getdents64(4, 0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5821] getdents64(4, 0x5555815a3730 /* 0 entries */, 32768) = 0 [ 103.369015][ T29] audit: type=1800 audit(1733456400.856:70): pid=6459 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop3" ino=41 res=0 errno=0 [ 103.394447][ T5966] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 103.406133][ T5966] XFS (loop3): Unmount and run xfs_repair [ 103.406420][ T6449] XFS (loop1): Ending clean mount [pid 5821] close(4) = 0 [pid 5821] rmdir("./13/file0") = 0 [pid 5821] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5821] close(3) = 0 [pid 5821] rmdir("./13") = 0 [pid 5821] mkdir("./14", 0777) = 0 [pid 5821] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5821] ioctl(3, LOOP_CLR_FD) = 0 [pid 5821] close(3 [pid 6449] <... mount resumed>) = 0 [ 103.411939][ T5966] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 103.424685][ T5966] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 103.433986][ T5966] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 103.443742][ T5966] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 103.452971][ T5966] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [pid 6449] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6449] chdir("./file0") = 0 [pid 6449] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [ 103.462948][ T5966] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 103.472373][ T5966] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 103.481982][ T5966] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 103.491601][ T5966] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 103.502339][ T6459] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 103.528071][ T6459] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 103.557063][ T6459] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [pid 6449] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 6459] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 6459] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000) = -1 EFAULT (Bad address) [pid 6459] close(3) = 0 [pid 6459] close(4) = 0 [pid 6459] close(5) = -1 EBADF (Bad file descriptor) [pid 6459] close(6) = -1 EBADF (Bad file descriptor) [pid 6459] close(7) = -1 EBADF (Bad file descriptor) [pid 6459] close(8) = -1 EBADF (Bad file descriptor) [pid 6459] close(9) = -1 EBADF (Bad file descriptor) [pid 6459] close(10) = -1 EBADF (Bad file descriptor) [pid 6459] close(11) = -1 EBADF (Bad file descriptor) [pid 6459] close(12) = -1 EBADF (Bad file descriptor) [pid 6459] close(13) = -1 EBADF (Bad file descriptor) [pid 6459] close(14) = -1 EBADF (Bad file descriptor) [pid 6459] close(15) = -1 EBADF (Bad file descriptor) [pid 6459] close(16) = -1 EBADF (Bad file descriptor) [pid 6459] close(17) = -1 EBADF (Bad file descriptor) [pid 6459] close(18) = -1 EBADF (Bad file descriptor) [pid 6459] close(19) = -1 EBADF (Bad file descriptor) [pid 6459] close(20) = -1 EBADF (Bad file descriptor) [pid 6459] close(21) = -1 EBADF (Bad file descriptor) [pid 6459] close(22) = -1 EBADF (Bad file descriptor) [pid 6459] close(23) = -1 EBADF (Bad file descriptor) [pid 6459] close(24) = -1 EBADF (Bad file descriptor) [pid 6459] close(25) = -1 EBADF (Bad file descriptor) [pid 6459] close(26) = -1 EBADF (Bad file descriptor) [pid 6459] close(27) = -1 EBADF (Bad file descriptor) [pid 6459] close(28) = -1 EBADF (Bad file descriptor) [pid 6459] close(29) = -1 EBADF (Bad file descriptor) [pid 6459] exit_group(0) = ? [pid 6459] +++ exited with 0 +++ [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=15, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=47 /* 0.47 s */} --- [pid 5825] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5825] umount2("./13", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5825] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5825] umount2("./13/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./13/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./13/cgroup") = 0 [pid 5825] umount2("./13/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./13/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./13/cgroup.cpu") = 0 [pid 5825] umount2("./13/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./13/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./13/cgroup.net") = 0 [pid 5825] umount2("./13/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./13/binderfs") = 0 [pid 5825] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW [ 103.605667][ T5825] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 6458] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 6460] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 6449] <... open resumed>) = 4 [ 103.667844][ T29] audit: type=1800 audit(1733456401.166:71): pid=6449 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop1" ino=41 res=0 errno=0 [ 103.703631][ T5879] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [pid 6449] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5821] <... close resumed>) = 0 [pid 5821] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6477 attached , child_tidptr=0x55558159a650) = 16 [pid 6477] set_robust_list(0x55558159a660, 24) = 0 [ 103.714857][ T5879] XFS (loop1): Unmount and run xfs_repair [ 103.727001][ T5879] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 103.734412][ T5879] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [pid 6477] chdir("./14") = 0 [pid 6477] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6477] setpgid(0, 0) = 0 [pid 6477] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6477] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6477] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6477] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6477] write(3, "1000", 4) = 4 [pid 6477] close(3 [pid 5825] <... umount2 resumed>) = 0 [pid 6477] <... close resumed>) = 0 [pid 6477] symlink("/dev/binderfs", "./binderfs" [pid 5825] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./13/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5825] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(4, 0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5825] getdents64(4, 0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5825] close(4) = 0 [pid 5825] rmdir("./13/file0") = 0 [pid 5825] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5825] close(3) = 0 [pid 5825] rmdir("./13") = 0 [pid 5825] mkdir("./14", 0777) = 0 [pid 5825] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5825] ioctl(3, LOOP_CLR_FD) = 0 [ 103.789215][ T5879] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 103.807467][ T5879] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 103.817949][ T5879] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [pid 6477] <... symlink resumed>) = 0 [pid 5825] close(3 [pid 6477] write(1, "executing program\n", 18executing program ) = 18 [pid 6477] memfd_create("syzkaller", 0) = 3 [pid 6477] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaaaa00000 [ 103.836706][ T5879] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 103.892211][ T5879] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 103.926717][ T5879] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 103.935620][ T5879] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [pid 6449] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 6449] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000) = -1 EFAULT (Bad address) [pid 6449] close(3) = 0 [pid 6449] close(4) = 0 [pid 6449] close(5) = -1 EBADF (Bad file descriptor) [pid 6449] close(6) = -1 EBADF (Bad file descriptor) [pid 6449] close(7) = -1 EBADF (Bad file descriptor) [pid 6449] close(8) = -1 EBADF (Bad file descriptor) [pid 6449] close(9) = -1 EBADF (Bad file descriptor) [pid 6449] close(10) = -1 EBADF (Bad file descriptor) [pid 6449] close(11) = -1 EBADF (Bad file descriptor) [pid 6449] close(12) = -1 EBADF (Bad file descriptor) [pid 6449] close(13) = -1 EBADF (Bad file descriptor) [pid 6449] close(14) = -1 EBADF (Bad file descriptor) [ 103.966709][ T6449] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 103.990216][ T6449] XFS (loop1): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 104.005008][ T6449] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [pid 6449] close(15) = -1 EBADF (Bad file descriptor) [pid 6449] close(16) = -1 EBADF (Bad file descriptor) [pid 6449] close(17) = -1 EBADF (Bad file descriptor) [pid 6449] close(18) = -1 EBADF (Bad file descriptor) [pid 6449] close(19) = -1 EBADF (Bad file descriptor) [pid 6449] close(20) = -1 EBADF (Bad file descriptor) [pid 5825] <... close resumed>) = 0 [pid 6449] close(21) = -1 EBADF (Bad file descriptor) [pid 6449] close(22) = -1 EBADF (Bad file descriptor) [pid 6449] close(23) = -1 EBADF (Bad file descriptor) [pid 6449] close(24) = -1 EBADF (Bad file descriptor) [pid 6449] close(25) = -1 EBADF (Bad file descriptor) [pid 6449] close(26) = -1 EBADF (Bad file descriptor) [pid 6449] close(27) = -1 EBADF (Bad file descriptor) [pid 6449] close(28) = -1 EBADF (Bad file descriptor) [pid 6449] close(29) = -1 EBADF (Bad file descriptor) [pid 6449] exit_group(0) = ? [pid 6449] +++ exited with 0 +++ [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=16, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=55 /* 0.55 s */} --- [pid 5824] restart_syscall(<... resuming interrupted clone ...> [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5824] <... restart_syscall resumed>) = 0 [pid 5825] <... clone resumed>, child_tidptr=0x55558159a650) = 16 [pid 5824] umount2("./14", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5824] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5824] umount2("./14/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./14/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./14/cgroup") = 0 [pid 5824] umount2("./14/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./14/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./14/cgroup.cpu") = 0 [pid 5824] umount2("./14/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./14/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./14/cgroup.net") = 0 [pid 5824] umount2("./14/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./14/binderfs") = 0 [ 104.220196][ T5824] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 5824] umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6478 attached [pid 6478] set_robust_list(0x55558159a660, 24) = 0 [pid 6478] chdir("./14") = 0 [pid 6477] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 6478] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6478] setpgid(0, 0) = 0 [pid 6478] symlink("/syzcgroup/unified/syz3", "./cgroup") = 0 [pid 5824] <... umount2 resumed>) = 0 [pid 6478] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu" [pid 5824] umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6478] <... symlink resumed>) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./14/file0", [pid 6478] symlink("/syzcgroup/net/syz3", "./cgroup.net") = 0 [pid 6478] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6478] write(3, "1000", 4) = 4 [pid 6478] close(3) = 0 [pid 6478] symlink("/dev/binderfs", "./binderfs" [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6478] <... symlink resumed>) = 0 [pid 5824] umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) executing program [pid 6478] write(1, "executing program\n", 18) = 18 [pid 6478] memfd_create("syzkaller", 0 [pid 5824] openat(AT_FDCWD, "./14/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5824] newfstatat(4, "", [pid 6478] <... memfd_create resumed>) = 3 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 6478] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5824] getdents64(4, [pid 6478] <... mmap resumed>) = 0x7fbaaaa00000 [pid 5824] <... getdents64 resumed>0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5824] getdents64(4, 0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5824] close(4) = 0 [pid 5824] rmdir("./14/file0") = 0 [pid 5824] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5824] close(3) = 0 [pid 5824] rmdir("./14") = 0 [pid 5824] mkdir("./15", 0777) = 0 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5824] ioctl(3, LOOP_CLR_FD) = 0 [pid 5824] close(3 [pid 6458] <... write resumed>) = 33554432 [pid 6458] munmap(0x7fbaaaa00000, 138412032 [pid 6460] <... write resumed>) = 33554432 [pid 6460] munmap(0x7fbaaaa00000, 138412032) = 0 [pid 6458] <... munmap resumed>) = 0 [pid 6458] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6458] ioctl(4, LOOP_SET_FD, 3 [pid 6460] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6460] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6458] <... ioctl resumed>) = 0 [pid 6458] close(3) = 0 [pid 6458] close(4 [pid 6460] close(3 [pid 6458] <... close resumed>) = 0 [pid 6458] mkdir("./file0", 0777) = 0 [pid 6460] <... close resumed>) = 0 [pid 6460] close(4 [ 104.532602][ T6458] loop4: detected capacity change from 0 to 65536 [ 104.541164][ T6460] loop2: detected capacity change from 0 to 65536 [pid 6458] mount("/dev/loop4", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 6460] <... close resumed>) = 0 [pid 6460] mkdir("./file0", 0777) = 0 [ 104.621052][ T6458] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 104.644143][ T6460] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 6460] mount("/dev/loop2", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 6458] <... mount resumed>) = 0 [pid 6458] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6458] chdir("./file0") = 0 [pid 6458] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6458] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [ 104.722656][ T6458] XFS (loop4): Ending clean mount [ 104.734072][ T29] audit: type=1800 audit(1733456402.226:72): pid=6458 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop4" ino=41 res=0 errno=0 [pid 6478] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 6458] <... open resumed>) = 4 [ 104.823134][ T6460] XFS (loop2): Ending clean mount [pid 6477] <... write resumed>) = 33554432 [pid 6460] <... mount resumed>) = 0 [pid 6458] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5824] <... close resumed>) = 0 [pid 6460] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6477] munmap(0x7fbaaaa00000, 138412032 [pid 6460] <... openat resumed>) = 3 [pid 6460] chdir("./file0") = 0 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6460] openat(AT_FDCWD, "/dev/loop2", O_RDWR./strace-static-x86_64: Process 6495 attached [pid 6477] <... munmap resumed>) = 0 [pid 6460] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6477] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6477] ioctl(4, LOOP_SET_FD, 3 [pid 6495] set_robust_list(0x55558159a660, 24 [pid 6477] <... ioctl resumed>) = 0 [pid 6460] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 5824] <... clone resumed>, child_tidptr=0x55558159a650) = 17 [pid 6477] close(3) = 0 [pid 6477] close(4 [pid 6495] <... set_robust_list resumed>) = 0 [pid 6477] <... close resumed>) = 0 [pid 6495] chdir("./15" [pid 6477] mkdir("./file0", 0777) = 0 [ 104.899444][ T5879] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 104.908558][ T6477] loop0: detected capacity change from 0 to 65536 [pid 6477] mount("/dev/loop0", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 6495] <... chdir resumed>) = 0 [pid 6460] <... open resumed>) = 4 [pid 6460] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6495] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6495] setpgid(0, 0) = 0 [pid 6495] symlink("/syzcgroup/unified/syz1", "./cgroup") = 0 [pid 6495] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu") = 0 [pid 6495] symlink("/syzcgroup/net/syz1", "./cgroup.net") = 0 [pid 6495] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6495] write(3, "1000", 4) = 4 [pid 6495] close(3) = 0 [pid 6495] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6495] write(1, "executing program\n", 18executing program ) = 18 [pid 6495] memfd_create("syzkaller", 0) = 3 [pid 6495] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaaaa00000 [ 104.930984][ T29] audit: type=1800 audit(1733456402.426:73): pid=6460 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop2" ino=41 res=0 errno=0 [ 104.958485][ T5879] XFS (loop4): Unmount and run xfs_repair [ 104.959118][ T6477] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 104.964233][ T5879] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 104.964265][ T5879] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 104.989333][ T5879] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 104.998297][ T5879] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 105.007319][ T5879] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 105.016198][ T5879] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 105.025158][ T5879] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 105.034207][ T5879] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 105.038018][ T6477] XFS (loop0): Ending clean mount [pid 6477] <... mount resumed>) = 0 [pid 6477] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6477] chdir("./file0") = 0 [pid 6477] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6477] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 4 [ 105.043143][ T5879] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 105.057091][ T5879] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 105.068331][ T5879] XFS (loop2): Unmount and run xfs_repair [ 105.074071][ T5879] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 105.080651][ T5966] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 105.081512][ T5879] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 105.101624][ T5879] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 105.106750][ T5966] XFS (loop0): Unmount and run xfs_repair [ 105.110613][ T5879] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 105.125143][ T5879] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 105.134083][ T5879] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 105.143029][ T5879] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 105.151986][ T5879] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 105.152001][ T5966] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 105.160858][ T5879] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 105.161012][ T6460] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 105.188847][ T6458] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 105.189335][ T5966] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 105.236658][ T5966] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 105.245642][ T5966] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 105.256254][ T6458] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 105.266605][ T5966] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 105.279791][ T5966] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 105.288710][ T5966] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 105.297595][ T5966] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 105.306457][ T5966] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 105.315497][ T6477] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 105.316070][ T6458] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [pid 6477] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6458] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 6458] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000) = -1 EFAULT (Bad address) [pid 6458] close(3) = 0 [pid 6458] close(4) = 0 [pid 6458] close(5) = -1 EBADF (Bad file descriptor) [pid 6458] close(6) = -1 EBADF (Bad file descriptor) [pid 6458] close(7) = -1 EBADF (Bad file descriptor) [pid 6458] close(8) = -1 EBADF (Bad file descriptor) [pid 6458] close(9) = -1 EBADF (Bad file descriptor) [pid 6458] close(10) = -1 EBADF (Bad file descriptor) [pid 6458] close(11) = -1 EBADF (Bad file descriptor) [pid 6458] close(12) = -1 EBADF (Bad file descriptor) [pid 6458] close(13) = -1 EBADF (Bad file descriptor) [pid 6458] close(14) = -1 EBADF (Bad file descriptor) [pid 6458] close(15) = -1 EBADF (Bad file descriptor) [pid 6458] close(16) = -1 EBADF (Bad file descriptor) [pid 6458] close(17) = -1 EBADF (Bad file descriptor) [pid 6458] close(18) = -1 EBADF (Bad file descriptor) [pid 6458] close(19) = -1 EBADF (Bad file descriptor) [pid 6458] close(20) = -1 EBADF (Bad file descriptor) [pid 6458] close(21) = -1 EBADF (Bad file descriptor) [pid 6458] close(22) = -1 EBADF (Bad file descriptor) [pid 6458] close(23) = -1 EBADF (Bad file descriptor) [pid 6477] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 6458] close(24) = -1 EBADF (Bad file descriptor) [pid 6458] close(25 [pid 6477] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000 [pid 6460] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 6458] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6458] close(26) = -1 EBADF (Bad file descriptor) [pid 6458] close(27) = -1 EBADF (Bad file descriptor) [pid 6458] close(28) = -1 EBADF (Bad file descriptor) [pid 6458] close(29) = -1 EBADF (Bad file descriptor) [pid 6458] exit_group(0) = ? [pid 6477] <... openat resumed>) = -1 EFAULT (Bad address) [pid 6460] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000 [pid 6458] +++ exited with 0 +++ [pid 6477] close(3 [pid 6460] <... openat resumed>) = -1 EFAULT (Bad address) [pid 6477] <... close resumed>) = 0 [pid 6460] close(3) = 0 [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=15, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=48 /* 0.48 s */} --- [pid 6477] close(4 [pid 6460] close(4 [pid 6477] <... close resumed>) = 0 [pid 6460] <... close resumed>) = 0 [pid 6477] close(5 [pid 6460] close(5 [pid 6477] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6460] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6477] close(6 [pid 6460] close(6 [pid 6477] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6460] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6460] close(7 [pid 6477] close(7 [pid 6460] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6460] close(8) = -1 EBADF (Bad file descriptor) [pid 6460] close(9) = -1 EBADF (Bad file descriptor) [pid 6460] close(10 [pid 5826] umount2("./13", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6460] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6460] close(11 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6460] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6460] close(12 [pid 5826] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6460] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5826] <... openat resumed>) = 3 [pid 5826] newfstatat(3, "", [pid 6460] close(13 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 6460] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5826] getdents64(3, [pid 6460] close(14) = -1 EBADF (Bad file descriptor) [pid 6460] close(15 [pid 5826] <... getdents64 resumed>0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 6477] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6460] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6477] close(8 [pid 6460] close(16 [pid 6477] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6460] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6477] close(9) = -1 EBADF (Bad file descriptor) [pid 6460] close(17 [pid 6477] close(10 [pid 6460] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6477] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6477] close(11 [pid 6460] close(18 [pid 6477] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6477] close(12 [pid 6460] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6477] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6477] close(13 [pid 6460] close(19 [pid 6477] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6477] close(14 [pid 6460] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6477] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6477] close(15 [pid 6460] close(20 [pid 6477] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6477] close(16 [pid 6460] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6477] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6477] close(17 [pid 6460] close(21 [pid 6477] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6477] close(18 [pid 6460] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6477] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6460] close(22 [pid 6477] close(19) = -1 EBADF (Bad file descriptor) [pid 6477] close(20 [pid 6460] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6477] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6460] close(23 [pid 6477] close(21) = -1 EBADF (Bad file descriptor) [pid 6460] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6477] close(22 [pid 6460] close(24 [pid 6477] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6477] close(23 [pid 6460] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6477] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6477] close(24 [pid 6460] close(25 [pid 6477] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6477] close(25 [pid 6460] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6477] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6460] close(26 [pid 6477] close(26) = -1 EBADF (Bad file descriptor) [pid 6460] <... close resumed>) = -1 EBADF (Bad file descriptor) [ 105.348217][ T6460] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 105.365637][ T6477] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 105.370860][ T6460] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 105.386619][ T6477] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [pid 6477] close(27 [pid 6460] close(27 [pid 6477] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6477] close(28 [pid 6460] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6477] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6477] close(29 [pid 6460] close(28 [pid 6477] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6477] exit_group(0 [pid 6460] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6477] <... exit_group resumed>) = ? [pid 6477] +++ exited with 0 +++ [pid 6460] close(29) = -1 EBADF (Bad file descriptor) [pid 6460] exit_group(0) = ? [pid 6460] +++ exited with 0 +++ [pid 6478] <... write resumed>) = 33554432 [pid 5826] umount2("./13/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6478] munmap(0x7fbaaaa00000, 138412032 [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=16, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=52 /* 0.52 s */} --- [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] restart_syscall(<... resuming interrupted clone ...> [pid 5821] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=16, si_uid=0, si_status=0, si_utime=12 /* 0.12 s */, si_stime=47 /* 0.47 s */} --- [pid 5823] <... restart_syscall resumed>) = 0 [pid 5826] newfstatat(AT_FDCWD, "./13/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] umount2("./14", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] unlink("./13/cgroup" [pid 5823] umount2("./14", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... unlink resumed>) = 0 [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] umount2("./13/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5821] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5821] <... openat resumed>) = 3 [pid 5826] newfstatat(AT_FDCWD, "./13/cgroup.cpu", [pid 5823] <... openat resumed>) = 3 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] newfstatat(3, "", [pid 5821] newfstatat(3, "", [pid 5826] unlink("./13/cgroup.cpu" [pid 5821] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5826] <... unlink resumed>) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5821] getdents64(3, [pid 5823] getdents64(3, [pid 6478] <... munmap resumed>) = 0 [pid 5826] umount2("./13/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... getdents64 resumed>0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5821] <... getdents64 resumed>0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 6478] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6478] <... openat resumed>) = 4 [pid 5826] newfstatat(AT_FDCWD, "./13/cgroup.net", [pid 5823] umount2("./14/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] umount2("./14/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6478] ioctl(4, LOOP_SET_FD, 3 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] unlink("./13/cgroup.net" [pid 5823] newfstatat(AT_FDCWD, "./14/cgroup", [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... unlink resumed>) = 0 [pid 5821] newfstatat(AT_FDCWD, "./14/cgroup", [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] umount2("./13/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] unlink("./14/cgroup" [pid 5821] unlink("./14/cgroup" [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... unlink resumed>) = 0 [pid 5826] newfstatat(AT_FDCWD, "./13/binderfs", [pid 5823] umount2("./14/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] <... unlink resumed>) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] unlink("./13/binderfs" [pid 5823] newfstatat(AT_FDCWD, "./14/cgroup.cpu", [pid 5821] umount2("./14/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6478] <... ioctl resumed>) = 0 [pid 5826] <... unlink resumed>) = 0 [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6478] close(3) = 0 [pid 5826] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] newfstatat(AT_FDCWD, "./14/cgroup.cpu", [pid 6478] close(4) = 0 [pid 6478] mkdir("./file0", 0777 [pid 5823] unlink("./14/cgroup.cpu" [pid 5821] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6478] <... mkdir resumed>) = 0 [pid 6478] mount("/dev/loop3", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 5823] <... unlink resumed>) = 0 [pid 5821] unlink("./14/cgroup.cpu") = 0 [pid 5823] umount2("./14/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] umount2("./14/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./14/cgroup.net", [pid 5821] newfstatat(AT_FDCWD, "./14/cgroup.net", [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./14/cgroup.net" [pid 5821] unlink("./14/cgroup.net" [pid 5823] <... unlink resumed>) = 0 [pid 5821] <... unlink resumed>) = 0 [pid 5823] umount2("./14/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] umount2("./14/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./14/binderfs", [pid 5821] newfstatat(AT_FDCWD, "./14/binderfs", [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./14/binderfs" [pid 5821] unlink("./14/binderfs" [pid 5823] <... unlink resumed>) = 0 [pid 5821] <... unlink resumed>) = 0 [ 105.480473][ T6478] loop3: detected capacity change from 0 to 65536 [ 105.490271][ T5826] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 5823] umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW [ 105.527196][ T5821] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 105.536762][ T5823] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 6495] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 5821] <... umount2 resumed>) = 0 [pid 5826] <... umount2 resumed>) = 0 [pid 5821] umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... umount2 resumed>) = 0 [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] newfstatat(AT_FDCWD, "./14/file0", [pid 5826] newfstatat(AT_FDCWD, "./13/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5821] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./14/file0", [pid 5821] umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5823] umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] openat(AT_FDCWD, "./14/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] getdents64(4, [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5821] <... openat resumed>) = 4 [ 105.612586][ T6478] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 5826] <... getdents64 resumed>0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5826] getdents64(4, [pid 5823] openat(AT_FDCWD, "./14/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5821] newfstatat(4, "", [pid 5826] <... getdents64 resumed>0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5823] <... openat resumed>) = 4 [pid 5821] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5826] close(4) = 0 [pid 5823] newfstatat(4, "", [pid 5821] getdents64(4, [pid 5826] rmdir("./13/file0") = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5821] <... getdents64 resumed>0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5826] getdents64(3, [pid 5823] getdents64(4, [pid 5821] getdents64(4, [pid 5826] <... getdents64 resumed>0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5823] <... getdents64 resumed>0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5821] <... getdents64 resumed>0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5826] close(3) = 0 [pid 5823] getdents64(4, [pid 5821] close(4 [pid 5826] rmdir("./13") = 0 [pid 5823] <... getdents64 resumed>0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5821] <... close resumed>) = 0 [pid 5826] mkdir("./14", 0777) = 0 [pid 5823] close(4 [pid 5821] rmdir("./14/file0" [pid 5826] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5823] <... close resumed>) = 0 [pid 5821] <... rmdir resumed>) = 0 [pid 5826] ioctl(3, LOOP_CLR_FD [pid 5823] rmdir("./14/file0" [pid 5821] getdents64(3, [pid 5826] <... ioctl resumed>) = 0 [pid 5823] <... rmdir resumed>) = 0 [pid 5821] <... getdents64 resumed>0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5826] close(3 [pid 5823] getdents64(3, [pid 5821] close(3 [pid 5823] <... getdents64 resumed>0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5821] <... close resumed>) = 0 [pid 5823] close(3 [pid 5821] rmdir("./14" [pid 5823] <... close resumed>) = 0 [pid 5821] <... rmdir resumed>) = 0 [pid 5823] rmdir("./14" [pid 5821] mkdir("./15", 0777 [pid 5823] <... rmdir resumed>) = 0 [pid 5821] <... mkdir resumed>) = 0 [pid 5823] mkdir("./15", 0777 [pid 5821] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5823] <... mkdir resumed>) = 0 [pid 5821] <... openat resumed>) = 3 [pid 5823] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5821] ioctl(3, LOOP_CLR_FD [pid 5823] <... openat resumed>) = 3 [pid 5821] <... ioctl resumed>) = 0 [pid 5823] ioctl(3, LOOP_CLR_FD [ 105.841627][ T6478] XFS (loop3): Ending clean mount [pid 5821] close(3 [pid 6478] <... mount resumed>) = 0 [pid 5823] <... ioctl resumed>) = 0 [pid 6478] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6478] chdir("./file0") = 0 [pid 6478] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6478] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 6478] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5823] close(3 [pid 5821] <... close resumed>) = 0 [ 105.913362][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 105.913379][ T29] audit: type=1800 audit(1733456403.406:75): pid=6478 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop3" ino=41 res=0 errno=0 [ 105.957316][ T8] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 105.984255][ T8] XFS (loop3): Unmount and run xfs_repair [ 105.990280][ T8] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 105.997855][ T8] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 106.025356][ T8] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 106.036619][ T8] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 106.045494][ T8] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 106.076623][ T8] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 106.085514][ T8] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [pid 5821] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6512 attached [pid 5826] <... close resumed>) = 0 [pid 6495] <... write resumed>) = 33554432 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5823] <... close resumed>) = 0 [pid 5821] <... clone resumed>, child_tidptr=0x55558159a650) = 17 ./strace-static-x86_64: Process 6513 attached [pid 6512] set_robust_list(0x55558159a660, 24 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6514 attached [pid 6513] set_robust_list(0x55558159a660, 24 [pid 6512] <... set_robust_list resumed>) = 0 [pid 5826] <... clone resumed>, child_tidptr=0x55558159a650) = 16 [pid 6514] set_robust_list(0x55558159a660, 24 [pid 6513] <... set_robust_list resumed>) = 0 [pid 6512] chdir("./15" [pid 5823] <... clone resumed>, child_tidptr=0x55558159a650) = 17 [pid 6514] <... set_robust_list resumed>) = 0 [pid 6513] chdir("./14" [pid 6512] <... chdir resumed>) = 0 [ 106.118399][ T8] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 106.127387][ T8] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 106.149774][ T6478] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [pid 6495] munmap(0x7fbaaaa00000, 138412032executing program executing program executing program [pid 6514] chdir("./15" [pid 6513] <... chdir resumed>) = 0 [pid 6512] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6514] <... chdir resumed>) = 0 [pid 6513] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6512] <... prctl resumed>) = 0 [pid 6514] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6513] <... prctl resumed>) = 0 [pid 6512] setpgid(0, 0 [pid 6514] <... prctl resumed>) = 0 [pid 6513] setpgid(0, 0 [pid 6512] <... setpgid resumed>) = 0 [pid 6514] setpgid(0, 0 [pid 6513] <... setpgid resumed>) = 0 [pid 6512] symlink("/syzcgroup/unified/syz0", "./cgroup" [pid 6514] <... setpgid resumed>) = 0 [pid 6513] symlink("/syzcgroup/unified/syz4", "./cgroup" [pid 6512] <... symlink resumed>) = 0 [pid 6514] symlink("/syzcgroup/unified/syz2", "./cgroup" [pid 6513] <... symlink resumed>) = 0 [pid 6512] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu" [pid 6514] <... symlink resumed>) = 0 [pid 6513] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu" [pid 6512] <... symlink resumed>) = 0 [pid 6514] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu" [pid 6513] <... symlink resumed>) = 0 [pid 6512] symlink("/syzcgroup/net/syz0", "./cgroup.net" [pid 6514] <... symlink resumed>) = 0 [pid 6513] symlink("/syzcgroup/net/syz4", "./cgroup.net" [pid 6512] <... symlink resumed>) = 0 [pid 6514] symlink("/syzcgroup/net/syz2", "./cgroup.net" [pid 6513] <... symlink resumed>) = 0 [pid 6512] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6514] <... symlink resumed>) = 0 [pid 6513] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6512] <... openat resumed>) = 3 [pid 6514] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6513] <... openat resumed>) = 3 [pid 6512] write(3, "1000", 4 [pid 6514] <... openat resumed>) = 3 [pid 6513] write(3, "1000", 4 [pid 6512] <... write resumed>) = 4 [pid 6514] write(3, "1000", 4 [pid 6513] <... write resumed>) = 4 [pid 6512] close(3 [pid 6514] <... write resumed>) = 4 [pid 6513] close(3 [pid 6512] <... close resumed>) = 0 [pid 6514] close(3 [pid 6513] <... close resumed>) = 0 [pid 6512] symlink("/dev/binderfs", "./binderfs" [pid 6514] <... close resumed>) = 0 [pid 6513] symlink("/dev/binderfs", "./binderfs" [pid 6512] <... symlink resumed>) = 0 [pid 6514] symlink("/dev/binderfs", "./binderfs" [pid 6513] <... symlink resumed>) = 0 [pid 6512] write(1, "executing program\n", 18 [pid 6514] <... symlink resumed>) = 0 [pid 6513] write(1, "executing program\n", 18 [pid 6512] <... write resumed>) = 18 [pid 6514] write(1, "executing program\n", 18 [pid 6513] <... write resumed>) = 18 [pid 6512] memfd_create("syzkaller", 0 [pid 6514] <... write resumed>) = 18 [pid 6513] memfd_create("syzkaller", 0 [pid 6512] <... memfd_create resumed>) = 3 [pid 6514] memfd_create("syzkaller", 0 [pid 6513] <... memfd_create resumed>) = 3 [pid 6512] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6514] <... memfd_create resumed>) = 3 [pid 6513] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6512] <... mmap resumed>) = 0x7fbaaaa00000 [pid 6514] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6513] <... mmap resumed>) = 0x7fbaaaa00000 [pid 6495] <... munmap resumed>) = 0 [pid 6514] <... mmap resumed>) = 0x7fbaaaa00000 [pid 6495] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6495] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6495] close(3) = 0 [pid 6495] close(4) = 0 [pid 6495] mkdir("./file0", 0777) = 0 [ 106.247382][ T6495] loop1: detected capacity change from 0 to 65536 [ 106.402043][ T6495] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 6495] mount("/dev/loop1", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 6513] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 6495] <... mount resumed>) = 0 [pid 6478] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 6478] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000) = -1 EFAULT (Bad address) [pid 6478] close(3) = 0 [pid 6478] close(4) = 0 [pid 6478] close(5) = -1 EBADF (Bad file descriptor) [pid 6478] close(6) = -1 EBADF (Bad file descriptor) [pid 6495] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6478] close(7 [pid 6495] <... openat resumed>) = 3 [pid 6478] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6495] chdir("./file0" [pid 6478] close(8 [pid 6495] <... chdir resumed>) = 0 [pid 6478] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6495] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6478] close(9 [pid 6495] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6478] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6495] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [ 106.446014][ T6478] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 106.467166][ T6478] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 106.489337][ T6495] XFS (loop1): Ending clean mount [pid 6478] close(10) = -1 EBADF (Bad file descriptor) [pid 6478] close(11) = -1 EBADF (Bad file descriptor) [pid 6495] <... open resumed>) = 4 [pid 6478] close(12 [pid 6495] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6478] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6478] close(13) = -1 EBADF (Bad file descriptor) [pid 6478] close(14) = -1 EBADF (Bad file descriptor) [pid 6478] close(15) = -1 EBADF (Bad file descriptor) [pid 6478] close(16) = -1 EBADF (Bad file descriptor) [pid 6478] close(17) = -1 EBADF (Bad file descriptor) [pid 6478] close(18) = -1 EBADF (Bad file descriptor) [pid 6478] close(19) = -1 EBADF (Bad file descriptor) [pid 6478] close(20) = -1 EBADF (Bad file descriptor) [pid 6478] close(21) = -1 EBADF (Bad file descriptor) [pid 6478] close(22) = -1 EBADF (Bad file descriptor) [pid 6478] close(23) = -1 EBADF (Bad file descriptor) [pid 6478] close(24) = -1 EBADF (Bad file descriptor) [pid 6478] close(25) = -1 EBADF (Bad file descriptor) [pid 6478] close(26) = -1 EBADF (Bad file descriptor) [pid 6478] close(27) = -1 EBADF (Bad file descriptor) [pid 6478] close(28) = -1 EBADF (Bad file descriptor) [pid 6478] close(29) = -1 EBADF (Bad file descriptor) [pid 6478] exit_group(0) = ? [pid 6478] +++ exited with 0 +++ [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=16, si_uid=0, si_status=0, si_utime=12 /* 0.12 s */, si_stime=52 /* 0.52 s */} --- [pid 5825] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5825] umount2("./14", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5825] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5825] umount2("./14/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./14/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./14/cgroup") = 0 [pid 5825] umount2("./14/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./14/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./14/cgroup.cpu") = 0 [pid 5825] umount2("./14/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./14/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./14/cgroup.net") = 0 [pid 5825] umount2("./14/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./14/binderfs") = 0 [ 106.513868][ T29] audit: type=1800 audit(1733456404.006:76): pid=6495 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop1" ino=41 res=0 errno=0 [ 106.535418][ T5966] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 106.546645][ T5966] XFS (loop1): Unmount and run xfs_repair [ 106.552768][ T5966] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 106.567339][ T5825] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 106.596698][ T5966] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 106.605613][ T5966] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 106.626902][ T5966] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 106.635814][ T5966] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 106.645609][ T5966] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 106.654616][ T5966] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 106.663576][ T5966] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [pid 5825] umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW [ 106.672499][ T5966] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 106.696271][ T6495] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [pid 6514] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [ 106.748017][ T6495] XFS (loop1): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [pid 6512] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 6495] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [ 106.807656][ T6495] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [pid 6514] <... write resumed>) = 33554432 [pid 6495] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000 [pid 5825] <... umount2 resumed>) = 0 [pid 6514] munmap(0x7fbaaaa00000, 138412032 [pid 6495] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5825] umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./14/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./14/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5825] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(4, 0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5825] getdents64(4, 0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5825] close(4) = 0 [pid 5825] rmdir("./14/file0") = 0 [pid 5825] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5825] close(3) = 0 [pid 5825] rmdir("./14") = 0 [pid 5825] mkdir("./15", 0777) = 0 [pid 5825] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5825] ioctl(3, LOOP_CLR_FD) = 0 [pid 5825] close(3 [pid 6495] close(3) = 0 [pid 6495] close(4 [pid 6514] <... munmap resumed>) = 0 [pid 6495] <... close resumed>) = 0 [pid 6514] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6495] close(5 [pid 6514] <... openat resumed>) = 4 [pid 6495] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6514] ioctl(4, LOOP_SET_FD, 3 [pid 6495] close(6 [pid 6514] <... ioctl resumed>) = 0 [pid 6495] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6514] close(3 [pid 6495] close(7 [pid 6514] <... close resumed>) = 0 [pid 6495] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6514] close(4 [pid 6495] close(8 [pid 6514] <... close resumed>) = 0 [pid 6495] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6514] mkdir("./file0", 0777 [pid 6495] close(9) = -1 EBADF (Bad file descriptor) [pid 6514] <... mkdir resumed>) = 0 [pid 6495] close(10 [pid 6514] mount("/dev/loop2", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 6495] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6495] close(11) = -1 EBADF (Bad file descriptor) [pid 6495] close(12) = -1 EBADF (Bad file descriptor) [pid 6495] close(13) = -1 EBADF (Bad file descriptor) [pid 6495] close(14) = -1 EBADF (Bad file descriptor) [pid 6495] close(15) = -1 EBADF (Bad file descriptor) [pid 6495] close(16) = -1 EBADF (Bad file descriptor) [pid 6495] close(17) = -1 EBADF (Bad file descriptor) [pid 6495] close(18) = -1 EBADF (Bad file descriptor) [pid 6495] close(19) = -1 EBADF (Bad file descriptor) [pid 6495] close(20) = -1 EBADF (Bad file descriptor) [pid 6495] close(21) = -1 EBADF (Bad file descriptor) [pid 6495] close(22) = -1 EBADF (Bad file descriptor) [pid 6495] close(23) = -1 EBADF (Bad file descriptor) [ 107.029326][ T6514] loop2: detected capacity change from 0 to 65536 [pid 6495] close(24) = -1 EBADF (Bad file descriptor) [pid 6495] close(25) = -1 EBADF (Bad file descriptor) [pid 6495] close(26) = -1 EBADF (Bad file descriptor) [pid 6495] close(27) = -1 EBADF (Bad file descriptor) [pid 6495] close(28) = -1 EBADF (Bad file descriptor) [pid 6495] close(29) = -1 EBADF (Bad file descriptor) [pid 6495] exit_group(0) = ? [ 107.072448][ T6514] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 107.139596][ T6514] XFS (loop2): Ending clean mount [pid 6495] +++ exited with 0 +++ [pid 6514] <... mount resumed>) = 0 [pid 6513] <... write resumed>) = 33554432 [pid 5825] <... close resumed>) = 0 [pid 6514] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=17, si_uid=0, si_status=0, si_utime=12 /* 0.12 s */, si_stime=42 /* 0.42 s */} --- [pid 6514] <... openat resumed>) = 3 [pid 5824] umount2("./15", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5824] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5824] umount2("./15/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./15/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./15/cgroup") = 0 [pid 5824] umount2("./15/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./15/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./15/cgroup.cpu") = 0 [pid 5824] umount2("./15/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./15/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./15/cgroup.net") = 0 [pid 5824] umount2("./15/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./15/binderfs" [pid 6514] chdir("./file0" [pid 5824] <... unlink resumed>) = 0 [pid 6514] <... chdir resumed>) = 0 [pid 5824] umount2("./15/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6514] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6514] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000./strace-static-x86_64: Process 6531 attached ) = 4 [pid 6513] munmap(0x7fbaaaa00000, 138412032 [pid 6512] <... write resumed>) = 33554432 [pid 5825] <... clone resumed>, child_tidptr=0x55558159a650) = 17 [ 107.295796][ T29] audit: type=1800 audit(1733456404.786:77): pid=6514 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop2" ino=41 res=0 errno=0 [ 107.316504][ T5824] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 6512] munmap(0x7fbaaaa00000, 138412032 [pid 6531] set_robust_list(0x55558159a660, 24 [pid 6514] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6513] <... munmap resumed>) = 0 [pid 5824] <... umount2 resumed>) = 0 [pid 6512] <... munmap resumed>) = 0 [pid 6512] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6512] ioctl(4, LOOP_SET_FD, 3 [pid 6531] <... set_robust_list resumed>) = 0 [pid 6513] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6512] <... ioctl resumed>) = 0 [pid 5824] umount2("./15/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6512] close(3) = 0 [pid 6512] close(4 [pid 6531] chdir("./15" [pid 6513] <... openat resumed>) = 4 [pid 6512] <... close resumed>) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6512] mkdir("./file0", 0777) = 0 [ 107.341899][ T8] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 107.352662][ T6512] loop0: detected capacity change from 0 to 65536 [ 107.354185][ T8] XFS (loop2): Unmount and run xfs_repair [ 107.366415][ T8] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 107.375988][ T8] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 107.385971][ T8] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [pid 6512] mount("/dev/loop0", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 6531] <... chdir resumed>) = 0 [pid 6513] ioctl(4, LOOP_SET_FD, 3 [ 107.395546][ T8] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 107.404567][ T8] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 107.413520][ T8] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 107.422578][ T8] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 107.423722][ T6513] loop4: detected capacity change from 0 to 65536 [pid 5824] newfstatat(AT_FDCWD, "./15/file0", [pid 6531] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6513] <... ioctl resumed>) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6531] <... prctl resumed>) = 0 [pid 6531] setpgid(0, 0 [pid 5824] umount2("./15/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6531] <... setpgid resumed>) = 0 [pid 6513] close(3 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./15/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6513] <... close resumed>) = 0 [pid 5824] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(4, 0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5824] getdents64(4, [pid 6513] close(4 [pid 5824] <... getdents64 resumed>0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 6513] <... close resumed>) = 0 [pid 5824] close(4 [pid 6531] symlink("/syzcgroup/unified/syz3", "./cgroup" [pid 5824] <... close resumed>) = 0 [pid 5824] rmdir("./15/file0") = 0 [pid 6531] <... symlink resumed>) = 0 [pid 6513] mkdir("./file0", 0777 [pid 5824] getdents64(3, [pid 6513] <... mkdir resumed>) = 0 [pid 5824] <... getdents64 resumed>0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 6513] mount("/dev/loop4", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 5824] close(3) = 0 [pid 5824] rmdir("./15" [pid 6531] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu" [pid 5824] <... rmdir resumed>) = 0 [pid 6531] <... symlink resumed>) = 0 [pid 5824] mkdir("./16", 0777 [pid 6531] symlink("/syzcgroup/net/syz3", "./cgroup.net" [pid 5824] <... mkdir resumed>) = 0 [pid 6531] <... symlink resumed>) = 0 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [ 107.431655][ T8] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 107.446848][ T8] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 107.455899][ T6514] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 107.478365][ T6514] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [pid 6531] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5824] ioctl(3, LOOP_CLR_FD [pid 6531] <... openat resumed>) = 3 [pid 6531] write(3, "1000", 4 [pid 5824] <... ioctl resumed>) = 0 [ 107.493251][ T6514] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [pid 5824] close(3 [pid 6514] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 6514] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000) = -1 EFAULT (Bad address) [pid 6514] close(3) = 0 [pid 6514] close(4) = 0 [pid 6514] close(5) = -1 EBADF (Bad file descriptor) [pid 6514] close(6) = -1 EBADF (Bad file descriptor) [pid 6514] close(7) = -1 EBADF (Bad file descriptor) [pid 6514] close(8) = -1 EBADF (Bad file descriptor) [pid 6514] close(9) = -1 EBADF (Bad file descriptor) [pid 6514] close(10) = -1 EBADF (Bad file descriptor) [pid 6514] close(11) = -1 EBADF (Bad file descriptor) [pid 6514] close(12) = -1 EBADF (Bad file descriptor) [pid 6514] close(13) = -1 EBADF (Bad file descriptor) [pid 6514] close(14) = -1 EBADF (Bad file descriptor) [pid 6514] close(15) = -1 EBADF (Bad file descriptor) [pid 6514] close(16) = -1 EBADF (Bad file descriptor) [pid 6514] close(17) = -1 EBADF (Bad file descriptor) [pid 6514] close(18) = -1 EBADF (Bad file descriptor) [pid 6514] close(19) = -1 EBADF (Bad file descriptor) [pid 6514] close(20) = -1 EBADF (Bad file descriptor) [pid 6514] close(21) = -1 EBADF (Bad file descriptor) [pid 6514] close(22) = -1 EBADF (Bad file descriptor) [pid 6514] close(23 [pid 6531] <... write resumed>) = 4 [pid 6514] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6514] close(24) = -1 EBADF (Bad file descriptor) [pid 6514] close(25) = -1 EBADF (Bad file descriptor) [pid 6514] close(26) = -1 EBADF (Bad file descriptor) [pid 6514] close(27) = -1 EBADF (Bad file descriptor) [pid 6514] close(28) = -1 EBADF (Bad file descriptor) [pid 6514] close(29) = -1 EBADF (Bad file descriptor) [pid 6514] exit_group(0 [pid 6531] close(3 [pid 6514] <... exit_group resumed>) = ? [pid 6531] <... close resumed>) = 0 executing program [pid 6514] +++ exited with 0 +++ [pid 6531] symlink("/dev/binderfs", "./binderfs" [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=17, si_uid=0, si_status=0, si_utime=14 /* 0.14 s */, si_stime=41 /* 0.41 s */} --- [pid 6531] <... symlink resumed>) = 0 [pid 6531] write(1, "executing program\n", 18 [pid 5823] restart_syscall(<... resuming interrupted clone ...> [pid 6531] <... write resumed>) = 18 [pid 6531] memfd_create("syzkaller", 0) = 3 [pid 6531] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaaaa00000 [pid 5823] <... restart_syscall resumed>) = 0 [pid 5823] umount2("./15", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5823] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5823] umount2("./15/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./15/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./15/cgroup") = 0 [pid 5823] umount2("./15/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./15/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./15/cgroup.cpu") = 0 [pid 5823] umount2("./15/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./15/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./15/cgroup.net") = 0 [pid 5823] umount2("./15/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./15/binderfs") = 0 [ 107.516818][ T6512] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 5823] umount2("./15/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5823] umount2("./15/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 107.573050][ T5823] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 107.595447][ T6513] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 5823] newfstatat(AT_FDCWD, "./15/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] umount2("./15/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./15/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5823] newfstatat(4, "", [pid 6513] <... mount resumed>) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 6513] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 107.655040][ T6513] XFS (loop4): Ending clean mount [pid 6513] chdir("./file0" [pid 5823] getdents64(4, [pid 6513] <... chdir resumed>) = 0 [pid 5823] <... getdents64 resumed>0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 6513] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5823] getdents64(4, [pid 6513] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5823] <... getdents64 resumed>0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 6513] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 5823] close(4) = 0 [pid 5823] rmdir("./15/file0") = 0 [pid 5823] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 6513] <... open resumed>) = 4 [pid 5823] close(3) = 0 [pid 5823] rmdir("./15") = 0 [pid 6513] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5823] mkdir("./16", 0777) = 0 [pid 6512] <... mount resumed>) = 0 [pid 6512] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6512] chdir("./file0") = 0 [pid 6512] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6512] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 5823] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5823] ioctl(3, LOOP_CLR_FD) = 0 [pid 5823] close(3 [pid 6512] <... open resumed>) = 4 [ 107.686895][ T6512] XFS (loop0): Ending clean mount [ 107.699996][ T29] audit: type=1800 audit(1733456405.196:78): pid=6513 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop4" ino=41 res=0 errno=0 [ 107.733805][ T6513] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 107.767470][ T5879] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 107.776797][ T6513] XFS (loop4): Unmount and run xfs_repair [ 107.784652][ T5879] XFS (loop0): Unmount and run xfs_repair [ 107.785046][ T29] audit: type=1800 audit(1733456405.226:79): pid=6512 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop0" ino=41 res=0 errno=0 [ 107.803080][ T5879] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 107.811352][ T6513] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 107.843663][ T6513] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 107.866668][ T5879] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 107.866672][ T6513] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 107.866693][ T5879] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [pid 6512] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5824] <... close resumed>) = 0 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6548 attached [pid 6548] set_robust_list(0x55558159a660, 24 [pid 5824] <... clone resumed>, child_tidptr=0x55558159a650) = 18 [pid 6548] <... set_robust_list resumed>) = 0 [pid 6548] chdir("./16") = 0 [pid 6548] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6548] setpgid(0, 0) = 0 [pid 6548] symlink("/syzcgroup/unified/syz1", "./cgroup") = 0 [pid 6548] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu") = 0 [pid 6548] symlink("/syzcgroup/net/syz1", "./cgroup.net") = 0 [pid 6548] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6548] write(3, "1000", 4) = 4 [pid 6548] close(3) = 0 [pid 6548] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 6548] write(1, "executing program\n", 18) = 18 [pid 6548] memfd_create("syzkaller", 0) = 3 [pid 6548] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaaaa00000 [ 107.893935][ T6513] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 107.906991][ T6513] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 107.928027][ T6513] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 107.946973][ T5879] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 107.949151][ T6513] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 107.955843][ T5879] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 107.955861][ T5879] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 108.004157][ T6513] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 108.024669][ T6513] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 108.045571][ T6513] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 108.056671][ T5879] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 108.065793][ T5879] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 108.077535][ T6513] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 108.092301][ T5879] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [pid 5823] <... close resumed>) = 0 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6549 attached [pid 6549] set_robust_list(0x55558159a660, 24) = 0 [pid 6549] chdir("./16") = 0 [pid 6549] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6549] setpgid(0, 0) = 0 [pid 5823] <... clone resumed>, child_tidptr=0x55558159a650) = 18 [pid 6549] symlink("/syzcgroup/unified/syz2", "./cgroup") = 0 [pid 6549] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu") = 0 [pid 6549] symlink("/syzcgroup/net/syz2", "./cgroup.net") = 0 [pid 6549] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 108.101294][ T6512] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 108.130194][ T6512] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [pid 6549] write(3, "1000", 4 [pid 6531] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 6549] <... write resumed>) = 4 [pid 6549] close(3) = 0 [pid 6549] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6549] write(1, "executing program\n", 18 [pid 6513] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 6549] <... write resumed>) = 18 [pid 6549] memfd_create("syzkaller", 0 [pid 6513] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000 [pid 6549] <... memfd_create resumed>) = 3 [pid 6513] <... openat resumed>) = -1 EFAULT (Bad address) [pid 6512] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 6549] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6513] close(3 [pid 6549] <... mmap resumed>) = 0x7fbaaaa00000 [pid 6513] <... close resumed>) = 0 [pid 6513] close(4 [pid 6512] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000 [pid 6513] <... close resumed>) = 0 [pid 6513] close(5) = -1 EBADF (Bad file descriptor) [pid 6513] close(6) = -1 EBADF (Bad file descriptor) [pid 6513] close(7 [pid 6512] <... openat resumed>) = -1 EFAULT (Bad address) [pid 6513] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6513] close(8 [pid 6512] close(3 [pid 6513] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6513] close(9) = -1 EBADF (Bad file descriptor) [pid 6513] close(10) = -1 EBADF (Bad file descriptor) [pid 6513] close(11) = -1 EBADF (Bad file descriptor) [pid 6513] close(12) = -1 EBADF (Bad file descriptor) [pid 6513] close(13) = -1 EBADF (Bad file descriptor) [pid 6513] close(14) = -1 EBADF (Bad file descriptor) [pid 6513] close(15) = -1 EBADF (Bad file descriptor) [pid 6513] close(16) = -1 EBADF (Bad file descriptor) [pid 6513] close(17) = -1 EBADF (Bad file descriptor) [pid 6513] close(18) = -1 EBADF (Bad file descriptor) [pid 6513] close(19) = -1 EBADF (Bad file descriptor) [pid 6513] close(20) = -1 EBADF (Bad file descriptor) [pid 6513] close(21) = -1 EBADF (Bad file descriptor) [pid 6513] close(22 [pid 6512] <... close resumed>) = 0 [pid 6513] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6513] close(23 [pid 6512] close(4 [pid 6513] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6513] close(24) = -1 EBADF (Bad file descriptor) [pid 6512] <... close resumed>) = 0 [pid 6513] close(25) = -1 EBADF (Bad file descriptor) [pid 6513] close(26) = -1 EBADF (Bad file descriptor) [pid 6513] close(27 [pid 6512] close(5 [pid 6513] <... close resumed>) = -1 EBADF (Bad file descriptor) [ 108.166648][ T6513] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 108.181628][ T6512] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [pid 6512] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6513] close(28 [pid 6512] close(6 [pid 6513] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6512] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6513] close(29 [pid 6512] close(7 [pid 6513] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6512] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6513] exit_group(0 [pid 6512] close(8 [pid 6513] <... exit_group resumed>) = ? [pid 6512] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6512] close(9) = -1 EBADF (Bad file descriptor) [pid 6512] close(10 [pid 6513] +++ exited with 0 +++ [pid 6512] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6512] close(11 [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=16, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=61 /* 0.61 s */} --- [pid 6512] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6512] close(12) = -1 EBADF (Bad file descriptor) [pid 6512] close(13) = -1 EBADF (Bad file descriptor) [pid 6512] close(14) = -1 EBADF (Bad file descriptor) [pid 6512] close(15) = -1 EBADF (Bad file descriptor) [pid 6512] close(16) = -1 EBADF (Bad file descriptor) [pid 5826] umount2("./14", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6512] close(17 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6512] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5826] <... openat resumed>) = 3 [pid 5826] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 6512] close(18 [pid 5826] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5826] umount2("./14/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./14/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./14/cgroup") = 0 [pid 5826] umount2("./14/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./14/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./14/cgroup.cpu") = 0 [pid 5826] umount2("./14/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6512] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./14/cgroup.net", [pid 6512] close(19) = -1 EBADF (Bad file descriptor) [pid 6512] close(20 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./14/cgroup.net") = 0 [pid 5826] umount2("./14/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./14/binderfs") = 0 [pid 5826] umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6512] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6512] close(21) = -1 EBADF (Bad file descriptor) [pid 6512] close(22) = -1 EBADF (Bad file descriptor) [pid 6512] close(23) = -1 EBADF (Bad file descriptor) [pid 6512] close(24) = -1 EBADF (Bad file descriptor) [pid 6512] close(25) = -1 EBADF (Bad file descriptor) [pid 6512] close(26) = -1 EBADF (Bad file descriptor) [pid 6512] close(27) = -1 EBADF (Bad file descriptor) [pid 6512] close(28) = -1 EBADF (Bad file descriptor) [pid 6512] close(29) = -1 EBADF (Bad file descriptor) [pid 6512] exit_group(0) = ? [pid 6512] +++ exited with 0 +++ [pid 5821] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=17, si_uid=0, si_status=0, si_utime=11 /* 0.11 s */, si_stime=52 /* 0.52 s */} --- [pid 5821] umount2("./15", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5821] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5821] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5821] umount2("./15/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./15/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] unlink("./15/cgroup") = 0 [pid 5821] umount2("./15/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./15/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] unlink("./15/cgroup.cpu") = 0 [pid 5821] umount2("./15/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./15/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] unlink("./15/cgroup.net") = 0 [pid 5821] umount2("./15/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] unlink("./15/binderfs") = 0 [pid 5821] umount2("./15/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5821] umount2("./15/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./15/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] umount2("./15/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 108.309926][ T5826] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 108.337357][ T5821] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 5821] openat(AT_FDCWD, "./15/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5826] <... umount2 resumed>) = 0 [pid 5821] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5821] getdents64(4, 0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5821] getdents64(4, 0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5821] close(4) = 0 [pid 5821] rmdir("./15/file0") = 0 [pid 5821] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5821] close(3) = 0 [pid 5821] rmdir("./15") = 0 [pid 5821] mkdir("./16", 0777) = 0 [pid 5821] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5821] ioctl(3, LOOP_CLR_FD) = 0 [pid 5821] close(3 [pid 5826] umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6548] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./14/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] openat(AT_FDCWD, "./14/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5826] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5826] getdents64(4, 0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5826] getdents64(4, 0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5826] close(4) = 0 [pid 5826] rmdir("./14/file0" [pid 6549] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 6531] <... write resumed>) = 33554432 [pid 5826] <... rmdir resumed>) = 0 [pid 6548] <... write resumed>) = 33554432 [pid 6531] munmap(0x7fbaaaa00000, 138412032 [pid 5826] getdents64(3, [pid 5821] <... close resumed>) = 0 [pid 5826] <... getdents64 resumed>0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 6548] munmap(0x7fbaaaa00000, 138412032 [pid 6531] <... munmap resumed>) = 0 [pid 5826] close(3 [pid 5821] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5826] <... close resumed>) = 0 ./strace-static-x86_64: Process 6550 attached [pid 6531] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5826] rmdir("./14" [pid 6550] set_robust_list(0x55558159a660, 24) = 0 [pid 6531] <... openat resumed>) = 4 [pid 5826] <... rmdir resumed>) = 0 [pid 5821] <... clone resumed>, child_tidptr=0x55558159a650) = 18 [pid 6550] chdir("./16" [pid 6531] ioctl(4, LOOP_SET_FD, 3 [pid 5826] mkdir("./15", 0777 [pid 6550] <... chdir resumed>) = 0 [pid 6550] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6531] <... ioctl resumed>) = 0 [pid 5826] <... mkdir resumed>) = 0 [pid 6550] <... prctl resumed>) = 0 [pid 5826] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6550] setpgid(0, 0 [pid 6531] close(3) = 0 [pid 5826] <... openat resumed>) = 3 [pid 6550] <... setpgid resumed>) = 0 [pid 5826] ioctl(3, LOOP_CLR_FD [pid 6531] close(4) = 0 [pid 6550] symlink("/syzcgroup/unified/syz0", "./cgroup" [pid 6531] mkdir("./file0", 0777 [pid 5826] <... ioctl resumed>) = 0 [pid 5826] close(3 [pid 6550] <... symlink resumed>) = 0 [pid 6531] <... mkdir resumed>) = 0 [pid 6550] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6531] mount("/dev/loop3", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 6550] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6550] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6548] <... munmap resumed>) = 0 [pid 6550] <... openat resumed>) = 3 [pid 6548] openat(AT_FDCWD, "/dev/loop1", O_RDWR [ 108.852489][ T6531] loop3: detected capacity change from 0 to 65536 [pid 6550] write(3, "1000", 4) = 4 [pid 6550] close(3 [pid 6548] <... openat resumed>) = 4 [pid 6550] <... close resumed>) = 0 [pid 6548] ioctl(4, LOOP_SET_FD, 3 [pid 6550] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6550] write(1, "executing program\n", 18) = 18 [pid 6550] memfd_create("syzkaller", 0) = 3 [pid 6548] <... ioctl resumed>) = 0 [pid 6548] close(3 [pid 6550] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6548] <... close resumed>) = 0 [pid 6548] close(4 [pid 6550] <... mmap resumed>) = 0x7fbaaaa00000 [pid 6548] <... close resumed>) = 0 [ 108.918517][ T6548] loop1: detected capacity change from 0 to 65536 [pid 6548] mkdir("./file0", 0777) = 0 [ 109.064119][ T6531] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 6548] mount("/dev/loop1", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 6550] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 6549] <... write resumed>) = 33554432 [pid 5826] <... close resumed>) = 0 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6549] munmap(0x7fbaaaa00000, 138412032) = 0 [pid 6549] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5826] <... clone resumed>, child_tidptr=0x55558159a650) = 17 [pid 6549] <... openat resumed>) = 4 [pid 6549] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6549] close(3) = 0 [pid 6549] close(4) = 0 [pid 6549] mkdir("./file0", 0777) = 0 [ 109.307481][ T6549] loop2: detected capacity change from 0 to 65536 [ 109.327308][ T6548] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 6549] mount("/dev/loop2", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 6531] <... mount resumed>) = 0 [pid 6531] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6531] chdir("./file0") = 0 [pid 6531] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6531] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 4 [ 109.363027][ T6531] XFS (loop3): Ending clean mount [ 109.402311][ T5966] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 109.418163][ T6549] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 109.430561][ T29] audit: type=1800 audit(1733456406.886:80): pid=6531 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop3" ino=41 res=0 errno=0 [pid 6531] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000./strace-static-x86_64: Process 6560 attached [pid 6550] <... write resumed>) = 33554432 [pid 6560] set_robust_list(0x55558159a660, 24) = 0 [pid 6550] munmap(0x7fbaaaa00000, 138412032 [pid 6560] chdir("./15" [pid 6548] <... mount resumed>) = 0 [pid 6560] <... chdir resumed>) = 0 [pid 6560] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6560] setpgid(0, 0) = 0 [ 109.461396][ T5966] XFS (loop3): Unmount and run xfs_repair [ 109.472842][ T6548] XFS (loop1): Ending clean mount [ 109.478081][ T5966] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 109.486278][ T5966] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 109.495215][ T5966] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 109.500233][ T6549] XFS (loop2): Ending clean mount [ 109.504312][ T5966] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 109.516876][ T29] audit: type=1800 audit(1733456407.016:81): pid=6548 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop1" ino=41 res=0 errno=0 [ 109.518206][ T5966] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 109.546896][ T5966] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [pid 6560] symlink("/syzcgroup/unified/syz4", "./cgroup" [pid 6548] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6560] <... symlink resumed>) = 0 [pid 6548] <... openat resumed>) = 3 [pid 6560] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu" [pid 6548] chdir("./file0" [pid 6560] <... symlink resumed>) = 0 [pid 6548] <... chdir resumed>) = 0 [pid 6560] symlink("/syzcgroup/net/syz4", "./cgroup.net" [pid 6548] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6560] <... symlink resumed>) = 0 [pid 6548] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6560] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6548] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 6560] <... openat resumed>) = 3 [pid 6548] <... open resumed>) = 4 [pid 6560] write(3, "1000", 4 [pid 6548] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6560] <... write resumed>) = 4 [pid 6560] close(3executing program ) = 0 [pid 6549] <... mount resumed>) = 0 [pid 6560] symlink("/dev/binderfs", "./binderfs" [pid 6549] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6560] <... symlink resumed>) = 0 [pid 6549] <... openat resumed>) = 3 [pid 6560] write(1, "executing program\n", 18 [pid 6549] chdir("./file0" [pid 6560] <... write resumed>) = 18 [pid 6549] <... chdir resumed>) = 0 [pid 6560] memfd_create("syzkaller", 0 [pid 6549] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6560] <... memfd_create resumed>) = 3 [pid 6549] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6560] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6549] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 6560] <... mmap resumed>) = 0x7fbaaaa00000 [ 109.549461][ T5879] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 109.555734][ T5966] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 109.555752][ T5966] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 109.584979][ T5966] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 109.594359][ T6531] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [pid 6549] <... open resumed>) = 4 [pid 6549] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6550] <... munmap resumed>) = 0 [pid 6550] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 109.598282][ T8] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 109.606224][ T29] audit: type=1800 audit(1733456407.086:82): pid=6549 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop2" ino=41 res=0 errno=0 [ 109.621116][ T5879] XFS (loop1): Unmount and run xfs_repair [ 109.645898][ T6550] loop0: detected capacity change from 0 to 65536 [pid 6550] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6550] close(3) = 0 [pid 6550] close(4) = 0 [pid 6550] mkdir("./file0", 0777) = 0 [ 109.654704][ T6531] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 109.655112][ T8] XFS (loop2): Unmount and run xfs_repair [ 109.676246][ T6531] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 109.686222][ T5879] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 109.693882][ T8] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 109.702671][ T5879] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [pid 6550] mount("/dev/loop0", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 6531] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 6531] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000) = -1 EFAULT (Bad address) [pid 6531] close(3) = 0 [pid 6531] close(4) = 0 [pid 6531] close(5) = -1 EBADF (Bad file descriptor) [pid 6531] close(6) = -1 EBADF (Bad file descriptor) [pid 6531] close(7) = -1 EBADF (Bad file descriptor) [pid 6531] close(8) = -1 EBADF (Bad file descriptor) [pid 6531] close(9) = -1 EBADF (Bad file descriptor) [pid 6531] close(10) = -1 EBADF (Bad file descriptor) [pid 6531] close(11) = -1 EBADF (Bad file descriptor) [pid 6531] close(12) = -1 EBADF (Bad file descriptor) [pid 6531] close(13) = -1 EBADF (Bad file descriptor) [pid 6531] close(14) = -1 EBADF (Bad file descriptor) [pid 6531] close(15) = -1 EBADF (Bad file descriptor) [pid 6531] close(16) = -1 EBADF (Bad file descriptor) [pid 6531] close(17) = -1 EBADF (Bad file descriptor) [pid 6531] close(18) = -1 EBADF (Bad file descriptor) [pid 6531] close(19) = -1 EBADF (Bad file descriptor) [ 109.712305][ T8] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 109.721975][ T5879] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 109.745037][ T8] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [pid 6531] close(20) = -1 EBADF (Bad file descriptor) [pid 6531] close(21) = -1 EBADF (Bad file descriptor) [pid 6531] close(22) = -1 EBADF (Bad file descriptor) [pid 6531] close(23) = -1 EBADF (Bad file descriptor) [pid 6531] close(24) = -1 EBADF (Bad file descriptor) [pid 6531] close(25) = -1 EBADF (Bad file descriptor) [pid 6531] close(26) = -1 EBADF (Bad file descriptor) [pid 6531] close(27) = -1 EBADF (Bad file descriptor) [pid 6531] close(28) = -1 EBADF (Bad file descriptor) [pid 6531] close(29) = -1 EBADF (Bad file descriptor) [pid 6531] exit_group(0) = ? [pid 6531] +++ exited with 0 +++ [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=17, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=58 /* 0.58 s */} --- [pid 5825] restart_syscall(<... resuming interrupted clone ...>) = 0 [ 109.754446][ T5879] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 109.765627][ T6550] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 109.766097][ T8] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 109.791091][ T5879] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 109.801848][ T5879] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [pid 5825] umount2("./15", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5825] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5825] umount2("./15/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./15/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./15/cgroup") = 0 [pid 5825] umount2("./15/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./15/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./15/cgroup.cpu") = 0 [pid 5825] umount2("./15/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./15/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./15/cgroup.net") = 0 [pid 5825] umount2("./15/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./15/binderfs") = 0 [pid 5825] umount2("./15/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6550] <... mount resumed>) = 0 [pid 6550] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6550] chdir("./file0") = 0 [pid 6550] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 109.811117][ T8] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 109.820678][ T5879] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 109.824103][ T6550] XFS (loop0): Ending clean mount [ 109.830111][ T8] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 109.844102][ T5879] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 109.853900][ T8] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [pid 6550] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 4 [ 109.854202][ T5825] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 109.862822][ T5879] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 109.862879][ T6548] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 109.863242][ T8] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 109.875569][ T57] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 109.880961][ T8] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 109.894660][ T29] audit: type=1800 audit(1733456407.376:83): pid=6550 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop0" ino=41 res=0 errno=0 [ 109.900694][ T6548] XFS (loop1): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 109.946633][ T57] XFS (loop0): Unmount and run xfs_repair [pid 6550] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6548] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 6548] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000) = -1 EFAULT (Bad address) [pid 6548] close(3) = 0 [ 109.955454][ T6548] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 109.972741][ T6549] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 109.976623][ T57] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 109.991379][ T57] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 110.000305][ T57] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [pid 6548] close(4) = 0 [pid 6548] close(5) = -1 EBADF (Bad file descriptor) [pid 6548] close(6) = -1 EBADF (Bad file descriptor) [pid 6548] close(7) = -1 EBADF (Bad file descriptor) [pid 6548] close(8) = -1 EBADF (Bad file descriptor) [pid 6548] close(9) = -1 EBADF (Bad file descriptor) [pid 6548] close(10) = -1 EBADF (Bad file descriptor) [pid 6548] close(11) = -1 EBADF (Bad file descriptor) [pid 6548] close(12) = -1 EBADF (Bad file descriptor) [pid 6548] close(13) = -1 EBADF (Bad file descriptor) [pid 6548] close(14) = -1 EBADF (Bad file descriptor) [pid 6548] close(15) = -1 EBADF (Bad file descriptor) [pid 6548] close(16) = -1 EBADF (Bad file descriptor) [pid 6548] close(17) = -1 EBADF (Bad file descriptor) [pid 6548] close(18) = -1 EBADF (Bad file descriptor) [pid 6548] close(19) = -1 EBADF (Bad file descriptor) [pid 6548] close(20) = -1 EBADF (Bad file descriptor) [pid 6548] close(21) = -1 EBADF (Bad file descriptor) [pid 6548] close(22) = -1 EBADF (Bad file descriptor) [pid 6548] close(23) = -1 EBADF (Bad file descriptor) [pid 6548] close(24) = -1 EBADF (Bad file descriptor) [pid 6548] close(25) = -1 EBADF (Bad file descriptor) [pid 6548] close(26) = -1 EBADF (Bad file descriptor) [pid 6548] close(27) = -1 EBADF (Bad file descriptor) [pid 6548] close(28) = -1 EBADF (Bad file descriptor) [pid 6548] close(29) = -1 EBADF (Bad file descriptor) [ 110.005005][ T6549] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 110.009208][ T57] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 110.033539][ T57] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 110.043220][ T57] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 110.052266][ T57] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [pid 6548] exit_group(0) = ? [pid 6548] +++ exited with 0 +++ [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=18, si_uid=0, si_status=0, si_utime=12 /* 0.12 s */, si_stime=51 /* 0.51 s */} --- [pid 5824] umount2("./16", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5824] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5824] umount2("./16/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./16/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./16/cgroup") = 0 [pid 5824] umount2("./16/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./16/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./16/cgroup.cpu") = 0 [pid 5824] umount2("./16/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./16/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./16/cgroup.net") = 0 [pid 5824] umount2("./16/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./16/binderfs") = 0 [pid 5824] umount2("./16/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6549] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 5825] <... umount2 resumed>) = 0 [ 110.062239][ T57] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 110.069587][ T6549] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 110.071222][ T57] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 110.089259][ T6550] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 110.102316][ T5824] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 6549] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000 [pid 5825] umount2("./15/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6550] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 6549] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... umount2 resumed>) = 0 [pid 6550] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000 [pid 6549] close(3 [pid 5825] newfstatat(AT_FDCWD, "./15/file0", [pid 6550] <... openat resumed>) = -1 EFAULT (Bad address) [pid 6549] <... close resumed>) = 0 [pid 6550] close(3 [pid 6549] close(4 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6550] <... close resumed>) = 0 [pid 6549] <... close resumed>) = 0 [pid 5825] umount2("./15/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6550] close(4 [pid 6549] close(5) = -1 EBADF (Bad file descriptor) [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6550] <... close resumed>) = 0 [pid 6549] close(6 [pid 5825] openat(AT_FDCWD, "./15/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6550] close(5 [pid 6549] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6550] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6549] close(7 [pid 5825] <... openat resumed>) = 4 [pid 5824] umount2("./16/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6550] close(6 [pid 6549] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5825] newfstatat(4, "", [pid 6550] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6549] close(8 [pid 6550] close(7 [pid 6549] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6550] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 6549] close(9 [pid 6550] close(8 [pid 5825] getdents64(4, [pid 6549] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6550] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6549] close(10 [pid 6550] close(9 [pid 6549] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6549] close(11 [pid 6550] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5825] <... getdents64 resumed>0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 6549] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6550] close(10 [pid 5825] getdents64(4, [pid 6549] close(12 [pid 6550] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6549] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5825] <... getdents64 resumed>0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 6550] close(11 [pid 6549] close(13 [pid 5824] newfstatat(AT_FDCWD, "./16/file0", [pid 6549] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6550] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6549] close(14 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] umount2("./16/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./16/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5824] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(4, 0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5824] getdents64(4, 0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5824] close(4) = 0 [pid 5824] rmdir("./16/file0") = 0 [pid 5824] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5824] close(3) = 0 [pid 5824] rmdir("./16") = 0 [pid 5824] mkdir("./17", 0777 [pid 6550] close(12 [pid 6549] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5825] close(4 [pid 5824] <... mkdir resumed>) = 0 [pid 6550] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6549] close(15 [pid 5825] <... close resumed>) = 0 [pid 6550] close(13 [pid 6549] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6550] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6549] close(16 [pid 5825] rmdir("./15/file0" [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6549] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5825] <... rmdir resumed>) = 0 [pid 5824] <... openat resumed>) = 3 [pid 6550] close(14 [pid 6549] close(17) = -1 EBADF (Bad file descriptor) [pid 5825] getdents64(3, [pid 5824] ioctl(3, LOOP_CLR_FD [pid 6550] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6549] close(18 [pid 5825] <... getdents64 resumed>0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5824] <... ioctl resumed>) = 0 [ 110.113341][ T6550] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 110.129033][ T6550] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [pid 5824] close(3 [pid 6560] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 6550] close(15 [pid 6549] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5825] close(3 [pid 6550] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6549] close(19 [pid 5825] <... close resumed>) = 0 [pid 6550] close(16 [pid 6549] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5825] rmdir("./15" [pid 6550] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6549] close(20 [pid 5825] <... rmdir resumed>) = 0 [pid 6550] close(17 [pid 6549] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5825] mkdir("./16", 0777 [pid 6550] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6549] close(21 [pid 5825] <... mkdir resumed>) = 0 [pid 6550] close(18 [pid 6549] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5825] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6549] close(22 [pid 5825] <... openat resumed>) = 3 [pid 6549] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5825] ioctl(3, LOOP_CLR_FD [pid 6549] close(23 [pid 5825] <... ioctl resumed>) = 0 [pid 6549] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5825] close(3 [pid 6549] close(24) = -1 EBADF (Bad file descriptor) [pid 6550] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6549] close(25 [pid 6550] close(19 [pid 6549] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6550] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6549] close(26 [pid 6550] close(20 [pid 6549] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6550] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6549] close(27 [pid 6550] close(21 [pid 6549] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6550] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6549] close(28 [pid 6550] close(22 [pid 6549] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6550] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6549] close(29 [pid 6550] close(23 [pid 6549] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6550] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6549] exit_group(0 [pid 6550] close(24 [pid 6549] <... exit_group resumed>) = ? [pid 6550] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6549] +++ exited with 0 +++ [pid 6550] close(25 [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=18, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=52 /* 0.52 s */} --- [pid 6550] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5823] restart_syscall(<... resuming interrupted clone ...> [pid 6550] close(26 [pid 5823] <... restart_syscall resumed>) = 0 [pid 6550] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6550] close(27) = -1 EBADF (Bad file descriptor) [pid 5823] umount2("./16", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6550] close(28 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6550] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5823] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6550] close(29 [pid 5823] <... openat resumed>) = 3 [pid 6550] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5823] newfstatat(3, "", [pid 6550] exit_group(0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 6550] <... exit_group resumed>) = ? [pid 5823] getdents64(3, [pid 6550] +++ exited with 0 +++ [pid 5823] <... getdents64 resumed>0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5823] umount2("./16/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./16/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./16/cgroup") = 0 [pid 5823] umount2("./16/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./16/cgroup.cpu", [pid 5821] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=18, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=44 /* 0.44 s */} --- [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./16/cgroup.cpu") = 0 [pid 5821] umount2("./16", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] umount2("./16/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5821] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] newfstatat(AT_FDCWD, "./16/cgroup.net", [pid 5821] <... openat resumed>) = 3 [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] newfstatat(3, "", [pid 5823] unlink("./16/cgroup.net" [pid 5821] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5823] <... unlink resumed>) = 0 [pid 5821] getdents64(3, [pid 5823] umount2("./16/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] <... getdents64 resumed>0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5821] umount2("./16/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] newfstatat(AT_FDCWD, "./16/binderfs", [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] newfstatat(AT_FDCWD, "./16/cgroup", [pid 5823] unlink("./16/binderfs" [pid 5821] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... close resumed>) = 0 [pid 5823] <... unlink resumed>) = 0 [pid 5825] <... close resumed>) = 0 [pid 5823] umount2("./16/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] unlink("./16/cgroup" [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5821] <... unlink resumed>) = 0 [pid 5821] umount2("./16/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... clone resumed>, child_tidptr=0x55558159a650) = 18 [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./16/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] unlink("./16/cgroup.cpu") = 0 [pid 5821] umount2("./16/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./16/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] unlink("./16/cgroup.net") = 0 [pid 5821] umount2("./16/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] unlink("./16/binderfs") = 0 [pid 5821] umount2("./16/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6585 attached ./strace-static-x86_64: Process 6584 attached [pid 6584] set_robust_list(0x55558159a660, 24) = 0 [pid 6584] chdir("./16") = 0 [pid 6585] set_robust_list(0x55558159a660, 24 [pid 6584] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5824] <... clone resumed>, child_tidptr=0x55558159a650) = 19 [pid 6585] <... set_robust_list resumed>) = 0 [pid 6584] <... prctl resumed>) = 0 [pid 6584] setpgid(0, 0) = 0 [ 110.503795][ T5823] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 110.538815][ T5821] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 6585] chdir("./17" [pid 6584] symlink("/syzcgroup/unified/syz3", "./cgroup" [pid 6560] <... write resumed>) = 33554432 [pid 6585] <... chdir resumed>) = 0 [pid 6560] munmap(0x7fbaaaa00000, 138412032 [pid 6585] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6584] <... symlink resumed>) = 0 [pid 5823] <... umount2 resumed>) = 0 [pid 6584] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu" [pid 5823] umount2("./16/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6584] <... symlink resumed>) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6584] symlink("/syzcgroup/net/syz3", "./cgroup.net" [pid 5823] newfstatat(AT_FDCWD, "./16/file0", [pid 6584] <... symlink resumed>) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6584] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5823] umount2("./16/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6584] <... openat resumed>) = 3 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6584] write(3, "1000", 4 [pid 5823] openat(AT_FDCWD, "./16/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY executing program [pid 6584] <... write resumed>) = 4 [pid 5823] <... openat resumed>) = 4 [pid 6585] <... prctl resumed>) = 0 [pid 6584] close(3 [pid 5823] newfstatat(4, "", [pid 5821] <... umount2 resumed>) = 0 [pid 6584] <... close resumed>) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5821] umount2("./16/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6584] symlink("/dev/binderfs", "./binderfs" [pid 5823] getdents64(4, [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6584] <... symlink resumed>) = 0 [pid 5823] <... getdents64 resumed>0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5821] newfstatat(AT_FDCWD, "./16/file0", [pid 6584] write(1, "executing program\n", 18 [pid 5823] getdents64(4, [pid 5821] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6584] <... write resumed>) = 18 [pid 5823] <... getdents64 resumed>0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5821] umount2("./16/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6585] setpgid(0, 0 [pid 6584] memfd_create("syzkaller", 0 [pid 5823] close(4 [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6585] <... setpgid resumed>) = 0 [pid 6584] <... memfd_create resumed>) = 3 [pid 5823] <... close resumed>) = 0 [pid 5821] openat(AT_FDCWD, "./16/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6585] symlink("/syzcgroup/unified/syz1", "./cgroup" [pid 6584] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6560] <... munmap resumed>) = 0 [pid 5823] rmdir("./16/file0" [pid 5821] <... openat resumed>) = 4 [pid 6584] <... mmap resumed>) = 0x7fbaaaa00000 [pid 5823] <... rmdir resumed>) = 0 [pid 5821] newfstatat(4, "", [pid 6585] <... symlink resumed>) = 0 [pid 6560] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5823] getdents64(3, [pid 6585] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu" [pid 5821] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5823] <... getdents64 resumed>0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 6585] <... symlink resumed>) = 0 [pid 6560] <... openat resumed>) = 4 [pid 5823] close(3 [pid 5821] getdents64(4, [pid 6585] symlink("/syzcgroup/net/syz1", "./cgroup.net") = 0 [pid 6560] ioctl(4, LOOP_SET_FD, 3 [pid 5823] <... close resumed>) = 0 [pid 5821] <... getdents64 resumed>0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 6585] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5823] rmdir("./16" [pid 5821] getdents64(4, [pid 6585] <... openat resumed>) = 3 [pid 6585] write(3, "1000", 4 [pid 5823] <... rmdir resumed>) = 0 [pid 5821] <... getdents64 resumed>0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5823] mkdir("./17", 0777 [pid 5821] close(4 [pid 6585] <... write resumed>) = 4 [pid 5823] <... mkdir resumed>) = 0 [pid 5821] <... close resumed>) = 0 [pid 5823] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5821] rmdir("./16/file0" [pid 6585] close(3 [pid 5821] <... rmdir resumed>) = 0 [pid 6585] <... close resumed>) = 0 [pid 5823] <... openat resumed>) = 3 [pid 5821] getdents64(3, [pid 6585] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 5823] ioctl(3, LOOP_CLR_FD [pid 5821] <... getdents64 resumed>0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 6585] write(1, "executing program\n", 18) = 18 [pid 5823] <... ioctl resumed>) = 0 [pid 5821] close(3 [pid 6585] memfd_create("syzkaller", 0 [pid 5823] close(3 [pid 5821] <... close resumed>) = 0 [pid 6585] <... memfd_create resumed>) = 3 [pid 6585] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaaaa00000 [pid 6560] <... ioctl resumed>) = 0 [pid 6560] close(3) = 0 [pid 6560] close(4) = 0 [pid 5821] rmdir("./16" [pid 6560] mkdir("./file0", 0777 [pid 5821] <... rmdir resumed>) = 0 [pid 6560] <... mkdir resumed>) = 0 [pid 6560] mount("/dev/loop4", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 5821] mkdir("./17", 0777) = 0 [pid 5821] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5821] ioctl(3, LOOP_CLR_FD) = 0 [ 110.627984][ T6560] loop4: detected capacity change from 0 to 65536 [ 110.729708][ T6560] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 5821] close(3 [pid 5823] <... close resumed>) = 0 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6560] <... mount resumed>) = 0 [pid 6560] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6560] chdir("./file0") = 0 [pid 6560] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6560] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 4 [ 110.971238][ T6560] XFS (loop4): Ending clean mount [ 110.985139][ T29] audit: type=1800 audit(1733456408.476:84): pid=6560 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop4" ino=41 res=0 errno=0 [ 111.008876][ T5966] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 111.030818][ T5966] XFS (loop4): Unmount and run xfs_repair [ 111.047093][ T5966] XFS (loop4): First 128 bytes of corrupted metadata buffer: [pid 6560] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5821] <... close resumed>) = 0 [pid 5821] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6594 attached [pid 6584] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 6594] set_robust_list(0x55558159a660, 24 [pid 5821] <... clone resumed>, child_tidptr=0x55558159a650) = 19 [pid 6594] <... set_robust_list resumed>) = 0 [pid 6594] chdir("./17") = 0 [pid 6594] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6594] setpgid(0, 0) = 0 [pid 6594] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6594] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu"./strace-static-x86_64: Process 6595 attached ) = 0 [pid 6594] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6594] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6594] write(3, "1000", 4) = 4 [pid 6594] close(3) = 0 [pid 6594] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6594] write(1, "executing program\n", 18) = 18 [pid 6594] memfd_create("syzkaller", 0) = 3 [pid 6594] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaaaa00000 [ 111.072537][ T5966] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 111.081635][ T5966] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 111.119530][ T5966] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 111.146663][ T5966] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... executing program [pid 6595] set_robust_list(0x55558159a660, 24) = 0 [pid 6595] chdir("./17") = 0 [pid 6595] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6595] setpgid(0, 0) = 0 [pid 6595] symlink("/syzcgroup/unified/syz2", "./cgroup") = 0 [pid 6595] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu") = 0 [pid 6595] symlink("/syzcgroup/net/syz2", "./cgroup.net") = 0 [pid 6595] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6595] write(3, "1000", 4) = 4 [pid 6595] close(3) = 0 [pid 6595] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6595] write(1, "executing program\n", 18) = 18 [pid 6595] memfd_create("syzkaller", 0) = 3 [pid 6595] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaaaa00000 [ 111.166651][ T5966] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 111.197993][ T5966] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 111.217602][ T5966] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 111.226496][ T5966] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 111.266731][ T6560] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 111.280761][ T6560] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [pid 6560] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 6560] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000) = -1 EFAULT (Bad address) [pid 6560] close(3) = 0 [pid 6560] close(4) = 0 [pid 6560] close(5) = -1 EBADF (Bad file descriptor) [pid 6560] close(6) = -1 EBADF (Bad file descriptor) [pid 6560] close(7) = -1 EBADF (Bad file descriptor) [pid 6560] close(8) = -1 EBADF (Bad file descriptor) [pid 6560] close(9) = -1 EBADF (Bad file descriptor) [pid 6560] close(10) = -1 EBADF (Bad file descriptor) [pid 6560] close(11) = -1 EBADF (Bad file descriptor) [pid 6560] close(12) = -1 EBADF (Bad file descriptor) [pid 6560] close(13) = -1 EBADF (Bad file descriptor) [pid 6560] close(14) = -1 EBADF (Bad file descriptor) [pid 6560] close(15) = -1 EBADF (Bad file descriptor) [pid 6560] close(16) = -1 EBADF (Bad file descriptor) [pid 6560] close(17) = -1 EBADF (Bad file descriptor) [pid 6560] close(18) = -1 EBADF (Bad file descriptor) [pid 6560] close(19) = -1 EBADF (Bad file descriptor) [pid 6560] close(20) = -1 EBADF (Bad file descriptor) [pid 6560] close(21) = -1 EBADF (Bad file descriptor) [pid 6560] close(22) = -1 EBADF (Bad file descriptor) [pid 6560] close(23) = -1 EBADF (Bad file descriptor) [pid 6560] close(24) = -1 EBADF (Bad file descriptor) [pid 6560] close(25) = -1 EBADF (Bad file descriptor) [pid 6560] close(26) = -1 EBADF (Bad file descriptor) [pid 6560] close(27) = -1 EBADF (Bad file descriptor) [pid 6560] close(28) = -1 EBADF (Bad file descriptor) [pid 6560] close(29) = -1 EBADF (Bad file descriptor) [pid 6560] exit_group(0) = ? [pid 6560] +++ exited with 0 +++ [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=17, si_uid=0, si_status=0, si_utime=11 /* 0.11 s */, si_stime=51 /* 0.51 s */} --- [ 111.326711][ T6560] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [pid 6584] <... write resumed>) = 33554432 [pid 5826] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5826] umount2("./15", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 6584] munmap(0x7fbaaaa00000, 138412032 [pid 5826] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5826] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5826] umount2("./15/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./15/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./15/cgroup") = 0 [pid 5826] umount2("./15/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./15/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./15/cgroup.cpu") = 0 [pid 5826] umount2("./15/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./15/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./15/cgroup.net") = 0 [pid 5826] umount2("./15/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./15/binderfs") = 0 [pid 5826] umount2("./15/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6584] <... munmap resumed>) = 0 [pid 5823] <... clone resumed>, child_tidptr=0x55558159a650) = 19 [pid 6584] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 111.411529][ T5826] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 6584] ioctl(4, LOOP_SET_FD, 3 [pid 6585] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 6584] <... ioctl resumed>) = 0 [ 111.511956][ T6584] loop3: detected capacity change from 0 to 65536 [pid 6584] close(3) = 0 [pid 6584] close(4) = 0 [pid 6584] mkdir("./file0", 0777) = 0 [pid 6584] mount("/dev/loop3", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 6594] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 5826] <... umount2 resumed>) = 0 [pid 5826] umount2("./15/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./15/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] umount2("./15/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] openat(AT_FDCWD, "./15/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5826] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5826] getdents64(4, 0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5826] getdents64(4, 0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5826] close(4) = 0 [pid 5826] rmdir("./15/file0") = 0 [pid 5826] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5826] close(3) = 0 [pid 5826] rmdir("./15") = 0 [pid 5826] mkdir("./16", 0777) = 0 [pid 5826] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5826] ioctl(3, LOOP_CLR_FD) = 0 [pid 5826] close(3 [ 111.701138][ T6584] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 6595] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 6584] <... mount resumed>) = 0 [pid 5826] <... close resumed>) = 0 [pid 6584] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6584] chdir("./file0") = 0 [pid 6584] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6584] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 4 [ 111.949932][ T6584] XFS (loop3): Ending clean mount [pid 6584] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [ 111.983091][ T5966] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 111.995151][ T29] audit: type=1800 audit(1733456409.476:85): pid=6584 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop3" ino=41 res=0 errno=0 [ 112.016009][ T5966] XFS (loop3): Unmount and run xfs_repair [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6585] <... write resumed>) = 33554432 [pid 5826] <... clone resumed>, child_tidptr=0x55558159a650) = 18 [ 112.027095][ T5966] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 112.034512][ T5966] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 112.065381][ T5966] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ ./strace-static-x86_64: Process 6604 attached [pid 6604] set_robust_list(0x55558159a660, 24) = 0 [pid 6604] chdir("./16") = 0 [pid 6604] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6604] setpgid(0, 0) = 0 [pid 6604] symlink("/syzcgroup/unified/syz4", "./cgroup") = 0 [pid 6604] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu") = 0 [pid 6604] symlink("/syzcgroup/net/syz4", "./cgroup.net") = 0 [pid 6604] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6604] write(3, "1000", 4) = 4 [pid 6604] close(3) = 0 [pid 6604] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 6604] write(1, "executing program\n", 18) = 18 [ 112.076082][ T5966] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 112.097989][ T5966] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 112.107213][ T5966] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [pid 6604] memfd_create("syzkaller", 0) = 3 [pid 6604] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaaaa00000 [ 112.142468][ T5966] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 112.175171][ T5966] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [pid 6594] <... write resumed>) = 33554432 [pid 6585] munmap(0x7fbaaaa00000, 138412032 [pid 6594] munmap(0x7fbaaaa00000, 138412032 [pid 6584] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 6584] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000) = -1 EFAULT (Bad address) [pid 6584] close(3) = 0 [pid 6584] close(4) = 0 [pid 6584] close(5) = -1 EBADF (Bad file descriptor) [pid 6584] close(6) = -1 EBADF (Bad file descriptor) [pid 6584] close(7) = -1 EBADF (Bad file descriptor) [pid 6584] close(8) = -1 EBADF (Bad file descriptor) [pid 6584] close(9) = -1 EBADF (Bad file descriptor) [pid 6584] close(10) = -1 EBADF (Bad file descriptor) [pid 6584] close(11) = -1 EBADF (Bad file descriptor) [pid 6584] close(12) = -1 EBADF (Bad file descriptor) [pid 6584] close(13) = -1 EBADF (Bad file descriptor) [pid 6584] close(14) = -1 EBADF (Bad file descriptor) [pid 6584] close(15) = -1 EBADF (Bad file descriptor) [pid 6584] close(16) = -1 EBADF (Bad file descriptor) [pid 6584] close(17) = -1 EBADF (Bad file descriptor) [pid 6584] close(18) = -1 EBADF (Bad file descriptor) [pid 6584] close(19) = -1 EBADF (Bad file descriptor) [pid 6584] close(20) = -1 EBADF (Bad file descriptor) [pid 6584] close(21) = -1 EBADF (Bad file descriptor) [pid 6584] close(22) = -1 EBADF (Bad file descriptor) [pid 6584] close(23) = -1 EBADF (Bad file descriptor) [pid 6584] close(24) = -1 EBADF (Bad file descriptor) [pid 6584] close(25) = -1 EBADF (Bad file descriptor) [pid 6584] close(26) = -1 EBADF (Bad file descriptor) [pid 6584] close(27) = -1 EBADF (Bad file descriptor) [pid 6584] close(28) = -1 EBADF (Bad file descriptor) [pid 6584] close(29) = -1 EBADF (Bad file descriptor) [pid 6584] exit_group(0) = ? [ 112.207230][ T5966] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 112.216181][ T6584] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 112.230570][ T6584] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 112.246961][ T6584] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [pid 6594] <... munmap resumed>) = 0 [pid 6585] <... munmap resumed>) = 0 [pid 6584] +++ exited with 0 +++ [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=18, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=43 /* 0.43 s */} --- [pid 5825] umount2("./16", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5825] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5825] umount2("./16/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./16/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./16/cgroup") = 0 [pid 5825] umount2("./16/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./16/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./16/cgroup.cpu") = 0 [pid 5825] umount2("./16/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./16/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./16/cgroup.net") = 0 [pid 5825] umount2("./16/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./16/binderfs") = 0 [pid 5825] umount2("./16/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6595] <... write resumed>) = 33554432 [pid 6594] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6585] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5825] <... umount2 resumed>) = 0 [pid 6595] munmap(0x7fbaaaa00000, 138412032 [pid 6594] <... openat resumed>) = 4 [pid 6585] <... openat resumed>) = 4 [ 112.299196][ T5825] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 5825] umount2("./16/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./16/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] umount2("./16/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./16/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5825] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 6594] ioctl(4, LOOP_SET_FD, 3 [pid 6585] ioctl(4, LOOP_SET_FD, 3 [pid 5825] getdents64(4, 0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5825] getdents64(4, 0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5825] close(4) = 0 [pid 5825] rmdir("./16/file0") = 0 [pid 5825] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5825] close(3) = 0 [pid 5825] rmdir("./16") = 0 [pid 5825] mkdir("./17", 0777 [pid 6594] <... ioctl resumed>) = 0 [pid 5825] <... mkdir resumed>) = 0 [pid 5825] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5825] ioctl(3, LOOP_CLR_FD) = 0 [pid 5825] close(3 [pid 6595] <... munmap resumed>) = 0 [pid 6594] close(3 [pid 6585] <... ioctl resumed>) = 0 [pid 6595] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6594] <... close resumed>) = 0 [pid 6585] close(3 [pid 6594] close(4 [pid 6585] <... close resumed>) = 0 [pid 6594] <... close resumed>) = 0 [pid 6585] close(4 [pid 6595] <... openat resumed>) = 4 [pid 6594] mkdir("./file0", 0777 [pid 6585] <... close resumed>) = 0 [pid 6595] ioctl(4, LOOP_SET_FD, 3 [pid 6585] mkdir("./file0", 0777 [pid 6595] <... ioctl resumed>) = 0 [pid 6594] <... mkdir resumed>) = 0 [pid 6585] <... mkdir resumed>) = 0 [pid 6594] mount("/dev/loop0", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 6585] mount("/dev/loop1", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 6595] close(3) = 0 [pid 6595] close(4) = 0 [pid 6595] mkdir("./file0", 0777) = 0 [ 112.368795][ T6594] loop0: detected capacity change from 0 to 65536 [ 112.375516][ T6585] loop1: detected capacity change from 0 to 65536 [ 112.399285][ T6595] loop2: detected capacity change from 0 to 65536 [pid 6595] mount("/dev/loop2", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 5825] <... close resumed>) = 0 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6611 attached , child_tidptr=0x55558159a650) = 19 [pid 6611] set_robust_list(0x55558159a660, 24) = 0 [pid 6611] chdir("./17") = 0 [pid 6611] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6611] setpgid(0, 0) = 0 [pid 6611] symlink("/syzcgroup/unified/syz3", "./cgroup") = 0 [pid 6611] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu") = 0 [pid 6611] symlink("/syzcgroup/net/syz3", "./cgroup.net") = 0 [pid 6604] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 6611] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6611] write(3, "1000", 4) = 4 [pid 6611] close(3) = 0 [pid 6611] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6611] write(1, "executing program\n", 18) = 18 [pid 6611] memfd_create("syzkaller", 0) = 3 [pid 6611] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaaaa00000 [ 112.608860][ T6585] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 112.619102][ T6594] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 112.631832][ T6595] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 112.704025][ T6594] XFS (loop0): Ending clean mount [pid 6594] <... mount resumed>) = 0 [pid 6594] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6594] chdir("./file0") = 0 [pid 6594] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6594] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 4 [ 112.815300][ T8] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 112.827535][ T8] XFS (loop0): Unmount and run xfs_repair [ 112.833282][ T8] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 112.846647][ T8] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [pid 6594] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [ 112.866727][ T8] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 112.886715][ T8] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 112.893276][ T29] audit: type=1800 audit(1733456410.306:86): pid=6594 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop0" ino=41 res=0 errno=0 [ 112.906694][ T8] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 112.947905][ T8] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 112.984724][ T6585] XFS (loop1): Ending clean mount [ 112.990131][ T6595] XFS (loop2): Ending clean mount [ 112.996866][ T8] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 113.005745][ T8] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 113.014768][ T8] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [pid 6611] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 6595] <... mount resumed>) = 0 [pid 6594] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 6585] <... mount resumed>) = 0 [pid 6595] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6594] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000 [ 113.025253][ T6594] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 113.038614][ T6594] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 113.053400][ T6594] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [pid 6585] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6604] <... write resumed>) = 33554432 [pid 6595] <... openat resumed>) = 3 [pid 6594] <... openat resumed>) = -1 EFAULT (Bad address) [pid 6585] <... openat resumed>) = 3 [pid 6604] munmap(0x7fbaaaa00000, 138412032 [pid 6595] chdir("./file0" [pid 6594] close(3 [pid 6585] chdir("./file0" [pid 6611] <... write resumed>) = 33554432 [pid 6604] <... munmap resumed>) = 0 [pid 6595] <... chdir resumed>) = 0 [pid 6594] <... close resumed>) = 0 [pid 6585] <... chdir resumed>) = 0 [pid 6604] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6595] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6594] close(4 [pid 6585] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6604] <... openat resumed>) = 4 [pid 6595] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 113.185448][ T6604] loop4: detected capacity change from 0 to 65536 [ 113.195009][ T29] audit: type=1800 audit(1733456410.696:87): pid=6595 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop2" ino=41 res=0 errno=0 [ 113.199048][ T8] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [pid 6594] <... close resumed>) = 0 [pid 6611] munmap(0x7fbaaaa00000, 138412032 [pid 6585] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6604] ioctl(4, LOOP_SET_FD, 3 [pid 6595] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 6594] close(5 [pid 6585] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 6595] <... open resumed>) = 4 [pid 6585] <... open resumed>) = 4 [pid 6585] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6611] <... munmap resumed>) = 0 [pid 6604] <... ioctl resumed>) = 0 [pid 6595] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6594] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6604] close(3) = 0 [pid 6604] close(4) = 0 [pid 6604] mkdir("./file0", 0777) = 0 [pid 6604] mount("/dev/loop4", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 6594] close(6 [pid 6611] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6594] <... close resumed>) = -1 EBADF (Bad file descriptor) [ 113.224020][ T29] audit: type=1800 audit(1733456410.696:88): pid=6585 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop1" ino=41 res=0 errno=0 [ 113.240538][ T8] XFS (loop1): Unmount and run xfs_repair [ 113.251382][ T5966] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 113.251467][ T5966] XFS (loop2): Unmount and run xfs_repair [ 113.252369][ T8] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 113.264606][ T5966] XFS (loop2): First 128 bytes of corrupted metadata buffer: [pid 6611] <... openat resumed>) = 4 [pid 6594] close(7) = -1 EBADF (Bad file descriptor) [pid 6594] close(8 [pid 6611] ioctl(4, LOOP_SET_FD, 3 [pid 6594] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6594] close(9) = -1 EBADF (Bad file descriptor) [pid 6594] close(10) = -1 EBADF (Bad file descriptor) [pid 6594] close(11) = -1 EBADF (Bad file descriptor) [pid 6594] close(12) = -1 EBADF (Bad file descriptor) [pid 6594] close(13) = -1 EBADF (Bad file descriptor) [pid 6594] close(14) = -1 EBADF (Bad file descriptor) [pid 6594] close(15) = -1 EBADF (Bad file descriptor) [pid 6594] close(16) = -1 EBADF (Bad file descriptor) [pid 6594] close(17) = -1 EBADF (Bad file descriptor) [pid 6594] close(18) = -1 EBADF (Bad file descriptor) [pid 6594] close(19) = -1 EBADF (Bad file descriptor) [pid 6594] close(20) = -1 EBADF (Bad file descriptor) [pid 6594] close(21) = -1 EBADF (Bad file descriptor) [pid 6594] close(22) = -1 EBADF (Bad file descriptor) [pid 6594] close(23) = -1 EBADF (Bad file descriptor) [pid 6594] close(24) = -1 EBADF (Bad file descriptor) [pid 6594] close(25) = -1 EBADF (Bad file descriptor) [pid 6594] close(26) = -1 EBADF (Bad file descriptor) [pid 6594] close(27) = -1 EBADF (Bad file descriptor) [pid 6594] close(28) = -1 EBADF (Bad file descriptor) [pid 6594] close(29) = -1 EBADF (Bad file descriptor) [pid 6594] exit_group(0) = ? [ 113.269389][ T8] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 113.292334][ T5966] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 113.294841][ T6604] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 113.311850][ T8] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 113.311978][ T6611] loop3: detected capacity change from 0 to 65536 [pid 6594] +++ exited with 0 +++ [pid 6611] <... ioctl resumed>) = 0 [pid 5821] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=19, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=52 /* 0.52 s */} --- [pid 6611] close(3) = 0 [ 113.327866][ T5966] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 113.330905][ T8] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 113.338511][ T5966] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 113.346198][ T8] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 113.355965][ T5966] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 113.363672][ T8] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [pid 6611] close(4) = 0 [pid 6611] mkdir("./file0", 0777 [pid 5821] umount2("./17", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6611] <... mkdir resumed>) = 0 [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6611] mount("/dev/loop3", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 5821] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5821] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5821] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5821] umount2("./17/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./17/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] unlink("./17/cgroup") = 0 [pid 5821] umount2("./17/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./17/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] unlink("./17/cgroup.cpu") = 0 [pid 5821] umount2("./17/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./17/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] unlink("./17/cgroup.net") = 0 [pid 6604] <... mount resumed>) = 0 [pid 5821] umount2("./17/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6604] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5821] newfstatat(AT_FDCWD, "./17/binderfs", [pid 6604] <... openat resumed>) = 3 [pid 5821] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6604] chdir("./file0" [pid 5821] unlink("./17/binderfs") = 0 [pid 5821] umount2("./17/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6604] <... chdir resumed>) = 0 [pid 6604] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [ 113.363691][ T8] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 113.390429][ T8] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 113.396300][ T6604] XFS (loop4): Ending clean mount [ 113.399346][ T8] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 113.414531][ T6585] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [pid 6604] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 4 [ 113.432702][ T5821] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 113.444011][ T29] audit: type=1800 audit(1733456410.936:89): pid=6604 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop4" ino=41 res=0 errno=0 [ 113.446912][ T5966] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 113.465159][ T6585] XFS (loop1): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 113.473931][ T5966] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 113.496821][ T5966] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 113.498836][ T8] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 113.505786][ T5966] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 113.521169][ T6611] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 113.525740][ T6595] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 113.540224][ T6585] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 113.549398][ T6595] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 113.561644][ T8] XFS (loop4): Unmount and run xfs_repair [ 113.574145][ T6595] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [pid 6604] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6595] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 6585] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 6595] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000 [pid 6585] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000 [pid 6595] <... openat resumed>) = -1 EFAULT (Bad address) [pid 6585] <... openat resumed>) = -1 EFAULT (Bad address) [pid 6595] close(3 [pid 6585] close(3 [pid 6595] <... close resumed>) = 0 [pid 6585] <... close resumed>) = 0 [pid 6595] close(4 [pid 6585] close(4 [pid 6595] <... close resumed>) = 0 [pid 6585] <... close resumed>) = 0 [pid 6595] close(5 [pid 6585] close(5 [pid 6595] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6585] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6595] close(6 [pid 6585] close(6 [pid 6595] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6585] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6595] close(7 [pid 6585] close(7 [pid 6595] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6585] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6595] close(8 [pid 6585] close(8 [pid 6595] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6585] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6595] close(9 [pid 6585] close(9 [pid 6595] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6585] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6595] close(10 [pid 6585] close(10 [pid 6595] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6585] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6595] close(11 [pid 6585] close(11 [pid 6595] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6585] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6595] close(12 [pid 6585] close(12 [pid 6595] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6585] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6595] close(13 [pid 6585] close(13 [pid 6595] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6585] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6595] close(14 [pid 6585] close(14 [pid 6595] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6585] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6595] close(15 [pid 6585] close(15 [pid 6595] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6585] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6595] close(16 [pid 6585] close(16 [pid 6595] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6585] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6595] close(17 [pid 6585] close(17 [pid 6595] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6585] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6595] close(18 [pid 6585] close(18 [pid 6595] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6585] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6595] close(19 [pid 6585] close(19 [pid 6595] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6585] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6595] close(20 [pid 6585] close(20 [pid 6595] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6585] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6595] close(21 [pid 6585] close(21 [pid 6595] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6585] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6595] close(22 [pid 6585] close(22 [pid 6595] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6585] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6595] close(23 [pid 6585] close(23 [pid 6595] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6585] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6595] close(24 [pid 6585] close(24 [pid 6595] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6585] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6595] close(25 [pid 6585] close(25 [pid 6595] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6585] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6595] close(26 [pid 6585] close(26 [pid 6595] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6585] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6595] close(27 [pid 6585] close(27 [pid 6595] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6585] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6595] close(28 [pid 6585] close(28 [pid 6595] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6585] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6595] close(29 [pid 6585] close(29 [pid 6595] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6585] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6595] exit_group(0 [pid 6585] exit_group(0) = ? [ 113.574841][ T8] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 113.589997][ T8] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 113.598946][ T8] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 113.607868][ T8] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 113.616952][ T8] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 113.625825][ T8] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [pid 6595] <... exit_group resumed>) = ? [pid 6595] +++ exited with 0 +++ [pid 6611] <... mount resumed>) = 0 [pid 6585] +++ exited with 0 +++ [pid 5821] <... umount2 resumed>) = 0 [pid 5821] umount2("./17/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./17/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] umount2("./17/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] openat(AT_FDCWD, "./17/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5821] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5821] getdents64(4, 0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5821] getdents64(4, 0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5821] close(4) = 0 [pid 5821] rmdir("./17/file0") = 0 [pid 5821] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5821] close(3) = 0 [pid 5821] rmdir("./17") = 0 [pid 5821] mkdir("./18", 0777) = 0 [pid 5821] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5821] ioctl(3, LOOP_CLR_FD) = 0 [pid 5821] close(3 [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=19, si_uid=0, si_status=0, si_utime=13 /* 0.13 s */, si_stime=46 /* 0.46 s */} --- [pid 6611] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=19, si_uid=0, si_status=0, si_utime=11 /* 0.11 s */, si_stime=49 /* 0.49 s */} --- [pid 5823] umount2("./17", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6611] <... openat resumed>) = 3 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6611] chdir("./file0" [pid 5823] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6611] <... chdir resumed>) = 0 [pid 5824] umount2("./17", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... openat resumed>) = 3 [pid 6611] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(3, "", [pid 6611] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5824] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 6611] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 5824] <... openat resumed>) = 3 [pid 5823] getdents64(3, [pid 6611] <... open resumed>) = 4 [pid 5824] newfstatat(3, "", [ 113.626372][ T6611] XFS (loop3): Ending clean mount [ 113.634794][ T8] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 113.634814][ T8] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 113.634828][ T8] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 113.668293][ T6604] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [pid 6611] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5823] <... getdents64 resumed>0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5823] umount2("./17/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./17/cgroup", [pid 5824] getdents64(3, [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... getdents64 resumed>0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5823] unlink("./17/cgroup" [pid 5824] umount2("./17/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... unlink resumed>) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] umount2("./17/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] newfstatat(AT_FDCWD, "./17/cgroup", [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] newfstatat(AT_FDCWD, "./17/cgroup.cpu", [pid 5824] unlink("./17/cgroup" [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... unlink resumed>) = 0 [pid 5823] unlink("./17/cgroup.cpu" [ 113.693086][ T5966] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 113.701643][ T29] audit: type=1800 audit(1733456411.186:90): pid=6611 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop3" ino=41 res=0 errno=0 [pid 5824] umount2("./17/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] <... unlink resumed>) = 0 [pid 5824] newfstatat(AT_FDCWD, "./17/cgroup.cpu", [pid 5823] umount2("./17/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] unlink("./17/cgroup.cpu" [pid 5823] newfstatat(AT_FDCWD, "./17/cgroup.net", [pid 5824] <... unlink resumed>) = 0 [pid 5824] umount2("./17/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] unlink("./17/cgroup.net" [pid 5824] newfstatat(AT_FDCWD, "./17/cgroup.net", [pid 5823] <... unlink resumed>) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] umount2("./17/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] unlink("./17/cgroup.net" [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... unlink resumed>) = 0 [pid 5823] newfstatat(AT_FDCWD, "./17/binderfs", [pid 5824] umount2("./17/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] newfstatat(AT_FDCWD, "./17/binderfs", [pid 5823] unlink("./17/binderfs" [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] <... unlink resumed>) = 0 [pid 5824] unlink("./17/binderfs" [pid 5823] umount2("./17/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... unlink resumed>) = 0 [pid 5824] umount2("./17/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6604] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [ 113.730770][ T6604] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 113.753414][ T5966] XFS (loop3): Unmount and run xfs_repair [ 113.753565][ T6604] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 113.773191][ T5966] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 113.781041][ T5966] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 113.790194][ T5966] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 113.799203][ T5966] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 113.808094][ T5966] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 113.817014][ T5966] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 113.825870][ T5966] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 113.834811][ T5966] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [pid 6604] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000) = -1 EFAULT (Bad address) [pid 6604] close(3) = 0 [pid 6604] close(4) = 0 [pid 6604] close(5) = -1 EBADF (Bad file descriptor) [pid 6604] close(6) = -1 EBADF (Bad file descriptor) [pid 6604] close(7) = -1 EBADF (Bad file descriptor) [pid 6604] close(8) = -1 EBADF (Bad file descriptor) [pid 6604] close(9) = -1 EBADF (Bad file descriptor) [pid 6604] close(10) = -1 EBADF (Bad file descriptor) [pid 6604] close(11) = -1 EBADF (Bad file descriptor) [pid 6604] close(12) = -1 EBADF (Bad file descriptor) [pid 6604] close(13) = -1 EBADF (Bad file descriptor) [pid 6604] close(14) = -1 EBADF (Bad file descriptor) [pid 6604] close(15) = -1 EBADF (Bad file descriptor) [pid 6604] close(16) = -1 EBADF (Bad file descriptor) [pid 6604] close(17) = -1 EBADF (Bad file descriptor) [pid 6604] close(18) = -1 EBADF (Bad file descriptor) [pid 6604] close(19) = -1 EBADF (Bad file descriptor) [pid 6604] close(20) = -1 EBADF (Bad file descriptor) [pid 6604] close(21) = -1 EBADF (Bad file descriptor) [pid 6604] close(22) = -1 EBADF (Bad file descriptor) [pid 6604] close(23) = -1 EBADF (Bad file descriptor) [pid 6604] close(24) = -1 EBADF (Bad file descriptor) [pid 6604] close(25) = -1 EBADF (Bad file descriptor) [pid 6604] close(26) = -1 EBADF (Bad file descriptor) [pid 6604] close(27) = -1 EBADF (Bad file descriptor) [pid 6604] close(28) = -1 EBADF (Bad file descriptor) [pid 6604] close(29) = -1 EBADF (Bad file descriptor) [pid 6604] exit_group(0) = ? [pid 6604] +++ exited with 0 +++ [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=18, si_uid=0, si_status=0, si_utime=15 /* 0.15 s */, si_stime=48 /* 0.48 s */} --- [pid 5826] restart_syscall(<... resuming interrupted clone ...>) = 0 [ 113.837486][ T5823] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 113.843711][ T5966] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 113.861909][ T6611] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 113.870834][ T5824] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 5826] umount2("./16", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5826] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5826] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5826] umount2("./16/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./16/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./16/cgroup") = 0 [pid 5826] umount2("./16/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./16/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./16/cgroup.cpu") = 0 [pid 5826] umount2("./16/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./16/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./16/cgroup.net") = 0 [pid 5826] umount2("./16/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./16/binderfs") = 0 [pid 5826] umount2("./16/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... umount2 resumed>) = 0 [pid 5824] umount2("./17/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./17/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] umount2("./17/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./17/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5824] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(4, 0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5824] getdents64(4, 0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5824] close(4) = 0 [pid 5824] rmdir("./17/file0") = 0 [pid 6611] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 6611] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000) = -1 EFAULT (Bad address) [pid 5824] getdents64(3, [pid 6611] close(3) = 0 [pid 5824] <... getdents64 resumed>0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 6611] close(4) = 0 [pid 6611] close(5) = -1 EBADF (Bad file descriptor) [pid 6611] close(6) = -1 EBADF (Bad file descriptor) [pid 6611] close(7) = -1 EBADF (Bad file descriptor) [pid 6611] close(8) = -1 EBADF (Bad file descriptor) [pid 6611] close(9) = -1 EBADF (Bad file descriptor) [pid 5824] close(3 [pid 6611] close(10 [pid 5824] <... close resumed>) = 0 [pid 6611] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6611] close(11 [pid 5824] rmdir("./17" [pid 6611] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6611] close(12 [pid 5824] <... rmdir resumed>) = 0 [pid 6611] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6611] close(13) = -1 EBADF (Bad file descriptor) [pid 6611] close(14) = -1 EBADF (Bad file descriptor) [pid 6611] close(15) = -1 EBADF (Bad file descriptor) [pid 5824] mkdir("./18", 0777 [pid 6611] close(16) = -1 EBADF (Bad file descriptor) [pid 5824] <... mkdir resumed>) = 0 [pid 6611] close(17 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6611] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6611] close(18 [pid 5824] <... openat resumed>) = 3 [pid 6611] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] ioctl(3, LOOP_CLR_FD [pid 6611] close(19) = -1 EBADF (Bad file descriptor) [pid 5824] <... ioctl resumed>) = 0 [pid 5823] <... umount2 resumed>) = 0 [pid 6611] close(20) = -1 EBADF (Bad file descriptor) [pid 5823] umount2("./17/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6611] close(21) = -1 EBADF (Bad file descriptor) [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6611] close(22) = -1 EBADF (Bad file descriptor) [pid 5823] newfstatat(AT_FDCWD, "./17/file0", [pid 6611] close(23) = -1 EBADF (Bad file descriptor) [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6611] close(24) = -1 EBADF (Bad file descriptor) [pid 5823] umount2("./17/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6611] close(25) = -1 EBADF (Bad file descriptor) [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6611] close(26) = -1 EBADF (Bad file descriptor) [pid 5823] openat(AT_FDCWD, "./17/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6611] close(27) = -1 EBADF (Bad file descriptor) [pid 5824] close(3 [pid 5823] <... openat resumed>) = 4 [pid 5821] <... close resumed>) = 0 [ 113.912130][ T6611] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 113.935805][ T6611] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [pid 5823] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(4, 0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5823] getdents64(4, 0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5823] close(4) = 0 [pid 5823] rmdir("./17/file0") = 0 [pid 5823] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5823] close(3) = 0 [pid 5823] rmdir("./17") = 0 [pid 5823] mkdir("./18", 0777) = 0 [pid 5823] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5823] ioctl(3, LOOP_CLR_FD) = 0 [ 113.979209][ T5826] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 5823] close(3 [pid 6611] close(28 [pid 5821] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6611] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6611] close(29) = -1 EBADF (Bad file descriptor) [pid 6611] exit_group(0) = ? [pid 6611] +++ exited with 0 +++ [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=19, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=51 /* 0.51 s */} --- [pid 5825] restart_syscall(<... resuming interrupted clone ...> [pid 5821] <... clone resumed>, child_tidptr=0x55558159a650) = 20 [pid 5825] <... restart_syscall resumed>) = 0 [pid 5823] <... close resumed>) = 0 ./strace-static-x86_64: Process 6647 attached [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6647] set_robust_list(0x55558159a660, 24 [pid 5825] umount2("./17", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5825] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 6647] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 6648 attached [pid 5825] getdents64(3, [pid 6648] set_robust_list(0x55558159a660, 24 [pid 5825] <... getdents64 resumed>0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 6648] <... set_robust_list resumed>) = 0 [pid 5825] umount2("./17/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6648] chdir("./18" [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6648] <... chdir resumed>) = 0 [pid 5825] newfstatat(AT_FDCWD, "./17/cgroup", [pid 6648] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6648] <... prctl resumed>) = 0 [pid 5825] unlink("./17/cgroup" [pid 6648] setpgid(0, 0 [pid 5825] <... unlink resumed>) = 0 [pid 6648] <... setpgid resumed>) = 0 [pid 5825] umount2("./17/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6647] chdir("./18" [pid 5823] <... clone resumed>, child_tidptr=0x55558159a650) = 20 [pid 6648] symlink("/syzcgroup/unified/syz2", "./cgroup" [pid 6647] <... chdir resumed>) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6648] <... symlink resumed>) = 0 [pid 6647] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5825] newfstatat(AT_FDCWD, "./17/cgroup.cpu", [pid 6648] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu" [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6647] <... prctl resumed>) = 0 [pid 6648] <... symlink resumed>) = 0 [pid 5825] unlink("./17/cgroup.cpu" [pid 6647] setpgid(0, 0 [pid 6648] symlink("/syzcgroup/net/syz2", "./cgroup.net" [pid 6647] <... setpgid resumed>) = 0 [pid 5825] <... unlink resumed>) = 0 [pid 6648] <... symlink resumed>) = 0 [pid 6647] symlink("/syzcgroup/unified/syz0", "./cgroup" [pid 5825] umount2("./17/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOWexecuting program [pid 6648] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6647] <... symlink resumed>) = 0 [pid 5826] <... umount2 resumed>) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6648] <... openat resumed>) = 3 [pid 5826] umount2("./16/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] newfstatat(AT_FDCWD, "./17/cgroup.net", [pid 6648] write(3, "1000", 4 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6648] <... write resumed>) = 4 [pid 5826] newfstatat(AT_FDCWD, "./16/file0", [pid 5825] unlink("./17/cgroup.net" [pid 6648] close(3 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] <... unlink resumed>) = 0 [pid 6648] <... close resumed>) = 0 [pid 5826] umount2("./16/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] umount2("./17/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6648] symlink("/dev/binderfs", "./binderfs" [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6648] <... symlink resumed>) = 0 [pid 6647] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu" [pid 5826] openat(AT_FDCWD, "./16/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] newfstatat(AT_FDCWD, "./17/binderfs", [pid 6648] write(1, "executing program\n", 18 [pid 6647] <... symlink resumed>) = 0 [pid 5826] <... openat resumed>) = 4 [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6647] symlink("/syzcgroup/net/syz0", "./cgroup.net" [pid 6648] <... write resumed>) = 18 [pid 5826] newfstatat(4, "", [pid 5825] unlink("./17/binderfs" [pid 6647] <... symlink resumed>) = 0 [pid 6647] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6648] memfd_create("syzkaller", 0 [pid 6647] <... openat resumed>) = 3 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5825] <... unlink resumed>) = 0 [pid 6648] <... memfd_create resumed>) = 3 [pid 5826] getdents64(4, [pid 5825] umount2("./17/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6648] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5826] <... getdents64 resumed>0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 6648] <... mmap resumed>) = 0x7fbaaaa00000 [pid 6647] write(3, "1000", 4 [pid 5826] getdents64(4, [pid 6647] <... write resumed>) = 4 [pid 6647] close(3 [pid 5826] <... getdents64 resumed>0x5555815a3730 /* 0 entries */, 32768) = 0 [ 114.199337][ T5825] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 executing program [pid 6647] <... close resumed>) = 0 [pid 5826] close(4) = 0 [pid 5826] rmdir("./16/file0") = 0 [pid 5826] getdents64(3, [pid 6647] symlink("/dev/binderfs", "./binderfs" [pid 5826] <... getdents64 resumed>0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 6647] <... symlink resumed>) = 0 [pid 5826] close(3) = 0 [pid 6647] write(1, "executing program\n", 18 [pid 5826] rmdir("./16" [pid 6647] <... write resumed>) = 18 [pid 5826] <... rmdir resumed>) = 0 [pid 6647] memfd_create("syzkaller", 0 [pid 5826] mkdir("./17", 0777) = 0 [pid 5826] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6647] <... memfd_create resumed>) = 3 [pid 5826] <... openat resumed>) = 3 [pid 6647] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5826] ioctl(3, LOOP_CLR_FD [pid 6647] <... mmap resumed>) = 0x7fbaaaa00000 [pid 5826] <... ioctl resumed>) = 0 [ 114.753301][ T6648] loop2: detected capacity change from 0 to 65536 [pid 5826] close(3executing program executing program [pid 6648] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 5826] <... close resumed>) = 0 [pid 5824] <... close resumed>) = 0 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6647] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 6648] <... write resumed>) = 33554432 [pid 6648] munmap(0x7fbaaaa00000, 138412032) = 0 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6649 attached [pid 6648] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6649] set_robust_list(0x55558159a660, 24 [pid 6648] <... openat resumed>) = 4 [pid 5826] <... clone resumed>, child_tidptr=0x55558159a650) = 19 [pid 6649] <... set_robust_list resumed>) = 0 [pid 6648] ioctl(4, LOOP_SET_FD, 3 [pid 6649] chdir("./17") = 0 [pid 6649] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6649] setpgid(0, 0) = 0 [pid 6649] symlink("/syzcgroup/unified/syz4", "./cgroup") = 0 [pid 6649] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu") = 0 [pid 6649] symlink("/syzcgroup/net/syz4", "./cgroup.net") = 0 [pid 6649] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6649] write(3, "1000", 4) = 4 [pid 6649] close(3) = 0 [pid 6649] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6649] write(1, "executing program\n", 18) = 18 [pid 6649] memfd_create("syzkaller", 0) = 3 [pid 6649] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaaaa00000 ./strace-static-x86_64: Process 6650 attached [pid 6650] set_robust_list(0x55558159a660, 24 [pid 5824] <... clone resumed>, child_tidptr=0x55558159a650) = 20 [pid 6650] <... set_robust_list resumed>) = 0 [pid 6648] <... ioctl resumed>) = 0 [pid 6650] chdir("./18" [pid 6648] close(3 [pid 6650] <... chdir resumed>) = 0 [pid 6648] <... close resumed>) = 0 [pid 6650] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6648] close(4 [pid 6650] <... prctl resumed>) = 0 [pid 6648] <... close resumed>) = 0 [pid 6650] setpgid(0, 0 [pid 6648] mkdir("./file0", 0777 [pid 6650] <... setpgid resumed>) = 0 [pid 6648] <... mkdir resumed>) = 0 [pid 6650] symlink("/syzcgroup/unified/syz1", "./cgroup" [pid 6648] mount("/dev/loop2", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 6650] <... symlink resumed>) = 0 [pid 6650] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu") = 0 [pid 6650] symlink("/syzcgroup/net/syz1", "./cgroup.net") = 0 [pid 6650] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6650] write(3, "1000", 4) = 4 [pid 6650] close(3) = 0 [pid 6650] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6650] write(1, "executing program\n", 18) = 18 [pid 6650] memfd_create("syzkaller", 0) = 3 [pid 6650] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaaaa00000 [pid 6647] <... write resumed>) = 33554432 [pid 6647] munmap(0x7fbaaaa00000, 138412032) = 0 [pid 6647] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6647] ioctl(4, LOOP_SET_FD, 3 [pid 5825] <... umount2 resumed>) = 0 [pid 5825] umount2("./17/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./17/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] umount2("./17/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./17/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5825] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(4, 0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5825] getdents64(4, 0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5825] close(4) = 0 [pid 5825] rmdir("./17/file0") = 0 [pid 5825] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5825] close(3) = 0 [pid 5825] rmdir("./17") = 0 [pid 5825] mkdir("./18", 0777) = 0 [pid 5825] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5825] ioctl(3, LOOP_CLR_FD) = 0 [ 114.914265][ T6648] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 114.924920][ T6647] loop0: detected capacity change from 0 to 65536 [ 115.008240][ T6648] XFS (loop2): Ending clean mount [pid 5825] close(3 [pid 6648] <... mount resumed>) = 0 [pid 6647] <... ioctl resumed>) = 0 [pid 6647] close(3) = 0 [pid 6647] close(4) = 0 [pid 6647] mkdir("./file0", 0777) = 0 [pid 6647] mount("/dev/loop0", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 6648] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6648] chdir("./file0") = 0 [pid 6648] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6648] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 5825] <... close resumed>) = 0 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6661 attached , child_tidptr=0x55558159a650) = 20 [pid 6661] set_robust_list(0x55558159a660, 24) = 0 [pid 6661] chdir("./18") = 0 [pid 6661] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6661] setpgid(0, 0) = 0 [pid 6661] symlink("/syzcgroup/unified/syz3", "./cgroup") = 0 [pid 6661] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu") = 0 [pid 6648] <... open resumed>) = 4 [pid 6661] symlink("/syzcgroup/net/syz3", "./cgroup.net" [pid 6648] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6661] <... symlink resumed>) = 0 [pid 6661] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6661] write(3, "1000", 4) = 4 [ 115.198049][ T29] audit: type=1800 audit(1733456412.696:91): pid=6648 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop2" ino=41 res=0 errno=0 [ 115.204999][ T5966] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 115.229479][ T5966] XFS (loop2): Unmount and run xfs_repair [ 115.235225][ T5966] XFS (loop2): First 128 bytes of corrupted metadata buffer: [pid 6661] close(3) = 0 [pid 6661] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6661] write(1, "executing program\n", 18) = 18 [pid 6661] memfd_create("syzkaller", 0) = 3 [pid 6661] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaaaa00000 [ 115.242679][ T5966] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 115.251591][ T5966] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 115.260559][ T5966] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 115.270558][ T5966] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 115.273858][ T6647] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 115.279484][ T5966] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 115.279502][ T5966] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 115.306056][ T5966] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 115.314986][ T5966] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 115.324051][ T6648] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 115.408445][ T6648] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [pid 6650] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 6649] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 6648] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 6661] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [ 115.516632][ T6648] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [pid 6648] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000) = -1 EFAULT (Bad address) [pid 6648] close(3 [pid 6647] <... mount resumed>) = 0 [ 115.601776][ T6647] XFS (loop0): Ending clean mount [pid 6647] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6648] <... close resumed>) = 0 [pid 6647] <... openat resumed>) = 3 [pid 6647] chdir("./file0" [pid 6648] close(4 [pid 6647] <... chdir resumed>) = 0 [pid 6648] <... close resumed>) = 0 [pid 6648] close(5 [pid 6647] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6648] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6648] close(6 [pid 6647] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6648] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6648] close(7) = -1 EBADF (Bad file descriptor) [pid 6648] close(8) = -1 EBADF (Bad file descriptor) [pid 6648] close(9) = -1 EBADF (Bad file descriptor) [pid 6648] close(10) = -1 EBADF (Bad file descriptor) [pid 6648] close(11) = -1 EBADF (Bad file descriptor) [pid 6648] close(12) = -1 EBADF (Bad file descriptor) [pid 6648] close(13) = -1 EBADF (Bad file descriptor) [pid 6648] close(14) = -1 EBADF (Bad file descriptor) [pid 6648] close(15) = -1 EBADF (Bad file descriptor) [pid 6648] close(16) = -1 EBADF (Bad file descriptor) [pid 6648] close(17) = -1 EBADF (Bad file descriptor) [pid 6648] close(18) = -1 EBADF (Bad file descriptor) [pid 6648] close(19) = -1 EBADF (Bad file descriptor) [pid 6648] close(20) = -1 EBADF (Bad file descriptor) [pid 6648] close(21) = -1 EBADF (Bad file descriptor) [pid 6648] close(22) = -1 EBADF (Bad file descriptor) [pid 6648] close(23) = -1 EBADF (Bad file descriptor) [pid 6648] close(24) = -1 EBADF (Bad file descriptor) [pid 6648] close(25) = -1 EBADF (Bad file descriptor) [pid 6648] close(26) = -1 EBADF (Bad file descriptor) [pid 6648] close(27) = -1 EBADF (Bad file descriptor) [pid 6648] close(28) = -1 EBADF (Bad file descriptor) [pid 6648] close(29) = -1 EBADF (Bad file descriptor) [pid 6648] exit_group(0) = ? [pid 6648] +++ exited with 0 +++ [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=20, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=50 /* 0.50 s */} --- [pid 5823] restart_syscall(<... resuming interrupted clone ...> [pid 6647] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 5823] <... restart_syscall resumed>) = 0 [pid 5823] umount2("./18", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5823] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5823] umount2("./18/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./18/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./18/cgroup") = 0 [pid 5823] umount2("./18/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./18/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./18/cgroup.cpu") = 0 [pid 5823] umount2("./18/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./18/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./18/cgroup.net") = 0 [pid 5823] umount2("./18/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./18/binderfs") = 0 [pid 5823] umount2("./18/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6650] <... write resumed>) = 33554432 [ 115.741331][ T5823] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 6650] munmap(0x7fbaaaa00000, 138412032 [pid 6647] <... open resumed>) = 4 [pid 5823] <... umount2 resumed>) = 0 [pid 5823] umount2("./18/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./18/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6647] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5823] umount2("./18/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./18/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5823] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(4, 0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5823] getdents64(4, 0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5823] close(4) = 0 [pid 5823] rmdir("./18/file0") = 0 [pid 5823] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5823] close(3) = 0 [pid 5823] rmdir("./18") = 0 [pid 5823] mkdir("./19", 0777) = 0 [pid 5823] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5823] ioctl(3, LOOP_CLR_FD) = 0 [ 115.788041][ T29] audit: type=1800 audit(1733456413.286:92): pid=6647 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop0" ino=41 res=0 errno=0 [ 115.814255][ T5879] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [pid 5823] close(3 [pid 6650] <... munmap resumed>) = 0 [pid 6650] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [ 115.854061][ T5879] XFS (loop0): Unmount and run xfs_repair [ 115.868745][ T5879] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 115.889096][ T5879] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [pid 6650] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6650] close(3) = 0 [pid 6650] close(4) = 0 [pid 6650] mkdir("./file0", 0777) = 0 [ 115.901581][ T6650] loop1: detected capacity change from 0 to 65536 [ 115.922130][ T5879] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 115.945619][ T5879] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 115.946528][ T6650] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 115.968269][ T5879] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 116.010007][ T5879] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 116.027514][ T5879] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [pid 6650] mount("/dev/loop1", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid") = 0 [pid 6650] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6650] chdir("./file0") = 0 [pid 6650] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6650] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 4 [ 116.063875][ T6650] XFS (loop1): Ending clean mount [ 116.076719][ T5879] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 116.091394][ T29] audit: type=1800 audit(1733456413.586:93): pid=6650 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop1" ino=41 res=0 errno=0 [ 116.091980][ T8] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 116.146750][ T5879] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [pid 6650] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6661] <... write resumed>) = 33554432 [ 116.156214][ T6647] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 116.180420][ T6647] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 116.186637][ T8] XFS (loop1): Unmount and run xfs_repair [ 116.202163][ T6647] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [pid 6661] munmap(0x7fbaaaa00000, 138412032) = 0 [pid 6647] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [ 116.226735][ T8] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 116.236856][ T8] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 116.245796][ T8] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 116.254794][ T8] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 116.263765][ T8] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [pid 6661] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6649] <... write resumed>) = 33554432 [pid 6647] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000 [pid 5823] <... close resumed>) = 0 [pid 6661] ioctl(4, LOOP_SET_FD, 3 [pid 6649] munmap(0x7fbaaaa00000, 138412032 [pid 6647] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6676 attached [pid 6676] set_robust_list(0x55558159a660, 24 [pid 5823] <... clone resumed>, child_tidptr=0x55558159a650) = 21 [pid 6676] <... set_robust_list resumed>) = 0 [pid 6676] chdir("./19") = 0 [pid 6676] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6676] setpgid(0, 0) = 0 [pid 6676] symlink("/syzcgroup/unified/syz2", "./cgroup") = 0 [pid 6676] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu") = 0 [pid 6676] symlink("/syzcgroup/net/syz2", "./cgroup.net") = 0 [pid 6676] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6676] write(3, "1000", 4 [pid 6647] close(3 [pid 6676] <... write resumed>) = 4 [pid 6676] close(3 [pid 6647] <... close resumed>) = 0 [pid 6676] <... close resumed>) = 0 [ 116.272692][ T8] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 116.274303][ T6661] loop3: detected capacity change from 0 to 65536 [ 116.281628][ T8] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 116.296985][ T8] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 116.305960][ T8] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 116.315231][ T6650] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [pid 6647] close(4executing program [pid 6676] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6676] write(1, "executing program\n", 18) = 18 [pid 6676] memfd_create("syzkaller", 0) = 3 [pid 6676] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaaaa00000 [pid 6650] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 6647] <... close resumed>) = 0 [pid 6661] <... ioctl resumed>) = 0 [pid 6661] close(3 [pid 6650] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000 [pid 6647] close(5 [pid 6650] <... openat resumed>) = -1 EFAULT (Bad address) [pid 6647] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6661] <... close resumed>) = 0 [pid 6650] close(3 [pid 6647] close(6 [pid 6661] close(4 [pid 6650] <... close resumed>) = 0 [pid 6647] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6650] close(4 [pid 6647] close(7 [pid 6650] <... close resumed>) = 0 [pid 6647] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6661] <... close resumed>) = 0 [pid 6650] close(5 [pid 6647] close(8 [pid 6661] mkdir("./file0", 0777 [pid 6650] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6647] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6650] close(6 [pid 6647] close(9 [pid 6650] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6647] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6650] close(7 [pid 6647] close(10 [pid 6650] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6647] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6650] close(8 [pid 6647] close(11 [pid 6650] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6647] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6650] close(9 [pid 6647] close(12 [pid 6650] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6647] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6650] close(10 [pid 6647] close(13 [pid 6650] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6647] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6650] close(11 [pid 6647] close(14 [pid 6650] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6647] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6650] close(12 [pid 6647] close(15 [pid 6650] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6647] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6661] <... mkdir resumed>) = 0 [pid 6650] close(13 [pid 6647] close(16 [pid 6650] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6647] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6650] close(14 [pid 6647] close(17 [pid 6650] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6661] mount("/dev/loop3", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 6647] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6650] close(15 [pid 6647] close(18 [pid 6650] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6647] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6650] close(16 [pid 6647] close(19 [pid 6650] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6647] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6650] close(17 [pid 6647] close(20 [pid 6650] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6647] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6650] close(18 [pid 6647] close(21 [pid 6650] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6647] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6650] close(19 [pid 6647] close(22 [pid 6650] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6647] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6650] close(20 [pid 6647] close(23 [pid 6650] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6647] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6650] close(21 [pid 6647] close(24 [pid 6650] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6647] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6650] close(22 [pid 6647] close(25 [pid 6650] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6647] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6650] close(23 [pid 6647] close(26 [pid 6650] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6647] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6650] close(24 [pid 6647] close(27 [pid 6650] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6647] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6650] close(25 [pid 6647] close(28 [pid 6650] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6647] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6650] close(26 [pid 6647] close(29 [pid 6650] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6647] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6650] close(27) = -1 EBADF (Bad file descriptor) [pid 6649] <... munmap resumed>) = 0 [pid 6647] exit_group(0) = ? [pid 6649] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 116.330530][ T6650] XFS (loop1): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 116.345464][ T6650] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [pid 6649] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6647] +++ exited with 0 +++ [pid 6650] close(28 [pid 6649] close(3 [pid 6650] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5821] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=20, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=51 /* 0.51 s */} --- [pid 6650] close(29) = -1 EBADF (Bad file descriptor) [pid 6649] <... close resumed>) = 0 [pid 5821] umount2("./18", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6649] close(4 [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6650] exit_group(0 [pid 6649] <... close resumed>) = 0 [pid 5821] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6650] <... exit_group resumed>) = ? [pid 5821] <... openat resumed>) = 3 [pid 6649] mkdir("./file0", 0777) = 0 [pid 6649] mount("/dev/loop4", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 6650] +++ exited with 0 +++ [pid 5821] newfstatat(3, "", [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=20, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=51 /* 0.51 s */} --- [pid 5821] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5821] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5824] umount2("./18", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] umount2("./18/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [ 116.381509][ T6649] loop4: detected capacity change from 0 to 65536 [pid 5821] newfstatat(AT_FDCWD, "./18/cgroup", [pid 5824] <... openat resumed>) = 3 [pid 5821] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] newfstatat(3, "", [pid 5821] unlink("./18/cgroup" [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(3, [pid 5821] <... unlink resumed>) = 0 [pid 5824] <... getdents64 resumed>0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5824] umount2("./18/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] umount2("./18/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./18/cgroup", [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] newfstatat(AT_FDCWD, "./18/cgroup.cpu", [pid 5824] unlink("./18/cgroup" [pid 5821] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... unlink resumed>) = 0 [pid 5821] unlink("./18/cgroup.cpu" [pid 5824] umount2("./18/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] <... unlink resumed>) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5821] umount2("./18/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] newfstatat(AT_FDCWD, "./18/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./18/cgroup.cpu") = 0 [pid 5824] umount2("./18/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./18/cgroup.net", [pid 5821] newfstatat(AT_FDCWD, "./18/cgroup.net", [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./18/cgroup.net" [pid 5821] unlink("./18/cgroup.net" [pid 5824] <... unlink resumed>) = 0 [pid 5821] <... unlink resumed>) = 0 [pid 5824] umount2("./18/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] umount2("./18/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./18/binderfs") = 0 [pid 5824] umount2("./18/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] newfstatat(AT_FDCWD, "./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] unlink("./18/binderfs") = 0 [ 116.485095][ T5824] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 116.495432][ T5821] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 5821] umount2("./18/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5821] umount2("./18/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./18/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] umount2("./18/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] openat(AT_FDCWD, "./18/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5821] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5821] getdents64(4, 0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5821] getdents64(4, 0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5821] close(4) = 0 [pid 5821] rmdir("./18/file0") = 0 [pid 5821] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5821] close(3) = 0 [pid 5821] rmdir("./18") = 0 [pid 5821] mkdir("./19", 0777) = 0 [pid 5821] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5821] ioctl(3, LOOP_CLR_FD) = 0 [pid 5821] close(3 [ 116.555277][ T6661] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 116.565196][ T6649] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 6676] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432executing program [pid 5824] <... umount2 resumed>) = 0 [pid 5821] <... close resumed>) = 0 [pid 5824] umount2("./18/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./18/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] umount2("./18/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./18/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5824] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(4, 0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5824] getdents64(4, 0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5824] close(4) = 0 [pid 5824] rmdir("./18/file0") = 0 [pid 5824] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5824] close(3) = 0 [pid 5824] rmdir("./18") = 0 [pid 5821] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5824] mkdir("./19", 0777) = 0 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5824] ioctl(3, LOOP_CLR_FD) = 0 [pid 5824] close(3./strace-static-x86_64: Process 6693 attached [pid 6693] set_robust_list(0x55558159a660, 24) = 0 [pid 6693] chdir("./19") = 0 [pid 6693] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5821] <... clone resumed>, child_tidptr=0x55558159a650) = 21 [pid 6693] setpgid(0, 0) = 0 [pid 6693] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6693] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6693] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6693] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6693] write(3, "1000", 4) = 4 [pid 6693] close(3) = 0 [pid 6693] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6693] write(1, "executing program\n", 18) = 18 [pid 6693] memfd_create("syzkaller", 0) = 3 [pid 6693] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaaaa00000 [pid 5824] <... close resumed>) = 0 [pid 6649] <... mount resumed>) = 0 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6694 attached [pid 6676] <... write resumed>) = 33554432 [ 117.015093][ T6649] XFS (loop4): Ending clean mount [ 117.022264][ T6661] XFS (loop3): Ending clean mount [ 117.035612][ T29] audit: type=1800 audit(1733456414.526:94): pid=6649 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop4" ino=41 res=0 errno=0 [pid 6694] set_robust_list(0x55558159a660, 24 [pid 6676] munmap(0x7fbaaaa00000, 138412032 [pid 6661] <... mount resumed>) = 0 [pid 6649] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5824] <... clone resumed>, child_tidptr=0x55558159a650) = 21 [pid 6694] <... set_robust_list resumed>) = 0 [pid 6661] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6649] <... openat resumed>) = 3 [pid 6661] <... openat resumed>) = 3 [pid 6649] chdir("./file0" [pid 6661] chdir("./file0" [pid 6649] <... chdir resumed>) = 0 [pid 6661] <... chdir resumed>) = 0 [pid 6649] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6661] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6649] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6661] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6649] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 6661] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 6649] <... open resumed>) = 4 [pid 6694] chdir("./19" [pid 6661] <... open resumed>) = 4 [pid 6649] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [ 117.039548][ T57] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 117.066721][ T57] XFS (loop4): Unmount and run xfs_repair [ 117.068767][ T29] audit: type=1800 audit(1733456414.526:95): pid=6661 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop3" ino=41 res=0 errno=0 [ 117.072439][ T57] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 117.092515][ T8] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 117.099715][ T57] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 117.099734][ T57] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 117.099748][ T57] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 117.099762][ T57] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 117.112429][ T8] XFS (loop3): Unmount and run xfs_repair [ 117.119697][ T57] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [pid 6661] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6694] <... chdir resumed>) = 0 [pid 6676] <... munmap resumed>) = 0 [ 117.137797][ T8] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 117.137820][ T8] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 117.137834][ T8] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 117.137847][ T8] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 117.137860][ T8] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 117.137873][ T8] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 117.137887][ T8] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 117.146759][ T57] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 117.146775][ T57] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 117.152516][ T8] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 117.161321][ T57] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [pid 6694] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6676] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6694] <... prctl resumed>) = 0 [pid 6676] ioctl(4, LOOP_SET_FD, 3 [pid 6694] setpgid(0, 0) = 0 [pid 6676] <... ioctl resumed>) = 0 [pid 6694] symlink("/syzcgroup/unified/syz1", "./cgroup" [pid 6676] close(3 [pid 6694] <... symlink resumed>) = 0 [pid 6676] <... close resumed>) = 0 [ 117.177189][ T6649] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 117.204393][ T8] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 117.277275][ T6661] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 117.290414][ T6676] loop2: detected capacity change from 0 to 65536 [ 117.301008][ T6649] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [pid 6694] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu" [pid 6676] close(4 [pid 6649] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 6649] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000) = -1 EFAULT (Bad address) [pid 6649] close(3 [pid 6694] <... symlink resumed>) = 0 [pid 6649] <... close resumed>) = 0 [pid 6693] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 6676] <... close resumed>) = 0 [pid 6649] close(4) = 0 [pid 6649] close(5) = -1 EBADF (Bad file descriptor) [pid 6649] close(6) = -1 EBADF (Bad file descriptor) [pid 6649] close(7) = -1 EBADF (Bad file descriptor) [pid 6649] close(8) = -1 EBADF (Bad file descriptor) [pid 6649] close(9) = -1 EBADF (Bad file descriptor) [pid 6649] close(10) = -1 EBADF (Bad file descriptor) [pid 6649] close(11) = -1 EBADF (Bad file descriptor) [pid 6649] close(12) = -1 EBADF (Bad file descriptor) [pid 6649] close(13) = -1 EBADF (Bad file descriptor) [pid 6649] close(14) = -1 EBADF (Bad file descriptor) [pid 6649] close(15) = -1 EBADF (Bad file descriptor) [pid 6649] close(16) = -1 EBADF (Bad file descriptor) [pid 6649] close(17) = -1 EBADF (Bad file descriptor) [pid 6649] close(18) = -1 EBADF (Bad file descriptor) [pid 6649] close(19) = -1 EBADF (Bad file descriptor) [pid 6649] close(20) = -1 EBADF (Bad file descriptor) [pid 6649] close(21) = -1 EBADF (Bad file descriptor) [pid 6649] close(22) = -1 EBADF (Bad file descriptor) [pid 6649] close(23) = -1 EBADF (Bad file descriptor) [pid 6649] close(24) = -1 EBADF (Bad file descriptor) [pid 6649] close(25) = -1 EBADF (Bad file descriptor) [pid 6649] close(26) = -1 EBADF (Bad file descriptor) [pid 6649] close(27) = -1 EBADF (Bad file descriptor) [pid 6649] close(28) = -1 EBADF (Bad file descriptor) [pid 6649] close(29) = -1 EBADF (Bad file descriptor) [pid 6676] mkdir("./file0", 0777 [pid 6649] exit_group(0) = ? [pid 6649] +++ exited with 0 +++ [pid 6694] symlink("/syzcgroup/net/syz1", "./cgroup.net" [pid 6676] <... mkdir resumed>) = 0 [pid 6661] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=19, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=65 /* 0.65 s */} --- [pid 6676] mount("/dev/loop2", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 6661] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000) = -1 EFAULT (Bad address) [pid 6661] close(3) = 0 [pid 6661] close(4) = 0 [pid 6661] close(5) = -1 EBADF (Bad file descriptor) [pid 6661] close(6) = -1 EBADF (Bad file descriptor) [pid 6661] close(7) = -1 EBADF (Bad file descriptor) [pid 6661] close(8) = -1 EBADF (Bad file descriptor) [pid 6661] close(9) = -1 EBADF (Bad file descriptor) [pid 6694] <... symlink resumed>) = 0 [pid 6661] close(10 [pid 5826] restart_syscall(<... resuming interrupted clone ...> [pid 6661] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6661] close(11) = -1 EBADF (Bad file descriptor) [pid 6661] close(12) = -1 EBADF (Bad file descriptor) [pid 6661] close(13) = -1 EBADF (Bad file descriptor) [pid 6661] close(14) = -1 EBADF (Bad file descriptor) [pid 6661] close(15) = -1 EBADF (Bad file descriptor) [pid 6661] close(16) = -1 EBADF (Bad file descriptor) [pid 6661] close(17) = -1 EBADF (Bad file descriptor) [pid 6661] close(18) = -1 EBADF (Bad file descriptor) [pid 6661] close(19) = -1 EBADF (Bad file descriptor) [pid 6661] close(20) = -1 EBADF (Bad file descriptor) [pid 6661] close(21) = -1 EBADF (Bad file descriptor) [pid 6661] close(22) = -1 EBADF (Bad file descriptor) [pid 6661] close(23) = -1 EBADF (Bad file descriptor) [pid 6661] close(24) = -1 EBADF (Bad file descriptor) [pid 6661] close(25) = -1 EBADF (Bad file descriptor) [pid 6661] close(26) = -1 EBADF (Bad file descriptor) [ 117.302178][ T6661] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 117.316090][ T6649] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 117.342194][ T6661] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [pid 6661] close(27) = -1 EBADF (Bad file descriptor) [pid 6661] close(28) = -1 EBADF (Bad file descriptor) [pid 6661] close(29) = -1 EBADF (Bad file descriptor) [pid 6661] exit_group(0) = ? [pid 6661] +++ exited with 0 +++ [pid 6694] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5826] <... restart_syscall resumed>) = 0 [pid 6694] <... openat resumed>) = 3 [pid 6694] write(3, "1000", 4) = 4 [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=20, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=54 /* 0.54 s */} --- [pid 6694] close(3 [pid 5825] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5825] umount2("./18", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6694] <... close resumed>) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6694] symlink("/dev/binderfs", "./binderfs" [pid 5825] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] umount2("./17", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5826] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5826] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5826] umount2("./17/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./17/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./17/cgroup") = 0 [pid 5826] umount2("./17/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./17/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./17/cgroup.cpu") = 0 [pid 5826] umount2("./17/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./17/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./17/cgroup.net") = 0 [pid 5826] umount2("./17/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./17/binderfs") = 0 [pid 5826] umount2("./17/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6694] <... symlink resumed>) = 0 [pid 5825] <... openat resumed>) = 3 [pid 5825] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5825] umount2("./18/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./18/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./18/cgroup") = 0 [pid 5825] umount2("./18/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./18/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./18/cgroup.cpu"executing program ) = 0 [pid 6694] write(1, "executing program\n", 18 [pid 5825] umount2("./18/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6694] <... write resumed>) = 18 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./18/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./18/cgroup.net" [pid 6694] memfd_create("syzkaller", 0) = 3 [pid 6694] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaaaa00000 [pid 5825] <... unlink resumed>) = 0 [pid 5825] umount2("./18/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./18/binderfs") = 0 [ 117.434869][ T5826] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 117.445018][ T6676] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 117.476954][ T5825] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 5825] umount2("./18/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5825] umount2("./18/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./18/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] umount2("./18/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./18/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5825] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5826] <... umount2 resumed>) = 0 [pid 5825] getdents64(4, [pid 5826] umount2("./17/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... getdents64 resumed>0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] getdents64(4, [pid 5826] newfstatat(AT_FDCWD, "./17/file0", [pid 5825] <... getdents64 resumed>0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] close(4 [pid 5826] umount2("./17/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... close resumed>) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] openat(AT_FDCWD, "./17/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] rmdir("./18/file0" [pid 5826] <... openat resumed>) = 4 [pid 5825] <... rmdir resumed>) = 0 [pid 5826] newfstatat(4, "", [pid 5825] getdents64(3, [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5825] <... getdents64 resumed>0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5826] getdents64(4, [pid 5825] close(3 [pid 6676] <... mount resumed>) = 0 [pid 5826] <... getdents64 resumed>0x5555815a3730 /* 2 entries */, 32768) = 48 [ 117.543222][ T6676] XFS (loop2): Ending clean mount [pid 5825] <... close resumed>) = 0 [pid 6676] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5826] getdents64(4, [pid 6676] <... openat resumed>) = 3 [pid 5826] <... getdents64 resumed>0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5825] rmdir("./18" [pid 6676] chdir("./file0" [pid 5826] close(4 [pid 5825] <... rmdir resumed>) = 0 [pid 6676] <... chdir resumed>) = 0 [pid 5826] <... close resumed>) = 0 [pid 5825] mkdir("./19", 0777 [pid 6676] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5826] rmdir("./17/file0" [pid 5825] <... mkdir resumed>) = 0 [pid 6676] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5826] <... rmdir resumed>) = 0 [pid 5825] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5826] getdents64(3, [pid 5825] <... openat resumed>) = 3 [pid 5826] <... getdents64 resumed>0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5825] ioctl(3, LOOP_CLR_FD [pid 5826] close(3 [pid 5825] <... ioctl resumed>) = 0 [pid 6676] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 5826] <... close resumed>) = 0 [pid 5825] close(3 [pid 5826] rmdir("./17" [pid 6676] <... open resumed>) = 4 [ 117.620728][ T57] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 117.637083][ T29] audit: type=1800 audit(1733456415.116:96): pid=6676 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop2" ino=41 res=0 errno=0 [pid 6676] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6693] <... write resumed>) = 33554432 [pid 5826] <... rmdir resumed>) = 0 [pid 5826] mkdir("./18", 0777) = 0 [pid 5826] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5826] ioctl(3, LOOP_CLR_FD) = 0 [pid 5826] close(3 [ 117.668645][ T57] XFS (loop2): Unmount and run xfs_repair [ 117.691816][ T57] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 117.727496][ T57] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 117.736401][ T57] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [pid 6693] munmap(0x7fbaaaa00000, 138412032 [ 117.827214][ T57] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 117.836109][ T57] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 117.897091][ T57] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 117.906001][ T57] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 117.961882][ T57] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 117.996951][ T57] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 118.006127][ T6676] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 118.058660][ T6676] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [pid 6694] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432) = 33554432 [pid 6693] <... munmap resumed>) = 0 [pid 6694] munmap(0x7fbaaaa00000, 138412032 [pid 6693] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6676] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 6694] <... munmap resumed>) = 0 [pid 6693] <... openat resumed>) = 4 [pid 6676] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000 [pid 6694] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6693] ioctl(4, LOOP_SET_FD, 3 [pid 6676] <... openat resumed>) = -1 EFAULT (Bad address) [pid 6694] <... openat resumed>) = 4 [pid 6693] <... ioctl resumed>) = 0 [pid 6676] close(3 [pid 6694] ioctl(4, LOOP_SET_FD, 3 [pid 6693] close(3 [pid 6676] <... close resumed>) = 0 [pid 6694] <... ioctl resumed>) = 0 [pid 6693] <... close resumed>) = 0 [pid 6676] close(4 [pid 6694] close(3 [pid 6693] close(4 [pid 6676] <... close resumed>) = 0 [pid 6694] <... close resumed>) = 0 [pid 6693] <... close resumed>) = 0 [pid 6676] close(5 [pid 6694] close(4 [pid 6693] mkdir("./file0", 0777 [pid 6676] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6694] <... close resumed>) = 0 [pid 6693] <... mkdir resumed>) = 0 [pid 6676] close(6 [pid 6694] mkdir("./file0", 0777 [pid 6693] mount("/dev/loop0", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 6676] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6694] <... mkdir resumed>) = 0 [pid 6676] close(7 [pid 6694] mount("/dev/loop1", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 6676] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6676] close(8) = -1 EBADF (Bad file descriptor) [pid 6676] close(9) = -1 EBADF (Bad file descriptor) [pid 6676] close(10) = -1 EBADF (Bad file descriptor) [pid 6676] close(11) = -1 EBADF (Bad file descriptor) [pid 6676] close(12) = -1 EBADF (Bad file descriptor) [pid 6676] close(13) = -1 EBADF (Bad file descriptor) [pid 6676] close(14) = -1 EBADF (Bad file descriptor) [pid 6676] close(15) = -1 EBADF (Bad file descriptor) [pid 6676] close(16) = -1 EBADF (Bad file descriptor) [pid 6676] close(17) = -1 EBADF (Bad file descriptor) [pid 6676] close(18) = -1 EBADF (Bad file descriptor) [pid 6676] close(19) = -1 EBADF (Bad file descriptor) [pid 6676] close(20) = -1 EBADF (Bad file descriptor) [pid 6676] close(21) = -1 EBADF (Bad file descriptor) [pid 6676] close(22) = -1 EBADF (Bad file descriptor) [pid 6676] close(23) = -1 EBADF (Bad file descriptor) [pid 6676] close(24) = -1 EBADF (Bad file descriptor) [pid 6676] close(25) = -1 EBADF (Bad file descriptor) [pid 6676] close(26) = -1 EBADF (Bad file descriptor) [pid 6676] close(27) = -1 EBADF (Bad file descriptor) [pid 6676] close(28) = -1 EBADF (Bad file descriptor) [pid 6676] close(29) = -1 EBADF (Bad file descriptor) [pid 6676] exit_group(0) = ? [pid 6676] +++ exited with 0 +++ [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=21, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=50 /* 0.50 s */} --- [ 118.109647][ T6676] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 118.142024][ T6693] loop0: detected capacity change from 0 to 65536 [ 118.150381][ T6694] loop1: detected capacity change from 0 to 65536 [pid 5823] restart_syscall(<... resuming interrupted clone ...> [pid 5826] <... close resumed>) = 0 [pid 5825] <... close resumed>) = 0 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5823] <... restart_syscall resumed>) = 0 ./strace-static-x86_64: Process 6715 attached [pid 5825] <... clone resumed>, child_tidptr=0x55558159a650) = 21 [pid 5823] umount2("./19", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5823] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5823] umount2("./19/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./19/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./19/cgroup" [pid 6715] set_robust_list(0x55558159a660, 24) = 0 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5823] <... unlink resumed>) = 0 [pid 6715] chdir("./19" [pid 5823] umount2("./19/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./19/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6715] <... chdir resumed>) = 0 [pid 5823] unlink("./19/cgroup.cpu" [pid 6715] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5826] <... clone resumed>, child_tidptr=0x55558159a650) = 20 [pid 6715] <... prctl resumed>) = 0 ./strace-static-x86_64: Process 6717 attached [pid 6715] setpgid(0, 0 [pid 5823] <... unlink resumed>) = 0 [pid 6715] <... setpgid resumed>) = 0 [pid 6715] symlink("/syzcgroup/unified/syz3", "./cgroup" [pid 5823] umount2("./19/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6715] <... symlink resumed>) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6715] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu" [pid 5823] newfstatat(AT_FDCWD, "./19/cgroup.net", [pid 6717] set_robust_list(0x55558159a660, 24 [pid 6715] <... symlink resumed>) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6717] <... set_robust_list resumed>) = 0 [pid 6715] symlink("/syzcgroup/net/syz3", "./cgroup.net" [pid 5823] unlink("./19/cgroup.net" [pid 6715] <... symlink resumed>) = 0 [pid 5823] <... unlink resumed>) = 0 [pid 6715] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5823] umount2("./19/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6715] <... openat resumed>) = 3 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6715] write(3, "1000", 4 [pid 5823] newfstatat(AT_FDCWD, "./19/binderfs", [pid 6715] <... write resumed>) = 4 [pid 6717] chdir("./18" [pid 6715] close(3 [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6715] <... close resumed>) = 0 [pid 6717] <... chdir resumed>) = 0 [pid 6715] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 5823] unlink("./19/binderfs" [pid 6715] write(1, "executing program\n", 18) = 18 [pid 5823] <... unlink resumed>) = 0 [ 118.196905][ T6693] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 118.231904][ T6694] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 5823] umount2("./19/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6715] memfd_create("syzkaller", 0 [pid 6717] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6715] <... memfd_create resumed>) = 3 [pid 6715] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6717] <... prctl resumed>) = 0 [pid 6715] <... mmap resumed>) = 0x7fbaaaa00000 [pid 6717] setpgid(0, 0) = 0 [pid 6693] <... mount resumed>) = 0 [pid 6693] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6693] chdir("./file0") = 0 [pid 6693] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 118.251968][ T5823] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 118.284137][ T6693] XFS (loop0): Ending clean mount [pid 6693] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 6717] symlink("/syzcgroup/unified/syz4", "./cgroup" [pid 6693] <... open resumed>) = 4 [pid 6693] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6717] <... symlink resumed>) = 0 [pid 6717] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu") = 0 [ 118.298088][ T29] audit: type=1800 audit(1733456415.796:97): pid=6693 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop0" ino=41 res=0 errno=0 [ 118.321894][ T8] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 118.333861][ T8] XFS (loop0): Unmount and run xfs_repair [ 118.341730][ T8] XFS (loop0): First 128 bytes of corrupted metadata buffer: [pid 6717] symlink("/syzcgroup/net/syz4", "./cgroup.net") = 0 [pid 6694] <... mount resumed>) = 0 [ 118.368058][ T8] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 118.370261][ T6694] XFS (loop1): Ending clean mount [ 118.396666][ T8] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 118.405584][ T8] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [pid 6717] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6694] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5823] <... umount2 resumed>) = 0 [pid 6717] write(3, "1000", 4 [pid 6694] <... openat resumed>) = 3 [pid 5823] umount2("./19/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6717] <... write resumed>) = 4 [pid 6694] chdir("./file0" [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6717] close(3 [pid 6694] <... chdir resumed>) = 0 [pid 5823] newfstatat(AT_FDCWD, "./19/file0", [pid 6717] <... close resumed>) = 0 [pid 6694] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6717] symlink("/dev/binderfs", "./binderfs" [pid 6694] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5823] umount2("./19/file0", MNT_FORCE|UMOUNT_NOFOLLOWexecuting program [pid 6717] <... symlink resumed>) = 0 [pid 6694] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6717] write(1, "executing program\n", 18 [pid 5823] openat(AT_FDCWD, "./19/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6717] <... write resumed>) = 18 [pid 5823] <... openat resumed>) = 4 [pid 6717] memfd_create("syzkaller", 0 [pid 5823] newfstatat(4, "", [pid 6717] <... memfd_create resumed>) = 3 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 6717] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5823] getdents64(4, [pid 6717] <... mmap resumed>) = 0x7fbaaaa00000 [pid 5823] <... getdents64 resumed>0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5823] getdents64(4, 0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5823] close(4) = 0 [pid 5823] rmdir("./19/file0") = 0 [pid 5823] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5823] close(3) = 0 [pid 5823] rmdir("./19") = 0 [pid 5823] mkdir("./20", 0777) = 0 [pid 5823] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [ 118.414528][ T8] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 118.424141][ T8] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 118.433777][ T8] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 118.443770][ T8] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 118.453229][ T8] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [pid 5823] ioctl(3, LOOP_CLR_FD) = 0 [pid 5823] close(3 [pid 6694] <... open resumed>) = 4 [ 118.462731][ T6693] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 118.474357][ T29] audit: type=1800 audit(1733456415.966:98): pid=6694 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop1" ino=41 res=0 errno=0 [ 118.507063][ T5879] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 118.520081][ T5879] XFS (loop1): Unmount and run xfs_repair [ 118.525842][ T5879] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 118.535548][ T6693] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 118.550653][ T6693] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 118.559947][ T5879] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [pid 6694] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6693] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 6693] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000) = -1 EFAULT (Bad address) [pid 6693] close(3) = 0 [pid 6693] close(4) = 0 [pid 6693] close(5) = -1 EBADF (Bad file descriptor) [pid 6693] close(6) = -1 EBADF (Bad file descriptor) [pid 6693] close(7) = -1 EBADF (Bad file descriptor) [pid 6693] close(8) = -1 EBADF (Bad file descriptor) [pid 6693] close(9) = -1 EBADF (Bad file descriptor) [pid 6693] close(10) = -1 EBADF (Bad file descriptor) [pid 6693] close(11) = -1 EBADF (Bad file descriptor) [pid 6693] close(12) = -1 EBADF (Bad file descriptor) [pid 6693] close(13) = -1 EBADF (Bad file descriptor) [pid 6693] close(14) = -1 EBADF (Bad file descriptor) [ 118.569187][ T5879] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 118.578664][ T5879] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 118.587655][ T5879] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 118.596530][ T5879] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 118.605532][ T5879] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [pid 6693] close(15) = -1 EBADF (Bad file descriptor) [pid 6693] close(16) = -1 EBADF (Bad file descriptor) [pid 6693] close(17) = -1 EBADF (Bad file descriptor) [pid 6693] close(18) = -1 EBADF (Bad file descriptor) [pid 6693] close(19) = -1 EBADF (Bad file descriptor) [pid 6693] close(20) = -1 EBADF (Bad file descriptor) [pid 6693] close(21) = -1 EBADF (Bad file descriptor) [pid 6693] close(22) = -1 EBADF (Bad file descriptor) [pid 6693] close(23) = -1 EBADF (Bad file descriptor) [pid 6693] close(24) = -1 EBADF (Bad file descriptor) [pid 6693] close(25) = -1 EBADF (Bad file descriptor) [pid 6693] close(26) = -1 EBADF (Bad file descriptor) [pid 6693] close(27) = -1 EBADF (Bad file descriptor) [pid 6693] close(28) = -1 EBADF (Bad file descriptor) [pid 6693] close(29) = -1 EBADF (Bad file descriptor) [pid 6693] exit_group(0) = ? [pid 6693] +++ exited with 0 +++ [pid 5821] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=21, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=45 /* 0.45 s */} --- [pid 5821] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5821] umount2("./19", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5821] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5821] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5821] umount2("./19/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./19/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] unlink("./19/cgroup") = 0 [pid 5821] umount2("./19/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./19/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] unlink("./19/cgroup.cpu") = 0 [pid 5821] umount2("./19/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./19/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] unlink("./19/cgroup.net") = 0 [ 118.614619][ T5879] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 118.623515][ T5879] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 118.632495][ T6694] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [pid 5821] umount2("./19/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./19/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] unlink("./19/binderfs") = 0 [ 118.683430][ T6694] XFS (loop1): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 118.716696][ T6694] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [pid 5821] umount2("./19/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6694] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 6694] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000) = -1 EFAULT (Bad address) [pid 6694] close(3) = 0 [pid 6694] close(4) = 0 [pid 6694] close(5) = -1 EBADF (Bad file descriptor) [pid 6694] close(6) = -1 EBADF (Bad file descriptor) [pid 6694] close(7) = -1 EBADF (Bad file descriptor) [pid 6694] close(8) = -1 EBADF (Bad file descriptor) [pid 6694] close(9) = -1 EBADF (Bad file descriptor) [pid 6694] close(10) = -1 EBADF (Bad file descriptor) [pid 6694] close(11) = -1 EBADF (Bad file descriptor) [pid 6694] close(12) = -1 EBADF (Bad file descriptor) [pid 6694] close(13) = -1 EBADF (Bad file descriptor) [pid 6694] close(14) = -1 EBADF (Bad file descriptor) [pid 6694] close(15) = -1 EBADF (Bad file descriptor) [pid 6694] close(16) = -1 EBADF (Bad file descriptor) [pid 6694] close(17) = -1 EBADF (Bad file descriptor) [pid 6694] close(18) = -1 EBADF (Bad file descriptor) [pid 6694] close(19) = -1 EBADF (Bad file descriptor) [pid 6694] close(20) = -1 EBADF (Bad file descriptor) [pid 6694] close(21) = -1 EBADF (Bad file descriptor) [ 118.725572][ T5821] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 6694] close(22) = -1 EBADF (Bad file descriptor) [pid 5821] <... umount2 resumed>) = 0 [pid 6694] close(23) = -1 EBADF (Bad file descriptor) [pid 6694] close(24) = -1 EBADF (Bad file descriptor) [pid 6694] close(25) = -1 EBADF (Bad file descriptor) [pid 6694] close(26) = -1 EBADF (Bad file descriptor) [pid 6694] close(27) = -1 EBADF (Bad file descriptor) [pid 6694] close(28) = -1 EBADF (Bad file descriptor) [pid 6694] close(29) = -1 EBADF (Bad file descriptor) [pid 6694] exit_group(0) = ? [pid 6694] +++ exited with 0 +++ [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=21, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=46 /* 0.46 s */} --- [pid 5824] restart_syscall(<... resuming interrupted clone ...> [pid 5821] umount2("./19/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./19/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] umount2("./19/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] openat(AT_FDCWD, "./19/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5821] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5821] getdents64(4, [pid 5824] <... restart_syscall resumed>) = 0 [pid 5821] <... getdents64 resumed>0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5823] <... close resumed>) = 0 [pid 5821] getdents64(4, [pid 5824] umount2("./19", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5821] <... getdents64 resumed>0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5824] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5821] close(4 [pid 5824] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5821] <... close resumed>) = 0 [pid 5821] rmdir("./19/file0" [pid 5824] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5821] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 6721 attached [pid 5824] umount2("./19/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... clone resumed>, child_tidptr=0x55558159a650) = 22 [pid 5821] getdents64(3, [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6721] set_robust_list(0x55558159a660, 24 [pid 5824] newfstatat(AT_FDCWD, "./19/cgroup", [pid 5821] <... getdents64 resumed>0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 6721] <... set_robust_list resumed>) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] close(3 [pid 5824] unlink("./19/cgroup" [pid 6721] chdir("./20" [pid 5824] <... unlink resumed>) = 0 [pid 5821] <... close resumed>) = 0 [pid 5824] umount2("./19/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6721] <... chdir resumed>) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5821] rmdir("./19" [pid 5824] newfstatat(AT_FDCWD, "./19/cgroup.cpu", [pid 6721] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] <... rmdir resumed>) = 0 [pid 5824] unlink("./19/cgroup.cpu" [pid 6721] <... prctl resumed>) = 0 [pid 5824] <... unlink resumed>) = 0 [pid 5821] mkdir("./20", 0777 [pid 5824] umount2("./19/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6721] setpgid(0, 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5821] <... mkdir resumed>) = 0 [pid 5824] newfstatat(AT_FDCWD, "./19/cgroup.net", [pid 6721] <... setpgid resumed>) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5824] unlink("./19/cgroup.net" [pid 6721] symlink("/syzcgroup/unified/syz2", "./cgroup" [pid 5824] <... unlink resumed>) = 0 [pid 5821] <... openat resumed>) = 3 [pid 6715] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 5824] umount2("./19/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6721] <... symlink resumed>) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5821] ioctl(3, LOOP_CLR_FD [pid 5824] newfstatat(AT_FDCWD, "./19/binderfs", [pid 6721] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu" [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] <... ioctl resumed>) = 0 [pid 5824] unlink("./19/binderfs" [pid 6721] <... symlink resumed>) = 0 [pid 5824] <... unlink resumed>) = 0 [pid 5821] close(3 [ 118.827882][ T5824] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 5824] umount2("./19/file0", MNT_FORCE|UMOUNT_NOFOLLOWexecuting program [pid 6721] symlink("/syzcgroup/net/syz2", "./cgroup.net") = 0 [pid 6721] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6721] write(3, "1000", 4) = 4 [pid 6721] close(3) = 0 [pid 6721] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6721] write(1, "executing program\n", 18) = 18 [pid 6721] memfd_create("syzkaller", 0) = 3 [pid 6721] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaaaa00000 [pid 5821] <... close resumed>) = 0 [pid 5821] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5824] <... umount2 resumed>) = 0 [pid 5824] umount2("./19/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6722 attached [pid 5824] newfstatat(AT_FDCWD, "./19/file0", [pid 6722] set_robust_list(0x55558159a660, 24 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] <... clone resumed>, child_tidptr=0x55558159a650) = 22 [pid 6722] <... set_robust_list resumed>) = 0 [pid 6722] chdir("./20" [pid 5824] umount2("./19/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6722] <... chdir resumed>) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6722] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5824] openat(AT_FDCWD, "./19/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5824] newfstatat(4, "", [pid 6722] <... prctl resumed>) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 6722] setpgid(0, 0) = 0 [pid 5824] getdents64(4, [pid 6722] symlink("/syzcgroup/unified/syz0", "./cgroup" [pid 5824] <... getdents64 resumed>0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 6722] <... symlink resumed>) = 0 [pid 5824] getdents64(4, 0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5824] close(4) = 0 [pid 5824] rmdir("./19/file0") = 0 [pid 5824] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5824] close(3 [pid 6722] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu" [pid 5824] <... close resumed>) = 0 [pid 6722] <... symlink resumed>) = 0 [pid 5824] rmdir("./19" [pid 6722] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5824] <... rmdir resumed>) = 0 [pid 6722] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5824] mkdir("./20", 0777 [pid 6722] <... openat resumed>) = 3 [pid 5824] <... mkdir resumed>) = 0 [pid 6722] write(3, "1000", 4) = 4 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6722] close(3) = 0 [pid 5824] <... openat resumed>) = 3 [pid 6722] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5824] ioctl(3, LOOP_CLR_FDexecuting program [pid 6722] write(1, "executing program\n", 18 [pid 5824] <... ioctl resumed>) = 0 [pid 6722] <... write resumed>) = 18 [pid 5824] close(3 [pid 6722] memfd_create("syzkaller", 0) = 3 [pid 6722] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaaaa00000 [pid 6717] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 5824] <... close resumed>) = 0 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6723 attached [pid 6723] set_robust_list(0x55558159a660, 24 [pid 5824] <... clone resumed>, child_tidptr=0x55558159a650) = 22 [pid 6723] <... set_robust_list resumed>) = 0 [pid 6723] chdir("./20"executing program ) = 0 [pid 6723] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6723] setpgid(0, 0) = 0 [pid 6723] symlink("/syzcgroup/unified/syz1", "./cgroup") = 0 [pid 6723] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu") = 0 [pid 6723] symlink("/syzcgroup/net/syz1", "./cgroup.net") = 0 [pid 6723] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6723] write(3, "1000", 4) = 4 [pid 6723] close(3) = 0 [pid 6723] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6723] write(1, "executing program\n", 18) = 18 [pid 6723] memfd_create("syzkaller", 0) = 3 [pid 6723] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaaaa00000 [pid 6722] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 6721] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 6722] <... write resumed>) = 33554432 [pid 6722] munmap(0x7fbaaaa00000, 138412032) = 0 [pid 6722] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6722] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6715] <... write resumed>) = 33554432 [pid 6723] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 6722] close(3 [pid 6715] munmap(0x7fbaaaa00000, 138412032 [pid 6722] <... close resumed>) = 0 [ 119.906993][ T6722] loop0: detected capacity change from 0 to 65536 [pid 6722] close(4 [pid 6715] <... munmap resumed>) = 0 [pid 6715] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6715] ioctl(4, LOOP_SET_FD, 3 [pid 6722] <... close resumed>) = 0 [pid 6717] <... write resumed>) = 33554432 [pid 6722] mkdir("./file0", 0777 [pid 6717] munmap(0x7fbaaaa00000, 138412032 [pid 6715] <... ioctl resumed>) = 0 [pid 6715] close(3 [pid 6722] <... mkdir resumed>) = 0 [pid 6715] <... close resumed>) = 0 [pid 6722] mount("/dev/loop0", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 6715] close(4 [pid 6717] <... munmap resumed>) = 0 [pid 6715] <... close resumed>) = 0 [pid 6715] mkdir("./file0", 0777) = 0 [pid 6717] openat(AT_FDCWD, "/dev/loop4", O_RDWR [ 119.984315][ T6715] loop3: detected capacity change from 0 to 65536 [pid 6715] mount("/dev/loop3", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 6717] <... openat resumed>) = 4 [pid 6717] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6717] close(3) = 0 [pid 6717] close(4) = 0 [pid 6717] mkdir("./file0", 0777) = 0 [ 120.047398][ T6717] loop4: detected capacity change from 0 to 65536 [ 120.057951][ T6722] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 120.089601][ T6715] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 120.192270][ T6715] XFS (loop3): Ending clean mount [ 120.220246][ T29] audit: type=1800 audit(1733456417.716:99): pid=6715 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop3" ino=41 res=0 errno=0 [ 120.244271][ T57] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [pid 6717] mount("/dev/loop4", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 6715] <... mount resumed>) = 0 [pid 6721] <... write resumed>) = 33554432 [pid 6715] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6721] munmap(0x7fbaaaa00000, 138412032 [pid 6715] <... openat resumed>) = 3 [pid 6715] chdir("./file0") = 0 [pid 6715] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6715] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 6715] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6721] <... munmap resumed>) = 0 [pid 6721] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6721] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6721] close(3) = 0 [pid 6721] close(4) = 0 [pid 6721] mkdir("./file0", 0777) = 0 [ 120.267805][ T57] XFS (loop3): Unmount and run xfs_repair [ 120.273659][ T57] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 120.286469][ T6721] loop2: detected capacity change from 0 to 65536 [ 120.293108][ T57] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 120.322725][ T57] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 120.355240][ T57] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [pid 6721] mount("/dev/loop2", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 6723] <... write resumed>) = 33554432 [ 120.364548][ T57] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 120.379502][ T57] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 120.392544][ T57] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 120.397469][ T6721] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 120.403844][ T57] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [pid 6723] munmap(0x7fbaaaa00000, 138412032) = 0 [pid 6723] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [ 120.421134][ T57] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 120.430373][ T6717] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 120.432644][ T6715] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 120.452222][ T6723] loop1: detected capacity change from 0 to 65536 [pid 6723] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6723] close(3 [pid 6722] <... mount resumed>) = 0 [pid 6722] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6723] <... close resumed>) = 0 [pid 6722] chdir("./file0" [pid 6723] close(4 [pid 6722] <... chdir resumed>) = 0 [pid 6715] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 6715] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000 [pid 6722] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6723] <... close resumed>) = 0 [pid 6721] <... mount resumed>) = 0 [pid 6715] <... openat resumed>) = -1 EFAULT (Bad address) [pid 6715] close(3 [pid 6721] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6723] mkdir("./file0", 0777 [pid 6722] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 6715] <... close resumed>) = 0 [pid 6715] close(4) = 0 [pid 6723] <... mkdir resumed>) = 0 [pid 6721] <... openat resumed>) = 3 [pid 6715] close(5 [pid 6721] chdir("./file0" [pid 6715] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6723] mount("/dev/loop1", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 6721] <... chdir resumed>) = 0 [pid 6715] close(6 [pid 6721] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6715] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6722] <... open resumed>) = 4 [ 120.460657][ T6715] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 120.465163][ T6722] XFS (loop0): Ending clean mount [ 120.478205][ T6715] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 120.499501][ T6721] XFS (loop2): Ending clean mount [pid 6722] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6721] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6717] <... mount resumed>) = 0 [pid 6715] close(7 [pid 6721] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 6717] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6715] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6715] close(8 [pid 6717] <... openat resumed>) = 3 [pid 6715] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6717] chdir("./file0" [pid 6715] close(9 [pid 6717] <... chdir resumed>) = 0 [pid 6715] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6717] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6715] close(10) = -1 EBADF (Bad file descriptor) [pid 6715] close(11 [pid 6717] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6715] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6721] <... open resumed>) = 4 [pid 6717] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 6715] close(12 [pid 6721] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6715] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6715] close(13) = -1 EBADF (Bad file descriptor) [pid 6715] close(14) = -1 EBADF (Bad file descriptor) [pid 6717] <... open resumed>) = 4 [pid 6715] close(15) = -1 EBADF (Bad file descriptor) [pid 6715] close(16) = -1 EBADF (Bad file descriptor) [pid 6715] close(17) = -1 EBADF (Bad file descriptor) [ 120.524645][ T6717] XFS (loop4): Ending clean mount [ 120.529615][ T57] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 120.548009][ T29] audit: type=1800 audit(1733456418.016:100): pid=6722 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop0" ino=41 res=0 errno=0 [pid 6717] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6715] close(18) = -1 EBADF (Bad file descriptor) [pid 6715] close(19) = -1 EBADF (Bad file descriptor) [pid 6715] close(20) = -1 EBADF (Bad file descriptor) [pid 6715] close(21) = -1 EBADF (Bad file descriptor) [pid 6715] close(22) = -1 EBADF (Bad file descriptor) [pid 6715] close(23) = -1 EBADF (Bad file descriptor) [pid 6715] close(24) = -1 EBADF (Bad file descriptor) [pid 6715] close(25) = -1 EBADF (Bad file descriptor) [pid 6715] close(26) = -1 EBADF (Bad file descriptor) [pid 6715] close(27) = -1 EBADF (Bad file descriptor) [pid 6715] close(28) = -1 EBADF (Bad file descriptor) [pid 6715] close(29) = -1 EBADF (Bad file descriptor) [pid 6715] exit_group(0) = ? [pid 6715] +++ exited with 0 +++ [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=21, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=52 /* 0.52 s */} --- [ 120.555995][ T5879] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 120.569279][ T57] XFS (loop0): Unmount and run xfs_repair [ 120.590542][ T57] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 120.593588][ T8] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [pid 5825] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5825] umount2("./19", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5825] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5825] umount2("./19/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./19/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./19/cgroup") = 0 [pid 5825] umount2("./19/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./19/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./19/cgroup.cpu") = 0 [pid 5825] umount2("./19/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./19/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./19/cgroup.net") = 0 [pid 5825] umount2("./19/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./19/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./19/binderfs") = 0 [ 120.598987][ T29] audit: type=1800 audit(1733456418.046:101): pid=6721 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop2" ino=41 res=0 errno=0 [ 120.618285][ T5879] XFS (loop2): Unmount and run xfs_repair [ 120.630581][ T57] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 120.636994][ T8] XFS (loop4): Unmount and run xfs_repair [ 120.644534][ T5825] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 120.650865][ T5879] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 120.659327][ T57] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 120.667852][ T8] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 120.675553][ T29] audit: type=1800 audit(1733456418.046:102): pid=6717 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop4" ino=41 res=0 errno=0 [ 120.683277][ T5879] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 120.702406][ T57] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 120.719893][ T57] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 120.722240][ T8] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 120.728919][ T57] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 120.728938][ T57] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 120.728953][ T57] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 120.728967][ T57] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [pid 5825] umount2("./19/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6722] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 6722] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000) = -1 EFAULT (Bad address) [pid 6722] close(3) = 0 [pid 6722] close(4) = 0 [pid 6722] close(5) = -1 EBADF (Bad file descriptor) [pid 6722] close(6) = -1 EBADF (Bad file descriptor) [pid 6722] close(7) = -1 EBADF (Bad file descriptor) [pid 6722] close(8) = -1 EBADF (Bad file descriptor) [pid 6722] close(9) = -1 EBADF (Bad file descriptor) [pid 6722] close(10) = -1 EBADF (Bad file descriptor) [pid 6722] close(11) = -1 EBADF (Bad file descriptor) [pid 6722] close(12) = -1 EBADF (Bad file descriptor) [pid 6722] close(13) = -1 EBADF (Bad file descriptor) [pid 6722] close(14) = -1 EBADF (Bad file descriptor) [pid 6722] close(15) = -1 EBADF (Bad file descriptor) [pid 6722] close(16) = -1 EBADF (Bad file descriptor) [pid 6722] close(17) = -1 EBADF (Bad file descriptor) [pid 6722] close(18) = -1 EBADF (Bad file descriptor) [pid 6722] close(19) = -1 EBADF (Bad file descriptor) [pid 6722] close(20) = -1 EBADF (Bad file descriptor) [pid 6722] close(21) = -1 EBADF (Bad file descriptor) [pid 6722] close(22) = -1 EBADF (Bad file descriptor) [pid 6722] close(23) = -1 EBADF (Bad file descriptor) [pid 6722] close(24) = -1 EBADF (Bad file descriptor) [pid 6722] close(25) = -1 EBADF (Bad file descriptor) [pid 6722] close(26) = -1 EBADF (Bad file descriptor) [pid 6722] close(27) = -1 EBADF (Bad file descriptor) [pid 6722] close(28) = -1 EBADF (Bad file descriptor) [pid 6722] close(29) = -1 EBADF (Bad file descriptor) [pid 6722] exit_group(0) = ? [pid 6722] +++ exited with 0 +++ [pid 5821] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=22, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=49 /* 0.49 s */} --- [pid 5821] umount2("./20", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5821] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5821] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5821] umount2("./20/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 120.729018][ T6722] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 120.740521][ T6722] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 120.747292][ T6723] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 120.755998][ T6722] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 120.774463][ T5879] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [pid 5821] newfstatat(AT_FDCWD, "./20/cgroup", [pid 6723] <... mount resumed>) = 0 [pid 5821] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6723] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5821] unlink("./20/cgroup" [pid 6723] chdir("./file0" [pid 5821] <... unlink resumed>) = 0 [pid 6723] <... chdir resumed>) = 0 [pid 5821] umount2("./20/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6723] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6723] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5821] newfstatat(AT_FDCWD, "./20/cgroup.cpu", [pid 6723] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 5821] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] unlink("./20/cgroup.cpu") = 0 [pid 6723] <... open resumed>) = 4 [pid 5821] umount2("./20/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./20/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] unlink("./20/cgroup.net") = 0 [pid 6723] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5821] umount2("./20/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 120.831936][ T8] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 120.835371][ T6723] XFS (loop1): Ending clean mount [ 120.840941][ T8] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 120.840962][ T8] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 120.840976][ T8] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 120.840989][ T8] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [pid 5821] newfstatat(AT_FDCWD, "./20/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 120.841003][ T8] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 120.841016][ T8] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 120.841072][ T6717] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 120.841435][ T5879] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [pid 5821] unlink("./20/binderfs" [pid 5825] <... umount2 resumed>) = 0 [pid 5821] <... unlink resumed>) = 0 [ 120.878644][ T6717] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 120.882160][ T5879] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 120.898298][ T6723] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 120.900059][ T5879] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 120.913377][ T6717] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 120.922068][ T5879] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [pid 5821] umount2("./20/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6717] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 5825] umount2("./19/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6717] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000) = -1 EFAULT (Bad address) [pid 6717] close(3) = 0 [pid 6717] close(4) = 0 [pid 6717] close(5 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./19/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] umount2("./19/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6717] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6717] close(6 [pid 5825] openat(AT_FDCWD, "./19/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6717] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5825] <... openat resumed>) = 4 [pid 5825] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(4, 0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5825] getdents64(4, 0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5825] close(4) = 0 [pid 5825] rmdir("./19/file0") = 0 [pid 5825] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5825] close(3) = 0 [pid 5825] rmdir("./19") = 0 [pid 5825] mkdir("./20", 0777) = 0 [pid 5825] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6717] close(7 [pid 5825] <... openat resumed>) = 3 [pid 6717] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5825] ioctl(3, LOOP_CLR_FD [pid 6717] close(8 [pid 5825] <... ioctl resumed>) = 0 [pid 6717] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5825] close(3 [pid 6717] close(9) = -1 EBADF (Bad file descriptor) [pid 6717] close(10) = -1 EBADF (Bad file descriptor) [pid 6717] close(11) = -1 EBADF (Bad file descriptor) [pid 6717] close(12) = -1 EBADF (Bad file descriptor) [pid 6717] close(13) = -1 EBADF (Bad file descriptor) [pid 6717] close(14) = -1 EBADF (Bad file descriptor) [pid 6717] close(15) = -1 EBADF (Bad file descriptor) [pid 6717] close(16) = -1 EBADF (Bad file descriptor) [pid 6717] close(17) = -1 EBADF (Bad file descriptor) [pid 6717] close(18) = -1 EBADF (Bad file descriptor) [pid 6717] close(19) = -1 EBADF (Bad file descriptor) [pid 6717] close(20) = -1 EBADF (Bad file descriptor) [pid 6717] close(21) = -1 EBADF (Bad file descriptor) [pid 6717] close(22) = -1 EBADF (Bad file descriptor) [pid 6717] close(23) = -1 EBADF (Bad file descriptor) [pid 6717] close(24) = -1 EBADF (Bad file descriptor) [pid 6717] close(25) = -1 EBADF (Bad file descriptor) [pid 6717] close(26) = -1 EBADF (Bad file descriptor) [pid 6717] close(27) = -1 EBADF (Bad file descriptor) [pid 6717] close(28) = -1 EBADF (Bad file descriptor) [pid 6717] close(29) = -1 EBADF (Bad file descriptor) [pid 6717] exit_group(0) = ? [ 120.941485][ T6723] XFS (loop1): Unmount and run xfs_repair [ 120.944015][ T5879] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 120.955215][ T6723] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 120.964548][ T5879] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 120.973078][ T6723] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [pid 6717] +++ exited with 0 +++ [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=20, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=49 /* 0.49 s */} --- [pid 5826] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5826] umount2("./18", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5826] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5826] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5826] umount2("./18/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./18/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./18/cgroup") = 0 [pid 5826] umount2("./18/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./18/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./18/cgroup.cpu") = 0 [pid 5826] umount2("./18/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./18/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./18/cgroup.net") = 0 [pid 5826] umount2("./18/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 121.025894][ T5821] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 121.044878][ T6723] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 121.053860][ T6723] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 121.063997][ T6723] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 121.073752][ T6723] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [pid 5826] newfstatat(AT_FDCWD, "./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./18/binderfs") = 0 [ 121.083103][ T6723] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 121.092865][ T6723] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 121.102716][ T6723] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 121.106850][ T6721] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [pid 5826] umount2("./18/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6723] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 6723] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000) = -1 EFAULT (Bad address) [ 121.111657][ T6723] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 121.134639][ T5826] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 121.138163][ T6723] XFS (loop1): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 121.154886][ T6721] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 121.157911][ T6723] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [pid 6723] close(3 [pid 6721] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 5821] <... umount2 resumed>) = 0 [pid 6723] <... close resumed>) = 0 [pid 5821] umount2("./20/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6723] close(4 [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6723] <... close resumed>) = 0 [pid 5821] newfstatat(AT_FDCWD, "./20/file0", [pid 6723] close(5 [pid 6721] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000 [pid 5821] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6723] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6721] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5821] umount2("./20/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6723] close(6 [pid 6721] close(3 [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6723] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6721] <... close resumed>) = 0 [pid 5821] openat(AT_FDCWD, "./20/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6723] close(7 [pid 6721] close(4 [pid 5821] <... openat resumed>) = 4 [pid 6723] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6721] <... close resumed>) = 0 [pid 5821] newfstatat(4, "", [pid 6723] close(8 [pid 6721] close(5 [pid 5821] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 6723] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6721] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5821] getdents64(4, [pid 6723] close(9 [pid 6721] close(6 [pid 5821] <... getdents64 resumed>0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 6723] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6721] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5821] getdents64(4, [pid 6723] close(10 [pid 6721] close(7 [pid 5821] <... getdents64 resumed>0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 6723] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6721] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5821] close(4 [pid 6723] close(11 [pid 6721] close(8 [pid 5821] <... close resumed>) = 0 [pid 6723] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6721] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5821] rmdir("./20/file0" [pid 6723] close(12 [pid 6721] close(9 [pid 5821] <... rmdir resumed>) = 0 [pid 6723] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6721] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5821] getdents64(3, [pid 6723] close(13 [pid 6721] close(10 [pid 5821] <... getdents64 resumed>0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 6723] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6721] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5821] close(3 [pid 6723] close(14 [pid 6721] close(11 [pid 5821] <... close resumed>) = 0 [pid 6723] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6721] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5821] rmdir("./20" [pid 6723] close(15 [pid 6721] close(12 [pid 5821] <... rmdir resumed>) = 0 [pid 6723] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6721] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5821] mkdir("./21", 0777 [pid 6723] close(16 [pid 6721] close(13 [pid 5821] <... mkdir resumed>) = 0 [pid 6723] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6721] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5821] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6723] close(17 [pid 6721] close(14 [pid 5821] <... openat resumed>) = 3 [pid 6723] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6721] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5821] ioctl(3, LOOP_CLR_FD [pid 6723] close(18 [pid 6721] close(15 [pid 5821] <... ioctl resumed>) = 0 [pid 6723] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6721] <... close resumed>) = -1 EBADF (Bad file descriptor) [ 121.186692][ T6721] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [pid 5821] close(3 [pid 6723] close(19 [pid 6721] close(16 [pid 5826] <... umount2 resumed>) = 0 [pid 6723] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6721] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5826] umount2("./18/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] <... close resumed>) = 0 [pid 6721] close(17 [pid 5821] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6723] close(20 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./18/file0", [pid 6723] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6723] close(21./strace-static-x86_64: Process 6764 attached ) = -1 EBADF (Bad file descriptor) [pid 6721] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6764] set_robust_list(0x55558159a660, 24 [pid 6723] close(22 [pid 6721] close(18 [pid 5826] umount2("./18/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] <... clone resumed>, child_tidptr=0x55558159a650) = 23 [pid 6764] <... set_robust_list resumed>) = 0 [pid 6721] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6723] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6721] close(19 [pid 6764] chdir("./21" [pid 6723] close(23 [pid 5826] openat(AT_FDCWD, "./18/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6764] <... chdir resumed>) = 0 [pid 6723] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6721] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5826] <... openat resumed>) = 4 [pid 6721] close(20) = -1 EBADF (Bad file descriptor) [pid 6721] close(21) = -1 EBADF (Bad file descriptor) [pid 6721] close(22 [pid 5826] newfstatat(4, "", [pid 6723] close(24 [pid 6721] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6721] close(23) = -1 EBADF (Bad file descriptor) [pid 6721] close(24) = -1 EBADF (Bad file descriptor) [pid 6721] close(25 [pid 6723] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6721] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6764] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 6764] <... prctl resumed>) = 0 [pid 6723] close(25 [pid 5826] getdents64(4, [pid 6764] setpgid(0, 0 [pid 6723] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6764] <... setpgid resumed>) = 0 [pid 6723] close(26 [pid 5826] <... getdents64 resumed>0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 6721] close(26) = -1 EBADF (Bad file descriptor) [pid 6721] close(27) = -1 EBADF (Bad file descriptor) [pid 6764] symlink("/syzcgroup/unified/syz0", "./cgroup" [pid 5826] getdents64(4, [pid 6723] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6721] close(28) = -1 EBADF (Bad file descriptor) [pid 6721] close(29) = -1 EBADF (Bad file descriptor) [pid 6721] exit_group(0) = ? [pid 6721] +++ exited with 0 +++ [pid 5826] <... getdents64 resumed>0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 6723] close(27 [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=22, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=56 /* 0.56 s */} --- [pid 5826] close(4 [pid 6723] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5823] restart_syscall(<... resuming interrupted clone ...> [pid 6723] close(28 [pid 5826] <... close resumed>) = 0 [pid 6723] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5826] rmdir("./18/file0" [pid 6723] close(29) = -1 EBADF (Bad file descriptor) [pid 5826] <... rmdir resumed>) = 0 [pid 6723] exit_group(0 [pid 5826] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 6723] <... exit_group resumed>) = ? [pid 6764] <... symlink resumed>) = 0 [pid 6723] +++ exited with 0 +++ [pid 6764] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu" [pid 5826] close(3 [pid 5823] <... restart_syscall resumed>) = 0 [pid 6764] <... symlink resumed>) = 0 [pid 5826] <... close resumed>) = 0 [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=22, si_uid=0, si_status=0, si_utime=11 /* 0.11 s */, si_stime=65 /* 0.65 s */} --- [pid 6764] symlink("/syzcgroup/net/syz0", "./cgroup.net" [pid 5826] rmdir("./18" [pid 5824] restart_syscall(<... resuming interrupted clone ...> [pid 6764] <... symlink resumed>) = 0 [pid 5826] <... rmdir resumed>) = 0 [pid 6764] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5826] mkdir("./19", 0777 [pid 5824] <... restart_syscall resumed>) = 0 [pid 5823] umount2("./20", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6764] <... openat resumed>) = 3 [pid 5826] <... mkdir resumed>) = 0 [pid 6764] write(3, "1000", 4 [pid 5826] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6764] <... write resumed>) = 4 [pid 5826] <... openat resumed>) = 3 [pid 5823] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6764] close(3 [pid 5826] ioctl(3, LOOP_CLR_FD [pid 5824] umount2("./20", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... openat resumed>) = 3 [pid 6764] <... close resumed>) = 0 [pid 5826] <... ioctl resumed>) = 0 [pid 5825] <... close resumed>) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(3, "", [pid 6764] symlink("/dev/binderfs", "./binderfs" [pid 5826] close(3executing program [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5824] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 6764] <... symlink resumed>) = 0 [pid 5824] <... openat resumed>) = 3 [pid 6764] write(1, "executing program\n", 18 [pid 5824] newfstatat(3, "", [pid 5823] getdents64(3, [pid 6764] <... write resumed>) = 18 [pid 6764] memfd_create("syzkaller", 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5823] <... getdents64 resumed>0x55558159b6f0 /* 7 entries */, 32768) = 208 ./strace-static-x86_64: Process 6765 attached [pid 6765] set_robust_list(0x55558159a660, 24) = 0 [pid 6765] chdir("./20") = 0 [pid 6765] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6764] <... memfd_create resumed>) = 3 [pid 5825] <... clone resumed>, child_tidptr=0x55558159a650) = 22 [pid 5824] getdents64(3, [pid 5823] umount2("./20/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6765] <... prctl resumed>) = 0 [pid 6765] setpgid(0, 0) = 0 [pid 6765] symlink("/syzcgroup/unified/syz3", "./cgroup") = 0 [pid 6765] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu") = 0 [pid 6765] symlink("/syzcgroup/net/syz3", "./cgroup.net" [pid 6764] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5824] <... getdents64 resumed>0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6765] <... symlink resumed>) = 0 [pid 6764] <... mmap resumed>) = 0x7fbaaaa00000 [pid 5824] umount2("./20/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] newfstatat(AT_FDCWD, "./20/cgroup", [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6765] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6765] write(3, "1000", 4) = 4 [pid 6765] close(3) = 0 [pid 6765] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6765] write(1, "executing program\n", 18executing program ) = 18 [pid 6765] memfd_create("syzkaller", 0) = 3 [pid 6765] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaaaa00000 [pid 5824] newfstatat(AT_FDCWD, "./20/cgroup", [pid 5823] unlink("./20/cgroup" [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] <... unlink resumed>) = 0 [pid 5824] unlink("./20/cgroup" [pid 5823] umount2("./20/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... unlink resumed>) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] umount2("./20/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] newfstatat(AT_FDCWD, "./20/cgroup.cpu", [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] newfstatat(AT_FDCWD, "./20/cgroup.cpu", [pid 5823] unlink("./20/cgroup.cpu" [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] <... unlink resumed>) = 0 [pid 5824] unlink("./20/cgroup.cpu" [pid 5823] umount2("./20/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... unlink resumed>) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] umount2("./20/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] newfstatat(AT_FDCWD, "./20/cgroup.net", [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] newfstatat(AT_FDCWD, "./20/cgroup.net", [pid 5823] unlink("./20/cgroup.net" [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] <... unlink resumed>) = 0 [pid 5824] unlink("./20/cgroup.net" [pid 5823] umount2("./20/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... unlink resumed>) = 0 [pid 5824] umount2("./20/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./20/binderfs", [pid 5824] newfstatat(AT_FDCWD, "./20/binderfs", [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./20/binderfs" [pid 5824] unlink("./20/binderfs" [pid 5823] <... unlink resumed>) = 0 [pid 5824] <... unlink resumed>) = 0 [pid 5823] umount2("./20/file0", MNT_FORCE|UMOUNT_NOFOLLOW [ 121.520410][ T5823] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 121.530050][ T5824] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 5824] umount2("./20/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6764] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 5824] <... umount2 resumed>) = 0 [pid 5824] umount2("./20/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./20/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] umount2("./20/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./20/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5824] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(4, 0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5824] getdents64(4, 0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5824] close(4) = 0 [pid 5824] rmdir("./20/file0") = 0 [pid 5824] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5824] close(3) = 0 [pid 5824] rmdir("./20") = 0 [pid 5824] mkdir("./21", 0777) = 0 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5824] ioctl(3, LOOP_CLR_FD) = 0 [pid 5824] close(3 [pid 6764] <... write resumed>) = 33554432 [pid 5826] <... close resumed>) = 0 [pid 6765] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 6764] munmap(0x7fbaaaa00000, 138412032 [pid 5824] <... close resumed>) = 0 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5823] <... umount2 resumed>) = 0 [pid 5823] umount2("./20/file0", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6767 attached ./strace-static-x86_64: Process 6766 attached ) = -1 EINVAL (Invalid argument) [pid 6767] set_robust_list(0x55558159a660, 24 [pid 5826] <... clone resumed>, child_tidptr=0x55558159a650) = 21 [pid 5823] newfstatat(AT_FDCWD, "./20/file0", [pid 6767] <... set_robust_list resumed>) = 0 [pid 5824] <... clone resumed>, child_tidptr=0x55558159a650) = 23 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] umount2("./20/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6767] chdir("./19" [pid 6766] set_robust_list(0x55558159a660, 24 [pid 6764] <... munmap resumed>) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6766] <... set_robust_list resumed>) = 0 [pid 6764] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6767] <... chdir resumed>) = 0 [pid 5823] openat(AT_FDCWD, "./20/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6767] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6766] chdir("./21" [pid 6764] <... openat resumed>) = 4 [pid 5823] <... openat resumed>) = 4 [pid 6766] <... chdir resumed>) = 0 [pid 6764] ioctl(4, LOOP_SET_FD, 3 [pid 6767] <... prctl resumed>) = 0 [pid 5823] newfstatat(4, "", [pid 6767] setpgid(0, 0 [pid 6766] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6764] <... ioctl resumed>) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 6766] <... prctl resumed>) = 0 [pid 6764] close(3 [pid 6766] setpgid(0, 0 [pid 6764] <... close resumed>) = 0 [pid 6766] <... setpgid resumed>) = 0 [pid 6764] close(4executing program [pid 6767] <... setpgid resumed>) = 0 [pid 6766] symlink("/syzcgroup/unified/syz1", "./cgroup" [pid 6764] <... close resumed>) = 0 [pid 5823] getdents64(4, [pid 6766] <... symlink resumed>) = 0 [pid 6764] mkdir("./file0", 0777 [pid 6766] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu" [pid 6764] <... mkdir resumed>) = 0 [pid 6766] <... symlink resumed>) = 0 [pid 6764] mount("/dev/loop0", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 5823] <... getdents64 resumed>0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 6767] symlink("/syzcgroup/unified/syz4", "./cgroup" [pid 6766] symlink("/syzcgroup/net/syz1", "./cgroup.net") = 0 [pid 6766] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6766] write(3, "1000", 4) = 4 [pid 6766] close(3) = 0 [pid 6766] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6766] write(1, "executing program\n", 18) = 18 [pid 6766] memfd_create("syzkaller", 0) = 3 [pid 6766] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaaaa00000 [pid 6767] <... symlink resumed>) = 0 [pid 5823] getdents64(4, [pid 6767] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu" [pid 5823] <... getdents64 resumed>0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 6767] <... symlink resumed>) = 0 [ 122.084338][ T6764] loop0: detected capacity change from 0 to 65536 [pid 5823] close(4 [pid 6767] symlink("/syzcgroup/net/syz4", "./cgroup.net" [pid 5823] <... close resumed>) = 0 [pid 5823] rmdir("./20/file0") = 0 [pid 5823] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5823] close(3) = 0 [pid 5823] rmdir("./20") = 0 [pid 5823] mkdir("./21", 0777) = 0 [pid 5823] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5823] ioctl(3, LOOP_CLR_FD) = 0 [pid 5823] close(3 [pid 6767] <... symlink resumed>) = 0 [pid 6767] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6767] write(3, "1000", 4) = 4 [pid 6767] close(3) = 0 [pid 6767] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 6767] write(1, "executing program\n", 18) = 18 [pid 6767] memfd_create("syzkaller", 0) = 3 [pid 6767] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaaaa00000 [ 122.278987][ T6764] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 6766] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 6765] <... write resumed>) = 33554432 [pid 6764] <... mount resumed>) = 0 [pid 5823] <... close resumed>) = 0 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6764] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [ 122.489995][ T6764] XFS (loop0): Ending clean mount [pid 6765] munmap(0x7fbaaaa00000, 138412032./strace-static-x86_64: Process 6776 attached ) = 0 [pid 6764] <... openat resumed>) = 3 [pid 6776] set_robust_list(0x55558159a660, 24 [pid 6764] chdir("./file0" [pid 5823] <... clone resumed>, child_tidptr=0x55558159a650) = 23 [pid 6764] <... chdir resumed>) = 0 [pid 6776] <... set_robust_list resumed>) = 0 [pid 6765] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6776] chdir("./21" [pid 6764] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6765] <... openat resumed>) = 4 [pid 6764] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6776] <... chdir resumed>) = 0 [pid 6764] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 6765] ioctl(4, LOOP_SET_FD, 3 [pid 6776] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6765] <... ioctl resumed>) = 0 [pid 6776] <... prctl resumed>) = 0 [pid 6765] close(3 [pid 6776] setpgid(0, 0 [pid 6765] <... close resumed>) = 0 [pid 6776] <... setpgid resumed>) = 0 [pid 6765] close(4 [pid 6776] symlink("/syzcgroup/unified/syz2", "./cgroup" [pid 6765] <... close resumed>) = 0 [pid 6765] mkdir("./file0", 0777) = 0 [pid 6764] <... open resumed>) = 4 [pid 6776] <... symlink resumed>) = 0 [pid 6765] mount("/dev/loop3", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [ 122.541776][ T6765] loop3: detected capacity change from 0 to 65536 [ 122.556379][ T5879] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 122.562857][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 122.562873][ T29] audit: type=1800 audit(1733456420.046:104): pid=6764 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop0" ino=41 res=0 errno=0 [ 122.567705][ T5879] XFS (loop0): Unmount and run xfs_repair [ 122.599393][ T5879] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 122.606849][ T5879] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 122.615715][ T5879] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 122.624711][ T5879] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [pid 6764] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6776] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu") = 0 [pid 6776] symlink("/syzcgroup/net/syz2", "./cgroup.net") = 0 [pid 6776] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6776] write(3, "1000", 4) = 4 [pid 6776] close(3) = 0 [pid 6776] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6776] write(1, "executing program\n", 18) = 18 [pid 6776] memfd_create("syzkaller", 0) = 3 [pid 6776] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaaaa00000 [ 122.633674][ T5879] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 122.642585][ T5879] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 122.651526][ T5879] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 122.660426][ T5879] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 122.669344][ T5879] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 122.679007][ T6764] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 122.760626][ T6765] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 6766] <... write resumed>) = 33554432 [pid 6766] munmap(0x7fbaaaa00000, 138412032 [ 122.869618][ T6764] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 122.907001][ T6764] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [pid 6776] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 6766] <... munmap resumed>) = 0 [pid 6764] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 6765] <... mount resumed>) = 0 [pid 6765] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6766] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6764] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000) = -1 EFAULT (Bad address) [pid 6765] <... openat resumed>) = 3 [ 122.951302][ T6765] XFS (loop3): Ending clean mount [pid 6767] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 6766] <... openat resumed>) = 4 [pid 6765] chdir("./file0" [pid 6764] close(3 [pid 6765] <... chdir resumed>) = 0 [pid 6764] <... close resumed>) = 0 [pid 6766] ioctl(4, LOOP_SET_FD, 3 [pid 6765] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6764] close(4 [pid 6766] <... ioctl resumed>) = 0 [pid 6765] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6764] <... close resumed>) = 0 [pid 6764] close(5) = -1 EBADF (Bad file descriptor) [pid 6765] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 6764] close(6) = -1 EBADF (Bad file descriptor) [pid 6764] close(7) = -1 EBADF (Bad file descriptor) [pid 6764] close(8) = -1 EBADF (Bad file descriptor) [pid 6764] close(9) = -1 EBADF (Bad file descriptor) [pid 6764] close(10) = -1 EBADF (Bad file descriptor) [pid 6764] close(11) = -1 EBADF (Bad file descriptor) [pid 6764] close(12) = -1 EBADF (Bad file descriptor) [ 122.989163][ T6766] loop1: detected capacity change from 0 to 65536 [ 123.003107][ T29] audit: type=1800 audit(1733456420.496:105): pid=6765 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop3" ino=41 res=0 errno=0 [ 123.005039][ T8] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [pid 6764] close(13 [pid 6765] <... open resumed>) = 4 [pid 6764] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6765] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6764] close(14 [pid 6766] close(3 [pid 6764] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6766] <... close resumed>) = 0 [ 123.035212][ T8] XFS (loop3): Unmount and run xfs_repair [ 123.041103][ T8] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 123.048623][ T8] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 123.057564][ T8] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 123.066439][ T8] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 123.075423][ T8] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [pid 6766] close(4 [pid 6764] close(15 [pid 6766] <... close resumed>) = 0 [pid 6764] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6766] mkdir("./file0", 0777 [pid 6764] close(16 [pid 6766] <... mkdir resumed>) = 0 [pid 6764] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6766] mount("/dev/loop1", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [ 123.084348][ T8] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 123.093462][ T8] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 123.102448][ T8] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 123.111493][ T8] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 123.120938][ T6765] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [pid 6764] close(17) = -1 EBADF (Bad file descriptor) [pid 6764] close(18) = -1 EBADF (Bad file descriptor) [pid 6764] close(19) = -1 EBADF (Bad file descriptor) [pid 6765] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 6764] close(20) = -1 EBADF (Bad file descriptor) [pid 6765] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000) = -1 EFAULT (Bad address) [pid 6765] close(3) = 0 [pid 6765] close(4) = 0 [pid 6765] close(5) = -1 EBADF (Bad file descriptor) [pid 6765] close(6) = -1 EBADF (Bad file descriptor) [pid 6765] close(7) = -1 EBADF (Bad file descriptor) [pid 6765] close(8) = -1 EBADF (Bad file descriptor) [pid 6765] close(9) = -1 EBADF (Bad file descriptor) [pid 6765] close(10) = -1 EBADF (Bad file descriptor) [pid 6765] close(11) = -1 EBADF (Bad file descriptor) [pid 6765] close(12) = -1 EBADF (Bad file descriptor) [pid 6765] close(13) = -1 EBADF (Bad file descriptor) [pid 6765] close(14) = -1 EBADF (Bad file descriptor) [pid 6765] close(15) = -1 EBADF (Bad file descriptor) [pid 6765] close(16) = -1 EBADF (Bad file descriptor) [pid 6765] close(17) = -1 EBADF (Bad file descriptor) [pid 6765] close(18) = -1 EBADF (Bad file descriptor) [pid 6765] close(19) = -1 EBADF (Bad file descriptor) [pid 6765] close(20) = -1 EBADF (Bad file descriptor) [pid 6765] close(21) = -1 EBADF (Bad file descriptor) [pid 6765] close(22) = -1 EBADF (Bad file descriptor) [pid 6765] close(23 [pid 6764] close(21) = -1 EBADF (Bad file descriptor) [pid 6764] close(22) = -1 EBADF (Bad file descriptor) [pid 6764] close(23 [pid 6765] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6764] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6765] close(24 [pid 6764] close(24 [pid 6765] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6764] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6765] close(25 [pid 6764] close(25 [pid 6765] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6764] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6765] close(26 [pid 6764] close(26 [pid 6765] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6764] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6765] close(27 [pid 6764] close(27 [pid 6765] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6764] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6765] close(28 [pid 6764] close(28 [pid 6765] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6764] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6765] close(29 [pid 6764] close(29 [pid 6765] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6764] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6765] exit_group(0 [pid 6764] exit_group(0 [pid 6765] <... exit_group resumed>) = ? [pid 6764] <... exit_group resumed>) = ? [pid 6765] +++ exited with 0 +++ [pid 6764] +++ exited with 0 +++ [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=22, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=49 /* 0.49 s */} --- [pid 5821] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=23, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=46 /* 0.46 s */} --- [pid 5825] umount2("./20", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] umount2("./21", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5821] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] <... openat resumed>) = 3 [pid 5821] <... openat resumed>) = 3 [pid 5825] newfstatat(3, "", [pid 5821] newfstatat(3, "", [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5821] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(3, [pid 5821] getdents64(3, [pid 5825] <... getdents64 resumed>0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5821] <... getdents64 resumed>0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5825] umount2("./20/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] umount2("./21/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./20/cgroup", [pid 5821] newfstatat(AT_FDCWD, "./21/cgroup", [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./20/cgroup" [pid 5821] unlink("./21/cgroup" [pid 5825] <... unlink resumed>) = 0 [pid 5821] <... unlink resumed>) = 0 [pid 5825] umount2("./20/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] umount2("./21/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./20/cgroup.cpu", [pid 5821] newfstatat(AT_FDCWD, "./21/cgroup.cpu", [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./20/cgroup.cpu") = 0 [pid 5825] umount2("./20/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] unlink("./21/cgroup.cpu" [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5821] <... unlink resumed>) = 0 [pid 5825] newfstatat(AT_FDCWD, "./20/cgroup.net", [pid 5821] umount2("./21/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] unlink("./20/cgroup.net" [pid 5821] newfstatat(AT_FDCWD, "./21/cgroup.net", [pid 5825] <... unlink resumed>) = 0 [pid 5821] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] umount2("./20/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] unlink("./21/cgroup.net" [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5821] <... unlink resumed>) = 0 [pid 5825] newfstatat(AT_FDCWD, "./20/binderfs", [pid 5821] umount2("./21/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] unlink("./20/binderfs" [pid 5821] newfstatat(AT_FDCWD, "./21/binderfs", [pid 5825] <... unlink resumed>) = 0 [pid 5821] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] umount2("./20/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] unlink("./21/binderfs") = 0 [ 123.136234][ T6765] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 123.151905][ T6765] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [pid 5821] umount2("./21/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5825] <... umount2 resumed>) = 0 [pid 5825] umount2("./20/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./20/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] umount2("./20/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./20/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5825] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(4, 0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5825] getdents64(4, 0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5825] close(4) = 0 [pid 5825] rmdir("./20/file0") = 0 [pid 5825] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5825] close(3) = 0 [pid 5825] rmdir("./20") = 0 [pid 5825] mkdir("./21", 0777) = 0 [pid 5825] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5825] ioctl(3, LOOP_CLR_FD) = 0 [ 123.184581][ T5825] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 123.196370][ T6766] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 123.205845][ T5821] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 5825] close(3 [pid 5821] umount2("./21/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./21/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] umount2("./21/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] openat(AT_FDCWD, "./21/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5821] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5821] getdents64(4, 0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5821] getdents64(4, 0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5821] close(4) = 0 [pid 5821] rmdir("./21/file0") = 0 [pid 5821] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5821] close(3) = 0 [pid 5821] rmdir("./21") = 0 [pid 5821] mkdir("./22", 0777) = 0 [pid 5821] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5821] ioctl(3, LOOP_CLR_FD) = 0 [pid 5821] close(3 [pid 6766] <... mount resumed>) = 0 [pid 6766] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6766] chdir("./file0") = 0 [pid 6766] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [ 123.334600][ T6766] XFS (loop1): Ending clean mount [pid 6766] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 5825] <... close resumed>) = 0 [ 123.419139][ T29] audit: type=1800 audit(1733456420.916:106): pid=6766 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop1" ino=41 res=0 errno=0 [ 123.469684][ T57] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 123.496700][ T57] XFS (loop1): Unmount and run xfs_repair [ 123.502473][ T57] XFS (loop1): First 128 bytes of corrupted metadata buffer: [pid 6766] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5821] <... close resumed>) = 0 [pid 5821] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6793 attached [pid 6793] set_robust_list(0x55558159a660, 24 [pid 5821] <... clone resumed>, child_tidptr=0x55558159a650) = 24 [pid 6793] <... set_robust_list resumed>) = 0 [pid 6793] chdir("./22") = 0 [pid 6793] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6793] setpgid(0, 0) = 0 [ 123.556660][ T57] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 123.565562][ T57] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 123.621295][ T57] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 123.646635][ T57] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 123.655539][ T57] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... executing program [pid 6793] symlink("/syzcgroup/unified/syz0", "./cgroup" [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6793] <... symlink resumed>) = 0 [pid 6793] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6793] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6793] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6793] write(3, "1000", 4) = 4 [pid 6793] close(3) = 0 [pid 6793] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6793] write(1, "executing program\n", 18) = 18 [pid 6793] memfd_create("syzkaller", 0) = 3 [pid 6793] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaaaa00000 [pid 5825] <... clone resumed>, child_tidptr=0x55558159a650) = 23 [ 123.686293][ T57] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 123.706705][ T57] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 123.726959][ T57] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [pid 6767] <... write resumed>) = 33554432 [pid 6767] munmap(0x7fbaaaa00000, 138412032./strace-static-x86_64: Process 6794 attached [pid 6793] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 6794] set_robust_list(0x55558159a660, 24) = 0 [pid 6794] chdir("./21") = 0 [ 123.746841][ T6766] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [pid 6794] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6794] setpgid(0, 0) = 0 [pid 6794] symlink("/syzcgroup/unified/syz3", "./cgroup") = 0 [pid 6794] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu") = 0 [pid 6794] symlink("/syzcgroup/net/syz3", "./cgroup.net") = 0 [pid 6794] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6794] write(3, "1000", 4) = 4 [pid 6794] close(3) = 0 [pid 6794] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6794] write(1, "executing program\n", 18) = 18 [pid 6794] memfd_create("syzkaller", 0) = 3 [pid 6794] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaaaa00000 [ 123.840377][ T6766] XFS (loop1): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 123.889627][ T6766] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [pid 6767] <... munmap resumed>) = 0 [pid 6776] <... write resumed>) = 33554432 [pid 6766] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 6776] munmap(0x7fbaaaa00000, 138412032 [pid 6766] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000) = -1 EFAULT (Bad address) [pid 6766] close(3) = 0 [pid 6766] close(4) = 0 [pid 6766] close(5) = -1 EBADF (Bad file descriptor) [pid 6766] close(6) = -1 EBADF (Bad file descriptor) [pid 6766] close(7) = -1 EBADF (Bad file descriptor) [pid 6766] close(8) = -1 EBADF (Bad file descriptor) [pid 6766] close(9) = -1 EBADF (Bad file descriptor) [pid 6766] close(10) = -1 EBADF (Bad file descriptor) [pid 6766] close(11) = -1 EBADF (Bad file descriptor) [pid 6766] close(12) = -1 EBADF (Bad file descriptor) [pid 6766] close(13) = -1 EBADF (Bad file descriptor) [pid 6766] close(14) = -1 EBADF (Bad file descriptor) [pid 6766] close(15) = -1 EBADF (Bad file descriptor) [pid 6766] close(16) = -1 EBADF (Bad file descriptor) [pid 6766] close(17) = -1 EBADF (Bad file descriptor) [pid 6766] close(18) = -1 EBADF (Bad file descriptor) [pid 6766] close(19) = -1 EBADF (Bad file descriptor) [pid 6766] close(20) = -1 EBADF (Bad file descriptor) [pid 6766] close(21) = -1 EBADF (Bad file descriptor) [pid 6766] close(22) = -1 EBADF (Bad file descriptor) [pid 6766] close(23) = -1 EBADF (Bad file descriptor) [pid 6766] close(24) = -1 EBADF (Bad file descriptor) [pid 6766] close(25) = -1 EBADF (Bad file descriptor) [pid 6766] close(26) = -1 EBADF (Bad file descriptor) [pid 6766] close(27) = -1 EBADF (Bad file descriptor) [pid 6766] close(28) = -1 EBADF (Bad file descriptor) [pid 6766] close(29) = -1 EBADF (Bad file descriptor) [pid 6766] exit_group(0) = ? [pid 6766] +++ exited with 0 +++ [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=23, si_uid=0, si_status=0, si_utime=11 /* 0.11 s */, si_stime=45 /* 0.45 s */} --- [pid 5824] restart_syscall(<... resuming interrupted clone ...> [pid 6776] <... munmap resumed>) = 0 [pid 6776] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5824] <... restart_syscall resumed>) = 0 [pid 5824] umount2("./21", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5824] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5824] umount2("./21/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./21/cgroup", [pid 6776] <... openat resumed>) = 4 [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./21/cgroup") = 0 [pid 5824] umount2("./21/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6776] ioctl(4, LOOP_SET_FD, 3 [pid 5824] newfstatat(AT_FDCWD, "./21/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./21/cgroup.cpu") = 0 [pid 5824] umount2("./21/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./21/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./21/cgroup.net") = 0 [pid 5824] umount2("./21/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./21/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./21/binderfs") = 0 [pid 5824] umount2("./21/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6776] <... ioctl resumed>) = 0 [pid 6776] close(3) = 0 [pid 6776] close(4) = 0 [pid 6776] mkdir("./file0", 0777) = 0 [pid 6776] mount("/dev/loop2", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 6794] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 6767] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 124.012240][ T6776] loop2: detected capacity change from 0 to 65536 [ 124.029541][ T5824] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 6767] ioctl(4, LOOP_SET_FD, 3 [pid 6793] <... write resumed>) = 33554432 [pid 6767] <... ioctl resumed>) = 0 [pid 6793] munmap(0x7fbaaaa00000, 138412032 [pid 6767] close(3) = 0 [ 124.257195][ T6767] loop4: detected capacity change from 0 to 65536 [pid 6767] close(4) = 0 [pid 6793] <... munmap resumed>) = 0 [pid 6767] mkdir("./file0", 0777) = 0 [pid 6767] mount("/dev/loop4", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 6793] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6793] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6793] close(3) = 0 [pid 6793] close(4) = 0 [pid 6793] mkdir("./file0", 0777) = 0 [pid 6793] mount("/dev/loop0", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 5824] <... umount2 resumed>) = 0 [pid 6794] <... write resumed>) = 33554432 [ 124.315048][ T6776] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 124.340564][ T6793] loop0: detected capacity change from 0 to 65536 [pid 6794] munmap(0x7fbaaaa00000, 138412032 [pid 5824] umount2("./21/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6794] <... munmap resumed>) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./21/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] umount2("./21/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./21/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5824] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(4, 0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5824] getdents64(4, 0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5824] close(4) = 0 [pid 5824] rmdir("./21/file0") = 0 [pid 5824] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5824] close(3) = 0 [pid 5824] rmdir("./21") = 0 [pid 5824] mkdir("./22", 0777) = 0 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5824] ioctl(3, LOOP_CLR_FD) = 0 [ 124.399468][ T6767] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 124.419355][ T6793] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 5824] close(3 [pid 6794] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6776] <... mount resumed>) = 0 [pid 6776] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6776] chdir("./file0") = 0 [pid 6776] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6776] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 4 [ 124.466081][ T6776] XFS (loop2): Ending clean mount [ 124.483241][ T29] audit: type=1800 audit(1733456421.976:107): pid=6776 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop2" ino=41 res=0 errno=0 [ 124.484370][ T5879] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [pid 6776] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6794] <... openat resumed>) = 4 [pid 6794] ioctl(4, LOOP_SET_FD, 3) = 0 [ 124.522753][ T5879] XFS (loop2): Unmount and run xfs_repair [ 124.528771][ T5879] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 124.532543][ T6767] XFS (loop4): Ending clean mount [ 124.536882][ T5879] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 124.541642][ T6794] loop3: detected capacity change from 0 to 65536 [ 124.550652][ T5879] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [pid 6794] close(3 [pid 6767] <... mount resumed>) = 0 [pid 6794] <... close resumed>) = 0 [pid 6767] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6794] close(4) = 0 [ 124.566347][ T5879] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 124.576012][ T5879] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 124.586751][ T5879] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [pid 6794] mkdir("./file0", 0777 [pid 6767] <... openat resumed>) = 3 [pid 6794] <... mkdir resumed>) = 0 [pid 6767] chdir("./file0" [pid 6794] mount("/dev/loop3", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 6767] <... chdir resumed>) = 0 [pid 6767] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6767] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 4 [ 124.617488][ T5879] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 124.624102][ T29] audit: type=1800 audit(1733456422.116:108): pid=6767 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop4" ino=41 res=0 errno=0 [ 124.643888][ T5879] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 124.656748][ T5879] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [pid 6767] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6793] <... mount resumed>) = 0 [ 124.659909][ T57] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 124.665863][ T6776] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 124.677175][ T6793] XFS (loop0): Ending clean mount [ 124.691757][ T6776] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 124.709533][ T6776] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [pid 6793] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6793] chdir("./file0" [pid 6776] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 6776] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000) = -1 EFAULT (Bad address) [pid 6776] close(3) = 0 [pid 6776] close(4) = 0 [pid 6776] close(5 [pid 6793] <... chdir resumed>) = 0 [pid 6776] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6793] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6776] close(6) = -1 EBADF (Bad file descriptor) [pid 6776] close(7) = -1 EBADF (Bad file descriptor) [pid 6776] close(8) = -1 EBADF (Bad file descriptor) [pid 6776] close(9) = -1 EBADF (Bad file descriptor) [pid 6776] close(10) = -1 EBADF (Bad file descriptor) [pid 6776] close(11) = -1 EBADF (Bad file descriptor) [pid 6776] close(12) = -1 EBADF (Bad file descriptor) [pid 6776] close(13) = -1 EBADF (Bad file descriptor) [pid 6776] close(14) = -1 EBADF (Bad file descriptor) [pid 6776] close(15) = -1 EBADF (Bad file descriptor) [pid 6776] close(16) = -1 EBADF (Bad file descriptor) [pid 6776] close(17) = -1 EBADF (Bad file descriptor) [pid 6776] close(18) = -1 EBADF (Bad file descriptor) [pid 6776] close(19) = -1 EBADF (Bad file descriptor) [pid 6776] close(20) = -1 EBADF (Bad file descriptor) [pid 6776] close(21) = -1 EBADF (Bad file descriptor) [pid 6776] close(22) = -1 EBADF (Bad file descriptor) [pid 6776] close(23) = -1 EBADF (Bad file descriptor) [pid 6776] close(24) = -1 EBADF (Bad file descriptor) [pid 6776] close(25) = -1 EBADF (Bad file descriptor) [pid 6776] close(26) = -1 EBADF (Bad file descriptor) [pid 6776] close(27 [pid 6793] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6776] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6776] close(28 [pid 6793] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 6776] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6776] close(29) = -1 EBADF (Bad file descriptor) [ 124.716758][ T57] XFS (loop4): Unmount and run xfs_repair [ 124.720967][ T6794] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 124.726659][ T57] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 124.752943][ T57] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [pid 6776] exit_group(0 [pid 6793] <... open resumed>) = 4 [pid 6793] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6776] <... exit_group resumed>) = ? [pid 6776] +++ exited with 0 +++ [ 124.771733][ T29] audit: type=1800 audit(1733456422.266:109): pid=6793 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop0" ino=41 res=0 errno=0 [ 124.778951][ T6794] XFS (loop3): Ending clean mount [ 124.796816][ T57] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 124.802001][ T6793] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 124.805921][ T57] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 124.816755][ T6793] XFS (loop0): Unmount and run xfs_repair [ 124.825583][ T57] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 124.831338][ T6793] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 124.831359][ T6793] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 124.840200][ T57] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 124.840217][ T57] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 124.840232][ T57] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 124.847646][ T6793] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 124.856463][ T57] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 124.865339][ T6793] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 124.874373][ T6767] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [pid 6794] <... mount resumed>) = 0 [pid 5824] <... close resumed>) = 0 [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=23, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=49 /* 0.49 s */} --- [pid 6794] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [ 124.900869][ T6793] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 124.931219][ T6793] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 124.931832][ T6767] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 124.942058][ T6793] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 124.955054][ T6767] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6827 attached [pid 6794] <... openat resumed>) = 3 [pid 6827] set_robust_list(0x55558159a660, 24) = 0 [pid 6794] chdir("./file0" [pid 5824] <... clone resumed>, child_tidptr=0x55558159a650) = 24 [pid 6827] chdir("./22" [pid 6794] <... chdir resumed>) = 0 [pid 6794] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6827] <... chdir resumed>) = 0 [pid 6794] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6827] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6794] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 6827] <... prctl resumed>) = 0 [pid 6827] setpgid(0, 0) = 0 [pid 6827] symlink("/syzcgroup/unified/syz1", "./cgroup") = 0 [pid 6794] <... open resumed>) = 4 [pid 6767] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 6827] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu" [pid 6794] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6767] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000 [pid 6827] <... symlink resumed>) = 0 [pid 5823] umount2("./21", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6827] symlink("/syzcgroup/net/syz1", "./cgroup.net" [pid 6767] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6827] <... symlink resumed>) = 0 [pid 6767] close(3 [pid 5823] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6767] <... close resumed>) = 0 [pid 5823] <... openat resumed>) = 3 [pid 6767] close(4 [pid 5823] newfstatat(3, "", [pid 6827] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6767] <... close resumed>) = 0 [pid 6827] <... openat resumed>) = 3 [pid 6767] close(5 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [ 124.964667][ T6793] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 124.981917][ T6793] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 124.984712][ T29] audit: type=1800 audit(1733456422.486:110): pid=6794 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop3" ino=41 res=0 errno=0 [ 124.990862][ T6793] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [pid 6827] write(3, "1000", 4 [pid 6767] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5823] getdents64(3, [pid 6827] <... write resumed>) = 4 [pid 6793] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 6767] close(6 [pid 5823] <... getdents64 resumed>0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 6827] close(3 [pid 6793] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000 [pid 6767] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6827] <... close resumed>) = 0 [pid 6793] <... openat resumed>) = -1 EFAULT (Bad address) [pid 6767] close(7 [pid 5823] umount2("./21/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6827] symlink("/dev/binderfs", "./binderfs" [ 124.994027][ T6793] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 125.021470][ T6794] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 125.022201][ T6793] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 125.047698][ T6794] XFS (loop3): Unmount and run xfs_repair [ 125.047720][ T6794] XFS (loop3): First 128 bytes of corrupted metadata buffer: [pid 6793] close(3 [pid 6767] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6827] <... symlink resumed>) = 0 [pid 6793] <... close resumed>) = 0 [pid 6767] close(8 executing program [pid 5823] newfstatat(AT_FDCWD, "./21/cgroup", [pid 6827] write(1, "executing program\n", 18 [pid 6793] close(4 [pid 6767] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6827] <... write resumed>) = 18 [pid 6793] <... close resumed>) = 0 [pid 6767] close(9 [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6827] memfd_create("syzkaller", 0 [pid 6767] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6793] close(5 [pid 5823] unlink("./21/cgroup" [pid 6827] <... memfd_create resumed>) = 3 [pid 6793] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6767] close(10 [pid 5823] <... unlink resumed>) = 0 [pid 6827] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6793] close(6 [pid 6767] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6827] <... mmap resumed>) = 0x7fbaaaa00000 [pid 6793] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6767] close(11 [pid 5823] umount2("./21/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6767] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6767] close(12) = -1 EBADF (Bad file descriptor) [pid 6767] close(13 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6767] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5823] newfstatat(AT_FDCWD, "./21/cgroup.cpu", [pid 6793] close(7 [pid 6767] close(14 [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6767] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5823] unlink("./21/cgroup.cpu" [pid 6793] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6767] close(15 [pid 6793] close(8 [pid 6767] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5823] <... unlink resumed>) = 0 [pid 6793] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6793] close(9 [pid 6767] close(16 [pid 6793] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6767] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5823] umount2("./21/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6793] close(10 [pid 6767] close(17 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6793] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6767] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5823] newfstatat(AT_FDCWD, "./21/cgroup.net", [pid 6793] close(11 [pid 6767] close(18 [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6793] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6793] close(12 [pid 6767] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6793] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6767] close(19 [pid 5823] unlink("./21/cgroup.net" [pid 6767] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5823] <... unlink resumed>) = 0 [pid 6767] close(20) = -1 EBADF (Bad file descriptor) [pid 6767] close(21 [pid 5823] umount2("./21/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6793] close(13 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6793] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6767] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6793] close(14 [pid 6767] close(22 [pid 5823] newfstatat(AT_FDCWD, "./21/binderfs", [pid 6793] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6767] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6793] close(15 [pid 6767] close(23) = -1 EBADF (Bad file descriptor) [pid 5823] unlink("./21/binderfs" [pid 6767] close(24 [pid 5823] <... unlink resumed>) = 0 [pid 6793] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6767] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5823] umount2("./21/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6767] close(25 [pid 6793] close(16 [pid 6767] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6767] close(26) = -1 EBADF (Bad file descriptor) [pid 6793] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6767] close(27 [pid 6793] close(17 [pid 6767] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6793] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6767] close(28 [pid 6793] close(18 [pid 6767] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6793] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6767] close(29 [pid 6793] close(19) = -1 EBADF (Bad file descriptor) [pid 6793] close(20 [pid 6767] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6793] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6793] close(21 [pid 6767] exit_group(0 [pid 6793] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6793] close(22) = -1 EBADF (Bad file descriptor) [pid 6793] close(23) = -1 EBADF (Bad file descriptor) [pid 6793] close(24 [pid 6767] <... exit_group resumed>) = ? [pid 6793] <... close resumed>) = -1 EBADF (Bad file descriptor) [ 125.070048][ T6794] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 125.079181][ T6794] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 125.089946][ T6794] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 125.099116][ T6794] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 125.108837][ T6794] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [pid 6793] close(25 [pid 6767] +++ exited with 0 +++ [pid 6793] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6793] close(26) = -1 EBADF (Bad file descriptor) [pid 6793] close(27) = -1 EBADF (Bad file descriptor) [pid 6793] close(28) = -1 EBADF (Bad file descriptor) [pid 6793] close(29) = -1 EBADF (Bad file descriptor) [pid 6793] exit_group(0) = ? [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=21, si_uid=0, si_status=0, si_utime=11 /* 0.11 s */, si_stime=54 /* 0.54 s */} --- [pid 6793] +++ exited with 0 +++ [pid 5821] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=24, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=63 /* 0.63 s */} --- [pid 5821] umount2("./22", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5821] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5821] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5821] umount2("./22/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] umount2("./19", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./22/cgroup", [pid 5826] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5821] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] <... openat resumed>) = 3 [pid 5821] unlink("./22/cgroup" [pid 5826] newfstatat(3, "", [pid 5821] <... unlink resumed>) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5821] umount2("./22/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] getdents64(3, [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... getdents64 resumed>0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5821] newfstatat(AT_FDCWD, "./22/cgroup.cpu", [pid 5826] umount2("./19/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5821] unlink("./22/cgroup.cpu" [pid 5826] newfstatat(AT_FDCWD, "./19/cgroup", [pid 5821] <... unlink resumed>) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] umount2("./22/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] unlink("./19/cgroup" [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... unlink resumed>) = 0 [pid 5821] newfstatat(AT_FDCWD, "./22/cgroup.net", [pid 5826] umount2("./19/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5821] unlink("./22/cgroup.net" [pid 5826] newfstatat(AT_FDCWD, "./19/cgroup.cpu", [pid 5821] <... unlink resumed>) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] umount2("./22/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] unlink("./19/cgroup.cpu" [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... unlink resumed>) = 0 [pid 5821] newfstatat(AT_FDCWD, "./22/binderfs", [pid 5826] umount2("./19/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5821] unlink("./22/binderfs" [pid 5826] newfstatat(AT_FDCWD, "./19/cgroup.net", [pid 5821] <... unlink resumed>) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] umount2("./22/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] unlink("./19/cgroup.net") = 0 [pid 5826] umount2("./19/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./19/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 125.118721][ T6794] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 125.121527][ T5823] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 125.127689][ T6794] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 125.145730][ T6794] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 125.154713][ T6794] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [pid 5826] unlink("./19/binderfs") = 0 [pid 5826] umount2("./19/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6794] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 5823] <... umount2 resumed>) = 0 [pid 5821] <... umount2 resumed>) = 0 [pid 6794] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000 [pid 5823] umount2("./21/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] umount2("./22/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./22/file0", [pid 6794] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5823] newfstatat(AT_FDCWD, "./21/file0", [pid 5821] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6794] close(3 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] umount2("./22/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] umount2("./21/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6794] <... close resumed>) = 0 [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6794] close(4 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5821] openat(AT_FDCWD, "./22/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] openat(AT_FDCWD, "./21/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6794] <... close resumed>) = 0 [pid 5823] <... openat resumed>) = 4 [pid 5821] <... openat resumed>) = 4 [pid 6794] close(5 [pid 5823] newfstatat(4, "", [pid 5821] newfstatat(4, "", [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5821] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(4, [pid 5821] getdents64(4, 0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5821] getdents64(4, [pid 5823] <... getdents64 resumed>0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5821] <... getdents64 resumed>0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5823] getdents64(4, [pid 5821] close(4 [pid 5823] <... getdents64 resumed>0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5821] <... close resumed>) = 0 [pid 5823] close(4 [pid 5821] rmdir("./22/file0" [pid 5826] <... umount2 resumed>) = 0 [pid 5823] <... close resumed>) = 0 [pid 5821] <... rmdir resumed>) = 0 [pid 5826] umount2("./19/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./19/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] umount2("./19/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] openat(AT_FDCWD, "./19/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5826] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5826] getdents64(4, 0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5821] getdents64(3, [pid 5823] rmdir("./21/file0" [pid 6794] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5821] <... getdents64 resumed>0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5826] getdents64(4, 0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5823] <... rmdir resumed>) = 0 [pid 5821] close(3 [pid 6794] close(6 [pid 5826] close(4 [pid 6794] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5826] <... close resumed>) = 0 [pid 5821] <... close resumed>) = 0 [pid 6794] close(7 [pid 5826] rmdir("./19/file0" [pid 5823] getdents64(3, [pid 5821] rmdir("./22" [pid 6794] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5826] <... rmdir resumed>) = 0 [pid 5826] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 6794] close(8 [pid 5826] close(3 [pid 5821] <... rmdir resumed>) = 0 [pid 6794] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5826] <... close resumed>) = 0 [ 125.168079][ T5821] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 125.188739][ T6794] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 125.189442][ T5826] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 125.204891][ T6794] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [pid 5821] mkdir("./23", 0777 [pid 6794] close(9 [pid 5826] rmdir("./19") = 0 [pid 5826] mkdir("./20", 0777) = 0 [pid 5826] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6794] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5826] <... openat resumed>) = 3 [pid 5821] <... mkdir resumed>) = 0 [pid 6794] close(10 [pid 5826] ioctl(3, LOOP_CLR_FD [pid 6794] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5826] <... ioctl resumed>) = 0 [pid 5821] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6794] close(11 [pid 5826] close(3 [pid 5823] <... getdents64 resumed>0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 6794] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5821] <... openat resumed>) = 3 [pid 6794] close(12 [pid 5823] close(3 [pid 5821] ioctl(3, LOOP_CLR_FD [pid 6794] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6794] close(13 [pid 5821] <... ioctl resumed>) = 0 [pid 6794] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6794] close(14 [pid 5821] close(3 [pid 6794] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6794] close(15) = -1 EBADF (Bad file descriptor) [pid 6794] close(16) = -1 EBADF (Bad file descriptor) [pid 6794] close(17) = -1 EBADF (Bad file descriptor) [pid 6794] close(18) = -1 EBADF (Bad file descriptor) [pid 6794] close(19) = -1 EBADF (Bad file descriptor) [pid 6794] close(20) = -1 EBADF (Bad file descriptor) [pid 6794] close(21) = -1 EBADF (Bad file descriptor) [pid 6794] close(22) = -1 EBADF (Bad file descriptor) [pid 6794] close(23) = -1 EBADF (Bad file descriptor) [pid 6794] close(24) = -1 EBADF (Bad file descriptor) [pid 6794] close(25) = -1 EBADF (Bad file descriptor) [pid 6794] close(26) = -1 EBADF (Bad file descriptor) [pid 6794] close(27) = -1 EBADF (Bad file descriptor) [pid 6794] close(28) = -1 EBADF (Bad file descriptor) [pid 6794] close(29) = -1 EBADF (Bad file descriptor) [pid 6794] exit_group(0) = ? [pid 6794] +++ exited with 0 +++ [pid 5823] <... close resumed>) = 0 [pid 5823] rmdir("./21") = 0 [pid 5823] mkdir("./22", 0777) = 0 [pid 5823] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5823] ioctl(3, LOOP_CLR_FD) = 0 [pid 5823] close(3 [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=23, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=59 /* 0.59 s */} --- [pid 5825] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5825] umount2("./21", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5825] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5825] umount2("./21/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./21/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./21/cgroup") = 0 [pid 5825] umount2("./21/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./21/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./21/cgroup.cpu") = 0 [pid 5825] umount2("./21/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./21/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./21/cgroup.net") = 0 [pid 5825] umount2("./21/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./21/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./21/binderfs") = 0 [pid 5825] umount2("./21/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... close resumed>) = 0 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6828 attached [pid 6828] set_robust_list(0x55558159a660, 24 [pid 5826] <... clone resumed>, child_tidptr=0x55558159a650) = 22 [pid 6828] <... set_robust_list resumed>) = 0 [pid 6828] chdir("./20") = 0 [pid 6828] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6828] setpgid(0, 0) = 0 [pid 6828] symlink("/syzcgroup/unified/syz4", "./cgroup") = 0 [pid 6828] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu") = 0 [pid 6828] symlink("/syzcgroup/net/syz4", "./cgroup.net") = 0 [pid 6828] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6828] write(3, "1000", 4) = 4 [pid 6828] close(3) = 0 [pid 6828] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6828] write(1, "executing program\n", 18) = 18 [pid 6828] memfd_create("syzkaller", 0) = 3 [pid 6828] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaaaa00000 [ 125.472207][ T5825] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 6827] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 5825] <... umount2 resumed>) = 0 [pid 5821] <... close resumed>) = 0 [pid 5825] umount2("./21/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... close resumed>) = 0 [pid 5821] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6830 attached ./strace-static-x86_64: Process 6829 attached [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5821] <... clone resumed>, child_tidptr=0x55558159a650) = 25 [pid 6830] set_robust_list(0x55558159a660, 24 [pid 6829] set_robust_list(0x55558159a660, 24 [pid 5825] newfstatat(AT_FDCWD, "./21/file0", [pid 5823] <... clone resumed>, child_tidptr=0x55558159a650) = 24 [pid 6830] <... set_robust_list resumed>) = 0 [pid 6829] <... set_robust_list resumed>) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6830] chdir("./22") = 0 [pid 6830] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6830] setpgid(0, 0) = 0 [pid 6829] chdir("./23" [pid 5825] umount2("./21/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6830] symlink("/syzcgroup/unified/syz2", "./cgroup" [pid 6829] <... chdir resumed>) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6829] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5825] openat(AT_FDCWD, "./21/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6829] <... prctl resumed>) = 0 [pid 6830] <... symlink resumed>) = 0 [pid 6829] setpgid(0, 0 [pid 5825] <... openat resumed>) = 4 [pid 6829] <... setpgid resumed>) = 0 [pid 5825] newfstatat(4, "", [pid 6830] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu") = 0 [pid 6829] symlink("/syzcgroup/unified/syz0", "./cgroup" [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 6830] symlink("/syzcgroup/net/syz2", "./cgroup.net" [pid 6829] <... symlink resumed>) = 0 [pid 5825] getdents64(4, [pid 6829] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu" [pid 5825] <... getdents64 resumed>0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 6830] <... symlink resumed>) = 0 [pid 6829] <... symlink resumed>) = 0 [pid 5825] getdents64(4, [pid 6829] symlink("/syzcgroup/net/syz0", "./cgroup.net" [pid 5825] <... getdents64 resumed>0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 6830] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6829] <... symlink resumed>) = 0 [pid 5825] close(4 [pid 6829] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5825] <... close resumed>) = 0 [pid 6830] <... openat resumed>) = 3 [pid 6829] <... openat resumed>) = 3 [pid 5825] rmdir("./21/file0" [pid 6830] write(3, "1000", 4) = 4 [pid 5825] <... rmdir resumed>) = 0 [pid 6830] close(3 [pid 5825] getdents64(3, [pid 6830] <... close resumed>) = 0 [pid 5825] <... getdents64 resumed>0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 6830] symlink("/dev/binderfs", "./binderfs" [pid 5825] close(3 [pid 6830] <... symlink resumed>) = 0 [pid 5825] <... close resumed>) = 0 [pid 6830] write(1, "executing program\n", 18 [pid 5825] rmdir("./21" [pid 6830] <... write resumed>) = 18 [pid 5825] <... rmdir resumed>) = 0 [pid 5825] mkdir("./22", 0777 [pid 6830] memfd_create("syzkaller", 0 executing program [pid 5825] <... mkdir resumed>) = 0 [pid 5825] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6830] <... memfd_create resumed>) = 3 [pid 5825] <... openat resumed>) = 3 [pid 5825] ioctl(3, LOOP_CLR_FDexecuting program [pid 6830] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6829] write(3, "1000", 4 [pid 5825] <... ioctl resumed>) = 0 [pid 6829] <... write resumed>) = 4 [pid 5825] close(3 [pid 6829] close(3 [pid 6830] <... mmap resumed>) = 0x7fbaaaa00000 [pid 6829] <... close resumed>) = 0 [pid 6829] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6829] write(1, "executing program\n", 18) = 18 [pid 6829] memfd_create("syzkaller", 0) = 3 [pid 6829] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaaaa00000 [pid 6830] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 5825] <... close resumed>) = 0 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6831 attached [pid 6831] set_robust_list(0x55558159a660, 24 [pid 5825] <... clone resumed>, child_tidptr=0x55558159a650) = 24 [pid 6831] <... set_robust_list resumed>) = 0 [pid 6831] chdir("./22") = 0 [pid 6831] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6831] setpgid(0, 0) = 0 [pid 6831] symlink("/syzcgroup/unified/syz3", "./cgroup") = 0 [pid 6831] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu") = 0 [pid 6831] symlink("/syzcgroup/net/syz3", "./cgroup.net") = 0 [pid 6831] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6831] write(3, "1000", 4) = 4 [pid 6831] close(3) = 0 [pid 6831] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6831] write(1, "executing program\n", 18) = 18 [pid 6831] memfd_create("syzkaller", 0) = 3 [pid 6831] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaaaa00000 [pid 6829] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 6828] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 6830] <... write resumed>) = 33554432 [pid 6827] <... write resumed>) = 33554432 [pid 6827] munmap(0x7fbaaaa00000, 138412032 [pid 6830] munmap(0x7fbaaaa00000, 138412032 [pid 6827] <... munmap resumed>) = 0 [pid 6827] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6827] ioctl(4, LOOP_SET_FD, 3 [pid 6830] <... munmap resumed>) = 0 [pid 6827] <... ioctl resumed>) = 0 [pid 6827] close(3) = 0 [pid 6827] close(4 [pid 6830] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6827] <... close resumed>) = 0 [pid 6827] mkdir("./file0", 0777) = 0 [pid 6830] <... openat resumed>) = 4 [ 126.618213][ T6827] loop1: detected capacity change from 0 to 65536 [pid 6827] mount("/dev/loop1", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 6830] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6830] close(3) = 0 [ 126.716916][ T6830] loop2: detected capacity change from 0 to 65536 [pid 6830] close(4 [pid 6829] <... write resumed>) = 33554432 [pid 6831] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 6830] <... close resumed>) = 0 [pid 6829] munmap(0x7fbaaaa00000, 138412032 [pid 6830] mkdir("./file0", 0777) = 0 [pid 6829] <... munmap resumed>) = 0 [pid 6830] mount("/dev/loop2", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 6829] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6829] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6829] close(3) = 0 [pid 6829] close(4) = 0 [pid 6829] mkdir("./file0", 0777) = 0 [ 126.959337][ T6829] loop0: detected capacity change from 0 to 65536 [pid 6829] mount("/dev/loop0", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 6828] <... write resumed>) = 33554432 [pid 6828] munmap(0x7fbaaaa00000, 138412032) = 0 [pid 6828] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6828] ioctl(4, LOOP_SET_FD, 3 [pid 6831] <... write resumed>) = 33554432 [pid 6828] <... ioctl resumed>) = 0 [pid 6831] munmap(0x7fbaaaa00000, 138412032 [pid 6828] close(3) = 0 [pid 6828] close(4 [pid 6831] <... munmap resumed>) = 0 [pid 6831] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6831] ioctl(4, LOOP_SET_FD, 3 [pid 6828] <... close resumed>) = 0 [pid 6831] <... ioctl resumed>) = 0 [pid 6828] mkdir("./file0", 0777) = 0 [pid 6828] mount("/dev/loop4", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 6831] close(3) = 0 [pid 6831] close(4) = 0 [pid 6831] mkdir("./file0", 0777) = 0 [ 127.096493][ T6828] loop4: detected capacity change from 0 to 65536 [ 127.121189][ T6831] loop3: detected capacity change from 0 to 65536 [ 127.159775][ T6827] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 6831] mount("/dev/loop3", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 6827] <... mount resumed>) = 0 [pid 6827] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6827] chdir("./file0") = 0 [pid 6827] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6827] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 4 [ 127.210981][ T6829] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 127.220355][ T6830] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 127.223890][ T6827] XFS (loop1): Ending clean mount [ 127.244597][ T29] audit: type=1800 audit(1733456424.736:111): pid=6827 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop1" ino=41 res=0 errno=0 [ 127.256851][ T6827] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 127.275595][ T6827] XFS (loop1): Unmount and run xfs_repair [ 127.281464][ T6827] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 127.289266][ T6827] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 127.298399][ T6827] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 127.301472][ T6831] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 127.307732][ T6827] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 127.325290][ T6827] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 127.334329][ T6827] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 127.343321][ T6827] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 127.355233][ T6828] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 127.355951][ T6827] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 127.372840][ T6827] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 127.373357][ T6830] XFS (loop2): Ending clean mount [ 127.382065][ T6827] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [pid 6827] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6830] <... mount resumed>) = 0 [pid 6830] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6830] chdir("./file0") = 0 [pid 6830] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6830] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 6831] <... mount resumed>) = 0 [pid 6829] <... mount resumed>) = 0 [pid 6827] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 6831] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6829] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6831] <... openat resumed>) = 3 [pid 6829] <... openat resumed>) = 3 [pid 6831] chdir("./file0" [pid 6829] chdir("./file0" [pid 6831] <... chdir resumed>) = 0 [pid 6829] <... chdir resumed>) = 0 [pid 6831] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6829] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6831] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6829] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 127.384005][ T6827] XFS (loop1): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 127.417099][ T6827] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 127.422819][ T6831] XFS (loop3): Ending clean mount [ 127.434900][ T6829] XFS (loop0): Ending clean mount [ 127.435765][ T6828] XFS (loop4): Ending clean mount [pid 6831] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 6830] <... open resumed>) = 4 [pid 6829] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 6828] <... mount resumed>) = 0 [pid 6827] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000 [pid 6828] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6830] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6828] <... openat resumed>) = 3 [pid 6827] <... openat resumed>) = -1 EFAULT (Bad address) [pid 6828] chdir("./file0" [pid 6827] close(3 [pid 6828] <... chdir resumed>) = 0 [pid 6827] <... close resumed>) = 0 [pid 6828] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6827] close(4 [pid 6828] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6827] <... close resumed>) = 0 [pid 6828] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 6827] close(5) = -1 EBADF (Bad file descriptor) [pid 6827] close(6) = -1 EBADF (Bad file descriptor) [pid 6827] close(7) = -1 EBADF (Bad file descriptor) [pid 6827] close(8) = -1 EBADF (Bad file descriptor) [pid 6827] close(9 [pid 6831] <... open resumed>) = 4 [pid 6827] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6831] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6828] <... open resumed>) = 4 [pid 6827] close(10 [pid 6828] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6827] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6827] close(11) = -1 EBADF (Bad file descriptor) [pid 6827] close(12) = -1 EBADF (Bad file descriptor) [ 127.446187][ T29] audit: type=1800 audit(1733456424.936:112): pid=6830 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop2" ino=41 res=0 errno=0 [ 127.473309][ T29] audit: type=1800 audit(1733456424.966:113): pid=6831 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop3" ino=41 res=0 errno=0 [ 127.474755][ T5879] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [pid 6827] close(13 [pid 6829] <... open resumed>) = 4 [pid 6827] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6829] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6827] close(14) = -1 EBADF (Bad file descriptor) [pid 6827] close(15) = -1 EBADF (Bad file descriptor) [pid 6827] close(16) = -1 EBADF (Bad file descriptor) [ 127.503233][ T57] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 127.504551][ T5879] XFS (loop3): Unmount and run xfs_repair [ 127.521430][ T5879] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 127.529064][ T5879] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 127.534305][ T5966] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 127.538051][ T5879] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [pid 6827] close(17) = -1 EBADF (Bad file descriptor) [pid 6827] close(18) = -1 EBADF (Bad file descriptor) [ 127.538070][ T5879] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 127.559833][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 127.559849][ T29] audit: type=1800 audit(1733456425.026:115): pid=6829 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop0" ino=41 res=0 errno=0 [ 127.566872][ T5879] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 127.575836][ T57] XFS (loop4): Unmount and run xfs_repair [pid 6827] close(19) = -1 EBADF (Bad file descriptor) [pid 6827] close(20) = -1 EBADF (Bad file descriptor) [pid 6827] close(21) = -1 EBADF (Bad file descriptor) [pid 6827] close(22) = -1 EBADF (Bad file descriptor) [pid 6827] close(23) = -1 EBADF (Bad file descriptor) [pid 6827] close(24) = -1 EBADF (Bad file descriptor) [pid 6827] close(25) = -1 EBADF (Bad file descriptor) [pid 6827] close(26) = -1 EBADF (Bad file descriptor) [pid 6827] close(27) = -1 EBADF (Bad file descriptor) [pid 6827] close(28) = -1 EBADF (Bad file descriptor) [pid 6827] close(29) = -1 EBADF (Bad file descriptor) [pid 6827] exit_group(0) = ? [pid 6827] +++ exited with 0 +++ [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=24, si_uid=0, si_status=0, si_utime=11 /* 0.11 s */, si_stime=55 /* 0.55 s */} --- [pid 5824] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5824] umount2("./22", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5824] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5824] umount2("./22/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./22/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./22/cgroup") = 0 [pid 5824] umount2("./22/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./22/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./22/cgroup.cpu") = 0 [pid 5824] umount2("./22/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./22/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./22/cgroup.net") = 0 [pid 5824] umount2("./22/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./22/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./22/binderfs") = 0 [ 127.592850][ T5879] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 127.602823][ T5966] XFS (loop0): Unmount and run xfs_repair [ 127.607472][ T5879] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 127.607492][ T5879] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 127.607507][ T5879] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 127.607691][ T6831] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 127.624144][ T5966] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 127.640468][ T8] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 127.663843][ T57] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 127.668724][ T8] XFS (loop2): Unmount and run xfs_repair [ 127.680361][ T5966] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 127.686410][ T8] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 127.693376][ T57] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 127.701032][ T8] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 127.709205][ T5966] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 127.717289][ T8] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 127.726989][ T57] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 127.735013][ T8] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 127.745291][ T5966] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 127.752722][ T8] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 127.770559][ T57] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 127.779301][ T8] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 127.779319][ T8] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 127.779333][ T8] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 127.779346][ T8] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 127.797621][ T6830] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 127.806467][ T5824] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 127.817904][ T6830] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [pid 5824] umount2("./22/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6831] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 6830] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 6831] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000 [pid 6830] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000 [pid 6831] <... openat resumed>) = -1 EFAULT (Bad address) [pid 6830] <... openat resumed>) = -1 EFAULT (Bad address) [pid 6831] close(3 [pid 6830] close(3 [pid 6831] <... close resumed>) = 0 [pid 6830] <... close resumed>) = 0 [pid 6831] close(4) = 0 [pid 6830] close(4 [pid 6831] close(5 [pid 6830] <... close resumed>) = 0 [pid 6831] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6830] close(5 [pid 6831] close(6) = -1 EBADF (Bad file descriptor) [pid 6830] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6831] close(7) = -1 EBADF (Bad file descriptor) [pid 6830] close(6 [pid 6831] close(8 [pid 6830] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6831] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6831] close(9 [pid 6830] close(7 [pid 6831] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6830] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6831] close(10) = -1 EBADF (Bad file descriptor) [pid 6830] close(8 [pid 6831] close(11 [pid 6830] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6831] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6831] close(12 [pid 6830] close(9 [pid 6831] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6830] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6831] close(13 [pid 6830] close(10 [pid 6831] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6831] close(14 [pid 6830] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6831] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6830] close(11 [pid 6831] close(15) = -1 EBADF (Bad file descriptor) [pid 6830] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6831] close(16 [pid 6830] close(12 [pid 6831] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6830] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6831] close(17) = -1 EBADF (Bad file descriptor) [pid 6830] close(13 [pid 6831] close(18 [pid 6830] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6831] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6831] close(19 [pid 6830] close(14 [pid 6831] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6830] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6831] close(20 [pid 6830] close(15 [pid 6831] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6830] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6831] close(21) = -1 EBADF (Bad file descriptor) [pid 6830] close(16 [pid 6831] close(22 [pid 6830] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6831] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6831] close(23 [pid 6830] close(17 [pid 6831] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6830] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6831] close(24) = -1 EBADF (Bad file descriptor) [pid 6830] close(18 [pid 6831] close(25 [pid 6830] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6831] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6831] close(26 [pid 6830] close(19 [pid 6831] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6830] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6831] close(27) = -1 EBADF (Bad file descriptor) [pid 6830] close(20 [pid 6831] close(28 [pid 6830] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6831] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6831] close(29 [pid 6830] close(21 [pid 6831] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6830] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6831] exit_group(0 [pid 6830] close(22) = -1 EBADF (Bad file descriptor) [pid 6831] <... exit_group resumed>) = ? [pid 6830] close(23) = -1 EBADF (Bad file descriptor) [pid 6831] +++ exited with 0 +++ [pid 6830] close(24) = -1 EBADF (Bad file descriptor) [pid 6830] close(25) = -1 EBADF (Bad file descriptor) [pid 6830] close(26) = -1 EBADF (Bad file descriptor) [pid 6830] close(27) = -1 EBADF (Bad file descriptor) [pid 6830] close(28) = -1 EBADF (Bad file descriptor) [ 127.824215][ T6831] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 127.835299][ T6830] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 127.845871][ T5966] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 127.858903][ T6831] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 127.873412][ T57] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [pid 6830] close(29) = -1 EBADF (Bad file descriptor) [pid 6830] exit_group(0) = ? [pid 6830] +++ exited with 0 +++ [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=24, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=47 /* 0.47 s */} --- [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=24, si_uid=0, si_status=0, si_utime=11 /* 0.11 s */, si_stime=53 /* 0.53 s */} --- [pid 5825] umount2("./22", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5825] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5825] umount2("./22/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./22/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./22/cgroup") = 0 [pid 5825] umount2("./22/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./22/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./22/cgroup.cpu") = 0 [pid 5825] umount2("./22/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] umount2("./22", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./22/cgroup.net", [pid 5823] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] <... openat resumed>) = 3 [pid 5825] unlink("./22/cgroup.net" [pid 5823] newfstatat(3, "", [pid 5825] <... unlink resumed>) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5825] umount2("./22/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] getdents64(3, [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... getdents64 resumed>0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5825] newfstatat(AT_FDCWD, "./22/binderfs", [pid 5823] umount2("./22/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] unlink("./22/binderfs" [pid 5823] newfstatat(AT_FDCWD, "./22/cgroup", [pid 5825] <... unlink resumed>) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] umount2("./22/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] unlink("./22/cgroup") = 0 [pid 5823] umount2("./22/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./22/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./22/cgroup.cpu") = 0 [pid 5823] umount2("./22/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./22/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./22/cgroup.net") = 0 [pid 5823] umount2("./22/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 127.908897][ T5966] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 127.918424][ T5966] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 127.927610][ T5966] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 127.937260][ T57] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 127.946895][ T5966] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [pid 5823] newfstatat(AT_FDCWD, "./22/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./22/binderfs") = 0 [pid 5823] umount2("./22/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... umount2 resumed>) = 0 [pid 5825] umount2("./22/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./22/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] umount2("./22/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./22/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5825] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(4, 0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5825] getdents64(4, 0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5825] close(4) = 0 [pid 5825] rmdir("./22/file0") = 0 [pid 5825] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5825] close(3) = 0 [pid 5825] rmdir("./22") = 0 [pid 5825] mkdir("./23", 0777) = 0 [ 127.956400][ T57] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 127.957528][ T5825] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 127.965462][ T57] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 127.983164][ T57] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 127.994032][ T6829] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [pid 5825] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 6829] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 5825] ioctl(3, LOOP_CLR_FD [pid 5824] <... umount2 resumed>) = 0 [pid 6829] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000 [pid 5825] <... ioctl resumed>) = 0 [pid 5824] umount2("./22/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6829] <... openat resumed>) = -1 EFAULT (Bad address) [ 128.005376][ T6828] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 128.011517][ T5823] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 128.025083][ T6829] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 128.025132][ T6829] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 128.026369][ T6828] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [pid 6829] close(3) = 0 [pid 6829] close(4) = 0 [pid 6829] close(5) = -1 EBADF (Bad file descriptor) [pid 6829] close(6) = -1 EBADF (Bad file descriptor) [pid 6829] close(7) = -1 EBADF (Bad file descriptor) [pid 6829] close(8 [pid 5825] close(3 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6829] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] newfstatat(AT_FDCWD, "./22/file0", [pid 6829] close(9) = -1 EBADF (Bad file descriptor) [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] <... umount2 resumed>) = 0 [pid 6829] close(10 [pid 5823] umount2("./22/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6829] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6829] close(11 [pid 5824] umount2("./22/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] newfstatat(AT_FDCWD, "./22/file0", [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./22/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6829] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] <... openat resumed>) = 4 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6829] close(12 [pid 5824] newfstatat(4, "", [pid 5823] umount2("./22/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6829] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6829] close(13 [pid 5823] openat(AT_FDCWD, "./22/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6829] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5823] <... openat resumed>) = 4 [pid 6829] close(14 [pid 5823] newfstatat(4, "", [pid 6829] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 6829] close(15 [pid 5823] getdents64(4, [pid 6829] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5823] <... getdents64 resumed>0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 6829] close(16 [pid 5823] getdents64(4, [pid 6829] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5823] <... getdents64 resumed>0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 6829] close(17 [pid 5823] close(4 [pid 6829] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5823] <... close resumed>) = 0 [pid 6829] close(18 [pid 5823] rmdir("./22/file0" [pid 6829] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5823] <... rmdir resumed>) = 0 [pid 6829] close(19 [pid 5823] getdents64(3, [pid 6829] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5823] <... getdents64 resumed>0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 6829] close(20 [pid 5823] close(3 [pid 6829] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5823] <... close resumed>) = 0 [pid 6829] close(21 [pid 5823] rmdir("./22" [pid 6829] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] getdents64(4, [pid 5823] <... rmdir resumed>) = 0 [pid 6829] close(22 [pid 5824] <... getdents64 resumed>0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5823] mkdir("./23", 0777 [pid 5824] getdents64(4, [pid 6829] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5823] <... mkdir resumed>) = 0 [pid 6829] close(23 [pid 5823] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6829] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5823] <... openat resumed>) = 3 [pid 6829] close(24 [pid 5823] ioctl(3, LOOP_CLR_FD [pid 6829] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5823] <... ioctl resumed>) = 0 [pid 6829] close(25 [ 128.063538][ T6828] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [pid 5823] close(3 [pid 6829] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] <... getdents64 resumed>0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5824] close(4) = 0 [pid 5824] rmdir("./22/file0") = 0 [pid 5824] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5824] close(3) = 0 [pid 5824] rmdir("./22") = 0 [pid 5824] mkdir("./23", 0777) = 0 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5824] ioctl(3, LOOP_CLR_FD) = 0 [pid 5824] close(3 [pid 6828] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 6828] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000) = -1 EFAULT (Bad address) [pid 6828] close(3) = 0 [pid 6828] close(4) = 0 [pid 6828] close(5) = -1 EBADF (Bad file descriptor) [pid 6828] close(6) = -1 EBADF (Bad file descriptor) [pid 6828] close(7) = -1 EBADF (Bad file descriptor) [pid 6828] close(8) = -1 EBADF (Bad file descriptor) [pid 6828] close(9) = -1 EBADF (Bad file descriptor) [pid 6828] close(10) = -1 EBADF (Bad file descriptor) [pid 6828] close(11) = -1 EBADF (Bad file descriptor) [pid 6828] close(12) = -1 EBADF (Bad file descriptor) [pid 6828] close(13) = -1 EBADF (Bad file descriptor) [pid 6828] close(14) = -1 EBADF (Bad file descriptor) [pid 6828] close(15) = -1 EBADF (Bad file descriptor) [pid 6828] close(16) = -1 EBADF (Bad file descriptor) [pid 6828] close(17) = -1 EBADF (Bad file descriptor) [pid 6828] close(18) = -1 EBADF (Bad file descriptor) [pid 6828] close(19) = -1 EBADF (Bad file descriptor) [pid 6828] close(20) = -1 EBADF (Bad file descriptor) [pid 6828] close(21) = -1 EBADF (Bad file descriptor) [pid 6828] close(22) = -1 EBADF (Bad file descriptor) [pid 6828] close(23) = -1 EBADF (Bad file descriptor) [pid 6828] close(24) = -1 EBADF (Bad file descriptor) [pid 6828] close(25) = -1 EBADF (Bad file descriptor) [pid 6828] close(26) = -1 EBADF (Bad file descriptor) [pid 6828] close(27) = -1 EBADF (Bad file descriptor) [pid 6828] close(28) = -1 EBADF (Bad file descriptor) [pid 6828] close(29) = -1 EBADF (Bad file descriptor) [pid 6828] exit_group(0) = ? [pid 6828] +++ exited with 0 +++ [pid 6829] close(26) = -1 EBADF (Bad file descriptor) [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=22, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=58 /* 0.58 s */} --- [pid 6829] close(27) = -1 EBADF (Bad file descriptor) [pid 5823] <... close resumed>) = 0 [pid 6829] close(28 [pid 5826] umount2("./20", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... close resumed>) = 0 [pid 5824] <... close resumed>) = 0 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6874 attached ./strace-static-x86_64: Process 6872 attached [pid 6829] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5826] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6872] set_robust_list(0x55558159a660, 24 [pid 5825] <... clone resumed>, child_tidptr=0x55558159a650) = 25 [pid 6872] <... set_robust_list resumed>) = 0 [pid 6872] chdir("./23") = 0 [pid 6872] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6872] setpgid(0, 0) = 0 [pid 5824] <... clone resumed>, child_tidptr=0x55558159a650) = 25 [pid 6872] symlink("/syzcgroup/unified/syz3", "./cgroup") = 0 [pid 6872] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu") = 0 [pid 6872] symlink("/syzcgroup/net/syz3", "./cgroup.net") = 0 [pid 6829] close(29 [pid 5826] <... openat resumed>) = 3 executing program [pid 5826] newfstatat(3, "", [pid 6829] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 6872] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6829] exit_group(0 [pid 6872] <... openat resumed>) = 3 [pid 6829] <... exit_group resumed>) = ? [pid 5826] getdents64(3, [pid 6872] write(3, "1000", 4) = 4 [pid 5826] <... getdents64 resumed>0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 6872] close(3) = 0 [pid 6872] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6872] write(1, "executing program\n", 18) = 18 [pid 6872] memfd_create("syzkaller", 0) = 3 [pid 6829] +++ exited with 0 +++ [pid 6872] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5826] umount2("./20/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6872] <... mmap resumed>) = 0x7fbaaaa00000 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5821] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=25, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=45 /* 0.45 s */} --- [pid 5826] newfstatat(AT_FDCWD, "./20/cgroup", ./strace-static-x86_64: Process 6873 attached [pid 6874] set_robust_list(0x55558159a660, 24 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] <... clone resumed>, child_tidptr=0x55558159a650) = 25 [pid 5821] restart_syscall(<... resuming interrupted clone ...> [pid 6874] <... set_robust_list resumed>) = 0 [pid 5826] unlink("./20/cgroup" [pid 6874] chdir("./23" [pid 5826] <... unlink resumed>) = 0 [pid 6874] <... chdir resumed>) = 0 [pid 5826] umount2("./20/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6874] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6874] <... prctl resumed>) = 0 [pid 5826] newfstatat(AT_FDCWD, "./20/cgroup.cpu", [pid 6874] setpgid(0, 0 [pid 6873] set_robust_list(0x55558159a660, 24 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6874] <... setpgid resumed>) = 0 [pid 6873] <... set_robust_list resumed>) = 0 [pid 5826] unlink("./20/cgroup.cpu" [pid 6874] symlink("/syzcgroup/unified/syz2", "./cgroup" [pid 6873] chdir("./23" [pid 5826] <... unlink resumed>) = 0 [pid 6874] <... symlink resumed>) = 0 [pid 6873] <... chdir resumed>) = 0 [pid 5826] umount2("./20/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6874] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu" [pid 6873] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6874] <... symlink resumed>) = 0 [pid 6873] <... prctl resumed>) = 0 [pid 5826] newfstatat(AT_FDCWD, "./20/cgroup.net", [pid 6874] symlink("/syzcgroup/net/syz2", "./cgroup.net" [pid 6873] setpgid(0, 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6874] <... symlink resumed>) = 0 [pid 5826] unlink("./20/cgroup.net" [pid 6874] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6873] <... setpgid resumed>) = 0 [pid 5826] <... unlink resumed>) = 0 [pid 6874] <... openat resumed>) = 3 [pid 6873] symlink("/syzcgroup/unified/syz1", "./cgroup" [pid 5826] umount2("./20/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6874] write(3, "1000", 4 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6874] <... write resumed>) = 4 [pid 6873] <... symlink resumed>) = 0 [pid 5826] newfstatat(AT_FDCWD, "./20/binderfs", [pid 6874] close(3 [pid 6873] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu" [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6874] <... close resumed>) = 0 [pid 6873] <... symlink resumed>) = 0 [pid 5826] unlink("./20/binderfs" [pid 6874] symlink("/dev/binderfs", "./binderfs" [pid 5826] <... unlink resumed>) = 0 [pid 6874] <... symlink resumed>) = 0 [pid 6873] symlink("/syzcgroup/net/syz1", "./cgroup.net" [pid 5826] umount2("./20/file0", MNT_FORCE|UMOUNT_NOFOLLOW executing program [pid 6874] write(1, "executing program\n", 18 [pid 6873] <... symlink resumed>) = 0 [pid 6874] <... write resumed>) = 18 [pid 6874] memfd_create("syzkaller", 0 [pid 6873] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6874] <... memfd_create resumed>) = 3 [pid 6873] <... openat resumed>) = 3 [pid 6874] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6873] write(3, "1000", 4 [pid 6874] <... mmap resumed>) = 0x7fbaaaa00000 [pid 6873] <... write resumed>) = 4 executing program [pid 6873] close(3) = 0 [pid 6873] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6873] write(1, "executing program\n", 18) = 18 [pid 6873] memfd_create("syzkaller", 0) = 3 [pid 6873] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaaaa00000 [ 128.459554][ T5826] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 5821] <... restart_syscall resumed>) = 0 [pid 5821] umount2("./23", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5821] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5821] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5821] umount2("./23/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./23/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] unlink("./23/cgroup") = 0 [pid 5821] umount2("./23/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./23/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] unlink("./23/cgroup.cpu") = 0 [pid 5821] umount2("./23/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./23/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] unlink("./23/cgroup.net") = 0 [pid 5821] umount2("./23/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./23/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] unlink("./23/binderfs") = 0 [pid 5821] umount2("./23/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6872] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 5826] <... umount2 resumed>) = 0 [pid 5826] umount2("./20/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./20/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] umount2("./20/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] openat(AT_FDCWD, "./20/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5826] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5826] getdents64(4, 0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5826] getdents64(4, 0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5826] close(4) = 0 [pid 5826] rmdir("./20/file0") = 0 [pid 5826] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5826] close(3) = 0 [pid 5826] rmdir("./20") = 0 [pid 5826] mkdir("./21", 0777) = 0 [pid 5826] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5826] ioctl(3, LOOP_CLR_FD) = 0 [ 128.597250][ T5821] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 5826] close(3 [pid 6872] <... write resumed>) = 33554432 [pid 5821] <... umount2 resumed>) = 0 [pid 6872] munmap(0x7fbaaaa00000, 138412032 [pid 5821] umount2("./23/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6872] <... munmap resumed>) = 0 [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6872] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5821] newfstatat(AT_FDCWD, "./23/file0", [pid 6872] <... openat resumed>) = 4 [pid 5821] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6872] ioctl(4, LOOP_SET_FD, 3 [pid 5821] umount2("./23/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6872] <... ioctl resumed>) = 0 [pid 6874] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 6872] close(3 [pid 5821] openat(AT_FDCWD, "./23/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6873] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 5821] <... openat resumed>) = 4 [ 129.031099][ T6872] loop3: detected capacity change from 0 to 65536 executing program [pid 6872] <... close resumed>) = 0 [pid 5826] <... close resumed>) = 0 [pid 5821] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5821] getdents64(4, 0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5821] getdents64(4, 0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5821] close(4) = 0 [pid 5821] rmdir("./23/file0") = 0 [pid 5821] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5821] close(3) = 0 [pid 5821] rmdir("./23") = 0 [pid 5821] mkdir("./24", 0777) = 0 [pid 5821] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5821] ioctl(3, LOOP_CLR_FD) = 0 [pid 5821] close(3 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6875 attached [pid 6875] set_robust_list(0x55558159a660, 24 [pid 5826] <... clone resumed>, child_tidptr=0x55558159a650) = 23 [pid 6875] <... set_robust_list resumed>) = 0 [pid 6875] chdir("./21") = 0 [pid 6875] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6875] setpgid(0, 0) = 0 [pid 6875] symlink("/syzcgroup/unified/syz4", "./cgroup") = 0 [pid 6875] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu") = 0 [pid 6875] symlink("/syzcgroup/net/syz4", "./cgroup.net") = 0 [pid 6875] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6875] write(3, "1000", 4) = 4 [pid 6875] close(3) = 0 [pid 6875] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6875] write(1, "executing program\n", 18) = 18 [pid 6875] memfd_create("syzkaller", 0) = 3 [pid 6875] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6872] close(4 [pid 6875] <... mmap resumed>) = 0x7fbaaaa00000 [pid 6872] <... close resumed>) = 0 [pid 6872] mkdir("./file0", 0777) = 0 [pid 6872] mount("/dev/loop3", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 6873] <... write resumed>) = 33554432 [pid 6873] munmap(0x7fbaaaa00000, 138412032) = 0 [pid 6873] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6873] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6873] close(3) = 0 [pid 6873] close(4) = 0 [pid 6873] mkdir("./file0", 0777) = 0 [ 129.398533][ T6872] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 129.418503][ T6873] loop1: detected capacity change from 0 to 65536 [pid 6873] mount("/dev/loop1", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 6872] <... mount resumed>) = 0 [pid 6872] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6872] chdir("./file0") = 0 [pid 6872] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6872] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 4 [ 129.471203][ T6872] XFS (loop3): Ending clean mount [ 129.485111][ T29] audit: type=1800 audit(1733456426.976:116): pid=6872 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop3" ino=41 res=0 errno=0 [ 129.507423][ T8] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 129.522095][ T6873] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 129.546716][ T8] XFS (loop3): Unmount and run xfs_repair [pid 6872] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6874] <... write resumed>) = 33554432 [ 129.565629][ T8] XFS (loop3): First 128 bytes of corrupted metadata buffer: [pid 6874] munmap(0x7fbaaaa00000, 138412032 [pid 6873] <... mount resumed>) = 0 [pid 6873] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6873] chdir("./file0") = 0 [pid 6873] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [ 129.597680][ T8] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 129.628273][ T6873] XFS (loop1): Ending clean mount [pid 6873] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 6873] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6874] <... munmap resumed>) = 0 [pid 6874] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [ 129.641780][ T29] audit: type=1800 audit(1733456427.136:117): pid=6873 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop1" ino=41 res=0 errno=0 [ 129.643317][ T5879] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 129.685595][ T8] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [pid 6874] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6874] close(3) = 0 [pid 6874] close(4) = 0 [pid 6874] mkdir("./file0", 0777) = 0 [ 129.704410][ T6874] loop2: detected capacity change from 0 to 65536 [ 129.714143][ T8] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [pid 6874] mount("/dev/loop2", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [ 129.746375][ T8] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 129.756337][ T5879] XFS (loop1): Unmount and run xfs_repair [ 129.762526][ T8] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 129.771631][ T5879] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 129.779119][ T5879] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 129.788059][ T8] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 129.797035][ T5879] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 129.805903][ T5879] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 129.814828][ T8] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 129.823774][ T8] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 129.832781][ T5879] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 129.841873][ T5879] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 129.850819][ T5879] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 129.859742][ T5879] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 129.868645][ T5879] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 129.878232][ T6872] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 129.889872][ T6873] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 129.906054][ T6873] XFS (loop1): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 129.921261][ T6872] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 129.939032][ T6873] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 129.966879][ T6872] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 129.978066][ T6874] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 6875] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 6872] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 6873] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 6872] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000) = -1 EFAULT (Bad address) [pid 6872] close(3) = 0 [pid 6872] close(4) = 0 [pid 6872] close(5) = -1 EBADF (Bad file descriptor) [pid 6872] close(6) = -1 EBADF (Bad file descriptor) [pid 6872] close(7) = -1 EBADF (Bad file descriptor) [pid 6872] close(8) = -1 EBADF (Bad file descriptor) [pid 6872] close(9) = -1 EBADF (Bad file descriptor) [pid 6872] close(10) = -1 EBADF (Bad file descriptor) [pid 6872] close(11) = -1 EBADF (Bad file descriptor) [pid 6872] close(12) = -1 EBADF (Bad file descriptor) [pid 6872] close(13) = -1 EBADF (Bad file descriptor) [pid 6872] close(14) = -1 EBADF (Bad file descriptor) [pid 6872] close(15) = -1 EBADF (Bad file descriptor) [pid 6872] close(16) = -1 EBADF (Bad file descriptor) [pid 6872] close(17) = -1 EBADF (Bad file descriptor) [pid 6872] close(18) = -1 EBADF (Bad file descriptor) [pid 6872] close(19 [pid 6873] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000 [pid 6872] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6873] <... openat resumed>) = -1 EFAULT (Bad address) [pid 6872] close(20) = -1 EBADF (Bad file descriptor) [pid 6872] close(21 [pid 6873] close(3 [pid 6872] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6873] <... close resumed>) = 0 [pid 6872] close(22) = -1 EBADF (Bad file descriptor) [pid 6873] close(4 [pid 6872] close(23 [pid 6873] <... close resumed>) = 0 [pid 6873] close(5 [pid 6872] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6873] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6872] close(24 [pid 6873] close(6 [pid 6872] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6872] close(25) = -1 EBADF (Bad file descriptor) [pid 6872] close(26) = -1 EBADF (Bad file descriptor) [pid 6872] close(27) = -1 EBADF (Bad file descriptor) [pid 6872] close(28) = -1 EBADF (Bad file descriptor) [pid 6872] close(29) = -1 EBADF (Bad file descriptor) [pid 6872] exit_group(0) = ? [pid 6873] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6872] +++ exited with 0 +++ [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=25, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=45 /* 0.45 s */} --- [pid 5825] umount2("./23", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6873] close(7 [pid 5825] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6873] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5825] <... openat resumed>) = 3 [pid 6873] close(8 [pid 5825] newfstatat(3, "", [pid 6873] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 6873] close(9 [pid 5825] getdents64(3, [pid 6873] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5825] <... getdents64 resumed>0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 6873] close(10 [pid 5825] umount2("./23/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6873] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6873] close(11 [pid 5825] newfstatat(AT_FDCWD, "./23/cgroup", [pid 6873] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6873] close(12 [pid 5825] unlink("./23/cgroup" [pid 6873] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5825] <... unlink resumed>) = 0 [pid 6873] close(13 [pid 5825] umount2("./23/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6873] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6873] close(14 [pid 5825] newfstatat(AT_FDCWD, "./23/cgroup.cpu", [pid 6873] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6873] close(15 [pid 5825] unlink("./23/cgroup.cpu" [pid 6873] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5825] <... unlink resumed>) = 0 [pid 6873] close(16 [pid 5825] umount2("./23/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6873] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6873] close(17 [pid 5825] newfstatat(AT_FDCWD, "./23/cgroup.net", [pid 6873] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6873] close(18 [pid 5825] unlink("./23/cgroup.net" [pid 6873] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5825] <... unlink resumed>) = 0 [pid 6873] close(19 [pid 5825] umount2("./23/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6873] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6873] close(20 [pid 5825] newfstatat(AT_FDCWD, "./23/binderfs", [pid 6873] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6873] close(21) = -1 EBADF (Bad file descriptor) [pid 5825] unlink("./23/binderfs" [pid 6873] close(22) = -1 EBADF (Bad file descriptor) [pid 5825] <... unlink resumed>) = 0 [pid 6873] close(23 [pid 5825] umount2("./23/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6875] <... write resumed>) = 33554432 [pid 6873] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6875] munmap(0x7fbaaaa00000, 138412032 [pid 6873] close(24) = -1 EBADF (Bad file descriptor) [pid 6873] close(25) = -1 EBADF (Bad file descriptor) [pid 6873] close(26) = -1 EBADF (Bad file descriptor) [pid 6873] close(27 [pid 6875] <... munmap resumed>) = 0 [pid 6873] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6875] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6873] close(28 [pid 6875] ioctl(4, LOOP_SET_FD, 3 [pid 6873] <... close resumed>) = -1 EBADF (Bad file descriptor) [ 130.040409][ T5825] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 130.075616][ T6875] loop4: detected capacity change from 0 to 65536 [pid 6875] <... ioctl resumed>) = 0 [pid 6875] close(3) = 0 [pid 6874] <... mount resumed>) = 0 [pid 6873] close(29 [pid 5821] <... close resumed>) = 0 [pid 6874] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6873] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6874] <... openat resumed>) = 3 [pid 6873] exit_group(0 [pid 5821] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6875] close(4 [pid 6874] chdir("./file0" [pid 6873] <... exit_group resumed>) = ? [pid 5825] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 6900 attached [pid 6874] <... chdir resumed>) = 0 [pid 6873] +++ exited with 0 +++ [pid 6900] set_robust_list(0x55558159a660, 24 [pid 6874] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=25, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=46 /* 0.46 s */} --- [pid 6900] <... set_robust_list resumed>) = 0 [pid 6874] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5824] restart_syscall(<... resuming interrupted clone ...> [pid 5821] <... clone resumed>, child_tidptr=0x55558159a650) = 26 [pid 6900] chdir("./24" [pid 6875] <... close resumed>) = 0 [pid 6874] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 6900] <... chdir resumed>) = 0 [pid 6900] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6900] setpgid(0, 0) = 0 [ 130.091803][ T6874] XFS (loop2): Ending clean mount [pid 6900] symlink("/syzcgroup/unified/syz0", "./cgroup" [pid 6875] mkdir("./file0", 0777 [pid 6874] <... open resumed>) = 4 [pid 5825] umount2("./23/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... restart_syscall resumed>) = 0 [pid 6874] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6900] <... symlink resumed>) = 0 [pid 6875] <... mkdir resumed>) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6875] mount("/dev/loop4", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 5825] newfstatat(AT_FDCWD, "./23/file0", [pid 5824] umount2("./23", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6900] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu" [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6900] <... symlink resumed>) = 0 [pid 5824] <... openat resumed>) = 3 [pid 5824] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5824] umount2("./23/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./23/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./23/cgroup") = 0 [pid 5824] umount2("./23/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./23/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] umount2("./23/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] unlink("./23/cgroup.cpu" [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... unlink resumed>) = 0 [pid 5825] openat(AT_FDCWD, "./23/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] umount2("./23/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... openat resumed>) = 4 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(4, "", [pid 5824] newfstatat(AT_FDCWD, "./23/cgroup.net", [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] getdents64(4, [pid 5824] unlink("./23/cgroup.net" [pid 5825] <... getdents64 resumed>0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5824] <... unlink resumed>) = 0 [pid 5825] getdents64(4, [pid 5824] umount2("./23/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... getdents64 resumed>0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] close(4 [pid 5824] newfstatat(AT_FDCWD, "./23/binderfs", [pid 5825] <... close resumed>) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] rmdir("./23/file0" [pid 5824] unlink("./23/binderfs" [pid 5825] <... rmdir resumed>) = 0 [pid 5824] <... unlink resumed>) = 0 [pid 5825] getdents64(3, [pid 5824] umount2("./23/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... getdents64 resumed>0x55558159b6f0 /* 0 entries */, 32768) = 0 [ 130.114785][ T29] audit: type=1800 audit(1733456427.606:118): pid=6874 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop2" ino=41 res=0 errno=0 [ 130.143925][ T57] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 130.155894][ T5824] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 5825] close(3 [pid 6900] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6900] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6900] write(3, "1000", 4 [pid 5825] <... close resumed>) = 0 [pid 6900] <... write resumed>) = 4 [pid 5825] rmdir("./23" [pid 6900] close(3 [pid 5825] <... rmdir resumed>) = 0 [pid 6900] <... close resumed>) = 0 [pid 5825] mkdir("./24", 0777 [pid 6900] symlink("/dev/binderfs", "./binderfs" [pid 5825] <... mkdir resumed>) = 0 [pid 6900] <... symlink resumed>) = 0 [pid 5825] openat(AT_FDCWD, "/dev/loop3", O_RDWRexecuting program [pid 6900] write(1, "executing program\n", 18 [pid 5825] <... openat resumed>) = 3 [pid 6900] <... write resumed>) = 18 [pid 5825] ioctl(3, LOOP_CLR_FD [pid 6900] memfd_create("syzkaller", 0 [pid 5825] <... ioctl resumed>) = 0 [pid 6900] <... memfd_create resumed>) = 3 [pid 5825] close(3 [pid 6900] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaaaa00000 [ 130.156601][ T57] XFS (loop2): Unmount and run xfs_repair [pid 5824] <... umount2 resumed>) = 0 [pid 5824] umount2("./23/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./23/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] umount2("./23/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./23/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5824] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(4, 0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5824] getdents64(4, 0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5824] close(4) = 0 [pid 5824] rmdir("./23/file0") = 0 [pid 5824] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5824] close(3) = 0 [pid 5824] rmdir("./23") = 0 [pid 5824] mkdir("./24", 0777) = 0 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5824] ioctl(3, LOOP_CLR_FD) = 0 [ 130.212289][ T6875] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 130.296993][ T57] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 130.313944][ T57] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 130.323007][ T57] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 130.331919][ T57] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 130.341096][ T57] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 130.349992][ T57] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 130.358883][ T57] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 130.367786][ T57] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 130.376702][ T57] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [pid 5824] close(3 [pid 5825] <... close resumed>) = 0 [pid 5824] <... close resumed>) = 0 [ 130.473903][ T6874] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 130.501177][ T6874] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6875] <... mount resumed>) = 0 [pid 6875] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6875] chdir("./file0") = 0 [pid 6875] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6875] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 6875] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5825] <... clone resumed>, child_tidptr=0x55558159a650) = 26 [ 130.549719][ T6875] XFS (loop4): Ending clean mount [ 130.555351][ T6874] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 130.574435][ T5966] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 130.589596][ T5966] XFS (loop4): Unmount and run xfs_repair [pid 6900] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6874] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 6874] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000) = -1 EFAULT (Bad address) [pid 6874] close(3) = 0 [pid 6874] close(4) = 0 [pid 6874] close(5) = -1 EBADF (Bad file descriptor) [pid 6874] close(6) = -1 EBADF (Bad file descriptor) [pid 6874] close(7) = -1 EBADF (Bad file descriptor) [pid 6874] close(8) = -1 EBADF (Bad file descriptor) [pid 6874] close(9) = -1 EBADF (Bad file descriptor) [pid 6874] close(10) = -1 EBADF (Bad file descriptor) [pid 6874] close(11) = -1 EBADF (Bad file descriptor) [pid 6874] close(12) = -1 EBADF (Bad file descriptor) [pid 6874] close(13) = -1 EBADF (Bad file descriptor) [pid 6874] close(14) = -1 EBADF (Bad file descriptor) [pid 6874] close(15) = -1 EBADF (Bad file descriptor) [pid 6874] close(16) = -1 EBADF (Bad file descriptor) [pid 6874] close(17) = -1 EBADF (Bad file descriptor) [pid 6874] close(18) = -1 EBADF (Bad file descriptor) [pid 6874] close(19) = -1 EBADF (Bad file descriptor) [pid 6874] close(20) = -1 EBADF (Bad file descriptor) [pid 6874] close(21) = -1 EBADF (Bad file descriptor) [pid 6874] close(22) = -1 EBADF (Bad file descriptor) [pid 6874] close(23) = -1 EBADF (Bad file descriptor) [pid 6874] close(24) = -1 EBADF (Bad file descriptor) [pid 6874] close(25) = -1 EBADF (Bad file descriptor) [pid 6874] close(26) = -1 EBADF (Bad file descriptor) [pid 6874] close(27) = -1 EBADF (Bad file descriptor) [pid 6874] close(28) = -1 EBADF (Bad file descriptor) [pid 6874] close(29) = -1 EBADF (Bad file descriptor) [pid 6874] exit_group(0) = ? [pid 6874] +++ exited with 0 +++ [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=25, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=53 /* 0.53 s */} --- [pid 5823] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5824] <... clone resumed>, child_tidptr=0x55558159a650) = 26 [pid 5823] umount2("./23", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5823] newfstatat(3, "", ./strace-static-x86_64: Process 6910 attached {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 6910] set_robust_list(0x55558159a660, 24 [pid 5823] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 6910] <... set_robust_list resumed>) = 0 [pid 5823] umount2("./23/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6910] chdir("./24" [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./23/cgroup", [pid 6910] <... chdir resumed>) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6910] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5823] unlink("./23/cgroup" [pid 6910] <... prctl resumed>) = 0 [pid 5823] <... unlink resumed>) = 0 [pid 6910] setpgid(0, 0 [pid 5823] umount2("./23/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6910] <... setpgid resumed>) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6910] symlink("/syzcgroup/unified/syz1", "./cgroup" [pid 5823] newfstatat(AT_FDCWD, "./23/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./23/cgroup.cpu") = 0 [pid 5823] umount2("./23/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6910] <... symlink resumed>) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./23/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./23/cgroup.net" [pid 6910] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu" [pid 5823] <... unlink resumed>) = 0 [pid 5823] umount2("./23/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./23/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./23/binderfs") = 0 [ 130.595362][ T5966] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 130.599310][ T29] audit: type=1800 audit(1733456428.066:119): pid=6875 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop4" ino=41 res=0 errno=0 [ 130.624716][ T5966] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [pid 5823] umount2("./23/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6910] <... symlink resumed>) = 0 [pid 6910] symlink("/syzcgroup/net/syz1", "./cgroup.net") = 0 ./strace-static-x86_64: Process 6909 attached [pid 6910] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6909] set_robust_list(0x55558159a660, 24 [pid 6910] write(3, "1000", 4 [pid 6909] <... set_robust_list resumed>) = 0 [pid 6910] <... write resumed>) = 4 [pid 6909] chdir("./24" [pid 6910] close(3 [pid 6909] <... chdir resumed>) = 0 [pid 6910] <... close resumed>) = 0 [pid 6909] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6910] symlink("/dev/binderfs", "./binderfs" [pid 6909] <... prctl resumed>) = 0 [pid 6910] <... symlink resumed>) = 0 [pid 6909] setpgid(0, 0 [pid 6910] write(1, "executing program\n", 18executing program [pid 6909] <... setpgid resumed>) = 0 [pid 6910] <... write resumed>) = 18 [pid 6909] symlink("/syzcgroup/unified/syz3", "./cgroup") = 0 [pid 6909] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu" [pid 6910] memfd_create("syzkaller", 0 [pid 6909] <... symlink resumed>) = 0 [pid 6909] symlink("/syzcgroup/net/syz3", "./cgroup.net") = 0 [pid 6909] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6910] <... memfd_create resumed>) = 3 [pid 6909] write(3, "1000", 4 [pid 6910] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0executing program [pid 6909] <... write resumed>) = 4 [pid 6909] close(3) = 0 [pid 6910] <... mmap resumed>) = 0x7fbaaaa00000 [pid 6909] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6909] write(1, "executing program\n", 18) = 18 [ 130.645395][ T5823] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 130.655730][ T5966] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [pid 6909] memfd_create("syzkaller", 0) = 3 [pid 6909] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaaaa00000 [pid 5823] <... umount2 resumed>) = 0 [pid 5823] umount2("./23/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./23/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] umount2("./23/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./23/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5823] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(4, 0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5823] getdents64(4, 0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5823] close(4) = 0 [pid 5823] rmdir("./23/file0") = 0 [pid 5823] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5823] close(3) = 0 [pid 5823] rmdir("./23") = 0 [pid 5823] mkdir("./24", 0777) = 0 [pid 5823] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5823] ioctl(3, LOOP_CLR_FD) = 0 [ 130.690065][ T5966] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 130.725001][ T5966] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 130.796858][ T5966] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 130.805755][ T5966] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 130.836727][ T5966] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 130.857392][ T5966] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 130.867675][ T6875] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 130.892165][ T6875] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [pid 5823] close(3 [pid 6875] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 6875] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000) = -1 EFAULT (Bad address) [pid 6875] close(3) = 0 [pid 6875] close(4) = 0 [pid 6875] close(5) = -1 EBADF (Bad file descriptor) [pid 6875] close(6) = -1 EBADF (Bad file descriptor) [pid 6875] close(7) = -1 EBADF (Bad file descriptor) [pid 6875] close(8) = -1 EBADF (Bad file descriptor) [pid 6875] close(9) = -1 EBADF (Bad file descriptor) [pid 6875] close(10) = -1 EBADF (Bad file descriptor) [pid 6875] close(11) = -1 EBADF (Bad file descriptor) [pid 6875] close(12) = -1 EBADF (Bad file descriptor) [pid 6875] close(13) = -1 EBADF (Bad file descriptor) [pid 6875] close(14) = -1 EBADF (Bad file descriptor) [pid 6875] close(15) = -1 EBADF (Bad file descriptor) [pid 6875] close(16) = -1 EBADF (Bad file descriptor) [pid 6875] close(17) = -1 EBADF (Bad file descriptor) [pid 6875] close(18) = -1 EBADF (Bad file descriptor) [pid 6875] close(19) = -1 EBADF (Bad file descriptor) [pid 6875] close(20) = -1 EBADF (Bad file descriptor) [pid 6875] close(21) = -1 EBADF (Bad file descriptor) [pid 6875] close(22) = -1 EBADF (Bad file descriptor) [pid 6875] close(23) = -1 EBADF (Bad file descriptor) [pid 6875] close(24) = -1 EBADF (Bad file descriptor) [pid 6875] close(25) = -1 EBADF (Bad file descriptor) [pid 6875] close(26) = -1 EBADF (Bad file descriptor) [pid 6875] close(27) = -1 EBADF (Bad file descriptor) [pid 6875] close(28) = -1 EBADF (Bad file descriptor) [pid 6875] close(29) = -1 EBADF (Bad file descriptor) [pid 6875] exit_group(0) = ? [pid 6875] +++ exited with 0 +++ [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=23, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=46 /* 0.46 s */} --- [ 130.926688][ T6875] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [pid 5826] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5826] umount2("./21", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5826] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5826] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5826] umount2("./21/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./21/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./21/cgroup") = 0 [pid 5826] umount2("./21/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./21/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./21/cgroup.cpu") = 0 [pid 5826] umount2("./21/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./21/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./21/cgroup.net") = 0 [pid 5826] umount2("./21/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./21/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./21/binderfs") = 0 [ 131.010700][ T5826] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 5826] umount2("./21/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... close resumed>) = 0 [pid 5826] <... umount2 resumed>) = 0 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5826] umount2("./21/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./21/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] umount2("./21/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] openat(AT_FDCWD, "./21/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 6911 attached ) = 4 [pid 6911] set_robust_list(0x55558159a660, 24 [pid 5826] newfstatat(4, "", [pid 5823] <... clone resumed>, child_tidptr=0x55558159a650) = 26 [pid 6911] <... set_robust_list resumed>) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 6911] chdir("./24" [pid 5826] getdents64(4, [pid 6911] <... chdir resumed>) = 0 [pid 5826] <... getdents64 resumed>0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 6911] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5826] getdents64(4, 0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 6911] setpgid(0, 0) = 0 [pid 5826] close(4) = 0 [pid 5826] rmdir("./21/file0" [pid 6911] symlink("/syzcgroup/unified/syz2", "./cgroup" [pid 5826] <... rmdir resumed>) = 0 [pid 5826] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 6911] <... symlink resumed>) = 0 [pid 5826] close(3 [pid 6911] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu" [pid 5826] <... close resumed>) = 0 [pid 6911] <... symlink resumed>) = 0 [pid 6911] symlink("/syzcgroup/net/syz2", "./cgroup.net") = 0 [pid 6911] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6911] write(3, "1000", 4) = 4 [pid 6911] close(3) = 0 [pid 6911] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6911] write(1, "executing program\n", 18) = 18 [pid 6911] memfd_create("syzkaller", 0) = 3 [pid 6911] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaaaa00000 [pid 5826] rmdir("./21") = 0 [pid 5826] mkdir("./22", 0777) = 0 [pid 5826] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5826] ioctl(3, LOOP_CLR_FD) = 0 [pid 5826] close(3 [pid 6910] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 6900] <... write resumed>) = 33554432 [pid 6900] munmap(0x7fbaaaa00000, 138412032 [pid 6910] <... write resumed>) = 33554432 [pid 6900] <... munmap resumed>) = 0 [pid 6900] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6910] munmap(0x7fbaaaa00000, 138412032 [pid 6900] <... openat resumed>) = 4 [pid 6900] ioctl(4, LOOP_SET_FD, 3 [pid 6909] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 6900] <... ioctl resumed>) = 0 [pid 6900] close(3) = 0 [pid 6900] close(4) = 0 [pid 6900] mkdir("./file0", 0777) = 0 [pid 6900] mount("/dev/loop0", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 6910] <... munmap resumed>) = 0 [ 131.514524][ T6900] loop0: detected capacity change from 0 to 65536 [ 131.571814][ T6900] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 6910] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6910] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6910] close(3) = 0 [pid 6910] close(4) = 0 [pid 6910] mkdir("./file0", 0777) = 0 [ 131.617961][ T6910] loop1: detected capacity change from 0 to 65536 [pid 6910] mount("/dev/loop1", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 6911] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 6900] <... mount resumed>) = 0 [pid 5826] <... close resumed>) = 0 [pid 6900] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6900] chdir("./file0") = 0 [pid 6900] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 131.743144][ T6900] XFS (loop0): Ending clean mount [pid 6900] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 4 [ 131.786936][ T5966] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 131.806753][ T5966] XFS (loop0): Unmount and run xfs_repair [ 131.823247][ T5966] XFS (loop0): First 128 bytes of corrupted metadata buffer: [pid 6900] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6909] <... write resumed>) = 33554432 [ 131.831965][ T29] audit: type=1800 audit(1733456429.276:120): pid=6900 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop0" ino=41 res=0 errno=0 [ 131.852982][ T5966] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 131.862532][ T5966] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 131.871966][ T5966] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6909] munmap(0x7fbaaaa00000, 138412032./strace-static-x86_64: Process 6924 attached ) = 0 [pid 5826] <... clone resumed>, child_tidptr=0x55558159a650) = 24 [ 131.882316][ T5966] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 131.891463][ T5966] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 131.902301][ T5966] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 131.911464][ T5966] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 131.920649][ T5966] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [pid 6924] set_robust_list(0x55558159a660, 24 [pid 6909] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6924] <... set_robust_list resumed>) = 0 [pid 6909] <... openat resumed>) = 4 [pid 6924] chdir("./22" [pid 6909] ioctl(4, LOOP_SET_FD, 3 [pid 6924] <... chdir resumed>) = 0 [pid 6909] <... ioctl resumed>) = 0 [pid 6924] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6909] close(3 [pid 6924] <... prctl resumed>) = 0 [pid 6909] <... close resumed>) = 0 executing program [pid 6924] setpgid(0, 0 [pid 6909] close(4 [pid 6924] <... setpgid resumed>) = 0 [pid 6909] <... close resumed>) = 0 [pid 6924] symlink("/syzcgroup/unified/syz4", "./cgroup" [pid 6909] mkdir("./file0", 0777 [pid 6924] <... symlink resumed>) = 0 [pid 6909] <... mkdir resumed>) = 0 [pid 6924] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu" [pid 6909] mount("/dev/loop3", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 6924] <... symlink resumed>) = 0 [pid 6924] symlink("/syzcgroup/net/syz4", "./cgroup.net") = 0 [pid 6924] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6924] write(3, "1000", 4) = 4 [pid 6924] close(3) = 0 [pid 6924] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6924] write(1, "executing program\n", 18) = 18 [pid 6924] memfd_create("syzkaller", 0) = 3 [pid 6924] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaaaa00000 [ 131.929860][ T6900] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 131.944467][ T6909] loop3: detected capacity change from 0 to 65536 [ 131.952936][ T6910] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 6900] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 6900] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000) = -1 EFAULT (Bad address) [pid 6900] close(3) = 0 [pid 6900] close(4) = 0 [pid 6900] close(5) = -1 EBADF (Bad file descriptor) [pid 6900] close(6) = -1 EBADF (Bad file descriptor) [pid 6900] close(7) = -1 EBADF (Bad file descriptor) [pid 6900] close(8) = -1 EBADF (Bad file descriptor) [pid 6900] close(9) = -1 EBADF (Bad file descriptor) [pid 6900] close(10) = -1 EBADF (Bad file descriptor) [pid 6900] close(11) = -1 EBADF (Bad file descriptor) [pid 6900] close(12) = -1 EBADF (Bad file descriptor) [pid 6900] close(13) = -1 EBADF (Bad file descriptor) [pid 6900] close(14) = -1 EBADF (Bad file descriptor) [pid 6900] close(15) = -1 EBADF (Bad file descriptor) [pid 6900] close(16) = -1 EBADF (Bad file descriptor) [pid 6900] close(17) = -1 EBADF (Bad file descriptor) [pid 6900] close(18) = -1 EBADF (Bad file descriptor) [pid 6900] close(19) = -1 EBADF (Bad file descriptor) [pid 6900] close(20) = -1 EBADF (Bad file descriptor) [pid 6900] close(21) = -1 EBADF (Bad file descriptor) [pid 6900] close(22) = -1 EBADF (Bad file descriptor) [pid 6900] close(23) = -1 EBADF (Bad file descriptor) [pid 6900] close(24) = -1 EBADF (Bad file descriptor) [pid 6900] close(25) = -1 EBADF (Bad file descriptor) [pid 6900] close(26) = -1 EBADF (Bad file descriptor) [pid 6900] close(27) = -1 EBADF (Bad file descriptor) [pid 6900] close(28) = -1 EBADF (Bad file descriptor) [pid 6900] close(29) = -1 EBADF (Bad file descriptor) [pid 6900] exit_group(0) = ? [pid 6900] +++ exited with 0 +++ [pid 5821] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=26, si_uid=0, si_status=0, si_utime=11 /* 0.11 s */, si_stime=47 /* 0.47 s */} --- [pid 5821] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5821] umount2("./24", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5821] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5821] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5821] umount2("./24/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./24/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] unlink("./24/cgroup") = 0 [pid 5821] umount2("./24/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./24/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] unlink("./24/cgroup.cpu") = 0 [pid 5821] umount2("./24/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./24/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] unlink("./24/cgroup.net") = 0 [pid 5821] umount2("./24/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./24/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 131.976686][ T6900] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 131.991685][ T6900] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [pid 5821] unlink("./24/binderfs") = 0 [ 132.051759][ T5821] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 5821] umount2("./24/file0", MNT_FORCE|UMOUNT_NOFOLLOW [ 132.170844][ T6909] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 6924] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 6910] <... mount resumed>) = 0 [pid 6910] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6910] chdir("./file0") = 0 [pid 6910] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [ 132.217914][ T6910] XFS (loop1): Ending clean mount [pid 6910] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 4 [ 132.241514][ T29] audit: type=1800 audit(1733456429.736:121): pid=6910 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop1" ino=41 res=0 errno=0 [ 132.265041][ T5966] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 132.277717][ T5966] XFS (loop1): Unmount and run xfs_repair [ 132.283471][ T5966] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 132.292458][ T5966] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 132.301621][ T5966] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 132.311685][ T5966] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 132.320889][ T5966] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 132.330945][ T5966] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 132.340664][ T5966] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 132.368745][ T5966] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [pid 6910] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6924] <... write resumed>) = 33554432 [pid 6924] munmap(0x7fbaaaa00000, 138412032 [pid 5821] <... umount2 resumed>) = 0 [pid 6924] <... munmap resumed>) = 0 [pid 6910] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [ 132.388068][ T5966] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 132.397267][ T6910] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 132.410583][ T6910] XFS (loop1): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 132.425911][ T6910] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [pid 5821] umount2("./24/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6910] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000 [pid 6909] <... mount resumed>) = 0 [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6924] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5821] newfstatat(AT_FDCWD, "./24/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] umount2("./24/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] openat(AT_FDCWD, "./24/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5821] newfstatat(4, "", [pid 6924] <... openat resumed>) = 4 [pid 5821] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5821] getdents64(4, 0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 6924] ioctl(4, LOOP_SET_FD, 3 [pid 5821] getdents64(4, [pid 6924] <... ioctl resumed>) = 0 [pid 6910] <... openat resumed>) = -1 EFAULT (Bad address) [pid 6909] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5821] <... getdents64 resumed>0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5821] close(4) = 0 [pid 5821] rmdir("./24/file0" [pid 6910] close(3 [pid 6909] <... openat resumed>) = 3 [pid 5821] <... rmdir resumed>) = 0 [pid 5821] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5821] close(3) = 0 [pid 5821] rmdir("./24") = 0 [pid 5821] mkdir("./25", 0777) = 0 [pid 5821] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5821] ioctl(3, LOOP_CLR_FD) = 0 [pid 5821] close(3 [pid 6910] <... close resumed>) = 0 [pid 6909] chdir("./file0" [ 132.450558][ T6909] XFS (loop3): Ending clean mount [ 132.459856][ T6924] loop4: detected capacity change from 0 to 65536 [pid 6910] close(4 [pid 6924] close(3 [pid 6911] <... write resumed>) = 33554432 [pid 6910] <... close resumed>) = 0 [pid 6909] <... chdir resumed>) = 0 [pid 6911] munmap(0x7fbaaaa00000, 138412032 [pid 6910] close(5 [pid 6909] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6910] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6910] close(6) = -1 EBADF (Bad file descriptor) [pid 6910] close(7) = -1 EBADF (Bad file descriptor) [pid 6910] close(8) = -1 EBADF (Bad file descriptor) [pid 6910] close(9) = -1 EBADF (Bad file descriptor) [pid 6910] close(10) = -1 EBADF (Bad file descriptor) [pid 6910] close(11) = -1 EBADF (Bad file descriptor) [pid 6910] close(12) = -1 EBADF (Bad file descriptor) [pid 6910] close(13) = -1 EBADF (Bad file descriptor) [pid 6910] close(14) = -1 EBADF (Bad file descriptor) [pid 6910] close(15 [pid 6909] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6910] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6909] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 6910] close(16 [pid 6909] <... open resumed>) = 4 [pid 6910] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6909] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6910] close(17) = -1 EBADF (Bad file descriptor) [pid 6910] close(18) = -1 EBADF (Bad file descriptor) [pid 6910] close(19) = -1 EBADF (Bad file descriptor) [pid 6910] close(20) = -1 EBADF (Bad file descriptor) [pid 6910] close(21) = -1 EBADF (Bad file descriptor) [pid 6910] close(22) = -1 EBADF (Bad file descriptor) [pid 6910] close(23) = -1 EBADF (Bad file descriptor) [pid 6910] close(24) = -1 EBADF (Bad file descriptor) [pid 6910] close(25 [pid 6924] <... close resumed>) = 0 [pid 6910] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5821] <... close resumed>) = 0 [pid 6924] close(4 [pid 6910] close(26) = -1 EBADF (Bad file descriptor) [pid 6910] close(27 [pid 5821] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6924] <... close resumed>) = 0 [pid 6911] <... munmap resumed>) = 0 [pid 6910] <... close resumed>) = -1 EBADF (Bad file descriptor) [ 132.583141][ T29] audit: type=1800 audit(1733456430.076:122): pid=6909 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop3" ino=41 res=0 errno=0 [ 132.606800][ T5966] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 132.624346][ T5966] XFS (loop3): Unmount and run xfs_repair [pid 6924] mkdir("./file0", 0777 [pid 6911] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5821] <... clone resumed>, child_tidptr=0x55558159a650) = 27 [pid 6924] <... mkdir resumed>) = 0 [pid 6911] <... openat resumed>) = 4 [pid 6924] mount("/dev/loop4", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [ 132.648561][ T5966] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 132.653659][ T6911] loop2: detected capacity change from 0 to 65536 [ 132.656374][ T5966] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 132.671582][ T5966] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 132.680535][ T5966] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 132.689553][ T5966] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [pid 6911] ioctl(4, LOOP_SET_FD, 3executing program ) = 0 ./strace-static-x86_64: Process 6937 attached [pid 6910] close(28 [pid 6937] set_robust_list(0x55558159a660, 24) = 0 [pid 6937] chdir("./25") = 0 [pid 6937] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6937] setpgid(0, 0) = 0 [pid 6937] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6937] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6937] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6937] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6937] write(3, "1000", 4) = 4 [pid 6937] close(3) = 0 [pid 6937] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6937] write(1, "executing program\n", 18) = 18 [pid 6937] memfd_create("syzkaller", 0) = 3 [pid 6937] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaaaa00000 [pid 6911] close(3) = 0 [pid 6911] close(4) = 0 [pid 6911] mkdir("./file0", 0777) = 0 [pid 6911] mount("/dev/loop2", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 6910] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6910] close(29) = -1 EBADF (Bad file descriptor) [ 132.698458][ T5966] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 132.707380][ T5966] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 132.716235][ T5966] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 132.725186][ T5966] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [pid 6910] exit_group(0) = ? [pid 6910] +++ exited with 0 +++ [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=26, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=46 /* 0.46 s */} --- [pid 5824] umount2("./24", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5824] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5824] umount2("./24/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./24/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./24/cgroup") = 0 [ 132.740946][ T6909] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [pid 5824] umount2("./24/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./24/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./24/cgroup.cpu") = 0 [pid 5824] umount2("./24/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6909] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 5824] newfstatat(AT_FDCWD, "./24/cgroup.net", [pid 6909] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000 [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6909] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5824] unlink("./24/cgroup.net" [pid 6909] close(3 [pid 5824] <... unlink resumed>) = 0 [pid 6909] <... close resumed>) = 0 [pid 5824] umount2("./24/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6909] close(4 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6909] <... close resumed>) = 0 [pid 5824] newfstatat(AT_FDCWD, "./24/binderfs", [pid 6909] close(5 [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6909] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] unlink("./24/binderfs" [pid 6909] close(6 [pid 5824] <... unlink resumed>) = 0 [pid 6909] <... close resumed>) = -1 EBADF (Bad file descriptor) [ 132.796820][ T6909] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 132.811559][ T6909] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [pid 5824] umount2("./24/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6909] close(7) = -1 EBADF (Bad file descriptor) [pid 6909] close(8) = -1 EBADF (Bad file descriptor) [pid 6909] close(9) = -1 EBADF (Bad file descriptor) [pid 6909] close(10) = -1 EBADF (Bad file descriptor) [pid 6909] close(11) = -1 EBADF (Bad file descriptor) [pid 6909] close(12) = -1 EBADF (Bad file descriptor) [pid 6909] close(13) = -1 EBADF (Bad file descriptor) [pid 6909] close(14) = -1 EBADF (Bad file descriptor) [pid 6909] close(15) = -1 EBADF (Bad file descriptor) [pid 6909] close(16) = -1 EBADF (Bad file descriptor) [pid 6909] close(17) = -1 EBADF (Bad file descriptor) [pid 6909] close(18) = -1 EBADF (Bad file descriptor) [pid 6909] close(19) = -1 EBADF (Bad file descriptor) [pid 6909] close(20) = -1 EBADF (Bad file descriptor) [pid 6909] close(21) = -1 EBADF (Bad file descriptor) [pid 6909] close(22) = -1 EBADF (Bad file descriptor) [pid 6909] close(23) = -1 EBADF (Bad file descriptor) [pid 6909] close(24) = -1 EBADF (Bad file descriptor) [pid 6909] close(25) = -1 EBADF (Bad file descriptor) [pid 6909] close(26) = -1 EBADF (Bad file descriptor) [pid 6909] close(27) = -1 EBADF (Bad file descriptor) [pid 6909] close(28) = -1 EBADF (Bad file descriptor) [pid 6909] close(29) = -1 EBADF (Bad file descriptor) [pid 6909] exit_group(0) = ? [pid 6909] +++ exited with 0 +++ [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=26, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=44 /* 0.44 s */} --- [pid 5825] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 6937] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 5825] umount2("./24", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5825] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [ 132.844218][ T5824] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 5825] umount2("./24/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./24/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./24/cgroup") = 0 [pid 5825] umount2("./24/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./24/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./24/cgroup.cpu") = 0 [pid 5825] umount2("./24/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./24/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./24/cgroup.net") = 0 [pid 5825] umount2("./24/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./24/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./24/binderfs") = 0 [pid 5825] umount2("./24/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... umount2 resumed>) = 0 [ 132.929773][ T5825] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 132.950674][ T6911] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 132.964238][ T6924] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 5824] umount2("./24/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6911] <... mount resumed>) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6911] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5824] newfstatat(AT_FDCWD, "./24/file0", [pid 6911] <... openat resumed>) = 3 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6911] chdir("./file0" [pid 5824] umount2("./24/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6911] <... chdir resumed>) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6911] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5824] openat(AT_FDCWD, "./24/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6911] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5824] <... openat resumed>) = 4 [pid 5824] newfstatat(4, "", [pid 6911] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(4, 0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5824] getdents64(4, 0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5824] close(4) = 0 [pid 5824] rmdir("./24/file0") = 0 [ 132.995217][ T6911] XFS (loop2): Ending clean mount [pid 5824] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5824] close(3) = 0 [pid 5824] rmdir("./24") = 0 [pid 5824] mkdir("./25", 0777) = 0 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5824] ioctl(3, LOOP_CLR_FD) = 0 [pid 5824] close(3 [pid 6937] <... write resumed>) = 33554432 [pid 6937] munmap(0x7fbaaaa00000, 138412032 [pid 6911] <... open resumed>) = 4 [pid 6911] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6924] <... mount resumed>) = 0 [ 133.219350][ T29] audit: type=1800 audit(1733456430.716:123): pid=6911 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop2" ino=41 res=0 errno=0 [ 133.250300][ T6924] XFS (loop4): Ending clean mount [pid 6924] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5824] <... close resumed>) = 0 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6954 attached [pid 6924] <... openat resumed>) = 3 [pid 5825] <... umount2 resumed>) = 0 [pid 6954] set_robust_list(0x55558159a660, 24 [pid 5824] <... clone resumed>, child_tidptr=0x55558159a650) = 27 [pid 6954] <... set_robust_list resumed>) = 0 [pid 6954] chdir("./25" [pid 6924] chdir("./file0" [pid 6954] <... chdir resumed>) = 0 [pid 6954] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6924] <... chdir resumed>) = 0 [pid 5825] umount2("./24/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6954] <... prctl resumed>) = 0 [pid 6954] setpgid(0, 0 [pid 6924] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6924] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5825] newfstatat(AT_FDCWD, "./24/file0", [pid 6954] <... setpgid resumed>) = 0 [pid 6924] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6937] <... munmap resumed>) = 0 [pid 6954] symlink("/syzcgroup/unified/syz1", "./cgroup" [pid 5825] umount2("./24/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6954] <... symlink resumed>) = 0 [pid 6937] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 133.262636][ T5879] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 133.274940][ T5879] XFS (loop2): Unmount and run xfs_repair [ 133.290224][ T29] audit: type=1800 audit(1733456430.786:124): pid=6924 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop4" ino=41 res=0 errno=0 [ 133.290647][ T5879] XFS (loop2): First 128 bytes of corrupted metadata buffer: [pid 6954] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu" [pid 6937] ioctl(4, LOOP_SET_FD, 3 [pid 6924] <... open resumed>) = 4 [pid 5825] openat(AT_FDCWD, "./24/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6954] <... symlink resumed>) = 0 [pid 6954] symlink("/syzcgroup/net/syz1", "./cgroup.net") = 0 [pid 6954] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6954] write(3, "1000", 4 [pid 6924] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6954] <... write resumed>) = 4 [pid 6954] close(3) = 0 [pid 6954] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6954] write(1, "executing program\n", 18) = 18 [pid 6954] memfd_create("syzkaller", 0) = 3 [pid 6954] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaaaa00000 [pid 5825] <... openat resumed>) = 4 [pid 5825] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(4, 0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5825] getdents64(4, 0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5825] close(4) = 0 [pid 5825] rmdir("./24/file0") = 0 [pid 5825] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5825] close(3) = 0 [pid 5825] rmdir("./24") = 0 [pid 5825] mkdir("./25", 0777) = 0 [pid 5825] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5825] ioctl(3, LOOP_CLR_FD) = 0 [ 133.313860][ T6937] loop0: detected capacity change from 0 to 65536 [ 133.317706][ T5879] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 133.317725][ T5879] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 133.343058][ T5879] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [pid 5825] close(3 [pid 6937] <... ioctl resumed>) = 0 [pid 6937] close(3) = 0 [pid 6937] close(4) = 0 [pid 6937] mkdir("./file0", 0777) = 0 [ 133.362234][ T9] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 133.373986][ T9] XFS (loop4): Unmount and run xfs_repair [ 133.389723][ T9] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 133.398499][ T9] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 133.409465][ T5879] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 133.427974][ T9] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 133.437321][ T5879] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 133.446208][ T5879] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 133.456505][ T9] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 133.465810][ T9] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 133.475155][ T5879] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 133.484340][ T6937] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 133.507108][ T9] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 133.516075][ T9] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 133.525033][ T5879] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 133.533936][ T9] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 133.542959][ T9] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 133.551916][ T6924] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 133.552801][ T6911] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [pid 6937] mount("/dev/loop0", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [ 133.658299][ T6924] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 133.680250][ T6924] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 133.691071][ T6911] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [pid 6954] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 5825] <... close resumed>) = 0 [pid 6937] <... mount resumed>) = 0 [pid 6924] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 6937] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6937] chdir("./file0") = 0 [ 133.727708][ T6937] XFS (loop0): Ending clean mount [ 133.733478][ T6911] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 133.747507][ T29] audit: type=1800 audit(1733456431.246:125): pid=6937 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop0" ino=41 res=0 errno=0 [ 133.773467][ T5966] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 133.784842][ T5966] XFS (loop0): Unmount and run xfs_repair [ 133.790645][ T5966] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 133.798066][ T5966] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 133.806985][ T5966] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 133.815848][ T5966] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 133.824765][ T5966] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 133.833659][ T5966] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 133.842646][ T5966] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 133.851534][ T5966] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 133.860428][ T5966] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [pid 6937] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6937] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 6924] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000 [pid 6937] <... open resumed>) = 4 [pid 6924] <... openat resumed>) = -1 EFAULT (Bad address) [pid 6937] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6924] close(3 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6963 attached [pid 6924] <... close resumed>) = 0 [pid 6963] set_robust_list(0x55558159a660, 24 [pid 6924] close(4 [pid 5825] <... clone resumed>, child_tidptr=0x55558159a650) = 27 [pid 6963] <... set_robust_list resumed>) = 0 [pid 6924] <... close resumed>) = 0 [pid 6963] chdir("./25" [pid 6924] close(5 [pid 6963] <... chdir resumed>) = 0 [pid 6924] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6963] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6924] close(6 [pid 6963] <... prctl resumed>) = 0 [pid 6937] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 6924] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6911] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 6963] setpgid(0, 0 [pid 6937] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000 [pid 6924] close(7 [pid 6911] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000 [pid 6963] <... setpgid resumed>) = 0 [pid 6937] <... openat resumed>) = -1 EFAULT (Bad address) [pid 6924] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6911] <... openat resumed>) = -1 EFAULT (Bad address) [pid 6963] symlink("/syzcgroup/unified/syz3", "./cgroup" [pid 6911] close(3 [pid 6963] <... symlink resumed>) = 0 [pid 6937] close(3 [pid 6924] close(8 [pid 6911] <... close resumed>) = 0 [pid 6963] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu" [pid 6937] <... close resumed>) = 0 [pid 6924] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6911] close(4 [pid 6963] <... symlink resumed>) = 0 [pid 6937] close(4 [pid 6924] close(9 [pid 6911] <... close resumed>) = 0 [pid 6963] symlink("/syzcgroup/net/syz3", "./cgroup.net" [pid 6937] <... close resumed>) = 0 [pid 6924] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6911] close(5 [pid 6963] <... symlink resumed>) = 0 [pid 6937] close(5 [pid 6924] close(10 [pid 6911] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6963] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6937] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6924] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6911] close(6 [pid 6963] <... openat resumed>) = 3 [pid 6937] close(6 [pid 6911] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6963] write(3, "1000", 4 [pid 6937] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6924] close(11 [pid 6911] close(7 [pid 6963] <... write resumed>) = 4 [pid 6954] <... write resumed>) = 33554432 [pid 6937] close(7 [pid 6924] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6911] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6963] close(3 [pid 6954] munmap(0x7fbaaaa00000, 138412032 [pid 6937] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6924] close(12 [pid 6911] close(8 [pid 6963] <... close resumed>) = 0 [pid 6937] close(8 [pid 6924] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6911] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6963] symlink("/dev/binderfs", "./binderfs" [pid 6937] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6924] close(13 [pid 6911] close(9 [pid 6963] <... symlink resumed>) = 0 [pid 6937] close(9 [pid 6924] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6911] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6963] write(1, "executing program\n", 18 [pid 6937] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6924] close(14 [pid 6911] close(10 [pid 6963] <... write resumed>) = 18 [pid 6937] close(10 [pid 6924] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6911] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6963] memfd_create("syzkaller", 0 [pid 6911] close(11 [pid 6924] close(15 [pid 6911] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6937] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6924] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6911] close(12 [pid 6963] <... memfd_create resumed>) = 3 [pid 6937] close(11 [pid 6924] close(16 [pid 6911] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6963] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6937] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6924] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6911] close(13 [pid 6963] <... mmap resumed>) = 0x7fbaaaa00000 [pid 6937] close(12executing program [pid 6924] close(17 [pid 6911] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6937] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6911] close(14) = -1 EBADF (Bad file descriptor) [pid 6911] close(15) = -1 EBADF (Bad file descriptor) [pid 6911] close(16) = -1 EBADF (Bad file descriptor) [pid 6911] close(17) = -1 EBADF (Bad file descriptor) [pid 6911] close(18) = -1 EBADF (Bad file descriptor) [pid 6911] close(19 [pid 6924] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6911] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6924] close(18 [pid 6911] close(20 [pid 6937] close(13 [pid 6924] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6911] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6937] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6924] close(19 [pid 6911] close(21 [pid 6937] close(14 [pid 6924] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6911] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6937] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6924] close(20 [pid 6911] close(22 [pid 6937] close(15 [pid 6911] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6911] close(23) = -1 EBADF (Bad file descriptor) [pid 6911] close(24) = -1 EBADF (Bad file descriptor) [pid 6911] close(25) = -1 EBADF (Bad file descriptor) [pid 6911] close(26) = -1 EBADF (Bad file descriptor) [pid 6911] close(27 [pid 6937] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6911] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6937] close(16 [pid 6911] close(28) = -1 EBADF (Bad file descriptor) [pid 6911] close(29) = -1 EBADF (Bad file descriptor) [ 133.869481][ T6937] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 133.884041][ T6937] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 133.900735][ T6937] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [pid 6911] exit_group(0) = ? [pid 6924] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6911] +++ exited with 0 +++ [pid 6937] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=26, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=58 /* 0.58 s */} --- [pid 6937] close(17 [pid 6924] close(21 [pid 6937] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6924] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6937] close(18 [pid 6924] close(22 [pid 6937] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6924] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6937] close(19 [pid 6924] close(23 [pid 6937] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6924] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6937] close(20 [pid 6924] close(24 [pid 6937] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6924] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6937] close(21 [pid 6924] close(25 [pid 6937] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6924] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6937] close(22 [pid 6924] close(26 [pid 6937] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6924] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6937] close(23 [pid 6924] close(27 [pid 6937] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6924] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6937] close(24 [pid 6924] close(28 [pid 6937] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6924] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6937] close(25 [pid 6924] close(29 [pid 6937] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6924] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6937] close(26 [pid 6954] <... munmap resumed>) = 0 [pid 6937] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6924] exit_group(0 [pid 6954] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6937] close(27 [pid 6924] <... exit_group resumed>) = ? [pid 6954] <... openat resumed>) = 4 [pid 6937] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6924] +++ exited with 0 +++ [pid 6954] ioctl(4, LOOP_SET_FD, 3 [pid 6937] close(28) = -1 EBADF (Bad file descriptor) [pid 6954] <... ioctl resumed>) = 0 [pid 6937] close(29 [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=24, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=41 /* 0.41 s */} --- [pid 6954] close(3 [pid 6937] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5826] restart_syscall(<... resuming interrupted clone ...> [pid 6954] <... close resumed>) = 0 [pid 6937] exit_group(0 [pid 5826] <... restart_syscall resumed>) = 0 [pid 5823] umount2("./24", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6954] close(4 [pid 6937] <... exit_group resumed>) = ? [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6954] <... close resumed>) = 0 [pid 6937] +++ exited with 0 +++ [pid 5823] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] umount2("./22", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... openat resumed>) = 3 [pid 6954] mkdir("./file0", 0777 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(3, "", [pid 6954] <... mkdir resumed>) = 0 [pid 5826] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 6954] mount("/dev/loop1", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 5826] <... openat resumed>) = 3 [pid 5823] getdents64(3, [pid 5826] newfstatat(3, "", [pid 5821] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=27, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=52 /* 0.52 s */} --- [pid 5823] <... getdents64 resumed>0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5823] umount2("./24/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] getdents64(3, [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5821] umount2("./25", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... getdents64 resumed>0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5826] umount2("./22/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] newfstatat(AT_FDCWD, "./24/cgroup", [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./24/cgroup" [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... unlink resumed>) = 0 [pid 5821] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] newfstatat(AT_FDCWD, "./22/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] umount2("./24/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] <... openat resumed>) = 3 [pid 5826] unlink("./22/cgroup" [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... unlink resumed>) = 0 [pid 5823] newfstatat(AT_FDCWD, "./24/cgroup.cpu", [pid 5821] newfstatat(3, "", [pid 5826] umount2("./22/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5821] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5826] newfstatat(AT_FDCWD, "./22/cgroup.cpu", [pid 5821] getdents64(3, [pid 5823] unlink("./24/cgroup.cpu" [pid 5821] <... getdents64 resumed>0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5823] <... unlink resumed>) = 0 [pid 5823] umount2("./24/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./24/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./24/cgroup.net") = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./22/cgroup.cpu" [pid 5823] umount2("./24/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] umount2("./25/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... unlink resumed>) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] umount2("./22/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] newfstatat(AT_FDCWD, "./24/binderfs", [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./25/cgroup", [pid 5826] newfstatat(AT_FDCWD, "./22/cgroup.net", [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./24/binderfs") = 0 [ 133.984281][ T6954] loop1: detected capacity change from 0 to 65536 [pid 5823] umount2("./24/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] unlink("./25/cgroup" [pid 5826] unlink("./22/cgroup.net" [pid 5821] <... unlink resumed>) = 0 [pid 5826] <... unlink resumed>) = 0 [ 134.039550][ T5823] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 134.054869][ T6954] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 134.065231][ T5826] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 5821] umount2("./25/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] umount2("./22/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./25/cgroup.cpu", [pid 5826] newfstatat(AT_FDCWD, "./22/binderfs", [pid 5821] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] unlink("./25/cgroup.cpu" [pid 5826] unlink("./22/binderfs" [pid 5821] <... unlink resumed>) = 0 [pid 5826] <... unlink resumed>) = 0 [pid 5821] umount2("./25/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] umount2("./22/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./25/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] unlink("./25/cgroup.net") = 0 [pid 5821] umount2("./25/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./25/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] unlink("./25/binderfs") = 0 [pid 5821] umount2("./25/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... umount2 resumed>) = 0 [pid 5826] umount2("./22/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./22/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] umount2("./22/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] openat(AT_FDCWD, "./22/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5826] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5826] getdents64(4, 0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5826] getdents64(4, 0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5826] close(4) = 0 [pid 5826] rmdir("./22/file0" [pid 5821] <... umount2 resumed>) = 0 [pid 5826] <... rmdir resumed>) = 0 [pid 5826] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5826] close(3) = 0 [pid 5826] rmdir("./22" [pid 5821] umount2("./25/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... rmdir resumed>) = 0 [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 134.090594][ T5821] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 5826] mkdir("./23", 0777 [pid 5821] newfstatat(AT_FDCWD, "./25/file0", [pid 5826] <... mkdir resumed>) = 0 [pid 5821] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5823] <... umount2 resumed>) = 0 [pid 5821] umount2("./25/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... openat resumed>) = 3 [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5821] openat(AT_FDCWD, "./25/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] ioctl(3, LOOP_CLR_FD [pid 5821] <... openat resumed>) = 4 [pid 5826] <... ioctl resumed>) = 0 [pid 5821] newfstatat(4, "", [pid 5826] close(3 [pid 5821] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5821] getdents64(4, [pid 5823] umount2("./24/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] <... getdents64 resumed>0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5821] getdents64(4, 0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5821] close(4) = 0 [pid 5823] newfstatat(AT_FDCWD, "./24/file0", [pid 5821] rmdir("./25/file0" [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] <... rmdir resumed>) = 0 [pid 5823] umount2("./24/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] getdents64(3, [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5821] <... getdents64 resumed>0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5823] openat(AT_FDCWD, "./24/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5821] close(3 [pid 5823] <... openat resumed>) = 4 [pid 5821] <... close resumed>) = 0 [pid 6963] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 6954] <... mount resumed>) = 0 [pid 5823] newfstatat(4, "", [pid 5821] rmdir("./25" [pid 6954] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5821] <... rmdir resumed>) = 0 [pid 6954] <... openat resumed>) = 3 [pid 5823] getdents64(4, [pid 5821] mkdir("./26", 0777 [pid 6954] chdir("./file0" [pid 5823] <... getdents64 resumed>0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5821] <... mkdir resumed>) = 0 [pid 6954] <... chdir resumed>) = 0 [pid 5823] getdents64(4, [pid 5821] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6954] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5823] <... getdents64 resumed>0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5821] <... openat resumed>) = 3 [pid 5823] close(4) = 0 [pid 6954] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5823] rmdir("./24/file0") = 0 [pid 5821] ioctl(3, LOOP_CLR_FD [pid 6954] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 5823] getdents64(3, [pid 5821] <... ioctl resumed>) = 0 [pid 5823] <... getdents64 resumed>0x55558159b6f0 /* 0 entries */, 32768) = 0 [ 134.180659][ T6954] XFS (loop1): Ending clean mount [pid 5821] close(3 [pid 5823] close(3) = 0 [pid 5823] rmdir("./24" [pid 6954] <... open resumed>) = 4 [pid 5823] <... rmdir resumed>) = 0 [pid 6954] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5823] mkdir("./25", 0777) = 0 [pid 5823] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5823] ioctl(3, LOOP_CLR_FD) = 0 [ 134.224646][ T29] audit: type=1800 audit(1733456431.716:126): pid=6954 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop1" ino=41 res=0 errno=0 [ 134.227690][ T9] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 134.286601][ T9] XFS (loop1): Unmount and run xfs_repair [ 134.304068][ T9] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 134.322834][ T9] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 134.346646][ T9] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 134.380497][ T9] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 134.417380][ T9] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 134.456643][ T9] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 134.486864][ T9] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 134.523677][ T9] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 134.556624][ T9] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 134.586678][ T6954] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 134.600717][ T6954] XFS (loop1): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 134.626783][ T6954] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [pid 5823] close(3 [pid 6954] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 5826] <... close resumed>) = 0 [pid 5823] <... close resumed>) = 0 [pid 5821] <... close resumed>) = 0 [pid 6954] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000 [pid 5821] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6954] <... openat resumed>) = -1 EFAULT (Bad address) ./strace-static-x86_64: Process 6972 attached [pid 6954] close(3 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6973 attached ./strace-static-x86_64: Process 6974 attached [pid 6972] set_robust_list(0x55558159a660, 24 [pid 6954] <... close resumed>) = 0 [pid 5821] <... clone resumed>, child_tidptr=0x55558159a650) = 28 [pid 6974] set_robust_list(0x55558159a660, 24 [pid 6973] set_robust_list(0x55558159a660, 24 [pid 6972] <... set_robust_list resumed>) = 0 [pid 6954] close(4 [pid 5826] <... clone resumed>, child_tidptr=0x55558159a650) = 25 [pid 5823] <... clone resumed>, child_tidptr=0x55558159a650) = 27 [pid 6974] <... set_robust_list resumed>) = 0 [pid 6973] <... set_robust_list resumed>) = 0 [pid 6972] chdir("./26" [pid 6954] <... close resumed>) = 0 [pid 6973] chdir("./23" [pid 6974] chdir("./25" [pid 6972] <... chdir resumed>) = 0 [pid 6954] close(5 [pid 6974] <... chdir resumed>) = 0 [pid 6973] <... chdir resumed>) = 0 [pid 6972] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6974] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6973] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6972] <... prctl resumed>) = 0 [pid 6954] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6974] <... prctl resumed>) = 0 [pid 6973] <... prctl resumed>) = 0 [pid 6972] setpgid(0, 0 [pid 6954] close(6 [pid 6974] setpgid(0, 0 [pid 6973] setpgid(0, 0 [pid 6972] <... setpgid resumed>) = 0 [pid 6974] <... setpgid resumed>) = 0 [pid 6973] <... setpgid resumed>) = 0 [pid 6972] symlink("/syzcgroup/unified/syz0", "./cgroup" [pid 6954] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6973] symlink("/syzcgroup/unified/syz4", "./cgroup" [pid 6972] <... symlink resumed>) = 0 [pid 6973] <... symlink resumed>) = 0 [pid 6972] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu" [pid 6954] close(7 [pid 6974] symlink("/syzcgroup/unified/syz2", "./cgroup" [pid 6973] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu" [pid 6972] <... symlink resumed>) = 0 [pid 6954] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6974] <... symlink resumed>) = 0 [pid 6973] <... symlink resumed>) = 0 [pid 6972] symlink("/syzcgroup/net/syz0", "./cgroup.net" [pid 6974] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu" [pid 6973] symlink("/syzcgroup/net/syz4", "./cgroup.net" [pid 6972] <... symlink resumed>) = 0 [pid 6954] close(8 [pid 6974] <... symlink resumed>) = 0 [pid 6972] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6973] <... symlink resumed>) = 0 [pid 6972] <... openat resumed>) = 3 [pid 6954] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6974] symlink("/syzcgroup/net/syz2", "./cgroup.net" [pid 6973] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6972] write(3, "1000", 4 [pid 6973] <... openat resumed>) = 3 [pid 6972] <... write resumed>) = 4 [pid 6954] close(9 [pid 6974] <... symlink resumed>) = 0 [pid 6973] write(3, "1000", 4 [pid 6972] close(3 [pid 6954] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6974] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6973] <... write resumed>) = 4 [pid 6954] close(10 [pid 6973] close(3 [pid 6954] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6973] <... close resumed>) = 0 [pid 6972] <... close resumed>) = 0 [pid 6954] close(11 [pid 6973] symlink("/dev/binderfs", "./binderfs" [pid 6972] symlink("/dev/binderfs", "./binderfs" [pid 6974] <... openat resumed>) = 3 [pid 6973] <... symlink resumed>) = 0 [pid 6972] <... symlink resumed>) = 0 executing program [pid 6954] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6974] write(3, "1000", 4 [pid 6973] write(1, "executing program\n", 18 [pid 6972] write(1, "executing program\n", 18 [pid 6974] <... write resumed>) = 4 [pid 6973] <... write resumed>) = 18 [pid 6954] close(12 [pid 6974] close(3 [pid 6954] <... close resumed>) = -1 EBADF (Bad file descriptor) executing program [pid 6974] <... close resumed>) = 0 [pid 6972] <... write resumed>) = 18 [pid 6954] close(13 [pid 6972] memfd_create("syzkaller", 0 [pid 6954] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6974] symlink("/dev/binderfs", "./binderfs" [pid 6954] close(14 [pid 6974] <... symlink resumed>) = 0 [pid 6954] <... close resumed>) = -1 EBADF (Bad file descriptor) executing program [pid 6974] write(1, "executing program\n", 18 [pid 6973] memfd_create("syzkaller", 0 [pid 6972] <... memfd_create resumed>) = 3 [pid 6954] close(15 [pid 6974] <... write resumed>) = 18 [pid 6972] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6954] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6973] <... memfd_create resumed>) = 3 [pid 6972] <... mmap resumed>) = 0x7fbaaaa00000 [pid 6954] close(16 [pid 6974] memfd_create("syzkaller", 0 [pid 6973] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6954] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6974] <... memfd_create resumed>) = 3 [pid 6973] <... mmap resumed>) = 0x7fbaaaa00000 [pid 6954] close(17) = -1 EBADF (Bad file descriptor) [pid 6954] close(18) = -1 EBADF (Bad file descriptor) [pid 6974] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6954] close(19) = -1 EBADF (Bad file descriptor) [pid 6974] <... mmap resumed>) = 0x7fbaaaa00000 [pid 6954] close(20) = -1 EBADF (Bad file descriptor) [pid 6954] close(21) = -1 EBADF (Bad file descriptor) [pid 6954] close(22) = -1 EBADF (Bad file descriptor) [pid 6954] close(23) = -1 EBADF (Bad file descriptor) [pid 6954] close(24) = -1 EBADF (Bad file descriptor) [pid 6954] close(25) = -1 EBADF (Bad file descriptor) [pid 6954] close(26) = -1 EBADF (Bad file descriptor) [pid 6954] close(27) = -1 EBADF (Bad file descriptor) [pid 6954] close(28) = -1 EBADF (Bad file descriptor) [pid 6954] close(29) = -1 EBADF (Bad file descriptor) [pid 6954] exit_group(0) = ? [pid 6954] +++ exited with 0 +++ [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=27, si_uid=0, si_status=0, si_utime=13 /* 0.13 s */, si_stime=39 /* 0.39 s */} --- [pid 5824] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5824] umount2("./25", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5824] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5824] umount2("./25/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./25/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./25/cgroup") = 0 [pid 5824] umount2("./25/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./25/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./25/cgroup.cpu") = 0 [pid 5824] umount2("./25/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./25/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./25/cgroup.net") = 0 [pid 5824] umount2("./25/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./25/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./25/binderfs") = 0 [pid 5824] umount2("./25/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5824] umount2("./25/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./25/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] umount2("./25/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./25/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5824] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(4, 0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5824] getdents64(4, 0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5824] close(4) = 0 [pid 5824] rmdir("./25/file0") = 0 [pid 5824] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5824] close(3) = 0 [pid 5824] rmdir("./25") = 0 [pid 5824] mkdir("./26", 0777) = 0 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5824] ioctl(3, LOOP_CLR_FD) = 0 [ 134.872093][ T5824] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 5824] close(3 [pid 6963] <... write resumed>) = 33554432 [pid 6963] munmap(0x7fbaaaa00000, 138412032) = 0 [pid 6963] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6963] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6963] close(3) = 0 [pid 6963] close(4) = 0 [pid 6963] mkdir("./file0", 0777) = 0 [ 135.115475][ T6963] loop3: detected capacity change from 0 to 65536 [ 135.189628][ T6963] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 6963] mount("/dev/loop3", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid") = 0 [pid 6963] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6974] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 6963] <... openat resumed>) = 3 [ 135.277255][ T6963] XFS (loop3): Ending clean mount [pid 6963] chdir("./file0" [pid 6972] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 6963] <... chdir resumed>) = 0 [pid 6963] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6963] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 6973] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 6963] <... open resumed>) = 4 [ 135.367729][ T29] audit: type=1800 audit(1733456432.846:127): pid=6963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop3" ino=41 res=0 errno=0 [ 135.397359][ T9] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [pid 6963] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5824] <... close resumed>) = 0 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6983 attached [ 135.426809][ T9] XFS (loop3): Unmount and run xfs_repair [ 135.432586][ T9] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 135.466662][ T9] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [pid 6983] set_robust_list(0x55558159a660, 24 [pid 5824] <... clone resumed>, child_tidptr=0x55558159a650) = 28 [pid 6983] <... set_robust_list resumed>) = 0 [ 135.476764][ T9] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 135.485654][ T9] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [pid 6983] chdir("./26") = 0 [pid 6983] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 135.526633][ T9] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 135.546604][ T9] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 135.555989][ T9] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [pid 6983] setpgid(0, 0) = 0 [pid 6974] <... write resumed>) = 33554432 [pid 6974] munmap(0x7fbaaaa00000, 138412032 [pid 6983] symlink("/syzcgroup/unified/syz1", "./cgroup") = 0 [pid 6983] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu") = 0 [pid 6983] symlink("/syzcgroup/net/syz1", "./cgroup.net") = 0 [pid 6983] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6983] write(3, "1000", 4) = 4 [pid 6974] <... munmap resumed>) = 0 [pid 6983] close(3) = 0 [pid 6983] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6983] write(1, "executing program\n", 18) = 18 [pid 6983] memfd_create("syzkaller", 0) = 3 [pid 6983] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaaaa00000 [pid 6974] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [ 135.586625][ T9] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 135.596021][ T9] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [pid 6974] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6974] close(3) = 0 [pid 6974] close(4) = 0 [pid 6974] mkdir("./file0", 0777) = 0 [ 135.638448][ T6974] loop2: detected capacity change from 0 to 65536 [ 135.663103][ T6963] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [pid 6974] mount("/dev/loop2", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 6983] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 6973] <... write resumed>) = 33554432 [pid 6973] munmap(0x7fbaaaa00000, 138412032 [pid 6972] <... write resumed>) = 33554432 [pid 6972] munmap(0x7fbaaaa00000, 138412032 [pid 6973] <... munmap resumed>) = 0 [pid 6973] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6972] <... munmap resumed>) = 0 [pid 6973] <... openat resumed>) = 4 [pid 6972] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6973] ioctl(4, LOOP_SET_FD, 3 [pid 6972] <... openat resumed>) = 4 [pid 6972] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6973] <... ioctl resumed>) = 0 [ 136.123180][ T6973] loop4: detected capacity change from 0 to 65536 [ 136.131048][ T6972] loop0: detected capacity change from 0 to 65536 [ 136.143289][ T6963] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 136.143493][ T6974] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 6973] close(3 [pid 6972] close(3 [pid 6973] <... close resumed>) = 0 [pid 6972] <... close resumed>) = 0 [pid 6963] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 6973] close(4 [pid 6972] close(4 [pid 6963] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000 [pid 6973] <... close resumed>) = 0 [pid 6972] <... close resumed>) = 0 [pid 6963] <... openat resumed>) = -1 EFAULT (Bad address) [pid 6973] mkdir("./file0", 0777 [pid 6972] mkdir("./file0", 0777 [pid 6963] close(3) = 0 [pid 6972] <... mkdir resumed>) = 0 [pid 6963] close(4 [pid 6983] <... write resumed>) = 33554432 [pid 6973] <... mkdir resumed>) = 0 [pid 6972] mount("/dev/loop0", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 6983] munmap(0x7fbaaaa00000, 138412032 [pid 6963] <... close resumed>) = 0 [pid 6973] mount("/dev/loop4", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 6963] close(5) = -1 EBADF (Bad file descriptor) [pid 6963] close(6) = -1 EBADF (Bad file descriptor) [pid 6963] close(7) = -1 EBADF (Bad file descriptor) [pid 6963] close(8) = -1 EBADF (Bad file descriptor) [pid 6963] close(9) = -1 EBADF (Bad file descriptor) [pid 6963] close(10) = -1 EBADF (Bad file descriptor) [pid 6963] close(11) = -1 EBADF (Bad file descriptor) [pid 6963] close(12) = -1 EBADF (Bad file descriptor) [pid 6963] close(13) = -1 EBADF (Bad file descriptor) [pid 6963] close(14) = -1 EBADF (Bad file descriptor) [ 136.166831][ T6963] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [pid 6963] close(15) = -1 EBADF (Bad file descriptor) [pid 6963] close(16) = -1 EBADF (Bad file descriptor) [pid 6963] close(17) = -1 EBADF (Bad file descriptor) [pid 6963] close(18) = -1 EBADF (Bad file descriptor) [pid 6963] close(19) = -1 EBADF (Bad file descriptor) [pid 6963] close(20) = -1 EBADF (Bad file descriptor) [pid 6963] close(21) = -1 EBADF (Bad file descriptor) [pid 6963] close(22) = -1 EBADF (Bad file descriptor) [pid 6963] close(23) = -1 EBADF (Bad file descriptor) [pid 6963] close(24) = -1 EBADF (Bad file descriptor) [pid 6963] close(25) = -1 EBADF (Bad file descriptor) [pid 6963] close(26) = -1 EBADF (Bad file descriptor) [pid 6963] close(27) = -1 EBADF (Bad file descriptor) [pid 6963] close(28) = -1 EBADF (Bad file descriptor) [pid 6963] close(29) = -1 EBADF (Bad file descriptor) [pid 6963] exit_group(0) = ? [pid 6963] +++ exited with 0 +++ [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=27, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=48 /* 0.48 s */} --- [ 136.200532][ T6972] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 6983] <... munmap resumed>) = 0 [pid 5825] umount2("./25", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5825] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5825] umount2("./25/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./25/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./25/cgroup") = 0 [pid 5825] umount2("./25/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./25/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./25/cgroup.cpu") = 0 [pid 5825] umount2("./25/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./25/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./25/cgroup.net") = 0 [pid 5825] umount2("./25/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./25/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./25/binderfs") = 0 [pid 6983] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5825] umount2("./25/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6983] <... openat resumed>) = 4 [pid 6983] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6974] <... mount resumed>) = 0 [pid 6983] close(3 [pid 6974] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6983] <... close resumed>) = 0 [pid 6974] <... openat resumed>) = 3 [pid 6974] chdir("./file0" [pid 6983] close(4 [pid 6974] <... chdir resumed>) = 0 [pid 6983] <... close resumed>) = 0 [pid 6974] openat(AT_FDCWD, "/dev/loop2", O_RDWR [ 136.244113][ T6973] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 136.247024][ T6974] XFS (loop2): Ending clean mount [ 136.263502][ T6983] loop1: detected capacity change from 0 to 65536 [ 136.263662][ T5825] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 6983] mkdir("./file0", 0777 [pid 6974] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6983] <... mkdir resumed>) = 0 [pid 6974] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 6983] mount("/dev/loop1", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 6974] <... open resumed>) = 4 [ 136.291500][ T29] audit: type=1800 audit(1733456433.786:128): pid=6974 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop2" ino=41 res=0 errno=0 [ 136.315098][ T5966] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 136.328326][ T5966] XFS (loop2): Unmount and run xfs_repair [ 136.334409][ T5966] XFS (loop2): First 128 bytes of corrupted metadata buffer: [pid 6974] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6972] <... mount resumed>) = 0 [pid 6972] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6972] chdir("./file0") = 0 [pid 6972] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 136.343052][ T5966] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 136.345022][ T6972] XFS (loop0): Ending clean mount [ 136.361899][ T5966] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 136.370895][ T5966] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 136.379847][ T5966] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [pid 6972] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 6972] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6973] <... mount resumed>) = 0 [pid 6973] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6973] chdir("./file0") = 0 [ 136.389298][ T5966] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 136.390566][ T6973] XFS (loop4): Ending clean mount [ 136.398402][ T5966] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 136.412396][ T5966] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 136.415777][ T9] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 136.421559][ T5966] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [pid 6973] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6973] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 4 [ 136.441900][ T29] audit: type=1800 audit(1733456433.876:129): pid=6972 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop0" ino=41 res=0 errno=0 [ 136.456539][ T5879] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 136.462338][ T6974] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 136.477040][ T6983] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 6973] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5825] <... umount2 resumed>) = 0 [pid 6974] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 5825] umount2("./25/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6974] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000 [ 136.493422][ T29] audit: type=1800 audit(1733456433.956:130): pid=6973 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop4" ino=41 res=0 errno=0 [ 136.497069][ T6974] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 136.514931][ T9] XFS (loop0): Unmount and run xfs_repair [ 136.534484][ T6974] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6974] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5825] newfstatat(AT_FDCWD, "./25/file0", [pid 6974] close(3 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6974] <... close resumed>) = 0 [pid 6974] close(4 [pid 5825] umount2("./25/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6974] <... close resumed>) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6974] close(5) = -1 EBADF (Bad file descriptor) [pid 5825] openat(AT_FDCWD, "./25/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6974] close(6 [pid 5825] <... openat resumed>) = 4 [pid 6974] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5825] newfstatat(4, "", [pid 6974] close(7) = -1 EBADF (Bad file descriptor) [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 6974] close(8 [pid 5825] getdents64(4, [pid 6974] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6974] close(9 [pid 5825] <... getdents64 resumed>0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 6974] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5825] getdents64(4, [pid 6974] close(10 [pid 5825] <... getdents64 resumed>0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 6974] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6974] close(11 [pid 5825] close(4 [pid 6974] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5825] <... close resumed>) = 0 [pid 6974] close(12 [pid 5825] rmdir("./25/file0" [pid 6974] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6974] close(13 [pid 5825] <... rmdir resumed>) = 0 [pid 6974] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6974] close(14 [pid 5825] getdents64(3, [pid 6974] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6974] close(15 [pid 5825] <... getdents64 resumed>0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 6974] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5825] close(3 [pid 6974] close(16) = -1 EBADF (Bad file descriptor) [pid 6974] close(17 [pid 5825] <... close resumed>) = 0 [pid 6974] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5825] rmdir("./25" [pid 6974] close(18) = -1 EBADF (Bad file descriptor) [pid 6974] close(19 [pid 5825] <... rmdir resumed>) = 0 [pid 6974] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6974] close(20) = -1 EBADF (Bad file descriptor) [pid 6974] close(21) = -1 EBADF (Bad file descriptor) [pid 5825] mkdir("./26", 0777 [pid 6974] close(22 [pid 5825] <... mkdir resumed>) = 0 [pid 6974] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6974] close(23) = -1 EBADF (Bad file descriptor) [pid 5825] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6974] close(24 [pid 5825] <... openat resumed>) = 3 [pid 6974] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6974] close(25) = -1 EBADF (Bad file descriptor) [pid 5825] ioctl(3, LOOP_CLR_FD [pid 6974] close(26 [pid 5825] <... ioctl resumed>) = 0 [pid 6974] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5825] close(3 [ 136.537145][ T5879] XFS (loop4): Unmount and run xfs_repair [ 136.548885][ T9] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 136.556286][ T9] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 136.565419][ T5879] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 136.572909][ T5879] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 136.581863][ T9] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 136.591632][ T5879] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 136.600576][ T9] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 136.609548][ T5879] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 136.619269][ T9] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 136.628240][ T5879] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 136.637174][ T9] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 136.646037][ T9] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 136.654994][ T5879] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 136.663924][ T5879] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 136.672902][ T9] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 136.681850][ T5879] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [pid 6974] close(27) = -1 EBADF (Bad file descriptor) [pid 6974] close(28) = -1 EBADF (Bad file descriptor) [pid 6974] close(29) = -1 EBADF (Bad file descriptor) [pid 6974] exit_group(0) = ? [ 136.690787][ T9] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 136.699916][ T5879] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 136.723299][ T6972] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 136.734642][ T6973] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [pid 6974] +++ exited with 0 +++ [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=27, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=54 /* 0.54 s */} --- [pid 6972] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 5823] restart_syscall(<... resuming interrupted clone ...> [pid 6972] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000) = -1 EFAULT (Bad address) [pid 6972] close(3) = 0 [pid 6972] close(4) = 0 [pid 6972] close(5) = -1 EBADF (Bad file descriptor) [pid 6972] close(6) = -1 EBADF (Bad file descriptor) [pid 6972] close(7) = -1 EBADF (Bad file descriptor) [pid 6972] close(8) = -1 EBADF (Bad file descriptor) [pid 6972] close(9) = -1 EBADF (Bad file descriptor) [pid 6972] close(10) = -1 EBADF (Bad file descriptor) [pid 6972] close(11) = -1 EBADF (Bad file descriptor) [pid 6972] close(12) = -1 EBADF (Bad file descriptor) [pid 6972] close(13) = -1 EBADF (Bad file descriptor) [pid 6972] close(14) = -1 EBADF (Bad file descriptor) [pid 6972] close(15) = -1 EBADF (Bad file descriptor) [pid 6972] close(16) = -1 EBADF (Bad file descriptor) [pid 6972] close(17) = -1 EBADF (Bad file descriptor) [pid 6972] close(18) = -1 EBADF (Bad file descriptor) [pid 6972] close(19) = -1 EBADF (Bad file descriptor) [pid 6972] close(20) = -1 EBADF (Bad file descriptor) [pid 6972] close(21) = -1 EBADF (Bad file descriptor) [pid 6972] close(22) = -1 EBADF (Bad file descriptor) [pid 6972] close(23) = -1 EBADF (Bad file descriptor) [pid 6972] close(24) = -1 EBADF (Bad file descriptor) [pid 6972] close(25) = -1 EBADF (Bad file descriptor) [pid 6972] close(26) = -1 EBADF (Bad file descriptor) [pid 6972] close(27) = -1 EBADF (Bad file descriptor) [pid 6972] close(28) = -1 EBADF (Bad file descriptor) [pid 6972] close(29) = -1 EBADF (Bad file descriptor) [pid 6972] exit_group(0) = ? [pid 6972] +++ exited with 0 +++ [pid 5823] <... restart_syscall resumed>) = 0 [pid 6973] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 5821] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=28, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=49 /* 0.49 s */} --- [pid 6973] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000) = -1 EFAULT (Bad address) [pid 5823] umount2("./25", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6973] close(3 [pid 5821] umount2("./26", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6973] <... close resumed>) = 0 [pid 5823] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6973] close(4 [pid 5821] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] <... openat resumed>) = 3 [pid 6973] <... close resumed>) = 0 [pid 5821] <... openat resumed>) = 3 [pid 5823] newfstatat(3, "", [pid 6973] close(5 [pid 5821] newfstatat(3, "", [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 6973] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5823] getdents64(3, [pid 5821] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 6973] close(6 [pid 5823] <... getdents64 resumed>0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5821] getdents64(3, [pid 6973] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5823] umount2("./25/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6973] close(7 [pid 5821] <... getdents64 resumed>0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... close resumed>) = 0 [pid 6973] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5823] newfstatat(AT_FDCWD, "./25/cgroup", [pid 5821] umount2("./26/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6983] <... mount resumed>) = 0 [pid 6973] close(8 [pid 5821] newfstatat(AT_FDCWD, "./26/cgroup", [ 136.752380][ T6972] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 136.767511][ T6973] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 136.783403][ T6972] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 136.787148][ T6973] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [pid 5823] unlink("./25/cgroup" [pid 5821] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] <... unlink resumed>) = 0 [pid 5821] unlink("./26/cgroup" [pid 5823] umount2("./25/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] <... unlink resumed>) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5821] umount2("./26/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./25/cgroup.cpu", [pid 5821] newfstatat(AT_FDCWD, "./26/cgroup.cpu", [pid 5825] <... clone resumed>, child_tidptr=0x55558159a650) = 28 [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./25/cgroup.cpu") = 0 [pid 5821] unlink("./26/cgroup.cpu" [pid 5823] umount2("./25/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] <... unlink resumed>) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5821] umount2("./26/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] newfstatat(AT_FDCWD, "./25/cgroup.net", [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] newfstatat(AT_FDCWD, "./26/cgroup.net", [pid 5823] unlink("./25/cgroup.net" [pid 5821] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] <... unlink resumed>) = 0 [pid 5821] unlink("./26/cgroup.net" [pid 5823] umount2("./25/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] <... unlink resumed>) = 0 [pid 5823] newfstatat(AT_FDCWD, "./25/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] umount2("./26/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] unlink("./25/binderfs" [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... unlink resumed>) = 0 [pid 5821] newfstatat(AT_FDCWD, "./26/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] umount2("./25/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] unlink("./26/binderfs") = 0 ./strace-static-x86_64: Process 7016 attached [pid 6983] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6973] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7016] set_robust_list(0x55558159a660, 24 [pid 5821] umount2("./26/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6983] <... openat resumed>) = 3 [pid 7016] <... set_robust_list resumed>) = 0 [pid 6983] chdir("./file0" [pid 6973] close(9 [pid 6983] <... chdir resumed>) = 0 [pid 6973] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7016] chdir("./26" [pid 6973] close(10 [pid 6983] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6973] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7016] <... chdir resumed>) = 0 [pid 6973] close(11 [pid 6983] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6973] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7016] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6973] close(12 [pid 6983] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 6973] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7016] <... prctl resumed>) = 0 [pid 6973] close(13 [pid 7016] setpgid(0, 0 [pid 6973] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7016] <... setpgid resumed>) = 0 [pid 6973] close(14 [pid 7016] symlink("/syzcgroup/unified/syz3", "./cgroup" [pid 6973] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7016] <... symlink resumed>) = 0 [pid 6973] close(15 [pid 7016] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu" [pid 6973] <... close resumed>) = -1 EBADF (Bad file descriptor) executing program [pid 7016] <... symlink resumed>) = 0 [pid 6973] close(16 [pid 7016] symlink("/syzcgroup/net/syz3", "./cgroup.net" [pid 6973] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7016] <... symlink resumed>) = 0 [pid 6973] close(17 [pid 7016] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6973] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7016] <... openat resumed>) = 3 [pid 6973] close(18 [pid 7016] write(3, "1000", 4 [pid 6973] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7016] <... write resumed>) = 4 [pid 6973] close(19 [pid 7016] close(3 [pid 6973] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7016] <... close resumed>) = 0 [pid 6973] close(20 [pid 7016] symlink("/dev/binderfs", "./binderfs" [pid 6973] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7016] <... symlink resumed>) = 0 [pid 6973] close(21 [pid 7016] write(1, "executing program\n", 18 [pid 6973] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7016] <... write resumed>) = 18 [pid 6973] close(22 [pid 7016] memfd_create("syzkaller", 0 [pid 6973] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6973] close(23 [pid 7016] <... memfd_create resumed>) = 3 [pid 6973] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7016] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaaaa00000 [pid 6973] close(24) = -1 EBADF (Bad file descriptor) [pid 6973] close(25) = -1 EBADF (Bad file descriptor) [pid 6973] close(26) = -1 EBADF (Bad file descriptor) [pid 6973] close(27) = -1 EBADF (Bad file descriptor) [pid 6973] close(28) = -1 EBADF (Bad file descriptor) [pid 6973] close(29) = -1 EBADF (Bad file descriptor) [pid 6973] exit_group(0) = ? [ 136.820324][ T6983] XFS (loop1): Ending clean mount [ 136.835231][ T5823] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 136.852635][ T5821] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 6973] +++ exited with 0 +++ [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=25, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=56 /* 0.56 s */} --- [pid 5826] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5826] umount2("./23", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5826] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5826] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5826] umount2("./23/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./23/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./23/cgroup") = 0 [pid 5826] umount2("./23/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./23/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./23/cgroup.cpu") = 0 [pid 5826] umount2("./23/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./23/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./23/cgroup.net") = 0 [pid 5826] umount2("./23/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./23/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./23/binderfs") = 0 [pid 5826] umount2("./23/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6983] <... open resumed>) = 4 [ 136.876071][ T29] audit: type=1800 audit(1733456434.366:131): pid=6983 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop1" ino=41 res=0 errno=0 [ 136.909849][ T6983] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 136.921675][ T5826] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 136.948580][ T6983] XFS (loop1): Unmount and run xfs_repair [ 136.969150][ T6983] XFS (loop1): First 128 bytes of corrupted metadata buffer: [pid 6983] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5823] <... umount2 resumed>) = 0 [pid 5821] <... umount2 resumed>) = 0 [pid 5821] umount2("./26/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./26/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] umount2("./26/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] umount2("./25/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] openat(AT_FDCWD, "./26/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5821] <... openat resumed>) = 4 [pid 5823] newfstatat(AT_FDCWD, "./25/file0", [pid 5821] newfstatat(4, "", [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5823] umount2("./25/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] getdents64(4, [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5821] <... getdents64 resumed>0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5823] openat(AT_FDCWD, "./25/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5821] getdents64(4, [pid 5823] <... openat resumed>) = 4 [pid 5821] <... getdents64 resumed>0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5823] newfstatat(4, "", [pid 5821] close(4 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5821] <... close resumed>) = 0 [pid 5823] getdents64(4, [pid 5821] rmdir("./26/file0" [pid 5823] <... getdents64 resumed>0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5821] <... rmdir resumed>) = 0 [pid 5823] getdents64(4, [pid 5821] getdents64(3, [pid 5823] <... getdents64 resumed>0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5821] <... getdents64 resumed>0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5823] close(4 [pid 5821] close(3 [pid 5823] <... close resumed>) = 0 [pid 5821] <... close resumed>) = 0 [pid 5823] rmdir("./25/file0" [pid 5821] rmdir("./26" [pid 5823] <... rmdir resumed>) = 0 [pid 5821] <... rmdir resumed>) = 0 [pid 5823] getdents64(3, [pid 5821] mkdir("./27", 0777 [pid 5823] <... getdents64 resumed>0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5821] <... mkdir resumed>) = 0 [pid 5823] close(3 [pid 5821] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5823] <... close resumed>) = 0 [pid 5821] <... openat resumed>) = 3 [pid 5826] <... umount2 resumed>) = 0 [pid 5823] rmdir("./25" [pid 5826] umount2("./23/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] ioctl(3, LOOP_CLR_FD [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... rmdir resumed>) = 0 [pid 5826] newfstatat(AT_FDCWD, "./23/file0", [pid 5823] mkdir("./26", 0777 [pid 5821] <... ioctl resumed>) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] umount2("./23/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... mkdir resumed>) = 0 [ 136.991832][ T6983] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [pid 5821] close(3 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 137.056407][ T6983] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 137.065509][ T6983] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 137.075440][ T6983] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 137.084461][ T6983] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 137.093693][ T6983] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [pid 5823] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7016] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 5826] openat(AT_FDCWD, "./23/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] <... openat resumed>) = 3 [pid 5826] <... openat resumed>) = 4 [pid 5823] ioctl(3, LOOP_CLR_FD [pid 5826] newfstatat(4, "", [pid 5823] <... ioctl resumed>) = 0 [ 137.102688][ T6983] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 137.111585][ T6983] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 137.120515][ T6983] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5823] close(3 [pid 5826] getdents64(4, 0x5555815a3730 /* 2 entries */, 32768) = 48 [ 137.161620][ T6983] XFS (loop1): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 137.196163][ T6983] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [pid 5826] getdents64(4, [pid 6983] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) executing program [pid 5826] <... getdents64 resumed>0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5823] <... close resumed>) = 0 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7017 attached [pid 7017] set_robust_list(0x55558159a660, 24 [pid 5823] <... clone resumed>, child_tidptr=0x55558159a650) = 28 [pid 7017] <... set_robust_list resumed>) = 0 [pid 7017] chdir("./26") = 0 [pid 7017] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7017] setpgid(0, 0) = 0 [pid 7017] symlink("/syzcgroup/unified/syz2", "./cgroup") = 0 [pid 7017] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu") = 0 [pid 7017] symlink("/syzcgroup/net/syz2", "./cgroup.net") = 0 [pid 7017] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7017] write(3, "1000", 4) = 4 [pid 7017] close(3) = 0 [pid 7017] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7017] write(1, "executing program\n", 18) = 18 [pid 7017] memfd_create("syzkaller", 0) = 3 [pid 7017] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaaaa00000 [pid 5826] close(4) = 0 [pid 5826] rmdir("./23/file0") = 0 [pid 5826] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5826] close(3) = 0 [pid 5826] rmdir("./23") = 0 [pid 5826] mkdir("./24", 0777) = 0 [pid 5826] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5826] ioctl(3, LOOP_CLR_FD) = 0 [pid 5826] close(3 [pid 7016] <... write resumed>) = 33554432 [pid 6983] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000 [pid 7016] munmap(0x7fbaaaa00000, 138412032 [pid 6983] <... openat resumed>) = -1 EFAULT (Bad address) [pid 6983] close(3 [pid 7016] <... munmap resumed>) = 0 [pid 6983] <... close resumed>) = 0 [pid 7016] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6983] close(4 [pid 7016] <... openat resumed>) = 4 [pid 6983] <... close resumed>) = 0 [pid 7016] ioctl(4, LOOP_SET_FD, 3 [pid 6983] close(5) = -1 EBADF (Bad file descriptor) [pid 6983] close(6) = -1 EBADF (Bad file descriptor) [pid 6983] close(7) = -1 EBADF (Bad file descriptor) [pid 6983] close(8) = -1 EBADF (Bad file descriptor) [pid 6983] close(9) = -1 EBADF (Bad file descriptor) [pid 6983] close(10) = -1 EBADF (Bad file descriptor) [pid 6983] close(11) = -1 EBADF (Bad file descriptor) [pid 6983] close(12) = -1 EBADF (Bad file descriptor) [pid 6983] close(13) = -1 EBADF (Bad file descriptor) [pid 6983] close(14 [pid 7016] <... ioctl resumed>) = 0 [pid 6983] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7016] close(3 [pid 6983] close(15 [pid 7016] <... close resumed>) = 0 [pid 6983] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7016] close(4 [pid 6983] close(16 [pid 7016] <... close resumed>) = 0 [pid 6983] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6983] close(17) = -1 EBADF (Bad file descriptor) [pid 6983] close(18 [pid 7016] mkdir("./file0", 0777 [pid 6983] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6983] close(19) = -1 EBADF (Bad file descriptor) [pid 6983] close(20) = -1 EBADF (Bad file descriptor) [pid 6983] close(21) = -1 EBADF (Bad file descriptor) [pid 6983] close(22) = -1 EBADF (Bad file descriptor) [pid 6983] close(23) = -1 EBADF (Bad file descriptor) [pid 6983] close(24) = -1 EBADF (Bad file descriptor) [pid 6983] close(25) = -1 EBADF (Bad file descriptor) [pid 6983] close(26) = -1 EBADF (Bad file descriptor) [pid 7016] <... mkdir resumed>) = 0 [pid 6983] close(27) = -1 EBADF (Bad file descriptor) [pid 6983] close(28 [pid 7016] mount("/dev/loop3", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 6983] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6983] close(29) = -1 EBADF (Bad file descriptor) [pid 6983] exit_group(0) = ? [pid 6983] +++ exited with 0 +++ [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=28, si_uid=0, si_status=0, si_utime=13 /* 0.13 s */, si_stime=54 /* 0.54 s */} --- [pid 5824] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5824] umount2("./26", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5824] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5824] umount2("./26/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./26/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./26/cgroup") = 0 [pid 5824] umount2("./26/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./26/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./26/cgroup.cpu") = 0 [pid 5824] umount2("./26/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./26/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./26/cgroup.net") = 0 [pid 5824] umount2("./26/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./26/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./26/binderfs") = 0 [pid 5824] umount2("./26/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... close resumed>) = 0 [ 137.523282][ T7016] loop3: detected capacity change from 0 to 65536 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7018 attached [ 137.614382][ T5824] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 7018] set_robust_list(0x55558159a660, 24 [pid 5826] <... clone resumed>, child_tidptr=0x55558159a650) = 26 [pid 7018] <... set_robust_list resumed>) = 0 [pid 5821] <... close resumed>) = 0 [pid 7018] chdir("./24" [pid 5821] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7018] <... chdir resumed>) = 0 [pid 7018] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5821] <... clone resumed>, child_tidptr=0x55558159a650) = 29 [pid 7018] <... prctl resumed>) = 0 [pid 7018] setpgid(0, 0) = 0 [pid 7018] symlink("/syzcgroup/unified/syz4", "./cgroup") = 0 [pid 7018] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu") = 0 [pid 7018] symlink("/syzcgroup/net/syz4", "./cgroup.net") = 0 [pid 7018] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7018] write(3, "1000", 4) = 4 [pid 7018] close(3) = 0 [pid 7018] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7018] write(1, "executing program\n", 18executing program ) = 18 [pid 7018] memfd_create("syzkaller", 0) = 3 [pid 7018] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaaaa00000 [pid 7017] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432./strace-static-x86_64: Process 7021 attached [pid 7021] set_robust_list(0x55558159a660, 24) = 0 [pid 7021] chdir("./27") = 0 [pid 7021] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7021] setpgid(0, 0) = 0 [pid 7021] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7021] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7021] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7021] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7021] write(3, "1000", 4) = 4 [pid 7021] close(3) = 0 [pid 7021] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 7021] write(1, "executing program\n", 18) = 18 [pid 7021] memfd_create("syzkaller", 0) = 3 [pid 7021] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaaaa00000 [pid 5824] <... umount2 resumed>) = 0 [pid 5824] umount2("./26/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./26/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] umount2("./26/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./26/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5824] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(4, 0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5824] getdents64(4, 0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5824] close(4) = 0 [pid 5824] rmdir("./26/file0") = 0 [pid 5824] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [ 137.818525][ T7016] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 5824] close(3) = 0 [pid 5824] rmdir("./26" [pid 7016] <... mount resumed>) = 0 [pid 7016] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5824] <... rmdir resumed>) = 0 [pid 7016] <... openat resumed>) = 3 [pid 5824] mkdir("./27", 0777) = 0 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 7016] chdir("./file0") = 0 [pid 5824] ioctl(3, LOOP_CLR_FD [pid 7016] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5824] <... ioctl resumed>) = 0 [pid 7016] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7016] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [ 137.872486][ T7016] XFS (loop3): Ending clean mount [pid 5824] close(3 [pid 7016] <... open resumed>) = 4 [ 137.897818][ T29] audit: type=1800 audit(1733456435.396:132): pid=7016 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop3" ino=41 res=0 errno=0 [ 138.009250][ T5966] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 138.022117][ T5966] XFS (loop3): Unmount and run xfs_repair [ 138.027954][ T5966] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 138.035395][ T5966] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 138.044381][ T5966] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 138.053285][ T5966] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 138.062180][ T5966] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 138.071187][ T5966] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 138.080092][ T5966] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 138.088985][ T5966] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 138.097898][ T5966] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 138.107092][ T7016] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 138.121872][ T7016] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [pid 7016] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5824] <... close resumed>) = 0 [pid 7016] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 7016] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000) = -1 EFAULT (Bad address) [pid 7016] close(3) = 0 [pid 7016] close(4) = 0 [pid 7016] close(5) = -1 EBADF (Bad file descriptor) [pid 7016] close(6) = -1 EBADF (Bad file descriptor) [pid 7016] close(7) = -1 EBADF (Bad file descriptor) [pid 7016] close(8) = -1 EBADF (Bad file descriptor) [pid 7016] close(9) = -1 EBADF (Bad file descriptor) [pid 7016] close(10) = -1 EBADF (Bad file descriptor) [pid 7016] close(11) = -1 EBADF (Bad file descriptor) [pid 7016] close(12) = -1 EBADF (Bad file descriptor) [pid 7016] close(13) = -1 EBADF (Bad file descriptor) [pid 7016] close(14) = -1 EBADF (Bad file descriptor) [ 138.196679][ T7016] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [pid 7016] close(15) = -1 EBADF (Bad file descriptor) [pid 7016] close(16) = -1 EBADF (Bad file descriptor) [pid 7016] close(17) = -1 EBADF (Bad file descriptor) [pid 7016] close(18) = -1 EBADF (Bad file descriptor) [pid 7016] close(19) = -1 EBADF (Bad file descriptor) [pid 7016] close(20) = -1 EBADF (Bad file descriptor) [pid 7016] close(21) = -1 EBADF (Bad file descriptor) [pid 7016] close(22) = -1 EBADF (Bad file descriptor) [pid 7016] close(23) = -1 EBADF (Bad file descriptor) [pid 7016] close(24) = -1 EBADF (Bad file descriptor) [pid 7016] close(25) = -1 EBADF (Bad file descriptor) [pid 7016] close(26) = -1 EBADF (Bad file descriptor) [pid 7016] close(27) = -1 EBADF (Bad file descriptor) [pid 7016] close(28) = -1 EBADF (Bad file descriptor) [pid 7016] close(29) = -1 EBADF (Bad file descriptor) [pid 7016] exit_group(0 [pid 7017] <... write resumed>) = 33554432 [pid 7016] <... exit_group resumed>) = ? [pid 7017] munmap(0x7fbaaaa00000, 138412032 [pid 7016] +++ exited with 0 +++ [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=28, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=47 /* 0.47 s */} --- [pid 5825] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5825] umount2("./26", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5825] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5825] umount2("./26/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7028 attached ) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./26/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./26/cgroup") = 0 [pid 5825] umount2("./26/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./26/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./26/cgroup.cpu") = 0 [pid 5825] umount2("./26/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./26/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./26/cgroup.net") = 0 [pid 5825] umount2("./26/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./26/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./26/binderfs") = 0 [pid 5825] umount2("./26/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7017] <... munmap resumed>) = 0 [pid 7028] set_robust_list(0x55558159a660, 24 [pid 7017] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5824] <... clone resumed>, child_tidptr=0x55558159a650) = 29 [pid 7028] <... set_robust_list resumed>) = 0 [ 138.320927][ T5825] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 7028] chdir("./27" [pid 7018] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 7017] <... openat resumed>) = 4 [pid 7028] <... chdir resumed>) = 0 [pid 7028] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7017] ioctl(4, LOOP_SET_FD, 3 [pid 7028] <... prctl resumed>) = 0 [pid 7028] setpgid(0, 0 [pid 7017] <... ioctl resumed>) = 0 [pid 7028] <... setpgid resumed>) = 0 [pid 7017] close(3) = 0 [pid 7028] symlink("/syzcgroup/unified/syz1", "./cgroup" [pid 7017] close(4) = 0 [pid 7017] mkdir("./file0", 0777 [pid 7028] <... symlink resumed>) = 0 [pid 7028] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu" [pid 7017] <... mkdir resumed>) = 0 [pid 7028] <... symlink resumed>) = 0 [pid 7017] mount("/dev/loop2", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 7028] symlink("/syzcgroup/net/syz1", "./cgroup.net") = 0 [pid 7028] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7028] write(3, "1000", 4) = 4 [ 138.363874][ T7017] loop2: detected capacity change from 0 to 65536 [pid 7028] close(3 [pid 5825] <... umount2 resumed>) = 0 [pid 7028] <... close resumed>) = 0 [pid 5825] umount2("./26/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./26/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] umount2("./26/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./26/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5825] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(4, 0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5825] getdents64(4, 0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5825] close(4) = 0 [pid 5825] rmdir("./26/file0") = 0 [pid 5825] getdents64(3, [pid 7028] symlink("/dev/binderfs", "./binderfs" [pid 5825] <... getdents64 resumed>0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 7028] <... symlink resumed>) = 0 [pid 5825] close(3executing program [pid 7028] write(1, "executing program\n", 18 [pid 5825] <... close resumed>) = 0 [pid 7028] <... write resumed>) = 18 [pid 5825] rmdir("./26" [pid 7028] memfd_create("syzkaller", 0 [pid 5825] <... rmdir resumed>) = 0 [pid 7028] <... memfd_create resumed>) = 3 [pid 5825] mkdir("./27", 0777 [pid 7028] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5825] <... mkdir resumed>) = 0 [pid 7028] <... mmap resumed>) = 0x7fbaaaa00000 [pid 5825] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5825] ioctl(3, LOOP_CLR_FD) = 0 [pid 5825] close(3 [pid 7021] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 5825] <... close resumed>) = 0 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7034 attached [pid 7034] set_robust_list(0x55558159a660, 24 [pid 7028] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 5825] <... clone resumed>, child_tidptr=0x55558159a650) = 29 [pid 7021] <... write resumed>) = 33554432 [pid 7018] <... write resumed>) = 33554432 [pid 7021] munmap(0x7fbaaaa00000, 138412032 [pid 7018] munmap(0x7fbaaaa00000, 138412032 [pid 7021] <... munmap resumed>) = 0 [pid 7021] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7018] <... munmap resumed>) = 0 [pid 7021] <... openat resumed>) = 4 [pid 7018] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7021] ioctl(4, LOOP_SET_FD, 3 [pid 7018] <... openat resumed>) = 4 [pid 7034] <... set_robust_list resumed>) = 0 [pid 7028] <... write resumed>) = 33554432 [pid 7018] ioctl(4, LOOP_SET_FD, 3 [pid 7034] chdir("./27" [pid 7028] munmap(0x7fbaaaa00000, 138412032 [pid 7021] <... ioctl resumed>) = 0 [pid 7034] <... chdir resumed>) = 0 [pid 7021] close(3 [pid 7018] <... ioctl resumed>) = 0 [pid 7034] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7021] <... close resumed>) = 0 [pid 7018] close(3 [pid 7034] <... prctl resumed>) = 0 [pid 7021] close(4 [pid 7018] <... close resumed>) = 0 [pid 7034] setpgid(0, 0 [pid 7021] <... close resumed>) = 0 [pid 7018] close(4 [pid 7034] <... setpgid resumed>) = 0 [pid 7021] mkdir("./file0", 0777 [pid 7018] <... close resumed>) = 0 [pid 7021] <... mkdir resumed>) = 0 [pid 7018] mkdir("./file0", 0777 [ 139.315761][ T7021] loop0: detected capacity change from 0 to 65536 [ 139.317172][ T7017] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 139.323027][ T7018] loop4: detected capacity change from 0 to 65536 [pid 7021] mount("/dev/loop0", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 7018] <... mkdir resumed>) = 0 [pid 7034] symlink("/syzcgroup/unified/syz3", "./cgroup" [pid 7018] mount("/dev/loop4", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 7034] <... symlink resumed>) = 0 [pid 7034] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu") = 0 [pid 7028] <... munmap resumed>) = 0 [pid 7034] symlink("/syzcgroup/net/syz3", "./cgroup.net" [pid 7028] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 7028] ioctl(4, LOOP_SET_FD, 3 [pid 7034] <... symlink resumed>) = 0 [pid 7034] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7034] write(3, "1000", 4) = 4 [pid 7028] <... ioctl resumed>) = 0 [pid 7017] <... mount resumed>) = 0 [pid 7034] close(3 [pid 7028] close(3 [pid 7017] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7034] <... close resumed>) = 0 [pid 7028] <... close resumed>) = 0 [pid 7017] <... openat resumed>) = 3 [pid 7034] symlink("/dev/binderfs", "./binderfs" [pid 7028] close(4 [pid 7017] chdir("./file0" [pid 7034] <... symlink resumed>) = 0 [pid 7017] <... chdir resumed>) = 0 [pid 7017] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7017] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 4 [ 139.398340][ T7028] loop1: detected capacity change from 0 to 65536 [ 139.409263][ T7017] XFS (loop2): Ending clean mount executing program [pid 7017] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 7034] write(1, "executing program\n", 18) = 18 [pid 7034] memfd_create("syzkaller", 0) = 3 [pid 7034] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaaaa00000 [pid 7028] <... close resumed>) = 0 [pid 7028] mkdir("./file0", 0777) = 0 [ 139.431152][ T29] audit: type=1800 audit(1733456436.926:133): pid=7017 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop2" ino=41 res=0 errno=0 [ 139.433027][ T5966] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 139.487431][ T7018] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 139.488933][ T5966] XFS (loop2): Unmount and run xfs_repair [ 139.502407][ T5966] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 139.510272][ T7021] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 139.511427][ T5966] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 139.528945][ T5966] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 139.537877][ T5966] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 139.546791][ T5966] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 139.555659][ T5966] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 139.564663][ T5966] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 139.573579][ T5966] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 139.582471][ T5966] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 139.591968][ T7017] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 139.606729][ T7028] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 139.634385][ T7021] XFS (loop0): Ending clean mount [pid 7028] mount("/dev/loop1", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 7021] <... mount resumed>) = 0 [pid 7021] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7021] chdir("./file0") = 0 [pid 7021] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7021] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 7018] <... mount resumed>) = 0 [pid 7018] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7018] chdir("./file0") = 0 [pid 7018] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [ 139.651230][ T7018] XFS (loop4): Ending clean mount [ 139.657985][ T7017] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 139.672793][ T7017] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 139.676679][ T29] audit: type=1800 audit(1733456437.166:134): pid=7021 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop0" ino=41 res=0 errno=0 [pid 7018] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 7021] <... open resumed>) = 4 [pid 7017] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 7017] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000 [pid 7021] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 7018] <... open resumed>) = 4 [pid 7017] <... openat resumed>) = -1 EFAULT (Bad address) [pid 7017] close(3 [pid 7018] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 7017] <... close resumed>) = 0 [pid 7017] close(4) = 0 [pid 7017] close(5) = -1 EBADF (Bad file descriptor) [ 139.702856][ T29] audit: type=1800 audit(1733456437.206:135): pid=7018 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop4" ino=41 res=0 errno=0 [ 139.731186][ T5966] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 139.731882][ T8] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 139.742992][ T5966] XFS (loop0): Unmount and run xfs_repair [ 139.754122][ T8] XFS (loop4): Unmount and run xfs_repair [ 139.759702][ T5966] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 139.765375][ T8] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 139.772742][ T5966] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 139.780145][ T8] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 139.788955][ T5966] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 139.788972][ T5966] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 139.788986][ T5966] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 139.788998][ T5966] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 139.797908][ T8] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 139.797928][ T8] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 139.797942][ T8] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 139.816943][ T5966] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 139.824509][ T8] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 139.841044][ T5966] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 139.842267][ T8] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [pid 7017] close(6) = -1 EBADF (Bad file descriptor) [pid 7017] close(7) = -1 EBADF (Bad file descriptor) [pid 7017] close(8) = -1 EBADF (Bad file descriptor) [pid 7017] close(9) = -1 EBADF (Bad file descriptor) [pid 7017] close(10) = -1 EBADF (Bad file descriptor) [pid 7017] close(11) = -1 EBADF (Bad file descriptor) [pid 7017] close(12) = -1 EBADF (Bad file descriptor) [pid 7017] close(13) = -1 EBADF (Bad file descriptor) [pid 7017] close(14) = -1 EBADF (Bad file descriptor) [pid 7017] close(15) = -1 EBADF (Bad file descriptor) [pid 7017] close(16) = -1 EBADF (Bad file descriptor) [pid 7017] close(17) = -1 EBADF (Bad file descriptor) [pid 7017] close(18) = -1 EBADF (Bad file descriptor) [pid 7017] close(19) = -1 EBADF (Bad file descriptor) [pid 7017] close(20) = -1 EBADF (Bad file descriptor) [pid 7017] close(21) = -1 EBADF (Bad file descriptor) [pid 7017] close(22) = -1 EBADF (Bad file descriptor) [pid 7017] close(23) = -1 EBADF (Bad file descriptor) [pid 7017] close(24) = -1 EBADF (Bad file descriptor) [pid 7017] close(25) = -1 EBADF (Bad file descriptor) [pid 7017] close(26) = -1 EBADF (Bad file descriptor) [pid 7017] close(27) = -1 EBADF (Bad file descriptor) [pid 7017] close(28) = -1 EBADF (Bad file descriptor) [pid 7017] close(29) = -1 EBADF (Bad file descriptor) [pid 7017] exit_group(0) = ? [pid 7017] +++ exited with 0 +++ [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=28, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=46 /* 0.46 s */} --- [pid 5823] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5823] umount2("./26", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5823] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5823] umount2("./26/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./26/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./26/cgroup") = 0 [pid 5823] umount2("./26/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./26/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./26/cgroup.cpu") = 0 [pid 5823] umount2("./26/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./26/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./26/cgroup.net") = 0 [pid 5823] umount2("./26/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./26/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./26/binderfs") = 0 [pid 5823] umount2("./26/file0", MNT_FORCE|UMOUNT_NOFOLLOW [ 139.878091][ T5966] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 139.887319][ T8] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 139.907277][ T5823] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 139.913201][ T8] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 139.931970][ T7018] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [pid 7034] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 7028] <... mount resumed>) = 0 [ 139.953248][ T7028] XFS (loop1): Ending clean mount [ 139.965407][ T7018] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 139.970688][ T57] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [pid 7028] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7028] chdir("./file0") = 0 [pid 7028] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7028] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 7028] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 7018] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [ 139.980200][ T29] audit: type=1800 audit(1733456437.456:136): pid=7028 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop1" ino=41 res=0 errno=0 [ 139.992790][ T57] XFS (loop1): Unmount and run xfs_repair [ 140.011180][ T7021] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 140.012770][ T7018] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 140.020036][ T57] XFS (loop1): First 128 bytes of corrupted metadata buffer: [pid 7018] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000) = -1 EFAULT (Bad address) [pid 7018] close(3 [pid 5823] <... umount2 resumed>) = 0 [pid 7018] <... close resumed>) = 0 [ 140.062459][ T7021] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 140.063361][ T57] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 140.085576][ T7021] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 140.086912][ T57] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 140.104262][ T57] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [pid 5823] umount2("./26/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7018] close(4 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./26/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] umount2("./26/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./26/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5823] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(4, 0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5823] getdents64(4, 0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5823] close(4) = 0 [pid 5823] rmdir("./26/file0") = 0 [pid 5823] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5823] close(3) = 0 [pid 5823] rmdir("./26") = 0 [pid 5823] mkdir("./27", 0777 [pid 7018] <... close resumed>) = 0 [pid 5823] <... mkdir resumed>) = 0 [pid 7018] close(5 [pid 5823] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7018] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5823] <... openat resumed>) = 3 [pid 7018] close(6 [pid 5823] ioctl(3, LOOP_CLR_FD) = 0 [pid 5823] close(3 [pid 7018] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7018] close(7) = -1 EBADF (Bad file descriptor) [pid 7018] close(8) = -1 EBADF (Bad file descriptor) [pid 7018] close(9) = -1 EBADF (Bad file descriptor) [pid 7018] close(10) = -1 EBADF (Bad file descriptor) [pid 7018] close(11) = -1 EBADF (Bad file descriptor) [pid 7018] close(12) = -1 EBADF (Bad file descriptor) [pid 7018] close(13) = -1 EBADF (Bad file descriptor) [pid 7018] close(14) = -1 EBADF (Bad file descriptor) [pid 7018] close(15) = -1 EBADF (Bad file descriptor) [pid 7018] close(16) = -1 EBADF (Bad file descriptor) [pid 7018] close(17) = -1 EBADF (Bad file descriptor) [pid 7018] close(18) = -1 EBADF (Bad file descriptor) [pid 7018] close(19) = -1 EBADF (Bad file descriptor) [pid 7018] close(20) = -1 EBADF (Bad file descriptor) [pid 7018] close(21) = -1 EBADF (Bad file descriptor) [pid 7018] close(22) = -1 EBADF (Bad file descriptor) [pid 7018] close(23) = -1 EBADF (Bad file descriptor) [pid 7018] close(24) = -1 EBADF (Bad file descriptor) [pid 7018] close(25) = -1 EBADF (Bad file descriptor) [pid 7018] close(26) = -1 EBADF (Bad file descriptor) [pid 7018] close(27) = -1 EBADF (Bad file descriptor) [pid 7018] close(28) = -1 EBADF (Bad file descriptor) [pid 7018] close(29) = -1 EBADF (Bad file descriptor) [pid 7018] exit_group(0) = ? [pid 7018] +++ exited with 0 +++ [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=26, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=51 /* 0.51 s */} --- [pid 5826] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5826] umount2("./24", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5826] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5826] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5826] umount2("./24/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./24/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./24/cgroup") = 0 [pid 5826] umount2("./24/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 140.113429][ T57] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 140.133850][ T57] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 140.143476][ T57] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 140.152702][ T57] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [pid 5826] newfstatat(AT_FDCWD, "./24/cgroup.cpu", [pid 7021] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7021] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000 [pid 5826] unlink("./24/cgroup.cpu" [pid 7021] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5826] <... unlink resumed>) = 0 [pid 7021] close(3 [pid 5826] umount2("./24/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7021] <... close resumed>) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7021] close(4 [pid 5826] newfstatat(AT_FDCWD, "./24/cgroup.net", [pid 7021] <... close resumed>) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7021] close(5 [pid 5826] unlink("./24/cgroup.net" [pid 7021] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5826] <... unlink resumed>) = 0 [pid 7021] close(6 [pid 5826] umount2("./24/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7021] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7021] close(7 [pid 5826] newfstatat(AT_FDCWD, "./24/binderfs", [pid 7021] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7021] close(8 [pid 5826] unlink("./24/binderfs" [pid 7021] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5826] <... unlink resumed>) = 0 [pid 7021] close(9 [pid 5826] umount2("./24/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7021] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7021] close(10) = -1 EBADF (Bad file descriptor) [ 140.163155][ T57] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 140.173008][ T7028] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 140.187539][ T7028] XFS (loop1): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 140.189078][ T5826] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 7021] close(11) = -1 EBADF (Bad file descriptor) [pid 7021] close(12) = -1 EBADF (Bad file descriptor) [pid 7021] close(13) = -1 EBADF (Bad file descriptor) [pid 7021] close(14) = -1 EBADF (Bad file descriptor) [pid 7021] close(15) = -1 EBADF (Bad file descriptor) [pid 7021] close(16) = -1 EBADF (Bad file descriptor) [pid 7021] close(17) = -1 EBADF (Bad file descriptor) [pid 7021] close(18) = -1 EBADF (Bad file descriptor) [pid 7021] close(19) = -1 EBADF (Bad file descriptor) [pid 7021] close(20) = -1 EBADF (Bad file descriptor) [pid 7028] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 7021] close(21) = -1 EBADF (Bad file descriptor) [pid 7021] close(22) = -1 EBADF (Bad file descriptor) [pid 7021] close(23) = -1 EBADF (Bad file descriptor) [pid 7021] close(24) = -1 EBADF (Bad file descriptor) [pid 7021] close(25) = -1 EBADF (Bad file descriptor) [pid 7021] close(26) = -1 EBADF (Bad file descriptor) [pid 7021] close(27) = -1 EBADF (Bad file descriptor) [pid 7021] close(28) = -1 EBADF (Bad file descriptor) [pid 7021] close(29) = -1 EBADF (Bad file descriptor) [pid 7021] exit_group(0) = ? [pid 7028] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000) = -1 EFAULT (Bad address) [pid 7028] close(3) = 0 [pid 7028] close(4) = 0 [pid 7021] +++ exited with 0 +++ [pid 7028] close(5) = -1 EBADF (Bad file descriptor) [pid 7028] close(6) = -1 EBADF (Bad file descriptor) [pid 7028] close(7) = -1 EBADF (Bad file descriptor) [pid 5821] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=29, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=54 /* 0.54 s */} --- [pid 7028] close(8 [pid 5821] restart_syscall(<... resuming interrupted clone ...> [pid 7028] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7028] close(9) = -1 EBADF (Bad file descriptor) [pid 7028] close(10 [pid 5821] <... restart_syscall resumed>) = 0 [pid 7028] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7028] close(11) = -1 EBADF (Bad file descriptor) [pid 7028] close(12 [pid 5821] umount2("./27", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7028] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7028] close(13) = -1 EBADF (Bad file descriptor) [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7028] close(14 [pid 5821] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7028] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7028] close(15 [pid 5821] <... openat resumed>) = 3 [pid 7028] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5821] newfstatat(3, "", [pid 7028] close(16 [pid 5821] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 7028] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7028] close(17 [pid 5821] getdents64(3, [pid 7028] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5821] <... getdents64 resumed>0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 7028] close(18 [pid 5821] umount2("./27/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7028] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7028] close(19 [pid 5821] newfstatat(AT_FDCWD, "./27/cgroup", [pid 7028] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5821] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7028] close(20 [pid 5821] unlink("./27/cgroup" [pid 7028] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5821] <... unlink resumed>) = 0 [pid 7028] close(21 [pid 5821] umount2("./27/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7028] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./27/cgroup.cpu", [pid 7028] close(22 [pid 5821] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7028] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7028] close(23 [pid 5821] unlink("./27/cgroup.cpu" [pid 7028] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7028] close(24 [pid 5821] <... unlink resumed>) = 0 [pid 7028] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7028] close(25) = -1 EBADF (Bad file descriptor) [pid 7028] close(26) = -1 EBADF (Bad file descriptor) [pid 5821] umount2("./27/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7028] close(27) = -1 EBADF (Bad file descriptor) [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7028] close(28) = -1 EBADF (Bad file descriptor) [pid 5821] newfstatat(AT_FDCWD, "./27/cgroup.net", [pid 7028] close(29) = -1 EBADF (Bad file descriptor) [pid 5821] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7028] exit_group(0 [pid 5821] unlink("./27/cgroup.net" [pid 7028] <... exit_group resumed>) = ? [pid 5821] <... unlink resumed>) = 0 [pid 5821] umount2("./27/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./27/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] unlink("./27/binderfs") = 0 [pid 5821] umount2("./27/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7028] +++ exited with 0 +++ [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=29, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=48 /* 0.48 s */} --- [ 140.216657][ T7028] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [pid 5824] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5824] umount2("./27", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5824] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5826] <... umount2 resumed>) = 0 [pid 5824] umount2("./27/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] umount2("./24/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./24/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] umount2("./24/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] openat(AT_FDCWD, "./24/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5826] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5826] getdents64(4, 0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5826] getdents64(4, 0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5826] close(4) = 0 [pid 5826] rmdir("./24/file0") = 0 [pid 5826] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5826] close(3) = 0 [pid 5826] rmdir("./24") = 0 [ 140.269800][ T5821] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 5826] mkdir("./25", 0777) = 0 [pid 5826] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5826] ioctl(3, LOOP_CLR_FD) = 0 [pid 5826] close(3 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./27/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./27/cgroup") = 0 [pid 5824] umount2("./27/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./27/cgroup.cpu", [pid 5823] <... close resumed>) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7062 attached [pid 5824] unlink("./27/cgroup.cpu" [pid 7062] set_robust_list(0x55558159a660, 24 [pid 5823] <... clone resumed>, child_tidptr=0x55558159a650) = 29 [pid 7062] <... set_robust_list resumed>) = 0 [pid 7062] chdir("./27" [pid 5824] <... unlink resumed>) = 0 [pid 7062] <... chdir resumed>) = 0 [pid 7062] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5824] umount2("./27/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7062] <... prctl resumed>) = 0 [pid 7062] setpgid(0, 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./27/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] <... umount2 resumed>) = 0 [pid 7062] <... setpgid resumed>) = 0 [pid 5821] umount2("./27/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] unlink("./27/cgroup.net" [pid 7062] symlink("/syzcgroup/unified/syz2", "./cgroup" [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7062] <... symlink resumed>) = 0 [pid 5824] <... unlink resumed>) = 0 [pid 5821] newfstatat(AT_FDCWD, "./27/file0", [pid 7062] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu" [pid 5821] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7062] <... symlink resumed>) = 0 [pid 5824] umount2("./27/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] umount2("./27/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7062] symlink("/syzcgroup/net/syz2", "./cgroup.net" [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7062] <... symlink resumed>) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5821] openat(AT_FDCWD, "./27/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7062] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5824] newfstatat(AT_FDCWD, "./27/binderfs", [pid 5821] <... openat resumed>) = 4 [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] newfstatat(4, "", [pid 7062] <... openat resumed>) = 3 [pid 5824] unlink("./27/binderfs" [pid 5821] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5824] <... unlink resumed>) = 0 [pid 7062] write(3, "1000", 4 [pid 5824] umount2("./27/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] getdents64(4, [pid 7062] <... write resumed>) = 4 [pid 7062] close(3 [pid 5821] <... getdents64 resumed>0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 7062] <... close resumed>) = 0 [pid 5821] getdents64(4, [pid 7062] symlink("/dev/binderfs", "./binderfs" [pid 5821] <... getdents64 resumed>0x5555815a3730 /* 0 entries */, 32768) = 0 executing program [pid 7062] <... symlink resumed>) = 0 [pid 5821] close(4 [pid 7062] write(1, "executing program\n", 18 [pid 5821] <... close resumed>) = 0 [pid 7062] <... write resumed>) = 18 [pid 5821] rmdir("./27/file0" [pid 7062] memfd_create("syzkaller", 0 [pid 5821] <... rmdir resumed>) = 0 [pid 7062] <... memfd_create resumed>) = 3 [pid 5821] getdents64(3, [pid 7062] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5821] <... getdents64 resumed>0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 7062] <... mmap resumed>) = 0x7fbaaaa00000 [pid 5821] close(3) = 0 [pid 5821] rmdir("./27") = 0 [pid 5821] mkdir("./28", 0777) = 0 [pid 5821] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5821] ioctl(3, LOOP_CLR_FD) = 0 [pid 5821] close(3 [pid 5824] <... umount2 resumed>) = 0 [pid 5824] umount2("./27/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./27/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] umount2("./27/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./27/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5824] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(4, 0x5555815a3730 /* 2 entries */, 32768) = 48 [ 140.459381][ T5824] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 5824] getdents64(4, 0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5824] close(4) = 0 [pid 5824] rmdir("./27/file0") = 0 [pid 5824] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5824] close(3) = 0 [pid 5824] rmdir("./27") = 0 [pid 5824] mkdir("./28", 0777) = 0 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5824] ioctl(3, LOOP_CLR_FD) = 0 [pid 5824] close(3) = 0 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7063 attached [pid 7063] set_robust_list(0x55558159a660, 24 [pid 5824] <... clone resumed>, child_tidptr=0x55558159a650) = 30 [pid 7063] <... set_robust_list resumed>) = 0 [pid 7063] chdir("./28") = 0 [pid 7063] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7063] setpgid(0, 0) = 0 [pid 7063] symlink("/syzcgroup/unified/syz1", "./cgroup") = 0 [pid 7063] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu") = 0 [pid 7063] symlink("/syzcgroup/net/syz1", "./cgroup.net"executing program ) = 0 [pid 7063] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7063] write(3, "1000", 4) = 4 [pid 7063] close(3) = 0 [pid 7063] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7063] write(1, "executing program\n", 18) = 18 [pid 7063] memfd_create("syzkaller", 0) = 3 [pid 7063] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaaaa00000 [pid 5821] <... close resumed>) = 0 [pid 5821] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7064 attached [pid 7064] set_robust_list(0x55558159a660, 24 [pid 5821] <... clone resumed>, child_tidptr=0x55558159a650) = 30 [pid 7064] <... set_robust_list resumed>) = 0 [pid 7064] chdir("./28") = 0 [pid 7064] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7064] setpgid(0, 0) = 0 [pid 7064] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7064] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7064] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7064] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7064] write(3, "1000", 4) = 4 [pid 7064] close(3) = 0 [pid 7064] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7064] write(1, "executing program\n", 18executing program ) = 18 [pid 7064] memfd_create("syzkaller", 0) = 3 [pid 7064] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaaaa00000 [pid 7063] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 7062] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 5826] <... close resumed>) = 0 [pid 7034] <... write resumed>) = 33554432 [pid 7034] munmap(0x7fbaaaa00000, 138412032) = 0 [pid 7034] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 7034] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7034] close(3) = 0 [pid 7034] close(4) = 0 [pid 7034] mkdir("./file0", 0777) = 0 [ 141.189200][ T7034] loop3: detected capacity change from 0 to 65536 [pid 7034] mount("/dev/loop3", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 7062] <... write resumed>) = 33554432 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7064] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 7062] munmap(0x7fbaaaa00000, 138412032./strace-static-x86_64: Process 7070 attached [pid 7070] set_robust_list(0x55558159a660, 24) = 0 [pid 7070] chdir("./25") = 0 [pid 7070] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7070] setpgid(0, 0) = 0 [pid 7070] symlink("/syzcgroup/unified/syz4", "./cgroup") = 0 [pid 7062] <... munmap resumed>) = 0 [pid 7070] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu") = 0 [pid 7070] symlink("/syzcgroup/net/syz4", "./cgroup.net") = 0 [pid 7070] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7070] write(3, "1000", 4) = 4 [pid 7070] close(3) = 0 [pid 7070] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 7070] write(1, "executing program\n", 18) = 18 [pid 7070] memfd_create("syzkaller", 0) = 3 [pid 7070] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaaaa00000 [ 141.458925][ T7034] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 7063] <... write resumed>) = 33554432 [pid 7063] munmap(0x7fbaaaa00000, 138412032 [pid 5826] <... clone resumed>, child_tidptr=0x55558159a650) = 27 [pid 7063] <... munmap resumed>) = 0 [pid 7063] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 7063] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7063] close(3) = 0 [pid 7063] close(4) = 0 [pid 7063] mkdir("./file0", 0777) = 0 [ 141.624017][ T7063] loop1: detected capacity change from 0 to 65536 [pid 7063] mount("/dev/loop1", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 7064] <... write resumed>) = 33554432 [pid 7062] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7064] munmap(0x7fbaaaa00000, 138412032 [pid 7062] <... openat resumed>) = 4 [pid 7034] <... mount resumed>) = 0 [pid 7062] ioctl(4, LOOP_SET_FD, 3 [pid 7034] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7034] chdir("./file0") = 0 [pid 7034] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7034] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 7034] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 7064] <... munmap resumed>) = 0 [pid 7062] <... ioctl resumed>) = 0 [pid 7064] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7062] close(3 [pid 7064] <... openat resumed>) = 4 [pid 7064] ioctl(4, LOOP_SET_FD, 3 [pid 7062] <... close resumed>) = 0 [pid 7062] close(4) = 0 [ 141.776427][ T7034] XFS (loop3): Ending clean mount [ 141.788855][ T7063] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 141.801691][ T7062] loop2: detected capacity change from 0 to 65536 [ 141.804636][ T8] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 141.821060][ T7064] loop0: detected capacity change from 0 to 65536 [ 141.826745][ T29] audit: type=1800 audit(1733456439.296:137): pid=7034 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop3" ino=41 res=0 errno=0 [ 141.847674][ T8] XFS (loop3): Unmount and run xfs_repair [ 141.853432][ T8] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 141.861089][ T8] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [pid 7062] mkdir("./file0", 0777) = 0 [ 141.870274][ T8] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 141.879243][ T8] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 141.888171][ T8] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 141.897104][ T8] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 141.905973][ T8] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 141.915011][ T8] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [pid 7062] mount("/dev/loop2", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 7070] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 7064] <... ioctl resumed>) = 0 [pid 7064] close(3) = 0 [pid 7064] close(4) = 0 [pid 7064] mkdir("./file0", 0777) = 0 [pid 7063] <... mount resumed>) = 0 [pid 7064] mount("/dev/loop0", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 7063] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7063] chdir("./file0") = 0 [pid 7063] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [ 141.923937][ T8] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 141.932989][ T7034] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 141.957030][ T7063] XFS (loop1): Ending clean mount [pid 7063] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 4 [ 141.971029][ T29] audit: type=1800 audit(1733456439.466:138): pid=7063 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop1" ino=41 res=0 errno=0 [ 141.994480][ T5879] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 142.006489][ T5879] XFS (loop1): Unmount and run xfs_repair [ 142.012382][ T5879] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 142.019811][ T5879] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 142.028760][ T5879] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 142.037675][ T5879] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 142.046538][ T5879] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 142.055493][ T5879] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 142.064415][ T5879] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 142.073411][ T5879] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 142.082321][ T5879] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 142.091428][ T7063] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [pid 7063] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 7034] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 7034] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000) = -1 EFAULT (Bad address) [pid 7034] close(3) = 0 [pid 7034] close(4) = 0 [pid 7034] close(5) = -1 EBADF (Bad file descriptor) [pid 7034] close(6 [pid 7070] <... write resumed>) = 33554432 [pid 7034] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7034] close(7) = -1 EBADF (Bad file descriptor) [pid 7034] close(8) = -1 EBADF (Bad file descriptor) [pid 7034] close(9) = -1 EBADF (Bad file descriptor) [pid 7034] close(10) = -1 EBADF (Bad file descriptor) [pid 7034] close(11) = -1 EBADF (Bad file descriptor) [pid 7034] close(12) = -1 EBADF (Bad file descriptor) [pid 7034] close(13 [pid 7070] munmap(0x7fbaaaa00000, 138412032 [pid 7034] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7034] close(14) = -1 EBADF (Bad file descriptor) [pid 7034] close(15) = -1 EBADF (Bad file descriptor) [pid 7034] close(16) = -1 EBADF (Bad file descriptor) [pid 7034] close(17) = -1 EBADF (Bad file descriptor) [pid 7034] close(18) = -1 EBADF (Bad file descriptor) [pid 7034] close(19) = -1 EBADF (Bad file descriptor) [pid 7034] close(20) = -1 EBADF (Bad file descriptor) [pid 7034] close(21) = -1 EBADF (Bad file descriptor) [pid 7034] close(22) = -1 EBADF (Bad file descriptor) [pid 7034] close(23) = -1 EBADF (Bad file descriptor) [pid 7034] close(24) = -1 EBADF (Bad file descriptor) [pid 7034] close(25) = -1 EBADF (Bad file descriptor) [pid 7034] close(26) = -1 EBADF (Bad file descriptor) [pid 7034] close(27) = -1 EBADF (Bad file descriptor) [pid 7034] close(28) = -1 EBADF (Bad file descriptor) [pid 7034] close(29) = -1 EBADF (Bad file descriptor) [pid 7034] exit_group(0) = ? [pid 7034] +++ exited with 0 +++ [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=29, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=49 /* 0.49 s */} --- [pid 5825] restart_syscall(<... resuming interrupted clone ...> [pid 7063] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 7063] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000) = -1 EFAULT (Bad address) [pid 5825] <... restart_syscall resumed>) = 0 [pid 7063] close(3) = 0 [pid 7063] close(4) = 0 [pid 5825] umount2("./27", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7063] close(5) = -1 EBADF (Bad file descriptor) [pid 7063] close(6) = -1 EBADF (Bad file descriptor) [pid 7063] close(7) = -1 EBADF (Bad file descriptor) [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7063] close(8 [pid 5825] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7063] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7063] close(9 [pid 5825] <... openat resumed>) = 3 [pid 7063] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5825] newfstatat(3, "", [pid 7063] close(10) = -1 EBADF (Bad file descriptor) [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 7063] close(11) = -1 EBADF (Bad file descriptor) [pid 5825] getdents64(3, [pid 7063] close(12 [pid 5825] <... getdents64 resumed>0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 7063] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7063] close(13 [pid 5825] umount2("./27/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7063] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7063] close(14 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7063] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7063] close(15) = -1 EBADF (Bad file descriptor) [pid 5825] newfstatat(AT_FDCWD, "./27/cgroup", [pid 7063] close(16) = -1 EBADF (Bad file descriptor) [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 142.116699][ T7034] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 142.132054][ T7034] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 142.141809][ T7063] XFS (loop1): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 142.158964][ T7063] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [pid 7063] close(17 [pid 7070] <... munmap resumed>) = 0 [pid 5825] unlink("./27/cgroup" [pid 7070] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7063] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5825] <... unlink resumed>) = 0 [pid 7070] <... openat resumed>) = 4 [pid 7063] close(18 [pid 5825] umount2("./27/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7070] ioctl(4, LOOP_SET_FD, 3 [pid 7063] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7063] close(19 [pid 5825] newfstatat(AT_FDCWD, "./27/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./27/cgroup.cpu") = 0 [pid 5825] umount2("./27/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./27/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./27/cgroup.net") = 0 [pid 5825] umount2("./27/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./27/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./27/binderfs") = 0 [pid 5825] umount2("./27/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7063] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7070] <... ioctl resumed>) = 0 [pid 7070] close(3 [pid 7063] close(20 [pid 7070] <... close resumed>) = 0 [pid 7070] close(4 [pid 7063] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7070] <... close resumed>) = 0 [pid 7070] mkdir("./file0", 0777 [pid 7063] close(21) = -1 EBADF (Bad file descriptor) [pid 7070] <... mkdir resumed>) = 0 [pid 7063] close(22 [pid 7070] mount("/dev/loop4", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 7063] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7063] close(23) = -1 EBADF (Bad file descriptor) [pid 7063] close(24) = -1 EBADF (Bad file descriptor) [pid 7063] close(25) = -1 EBADF (Bad file descriptor) [pid 7063] close(26) = -1 EBADF (Bad file descriptor) [pid 7063] close(27) = -1 EBADF (Bad file descriptor) [pid 7063] close(28) = -1 EBADF (Bad file descriptor) [pid 7063] close(29) = -1 EBADF (Bad file descriptor) [pid 7063] exit_group(0) = ? [pid 7063] +++ exited with 0 +++ [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=30, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=47 /* 0.47 s */} --- [pid 5824] umount2("./28", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 142.221135][ T7070] loop4: detected capacity change from 0 to 65536 [ 142.228123][ T5825] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 142.260329][ T7064] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 5824] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5824] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5824] umount2("./28/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./28/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./28/cgroup") = 0 [pid 5824] umount2("./28/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./28/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./28/cgroup.cpu") = 0 [pid 5824] umount2("./28/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./28/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./28/cgroup.net") = 0 [pid 5824] umount2("./28/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./28/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./28/binderfs") = 0 [pid 5824] umount2("./28/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... umount2 resumed>) = 0 [pid 5825] umount2("./27/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./27/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] umount2("./27/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 142.276506][ T7062] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 142.298541][ T7070] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 142.317252][ T5824] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 5825] openat(AT_FDCWD, "./27/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5825] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(4, 0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5825] getdents64(4, 0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5825] close(4) = 0 [pid 5825] rmdir("./27/file0" [pid 7064] <... mount resumed>) = 0 [pid 7064] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7064] chdir("./file0") = 0 [pid 7064] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7064] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 5825] <... rmdir resumed>) = 0 [pid 7064] <... open resumed>) = 4 [pid 5825] getdents64(3, [pid 7064] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5825] <... getdents64 resumed>0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 7070] <... mount resumed>) = 0 [pid 5825] close(3 [pid 7070] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7070] chdir("./file0") = 0 [ 142.335197][ T7064] XFS (loop0): Ending clean mount [ 142.351270][ T29] audit: type=1800 audit(1733456439.846:139): pid=7064 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop0" ino=41 res=0 errno=0 [ 142.368890][ T7070] XFS (loop4): Ending clean mount [pid 7070] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5825] <... close resumed>) = 0 [pid 5825] rmdir("./27") = 0 [pid 5825] mkdir("./28", 0777) = 0 [pid 7070] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 7062] <... mount resumed>) = 0 [pid 5825] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5824] <... umount2 resumed>) = 0 [pid 5825] ioctl(3, LOOP_CLR_FD [pid 5824] umount2("./28/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... ioctl resumed>) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 142.389007][ T7062] XFS (loop2): Ending clean mount [ 142.395299][ T8] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 142.407144][ T8] XFS (loop0): Unmount and run xfs_repair [ 142.413529][ T8] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 142.421913][ T8] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 142.431057][ T8] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 142.439994][ T8] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 142.448502][ T57] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 142.449406][ T29] audit: type=1800 audit(1733456439.936:140): pid=7062 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop2" ino=41 res=0 errno=0 [ 142.482942][ T57] XFS (loop2): Unmount and run xfs_repair [ 142.493257][ T8] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 142.506624][ T57] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 142.514036][ T57] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 142.526646][ T8] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [pid 5825] close(3 [pid 5824] newfstatat(AT_FDCWD, "./28/file0", [pid 7062] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7062] <... openat resumed>) = 3 [pid 5824] umount2("./28/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7062] chdir("./file0" [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7062] <... chdir resumed>) = 0 [pid 5824] openat(AT_FDCWD, "./28/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5824] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(4, 0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5824] getdents64(4, 0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5824] close(4) = 0 [pid 7062] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5824] rmdir("./28/file0" [pid 7062] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7062] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 5824] <... rmdir resumed>) = 0 [pid 5824] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5824] close(3) = 0 [pid 5824] rmdir("./28") = 0 [pid 5824] mkdir("./29", 0777) = 0 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5824] ioctl(3, LOOP_CLR_FD) = 0 [pid 5824] close(3 [pid 7062] <... open resumed>) = 4 [ 142.535534][ T8] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 142.540391][ T57] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 142.576605][ T57] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [pid 7062] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 7070] <... open resumed>) = 4 [ 142.576663][ T8] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 142.585474][ T57] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 142.599371][ T5879] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 142.620307][ T5879] XFS (loop4): Unmount and run xfs_repair [ 142.626077][ T5879] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 142.626596][ T57] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 142.633589][ T5879] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 142.651381][ T8] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 142.656594][ T57] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 142.660335][ T5879] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 142.678151][ T5879] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 142.686624][ T57] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 142.687049][ T5879] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 142.695817][ T57] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 142.704699][ T5879] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 142.722612][ T5879] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 142.731956][ T5879] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [pid 7070] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5824] <... close resumed>) = 0 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7106 attached , child_tidptr=0x55558159a650) = 31 [ 142.740893][ T5879] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 142.749974][ T7070] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 142.750294][ T7064] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 142.772970][ T7062] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 142.794829][ T29] audit: type=1800 audit(1733456440.066:141): pid=7070 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop4" ino=41 res=0 errno=0 [ 142.803343][ T7062] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 142.820064][ T7064] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [pid 7106] set_robust_list(0x55558159a660, 24) = 0 [pid 7062] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 7106] chdir("./29" [pid 7070] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 7062] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000 [pid 7106] <... chdir resumed>) = 0 [pid 7062] <... openat resumed>) = -1 EFAULT (Bad address) [pid 7106] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7062] close(3 [pid 7106] <... prctl resumed>) = 0 [pid 7062] <... close resumed>) = 0 [pid 7106] setpgid(0, 0) = 0 [pid 7070] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000 [pid 7064] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 7062] close(4 [pid 7070] <... openat resumed>) = -1 EFAULT (Bad address) [pid 7064] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000 [pid 7070] close(3 [pid 7064] <... openat resumed>) = -1 EFAULT (Bad address) [pid 7070] <... close resumed>) = 0 [pid 7064] close(3 [pid 7070] close(4 [pid 7064] <... close resumed>) = 0 [pid 7070] <... close resumed>) = 0 [pid 7064] close(4 [pid 7070] close(5 [pid 7064] <... close resumed>) = 0 [pid 7070] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7064] close(5 [pid 7070] close(6 [pid 7064] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7070] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7064] close(6 [pid 7070] close(7 [pid 7064] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7070] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7064] close(7 [pid 7070] close(8 [pid 7064] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7070] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7064] close(8 [pid 7070] close(9 [pid 7064] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7070] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7064] close(9 [pid 7070] close(10 [pid 7064] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7106] symlink("/syzcgroup/unified/syz1", "./cgroup" [pid 7062] <... close resumed>) = 0 [pid 7062] close(5) = -1 EBADF (Bad file descriptor) [pid 7070] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7064] close(10 [pid 7106] <... symlink resumed>) = 0 [pid 7062] close(6 [pid 7070] close(11 [pid 7064] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7070] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7064] close(11 [pid 7070] close(12 [pid 7064] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7070] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7064] close(12 [pid 7070] close(13 [pid 7064] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7070] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7064] close(13 [pid 7070] close(14 [pid 7064] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7070] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7064] close(14 [pid 7070] close(15 [pid 7064] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7070] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7064] close(15 [pid 7070] close(16 [pid 7064] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7070] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7064] close(16 [pid 7070] close(17 [pid 7064] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7070] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7064] close(17 [pid 7070] close(18 [pid 7064] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7070] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7064] close(18 [pid 7070] close(19 [pid 7064] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7070] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7064] close(19 [pid 7070] close(20 [pid 7064] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7070] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7064] close(20 [pid 7070] close(21 [pid 7064] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7070] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7064] close(21 [pid 7070] close(22 [pid 7064] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7070] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7064] close(22 [pid 7070] close(23 [pid 7064] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7070] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7064] close(23 [pid 7070] close(24 [pid 7064] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7070] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7064] close(24 [pid 7070] close(25 [pid 7064] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7070] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7064] close(25 [pid 7070] close(26 [pid 7064] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7070] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7064] close(26 [pid 7070] close(27 [pid 7064] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7070] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7064] close(27 [pid 7070] close(28 [pid 7064] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7070] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7064] close(28 [pid 7070] close(29 [pid 7064] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7070] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7064] close(29 [pid 7106] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu" [pid 7070] exit_group(0 [pid 7064] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7062] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7062] close(7 [pid 7106] <... symlink resumed>) = 0 [pid 7070] <... exit_group resumed>) = ? [pid 7064] exit_group(0 [pid 7062] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7062] close(8 [pid 7106] symlink("/syzcgroup/net/syz1", "./cgroup.net" [pid 7062] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7070] +++ exited with 0 +++ [pid 7064] <... exit_group resumed>) = ? [pid 7062] close(9 [pid 7106] <... symlink resumed>) = 0 [pid 7064] +++ exited with 0 +++ [pid 7062] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=27, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=51 /* 0.51 s */} --- [pid 7062] close(10) = -1 EBADF (Bad file descriptor) [pid 5826] restart_syscall(<... resuming interrupted clone ...> [pid 7062] close(11 [pid 5821] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=30, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=49 /* 0.49 s */} --- [pid 5821] restart_syscall(<... resuming interrupted clone ...> [pid 7062] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7106] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7062] close(12 [pid 5821] <... restart_syscall resumed>) = 0 [pid 7062] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5821] umount2("./28", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7106] <... openat resumed>) = 3 [pid 5821] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7062] close(13 [pid 5821] <... openat resumed>) = 3 [pid 5821] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5821] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5821] umount2("./28/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./28/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] unlink("./28/cgroup") = 0 [pid 5821] umount2("./28/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./28/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] unlink("./28/cgroup.cpu") = 0 [pid 5821] umount2("./28/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./28/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] unlink("./28/cgroup.net") = 0 [pid 5821] umount2("./28/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./28/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] unlink("./28/binderfs") = 0 [ 142.834478][ T7062] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 142.849737][ T7070] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 142.878190][ T7064] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 142.886652][ T7070] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [pid 5821] umount2("./28/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7062] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7062] close(14) = -1 EBADF (Bad file descriptor) [pid 7062] close(15) = -1 EBADF (Bad file descriptor) [pid 7062] close(16) = -1 EBADF (Bad file descriptor) [pid 7062] close(17) = -1 EBADF (Bad file descriptor) [pid 7062] close(18) = -1 EBADF (Bad file descriptor) [pid 7062] close(19) = -1 EBADF (Bad file descriptor) [pid 7062] close(20) = -1 EBADF (Bad file descriptor) [pid 7062] close(21) = -1 EBADF (Bad file descriptor) [pid 7062] close(22) = -1 EBADF (Bad file descriptor) [pid 7062] close(23) = -1 EBADF (Bad file descriptor) [pid 7062] close(24) = -1 EBADF (Bad file descriptor) [pid 7062] close(25) = -1 EBADF (Bad file descriptor) [pid 7062] close(26) = -1 EBADF (Bad file descriptor) [pid 7062] close(27) = -1 EBADF (Bad file descriptor) [pid 7062] close(28) = -1 EBADF (Bad file descriptor) [pid 7062] close(29) = -1 EBADF (Bad file descriptor) [pid 7062] exit_group(0) = ? [pid 7062] +++ exited with 0 +++ [pid 5826] <... restart_syscall resumed>) = 0 [pid 7106] write(3, "1000", 4 [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=29, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=47 /* 0.47 s */} --- [pid 7106] <... write resumed>) = 4 [pid 7106] close(3 [pid 5826] umount2("./25", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7106] <... close resumed>) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] umount2("./27", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7106] symlink("/dev/binderfs", "./binderfs" [pid 5826] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7106] <... symlink resumed>) = 0 [pid 5826] <... openat resumed>) = 3 [pid 5823] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] newfstatat(3, "", [pid 7106] write(1, "executing program\n", 18executing program [pid 5823] <... openat resumed>) = 3 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5823] newfstatat(3, "", [pid 7106] <... write resumed>) = 18 [pid 5826] getdents64(3, [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5826] <... getdents64 resumed>0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5823] getdents64(3, [pid 7106] memfd_create("syzkaller", 0 [pid 5826] umount2("./25/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... getdents64 resumed>0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7106] <... memfd_create resumed>) = 3 [pid 5826] newfstatat(AT_FDCWD, "./25/cgroup", [pid 5823] umount2("./27/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7106] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7106] <... mmap resumed>) = 0x7fbaaaa00000 [pid 5823] newfstatat(AT_FDCWD, "./27/cgroup", [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 142.939671][ T5821] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 5823] unlink("./27/cgroup" [pid 5826] unlink("./25/cgroup" [pid 5823] <... unlink resumed>) = 0 [pid 5826] <... unlink resumed>) = 0 [pid 5825] <... close resumed>) = 0 [pid 5823] umount2("./27/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] umount2("./25/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./27/cgroup.cpu", [pid 5826] newfstatat(AT_FDCWD, "./25/cgroup.cpu", [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./27/cgroup.cpu" [pid 5826] unlink("./25/cgroup.cpu" [pid 5823] <... unlink resumed>) = 0 [pid 5826] <... unlink resumed>) = 0 [pid 5823] umount2("./27/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] umount2("./25/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./27/cgroup.net", [pid 5826] newfstatat(AT_FDCWD, "./25/cgroup.net", [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] <... clone resumed>, child_tidptr=0x55558159a650) = 30 [pid 5823] unlink("./27/cgroup.net" [pid 5826] unlink("./25/cgroup.net" [pid 5823] <... unlink resumed>) = 0 [pid 5826] <... unlink resumed>) = 0 [pid 5823] umount2("./27/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] umount2("./25/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./27/binderfs", [pid 5826] newfstatat(AT_FDCWD, "./25/binderfs", [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./27/binderfs" [pid 5826] unlink("./25/binderfs" [pid 5823] <... unlink resumed>) = 0 [pid 5826] <... unlink resumed>) = 0 [pid 5823] umount2("./27/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] umount2("./25/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] <... umount2 resumed>) = 0 [pid 5821] umount2("./28/file0", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7107 attached ) = -1 EINVAL (Invalid argument) [pid 5826] <... umount2 resumed>) = 0 [pid 7107] set_robust_list(0x55558159a660, 24) = 0 [pid 5826] umount2("./25/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7107] chdir("./28" [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./28/file0", [pid 7107] <... chdir resumed>) = 0 [pid 5826] newfstatat(AT_FDCWD, "./25/file0", [pid 5821] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] umount2("./28/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7107] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5826] umount2("./25/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7107] <... prctl resumed>) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5821] openat(AT_FDCWD, "./28/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7107] setpgid(0, 0 [pid 5826] openat(AT_FDCWD, "./25/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5821] <... openat resumed>) = 4 [pid 7107] <... setpgid resumed>) = 0 [pid 7107] symlink("/syzcgroup/unified/syz3", "./cgroup" [pid 5826] <... openat resumed>) = 4 [pid 5821] newfstatat(4, "", [pid 7107] <... symlink resumed>) = 0 [pid 5826] newfstatat(4, "", [pid 5821] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5821] getdents64(4, [pid 5826] getdents64(4, [pid 5821] <... getdents64 resumed>0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5826] <... getdents64 resumed>0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5821] getdents64(4, [pid 7107] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu" [pid 5826] getdents64(4, [pid 5821] <... getdents64 resumed>0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 7107] <... symlink resumed>) = 0 [pid 5826] <... getdents64 resumed>0x5555815a3730 /* 0 entries */, 32768) = 0 [ 143.069154][ T5823] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 143.078429][ T5826] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 5821] close(4 [pid 7107] symlink("/syzcgroup/net/syz3", "./cgroup.net" [pid 5826] close(4 [pid 7107] <... symlink resumed>) = 0 [pid 5826] <... close resumed>) = 0 [pid 5821] <... close resumed>) = 0 [pid 7107] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5826] rmdir("./25/file0" [pid 5821] rmdir("./28/file0" [pid 7107] <... openat resumed>) = 3 [pid 5826] <... rmdir resumed>) = 0 [pid 5821] <... rmdir resumed>) = 0 [pid 7107] write(3, "1000", 4 [pid 5826] getdents64(3, [pid 5821] getdents64(3, [pid 7107] <... write resumed>) = 4 [pid 5826] <... getdents64 resumed>0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5823] <... umount2 resumed>) = 0 [pid 5823] umount2("./27/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./27/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] umount2("./27/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./27/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5823] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(4, 0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5823] getdents64(4, 0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 7107] close(3 [pid 5826] close(3 [pid 5823] close(4 [pid 5821] <... getdents64 resumed>0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 7107] <... close resumed>) = 0 [pid 5826] <... close resumed>) = 0 [pid 5823] <... close resumed>) = 0 [pid 7107] symlink("/dev/binderfs", "./binderfs" [pid 5826] rmdir("./25" [pid 5823] rmdir("./27/file0" [pid 7107] <... symlink resumed>) = 0 [pid 5826] <... rmdir resumed>) = 0 [pid 5823] <... rmdir resumed>) = 0 [pid 7107] write(1, "executing program\n", 18 [pid 5823] getdents64(3, executing program [pid 5821] close(3 [pid 5826] mkdir("./26", 0777 [pid 5823] <... getdents64 resumed>0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 7107] <... write resumed>) = 18 [pid 5826] <... mkdir resumed>) = 0 [pid 5823] close(3 [pid 5821] <... close resumed>) = 0 [pid 7107] memfd_create("syzkaller", 0 [pid 5826] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5823] <... close resumed>) = 0 [pid 5821] rmdir("./28" [pid 5826] <... openat resumed>) = 3 [pid 5823] rmdir("./27" [pid 5821] <... rmdir resumed>) = 0 [pid 7107] <... memfd_create resumed>) = 3 [pid 5826] ioctl(3, LOOP_CLR_FD [pid 5823] <... rmdir resumed>) = 0 [pid 5821] mkdir("./29", 0777 [pid 7107] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5826] <... ioctl resumed>) = 0 [pid 5823] mkdir("./28", 0777 [pid 5821] <... mkdir resumed>) = 0 [pid 7107] <... mmap resumed>) = 0x7fbaaaa00000 [pid 5826] close(3 [pid 5823] <... mkdir resumed>) = 0 [pid 5821] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5823] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5823] ioctl(3, LOOP_CLR_FD) = 0 [pid 5823] close(3 [pid 5821] <... openat resumed>) = 3 [pid 5821] ioctl(3, LOOP_CLR_FD) = 0 [pid 5821] close(3 [pid 7106] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 5826] <... close resumed>) = 0 [pid 5823] <... close resumed>) = 0 [pid 5821] <... close resumed>) = 0 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5821] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7109 attached ./strace-static-x86_64: Process 7108 attached [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7109] set_robust_list(0x55558159a660, 24 [pid 7108] set_robust_list(0x55558159a660, 24 [pid 5826] <... clone resumed>, child_tidptr=0x55558159a650) = 28 [pid 5821] <... clone resumed>, child_tidptr=0x55558159a650) = 31 [pid 7109] <... set_robust_list resumed>) = 0 [pid 7108] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 7110 attached [pid 7109] chdir("./26" [pid 7108] chdir("./29" [pid 7110] set_robust_list(0x55558159a660, 24 [pid 7109] <... chdir resumed>) = 0 [pid 7108] <... chdir resumed>) = 0 [pid 5823] <... clone resumed>, child_tidptr=0x55558159a650) = 30 [pid 7109] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7108] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7110] <... set_robust_list resumed>) = 0 [pid 7109] <... prctl resumed>) = 0 [pid 7108] <... prctl resumed>) = 0 [pid 7110] chdir("./28" [pid 7109] setpgid(0, 0 [pid 7108] setpgid(0, 0 [pid 7110] <... chdir resumed>) = 0 [pid 7110] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7109] <... setpgid resumed>) = 0 [pid 7108] <... setpgid resumed>) = 0 [pid 7110] <... prctl resumed>) = 0 [pid 7110] setpgid(0, 0 [pid 7109] symlink("/syzcgroup/unified/syz4", "./cgroup" [pid 7108] symlink("/syzcgroup/unified/syz0", "./cgroup" [pid 7110] <... setpgid resumed>) = 0 [pid 7110] symlink("/syzcgroup/unified/syz2", "./cgroup" [pid 7109] <... symlink resumed>) = 0 [pid 7108] <... symlink resumed>) = 0 [pid 7109] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu" [pid 7108] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu" [pid 7110] <... symlink resumed>) = 0 [pid 7110] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu" [pid 7109] <... symlink resumed>) = 0 [pid 7108] <... symlink resumed>) = 0 [pid 7109] symlink("/syzcgroup/net/syz4", "./cgroup.net" [pid 7108] symlink("/syzcgroup/net/syz0", "./cgroup.net" [pid 7110] <... symlink resumed>) = 0 [pid 7110] symlink("/syzcgroup/net/syz2", "./cgroup.net" [pid 7109] <... symlink resumed>) = 0 [pid 7108] <... symlink resumed>) = 0 [pid 7109] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7108] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7110] <... symlink resumed>) = 0 [pid 7110] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7109] <... openat resumed>) = 3 [pid 7108] <... openat resumed>) = 3 [pid 7110] write(3, "1000", 4) = 4 [pid 7109] write(3, "1000", 4 [pid 7108] write(3, "1000", 4 [pid 7110] close(3) = 0 [pid 7109] <... write resumed>) = 4 [pid 7108] <... write resumed>) = 4 [pid 7110] symlink("/dev/binderfs", "./binderfs" [pid 7109] close(3 [pid 7108] close(3 [pid 7110] <... symlink resumed>) = 0 [pid 7109] <... close resumed>) = 0 [pid 7108] <... close resumed>) = 0 [pid 7110] write(1, "executing program\n", 18) = 18 [pid 7109] symlink("/dev/binderfs", "./binderfs" [pid 7108] symlink("/dev/binderfs", "./binderfs"executing program [pid 7110] memfd_create("syzkaller", 0 [pid 7109] <... symlink resumed>) = 0 [pid 7108] <... symlink resumed>) = 0 [pid 7109] write(1, "executing program\n", 18executing program [pid 7108] write(1, "executing program\n", 18executing program [pid 7109] <... write resumed>) = 18 [pid 7108] <... write resumed>) = 18 [pid 7110] <... memfd_create resumed>) = 3 [pid 7109] memfd_create("syzkaller", 0 [pid 7108] memfd_create("syzkaller", 0 [pid 7109] <... memfd_create resumed>) = 3 [pid 7108] <... memfd_create resumed>) = 3 [pid 7109] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7108] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7109] <... mmap resumed>) = 0x7fbaaaa00000 [pid 7108] <... mmap resumed>) = 0x7fbaaaa00000 [pid 7110] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7107] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 7110] <... mmap resumed>) = 0x7fbaaaa00000 [pid 7106] <... write resumed>) = 33554432 [pid 7106] munmap(0x7fbaaaa00000, 138412032 [pid 7109] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 7108] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 7106] <... munmap resumed>) = 0 [pid 7106] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [ 144.151879][ T7106] loop1: detected capacity change from 0 to 65536 [pid 7106] ioctl(4, LOOP_SET_FD, 3 [pid 7110] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 7106] <... ioctl resumed>) = 0 [pid 7106] close(3) = 0 [pid 7106] close(4) = 0 [pid 7106] mkdir("./file0", 0777) = 0 [pid 7106] mount("/dev/loop1", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 7109] <... write resumed>) = 33554432 [pid 7107] <... write resumed>) = 33554432 [pid 7107] munmap(0x7fbaaaa00000, 138412032 [pid 7109] munmap(0x7fbaaaa00000, 138412032 [pid 7108] <... write resumed>) = 33554432 [pid 7107] <... munmap resumed>) = 0 [pid 7108] munmap(0x7fbaaaa00000, 138412032 [pid 7107] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 7107] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7107] close(3) = 0 [pid 7107] close(4) = 0 [pid 7107] mkdir("./file0", 0777) = 0 [pid 7107] mount("/dev/loop3", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 7108] <... munmap resumed>) = 0 [pid 7108] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 144.658248][ T7107] loop3: detected capacity change from 0 to 65536 [pid 7108] ioctl(4, LOOP_SET_FD, 3 [pid 7109] <... munmap resumed>) = 0 [pid 7110] <... write resumed>) = 33554432 [pid 7108] <... ioctl resumed>) = 0 [ 144.700330][ T7108] loop0: detected capacity change from 0 to 65536 [pid 7110] munmap(0x7fbaaaa00000, 138412032) = 0 [pid 7109] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7108] close(3 [pid 7110] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7109] <... openat resumed>) = 4 [pid 7110] <... openat resumed>) = 4 [pid 7110] ioctl(4, LOOP_SET_FD, 3 [pid 7109] ioctl(4, LOOP_SET_FD, 3 [pid 7108] <... close resumed>) = 0 [pid 7108] close(4 [pid 7110] <... ioctl resumed>) = 0 [pid 7109] <... ioctl resumed>) = 0 [pid 7108] <... close resumed>) = 0 [pid 7110] close(3 [pid 7109] close(3 [pid 7108] mkdir("./file0", 0777 [pid 7110] <... close resumed>) = 0 [pid 7109] <... close resumed>) = 0 [pid 7108] <... mkdir resumed>) = 0 [pid 7110] close(4 [pid 7109] close(4 [pid 7108] mount("/dev/loop0", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 7110] <... close resumed>) = 0 [pid 7110] mkdir("./file0", 0777) = 0 [pid 7110] mount("/dev/loop2", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 7109] <... close resumed>) = 0 [pid 7109] mkdir("./file0", 0777) = 0 [ 144.759924][ T7107] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 144.769885][ T7106] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 144.776187][ T7110] loop2: detected capacity change from 0 to 65536 [ 144.786320][ T7109] loop4: detected capacity change from 0 to 65536 [pid 7109] mount("/dev/loop4", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 7106] <... mount resumed>) = 0 [pid 7106] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7106] chdir("./file0") = 0 [pid 7106] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7106] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 4 [ 144.839997][ T7106] XFS (loop1): Ending clean mount [pid 7106] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 7107] <... mount resumed>) = 0 [pid 7107] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7107] chdir("./file0") = 0 [pid 7107] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [ 144.862257][ T29] audit: type=1800 audit(1733456442.356:142): pid=7106 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop1" ino=41 res=0 errno=0 [ 144.875758][ T7107] XFS (loop3): Ending clean mount [ 144.887752][ T57] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 144.903559][ T57] XFS (loop1): Unmount and run xfs_repair [pid 7107] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 4 [ 144.909577][ T57] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 144.917677][ T57] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 144.923056][ T8] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 144.926835][ T57] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 144.946634][ T29] audit: type=1800 audit(1733456442.416:143): pid=7107 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop3" ino=41 res=0 errno=0 [ 144.947029][ T57] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 144.975956][ T57] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 144.985661][ T57] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 144.987819][ T7110] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 144.994783][ T7108] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 145.005049][ T8] XFS (loop3): Unmount and run xfs_repair [ 145.012120][ T57] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 145.021899][ T7109] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 145.026661][ T57] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 145.037532][ T8] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 145.044296][ T57] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 145.054148][ T8] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 145.060319][ T7106] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 145.071886][ T8] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 145.089662][ T7106] XFS (loop1): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 145.097211][ T7108] XFS (loop0): Ending clean mount [pid 7107] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 7108] <... mount resumed>) = 0 [pid 7106] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 7106] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000) = -1 EFAULT (Bad address) [pid 7106] close(3) = 0 [pid 7106] close(4) = 0 [pid 7106] close(5) = -1 EBADF (Bad file descriptor) [pid 7106] close(6) = -1 EBADF (Bad file descriptor) [pid 7106] close(7) = -1 EBADF (Bad file descriptor) [pid 7106] close(8) = -1 EBADF (Bad file descriptor) [pid 7106] close(9) = -1 EBADF (Bad file descriptor) [pid 7106] close(10) = -1 EBADF (Bad file descriptor) [pid 7106] close(11) = -1 EBADF (Bad file descriptor) [pid 7106] close(12) = -1 EBADF (Bad file descriptor) [pid 7106] close(13) = -1 EBADF (Bad file descriptor) [pid 7106] close(14) = -1 EBADF (Bad file descriptor) [pid 7106] close(15) = -1 EBADF (Bad file descriptor) [pid 7106] close(16) = -1 EBADF (Bad file descriptor) [pid 7106] close(17) = -1 EBADF (Bad file descriptor) [pid 7106] close(18) = -1 EBADF (Bad file descriptor) [pid 7106] close(19) = -1 EBADF (Bad file descriptor) [pid 7106] close(20) = -1 EBADF (Bad file descriptor) [pid 7106] close(21) = -1 EBADF (Bad file descriptor) [pid 7106] close(22) = -1 EBADF (Bad file descriptor) [pid 7106] close(23) = -1 EBADF (Bad file descriptor) [pid 7106] close(24) = -1 EBADF (Bad file descriptor) [pid 7106] close(25) = -1 EBADF (Bad file descriptor) [pid 7106] close(26) = -1 EBADF (Bad file descriptor) [pid 7106] close(27) = -1 EBADF (Bad file descriptor) [pid 7106] close(28) = -1 EBADF (Bad file descriptor) [pid 7108] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7106] close(29 [pid 7108] <... openat resumed>) = 3 [ 145.105110][ T7106] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 145.110260][ T8] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 145.128791][ T8] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 145.132744][ T7110] XFS (loop2): Ending clean mount [ 145.137796][ T8] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 145.151794][ T8] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [pid 7110] <... mount resumed>) = 0 [pid 7108] chdir("./file0" [pid 7106] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7110] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7108] <... chdir resumed>) = 0 [pid 7110] <... openat resumed>) = 3 [pid 7108] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7110] chdir("./file0" [pid 7108] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7110] <... chdir resumed>) = 0 [pid 7108] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 7110] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7110] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 7109] <... mount resumed>) = 0 [pid 7108] <... open resumed>) = 4 [pid 7106] exit_group(0 [ 145.161874][ T8] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 145.163540][ T7109] XFS (loop4): Ending clean mount [ 145.170860][ T8] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 145.170919][ T7107] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 145.182053][ T29] audit: type=1800 audit(1733456442.676:144): pid=7108 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop0" ino=41 res=0 errno=0 [ 145.189098][ T7107] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 145.203330][ T29] audit: type=1800 audit(1733456442.696:145): pid=7110 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop2" ino=41 res=0 errno=0 [ 145.218282][ T7107] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [pid 7108] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 7110] <... open resumed>) = 4 [pid 7109] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7107] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 7106] <... exit_group resumed>) = ? [pid 7109] <... openat resumed>) = 3 [pid 7107] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000 [pid 7106] +++ exited with 0 +++ [pid 7109] chdir("./file0" [pid 7107] <... openat resumed>) = -1 EFAULT (Bad address) [pid 7110] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 7109] <... chdir resumed>) = 0 [pid 7107] close(3 [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=31, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=56 /* 0.56 s */} --- [pid 7109] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7107] <... close resumed>) = 0 [pid 5824] umount2("./29", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7109] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7107] close(4 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7109] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 7107] <... close resumed>) = 0 [pid 5824] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7107] close(5 [pid 5824] <... openat resumed>) = 3 [pid 7107] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] newfstatat(3, "", [pid 7107] close(6 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 7107] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] getdents64(3, [pid 7107] close(7 [pid 5824] <... getdents64 resumed>0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 7107] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] umount2("./29/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7107] close(8 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7107] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] newfstatat(AT_FDCWD, "./29/cgroup", [pid 7107] close(9 [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7107] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] unlink("./29/cgroup" [pid 7107] close(10 [pid 5824] <... unlink resumed>) = 0 [pid 7107] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] umount2("./29/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7107] close(11 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7107] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] newfstatat(AT_FDCWD, "./29/cgroup.cpu", [pid 7107] close(12 [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7107] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] unlink("./29/cgroup.cpu" [pid 7107] close(13 [pid 5824] <... unlink resumed>) = 0 [pid 7107] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] umount2("./29/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7107] close(14 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7107] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] newfstatat(AT_FDCWD, "./29/cgroup.net", [pid 7107] close(15 [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7107] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] unlink("./29/cgroup.net" [pid 7107] close(16 [pid 5824] <... unlink resumed>) = 0 [pid 7107] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] umount2("./29/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7107] close(17 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7107] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] newfstatat(AT_FDCWD, "./29/binderfs", [pid 7107] close(18 [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7107] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] unlink("./29/binderfs" [pid 7107] close(19 [pid 5824] <... unlink resumed>) = 0 [pid 7107] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] umount2("./29/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7107] close(20) = -1 EBADF (Bad file descriptor) [pid 7107] close(21) = -1 EBADF (Bad file descriptor) [pid 7107] close(22) = -1 EBADF (Bad file descriptor) [pid 7107] close(23) = -1 EBADF (Bad file descriptor) [pid 7107] close(24) = -1 EBADF (Bad file descriptor) [pid 7107] close(25) = -1 EBADF (Bad file descriptor) [pid 7107] close(26) = -1 EBADF (Bad file descriptor) [pid 7107] close(27) = -1 EBADF (Bad file descriptor) [pid 7107] close(28) = -1 EBADF (Bad file descriptor) [pid 7107] close(29) = -1 EBADF (Bad file descriptor) [pid 7107] exit_group(0) = ? [pid 7107] +++ exited with 0 +++ [ 145.232905][ T8] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 145.274703][ T9] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 145.287241][ T5824] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 145.287584][ T9] XFS (loop2): Unmount and run xfs_repair [ 145.307535][ T8] XFS (loop0): Unmount and run xfs_repair [pid 7109] <... open resumed>) = 4 [pid 7109] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=30, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=52 /* 0.52 s */} --- [ 145.310251][ T29] audit: type=1800 audit(1733456442.806:146): pid=7109 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop4" ino=41 res=0 errno=0 [ 145.314236][ T9] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 145.342636][ T8] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 145.344224][ T57] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [pid 5824] <... umount2 resumed>) = 0 [pid 5825] umount2("./28", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5825] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5824] umount2("./29/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5825] umount2("./28/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./28/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./28/cgroup" [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... unlink resumed>) = 0 [pid 5825] umount2("./28/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./28/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./28/cgroup.cpu") = 0 [pid 5825] umount2("./28/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./28/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./28/cgroup.net") = 0 [pid 5825] umount2("./28/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./28/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./28/binderfs" [pid 5824] newfstatat(AT_FDCWD, "./29/file0", [pid 5825] <... unlink resumed>) = 0 [ 145.350324][ T8] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 145.368096][ T57] XFS (loop4): Unmount and run xfs_repair [ 145.373151][ T9] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 145.385580][ T8] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 145.395184][ T9] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 145.405179][ T8] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [pid 5825] umount2("./28/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 145.414169][ T57] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 145.414531][ T5825] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 145.422079][ T9] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 145.422101][ T9] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 145.422117][ T9] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [pid 5824] umount2("./29/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./29/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [ 145.422146][ T9] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 145.422159][ T9] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 145.422173][ T9] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 145.422225][ T7110] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 145.440635][ T8] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 145.452319][ T57] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 145.460431][ T8] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 145.468976][ T57] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 145.481453][ T7110] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 145.487525][ T57] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 145.496125][ T8] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [pid 5824] newfstatat(4, "", [pid 5825] <... umount2 resumed>) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5825] umount2("./28/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./28/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] umount2("./28/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./28/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5825] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(4, 0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5825] getdents64(4, 0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5825] close(4) = 0 [pid 5825] rmdir("./28/file0") = 0 [pid 5825] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5825] close(3) = 0 [pid 5825] rmdir("./28") = 0 [pid 5825] mkdir("./29", 0777) = 0 [pid 5825] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5825] ioctl(3, LOOP_CLR_FD) = 0 [ 145.507703][ T57] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 145.519589][ T7110] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 145.524961][ T57] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 145.554815][ T8] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 145.554841][ T8] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [pid 5825] close(3 [pid 7110] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 5824] getdents64(4, [pid 7110] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000) = -1 EFAULT (Bad address) [pid 5824] <... getdents64 resumed>0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 7110] close(3 [pid 5824] getdents64(4, [pid 7110] <... close resumed>) = 0 [pid 5824] <... getdents64 resumed>0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 7110] close(4 [pid 5824] close(4 [pid 7110] <... close resumed>) = 0 [pid 5824] <... close resumed>) = 0 [ 145.554907][ T7108] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 145.558069][ T7108] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 145.631274][ T57] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [pid 7110] close(5 [pid 7108] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 5824] rmdir("./29/file0" [pid 7110] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7108] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000 [pid 5824] <... rmdir resumed>) = 0 [pid 7110] close(6 [pid 7108] <... openat resumed>) = -1 EFAULT (Bad address) [ 145.662800][ T7108] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 145.667420][ T57] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 145.681037][ T57] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 145.690199][ T7109] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [pid 5824] getdents64(3, [pid 7110] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7108] close(3 [pid 5824] <... getdents64 resumed>0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 7110] close(7 [pid 7108] <... close resumed>) = 0 [pid 5824] close(3 [pid 7109] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 7110] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7109] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000 [pid 5824] <... close resumed>) = 0 [pid 7109] <... openat resumed>) = -1 EFAULT (Bad address) [pid 7110] close(8 [pid 7109] close(3 [pid 7108] close(4 [pid 5824] rmdir("./29" [pid 7109] <... close resumed>) = 0 [pid 7110] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7109] close(4 [pid 7108] <... close resumed>) = 0 [pid 5824] <... rmdir resumed>) = 0 [pid 7109] <... close resumed>) = 0 [pid 7110] close(9 [pid 7109] close(5 [pid 7108] close(5 [pid 5824] mkdir("./30", 0777 [pid 7109] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7110] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7109] close(6 [pid 7108] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] <... mkdir resumed>) = 0 [pid 7109] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7110] close(10 [pid 7109] close(7 [pid 7108] close(6 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7109] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7110] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7109] close(8 [pid 7108] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] <... openat resumed>) = 3 [pid 7109] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7110] close(11 [pid 7109] close(9 [pid 7108] close(7 [pid 5824] ioctl(3, LOOP_CLR_FD [pid 7110] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7109] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7108] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] <... ioctl resumed>) = 0 [pid 7109] close(10 [pid 7110] close(12 [pid 7109] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7108] close(8 [pid 5824] close(3 [ 145.713593][ T7109] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 145.728826][ T7109] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [pid 7109] close(11executing program [pid 7110] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7109] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7108] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5825] <... close resumed>) = 0 [pid 7109] close(12) = -1 EBADF (Bad file descriptor) [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7109] close(13) = -1 EBADF (Bad file descriptor) [pid 7109] close(14) = -1 EBADF (Bad file descriptor) [pid 7109] close(15) = -1 EBADF (Bad file descriptor) [pid 7109] close(16) = -1 EBADF (Bad file descriptor) [pid 7109] close(17) = -1 EBADF (Bad file descriptor) [pid 7109] close(18) = -1 EBADF (Bad file descriptor) [pid 7109] close(19) = -1 EBADF (Bad file descriptor) [pid 7109] close(20) = -1 EBADF (Bad file descriptor) [pid 7109] close(21) = -1 EBADF (Bad file descriptor) [pid 7109] close(22) = -1 EBADF (Bad file descriptor) ./strace-static-x86_64: Process 7151 attached [pid 7109] close(23 [pid 7151] set_robust_list(0x55558159a660, 24 [pid 7109] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5825] <... clone resumed>, child_tidptr=0x55558159a650) = 31 [pid 7151] <... set_robust_list resumed>) = 0 [pid 7109] close(24 [pid 7151] chdir("./29" [pid 7109] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7110] close(13 [pid 7109] close(25 [pid 7151] <... chdir resumed>) = 0 [pid 7110] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7109] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7151] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7110] close(14 [pid 7109] close(26 [pid 7151] <... prctl resumed>) = 0 [pid 7110] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7109] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7151] setpgid(0, 0 [pid 7110] close(15 [pid 7109] close(27 [pid 7151] <... setpgid resumed>) = 0 [pid 7110] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7109] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7151] symlink("/syzcgroup/unified/syz3", "./cgroup" [pid 7110] close(16 [pid 7109] close(28 [pid 7110] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7109] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7110] close(17 [pid 7109] close(29 [pid 7151] <... symlink resumed>) = 0 [pid 7110] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7109] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7110] close(18 [pid 7109] exit_group(0 [pid 7151] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu" [pid 7110] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7109] <... exit_group resumed>) = ? [pid 7151] <... symlink resumed>) = 0 [pid 7110] close(19 [pid 7109] +++ exited with 0 +++ [pid 7151] symlink("/syzcgroup/net/syz3", "./cgroup.net" [pid 7110] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=28, si_uid=0, si_status=0, si_utime=11 /* 0.11 s */, si_stime=44 /* 0.44 s */} --- [pid 7151] <... symlink resumed>) = 0 [pid 7110] close(20 [pid 7151] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7110] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7151] <... openat resumed>) = 3 [pid 7110] close(21 [pid 5826] umount2("./26", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7110] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7151] write(3, "1000", 4 [pid 7110] close(22 [pid 5826] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7151] <... write resumed>) = 4 [pid 7110] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5826] <... openat resumed>) = 3 [pid 7151] close(3 [pid 7110] close(23 [pid 5826] newfstatat(3, "", [pid 7151] <... close resumed>) = 0 [pid 7110] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 7151] symlink("/dev/binderfs", "./binderfs" [pid 7110] close(24 [pid 5826] getdents64(3, [pid 7151] <... symlink resumed>) = 0 [pid 7110] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5826] <... getdents64 resumed>0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 7151] write(1, "executing program\n", 18 [pid 7110] close(25 [pid 5826] umount2("./26/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7151] <... write resumed>) = 18 [pid 7110] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7151] memfd_create("syzkaller", 0 [pid 7110] close(26) = -1 EBADF (Bad file descriptor) [pid 7110] close(27) = -1 EBADF (Bad file descriptor) [pid 5826] newfstatat(AT_FDCWD, "./26/cgroup", [pid 7110] close(28 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7151] <... memfd_create resumed>) = 3 [pid 7110] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5826] unlink("./26/cgroup" [pid 7151] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7110] close(29 [pid 5826] <... unlink resumed>) = 0 [pid 7151] <... mmap resumed>) = 0x7fbaaaa00000 [pid 7110] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7110] exit_group(0) = ? [pid 7110] +++ exited with 0 +++ [pid 5826] umount2("./26/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./26/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./26/cgroup.cpu") = 0 [pid 5826] umount2("./26/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./26/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./26/cgroup.net") = 0 [pid 5826] umount2("./26/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./26/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./26/binderfs") = 0 [pid 5826] umount2("./26/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7108] close(9) = -1 EBADF (Bad file descriptor) [pid 7108] close(10) = -1 EBADF (Bad file descriptor) [pid 7108] close(11) = -1 EBADF (Bad file descriptor) [pid 7108] close(12) = -1 EBADF (Bad file descriptor) [pid 7108] close(13) = -1 EBADF (Bad file descriptor) [pid 7108] close(14) = -1 EBADF (Bad file descriptor) [pid 7108] close(15) = -1 EBADF (Bad file descriptor) [pid 7108] close(16) = -1 EBADF (Bad file descriptor) [pid 7108] close(17) = -1 EBADF (Bad file descriptor) [pid 7108] close(18) = -1 EBADF (Bad file descriptor) [pid 7108] close(19) = -1 EBADF (Bad file descriptor) [pid 7108] close(20) = -1 EBADF (Bad file descriptor) [pid 7108] close(21) = -1 EBADF (Bad file descriptor) [pid 5824] <... close resumed>) = 0 [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=30, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=52 /* 0.52 s */} --- [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7152 attached [pid 7108] close(22 [pid 5824] <... clone resumed>, child_tidptr=0x55558159a650) = 32 [pid 7152] set_robust_list(0x55558159a660, 24 [pid 7108] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5823] umount2("./28", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7152] <... set_robust_list resumed>) = 0 [pid 7108] close(23 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7152] chdir("./30" [pid 7108] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5823] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7152] <... chdir resumed>) = 0 [pid 7108] close(24 [pid 5823] <... openat resumed>) = 3 [pid 7152] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7108] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5823] newfstatat(3, "", [pid 7152] <... prctl resumed>) = 0 [pid 7108] close(25 [pid 7152] setpgid(0, 0 [pid 7108] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 7152] <... setpgid resumed>) = 0 [pid 7108] close(26 [pid 7152] symlink("/syzcgroup/unified/syz1", "./cgroup" [pid 7108] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5823] getdents64(3, [pid 7152] <... symlink resumed>) = 0 [pid 7108] close(27 [pid 7152] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu" [pid 7108] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5823] <... getdents64 resumed>0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 7152] <... symlink resumed>) = 0 [pid 7108] close(28 [pid 5823] umount2("./28/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7152] symlink("/syzcgroup/net/syz1", "./cgroup.net" [pid 7108] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7152] <... symlink resumed>) = 0 [pid 7108] close(29 [pid 5823] newfstatat(AT_FDCWD, "./28/cgroup", [pid 7152] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7108] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7152] <... openat resumed>) = 3 [pid 7108] exit_group(0 [pid 5823] unlink("./28/cgroup" [pid 7152] write(3, "1000", 4) = 4 [pid 7108] <... exit_group resumed>) = ? [pid 5823] <... unlink resumed>) = 0 [pid 7152] close(3 [pid 7108] +++ exited with 0 +++ [pid 5823] umount2("./28/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7152] <... close resumed>) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7152] symlink("/dev/binderfs", "./binderfs" [pid 5823] newfstatat(AT_FDCWD, "./28/cgroup.cpu", [pid 5821] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=31, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=58 /* 0.58 s */} --- [pid 7152] <... symlink resumed>) = 0 executing program [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] restart_syscall(<... resuming interrupted clone ...> [pid 7152] write(1, "executing program\n", 18 [pid 5823] unlink("./28/cgroup.cpu" [pid 7152] <... write resumed>) = 18 [pid 7152] memfd_create("syzkaller", 0 [pid 5823] <... unlink resumed>) = 0 [pid 7152] <... memfd_create resumed>) = 3 [pid 5823] umount2("./28/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] <... restart_syscall resumed>) = 0 [pid 7152] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./28/cgroup.net", [pid 7152] <... mmap resumed>) = 0x7fbaaaa00000 [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 145.912355][ T5826] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 5823] unlink("./28/cgroup.net") = 0 [pid 5821] umount2("./29", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] umount2("./28/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] <... openat resumed>) = 3 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./28/binderfs", [pid 5821] newfstatat(3, "", [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./28/binderfs" [pid 5821] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5823] <... unlink resumed>) = 0 [pid 5821] getdents64(3, [pid 5823] umount2("./28/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] <... getdents64 resumed>0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5821] umount2("./29/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./29/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] unlink("./29/cgroup") = 0 [pid 5821] umount2("./29/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./29/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] unlink("./29/cgroup.cpu") = 0 [pid 5821] umount2("./29/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./29/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] unlink("./29/cgroup.net") = 0 [pid 5821] umount2("./29/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./29/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] unlink("./29/binderfs") = 0 [pid 5821] umount2("./29/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... umount2 resumed>) = 0 [pid 5826] umount2("./26/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./26/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] umount2("./26/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] openat(AT_FDCWD, "./26/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5826] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5826] getdents64(4, 0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5826] getdents64(4, 0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5826] close(4) = 0 [pid 5826] rmdir("./26/file0") = 0 [pid 5826] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5826] close(3) = 0 [pid 5826] rmdir("./26") = 0 [pid 5826] mkdir("./27", 0777) = 0 [pid 5826] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5826] ioctl(3, LOOP_CLR_FD) = 0 [ 145.985969][ T5823] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 145.995133][ T5821] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 5826] close(3 [pid 5823] <... umount2 resumed>) = 0 [pid 5826] <... close resumed>) = 0 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5823] umount2("./28/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./28/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] umount2("./28/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./28/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 ./strace-static-x86_64: Process 7153 attached [pid 5826] <... clone resumed>, child_tidptr=0x55558159a650) = 29 [pid 5823] newfstatat(4, "", [pid 7153] set_robust_list(0x55558159a660, 24) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 7153] chdir("./27" [pid 5823] getdents64(4, [pid 7153] <... chdir resumed>) = 0 [pid 5823] <... getdents64 resumed>0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5823] getdents64(4, [pid 7153] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5823] <... getdents64 resumed>0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 7153] <... prctl resumed>) = 0 [pid 5823] close(4 [pid 7153] setpgid(0, 0) = 0 [pid 5823] <... close resumed>) = 0 executing program [pid 7153] symlink("/syzcgroup/unified/syz4", "./cgroup" [pid 5823] rmdir("./28/file0" [pid 7153] <... symlink resumed>) = 0 [pid 7153] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu") = 0 [pid 7153] symlink("/syzcgroup/net/syz4", "./cgroup.net") = 0 [pid 7153] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7153] write(3, "1000", 4) = 4 [pid 7153] close(3) = 0 [pid 7153] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7153] write(1, "executing program\n", 18) = 18 [pid 7153] memfd_create("syzkaller", 0) = 3 [pid 7153] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaaaa00000 [pid 5823] <... rmdir resumed>) = 0 [pid 5823] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5823] close(3) = 0 [pid 5823] rmdir("./28") = 0 [pid 5823] mkdir("./29", 0777) = 0 [pid 5823] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5823] ioctl(3, LOOP_CLR_FD) = 0 [pid 5823] close(3 [pid 7152] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 5821] <... umount2 resumed>) = 0 [pid 5821] umount2("./29/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./29/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] umount2("./29/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7151] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5821] openat(AT_FDCWD, "./29/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5821] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5821] getdents64(4, 0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5821] getdents64(4, 0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5821] close(4) = 0 [pid 5821] rmdir("./29/file0") = 0 [pid 5821] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5821] close(3) = 0 [pid 5821] rmdir("./29") = 0 [pid 5821] mkdir("./30", 0777) = 0 [pid 5821] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5821] ioctl(3, LOOP_CLR_FD) = 0 [pid 5821] close(3 [pid 5823] <... close resumed>) = 0 [pid 7153] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7152] <... write resumed>) = 33554432 [pid 7152] munmap(0x7fbaaaa00000, 138412032) = 0 [pid 7152] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 7152] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7152] close(3) = 0 [pid 7152] close(4) = 0 [pid 7152] mkdir("./file0", 0777) = 0 [ 146.899753][ T7152] loop1: detected capacity change from 0 to 65536 [pid 7152] mount("/dev/loop1", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid"./strace-static-x86_64: Process 7156 attached [pid 7153] <... write resumed>) = 33554432 [pid 7156] set_robust_list(0x55558159a660, 24 [pid 7153] munmap(0x7fbaaaa00000, 138412032 [pid 7156] <... set_robust_list resumed>) = 0 [pid 5823] <... clone resumed>, child_tidptr=0x55558159a650) = 31 [pid 7156] chdir("./29") = 0 [pid 7156] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7156] setpgid(0, 0) = 0 [pid 7156] symlink("/syzcgroup/unified/syz2", "./cgroup") = 0 [pid 7156] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu") = 0 [pid 7156] symlink("/syzcgroup/net/syz2", "./cgroup.net") = 0 [pid 7156] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7156] write(3, "1000", 4) = 4 [pid 7156] close(3) = 0 [pid 7156] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 7156] write(1, "executing program\n", 18) = 18 [pid 7156] memfd_create("syzkaller", 0) = 3 [pid 7156] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaaaa00000 [pid 7153] <... munmap resumed>) = 0 [pid 7153] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 7153] ioctl(4, LOOP_SET_FD, 3 [pid 7151] <... write resumed>) = 33554432 [pid 7151] munmap(0x7fbaaaa00000, 138412032 [pid 7153] <... ioctl resumed>) = 0 [pid 7153] close(3) = 0 [pid 7153] close(4 [pid 7151] <... munmap resumed>) = 0 [pid 7153] <... close resumed>) = 0 [ 147.107144][ T7153] loop4: detected capacity change from 0 to 65536 [pid 7153] mkdir("./file0", 0777) = 0 [pid 7153] mount("/dev/loop4", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 7151] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 7151] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7151] close(3 [pid 5821] <... close resumed>) = 0 [pid 7151] <... close resumed>) = 0 [pid 7151] close(4) = 0 [pid 7151] mkdir("./file0", 0777) = 0 [pid 7151] mount("/dev/loop3", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 5821] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7167 attached [ 147.149517][ T7152] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 147.162039][ T7151] loop3: detected capacity change from 0 to 65536 [pid 7167] set_robust_list(0x55558159a660, 24 [pid 5821] <... clone resumed>, child_tidptr=0x55558159a650) = 32 [pid 7167] <... set_robust_list resumed>) = 0 [pid 7167] chdir("./30") = 0 [pid 7167] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7152] <... mount resumed>) = 0 [pid 7167] setpgid(0, 0) = 0 [pid 7167] symlink("/syzcgroup/unified/syz0", "./cgroup" [pid 7152] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7167] <... symlink resumed>) = 0 [pid 7152] <... openat resumed>) = 3 [pid 7167] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu" [pid 7152] chdir("./file0" [pid 7167] <... symlink resumed>) = 0 [pid 7152] <... chdir resumed>) = 0 [pid 7167] symlink("/syzcgroup/net/syz0", "./cgroup.net" [pid 7152] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7167] <... symlink resumed>) = 0 [pid 7152] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7167] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7152] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 7167] <... openat resumed>) = 3 [pid 7167] write(3, "1000", 4) = 4 [pid 7167] close(3 [pid 7152] <... open resumed>) = 4 [pid 7152] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 7167] <... close resumed>) = 0 [pid 7167] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 7167] write(1, "executing program\n", 18) = 18 [pid 7167] memfd_create("syzkaller", 0) = 3 [pid 7167] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaaaa00000 [ 147.204873][ T7152] XFS (loop1): Ending clean mount [ 147.222419][ T29] audit: type=1800 audit(1733456444.716:147): pid=7152 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop1" ino=41 res=0 errno=0 [ 147.248962][ T8] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 147.260806][ T8] XFS (loop1): Unmount and run xfs_repair [ 147.268564][ T8] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 147.276146][ T8] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 147.276337][ T7151] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 147.285225][ T8] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 147.302744][ T8] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 147.307014][ T7153] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 147.311805][ T8] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 147.329273][ T8] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 147.338361][ T8] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 147.347412][ T8] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 147.356496][ T8] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 147.366142][ T7152] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 147.478666][ T7152] XFS (loop1): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 147.495248][ T7152] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [pid 7156] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 7151] <... mount resumed>) = 0 [pid 7151] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7151] chdir("./file0") = 0 [pid 7151] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7151] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 4 [ 147.527768][ T7151] XFS (loop3): Ending clean mount [ 147.547402][ T29] audit: type=1800 audit(1733456445.036:148): pid=7151 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop3" ino=41 res=0 errno=0 [pid 7151] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 7153] <... mount resumed>) = 0 [pid 7152] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 7152] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000) = -1 EFAULT (Bad address) [pid 7152] close(3) = 0 [pid 7152] close(4) = 0 [pid 7152] close(5) = -1 EBADF (Bad file descriptor) [pid 7152] close(6) = -1 EBADF (Bad file descriptor) [pid 7152] close(7) = -1 EBADF (Bad file descriptor) [pid 7152] close(8 [pid 7153] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7152] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7153] <... openat resumed>) = 3 [pid 7152] close(9 [pid 7153] chdir("./file0" [pid 7152] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7153] <... chdir resumed>) = 0 [pid 7152] close(10 [pid 7153] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7152] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7153] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7152] close(11 [pid 7153] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 7152] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7153] <... open resumed>) = 4 [pid 7152] close(12 [pid 7153] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 7152] <... close resumed>) = -1 EBADF (Bad file descriptor) [ 147.577213][ T57] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 147.590027][ T7153] XFS (loop4): Ending clean mount [pid 7152] close(13) = -1 EBADF (Bad file descriptor) [pid 7152] close(14) = -1 EBADF (Bad file descriptor) [pid 7152] close(15) = -1 EBADF (Bad file descriptor) [pid 7152] close(16) = -1 EBADF (Bad file descriptor) [pid 7152] close(17) = -1 EBADF (Bad file descriptor) [pid 7152] close(18) = -1 EBADF (Bad file descriptor) [pid 7152] close(19) = -1 EBADF (Bad file descriptor) [pid 7152] close(20) = -1 EBADF (Bad file descriptor) [pid 7152] close(21) = -1 EBADF (Bad file descriptor) [pid 7152] close(22) = -1 EBADF (Bad file descriptor) [pid 7152] close(23) = -1 EBADF (Bad file descriptor) [pid 7152] close(24) = -1 EBADF (Bad file descriptor) [pid 7152] close(25) = -1 EBADF (Bad file descriptor) [pid 7152] close(26) = -1 EBADF (Bad file descriptor) [pid 7152] close(27) = -1 EBADF (Bad file descriptor) [pid 7152] close(28) = -1 EBADF (Bad file descriptor) [pid 7152] close(29) = -1 EBADF (Bad file descriptor) [pid 7152] exit_group(0) = ? [pid 7152] +++ exited with 0 +++ [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=32, si_uid=0, si_status=0, si_utime=11 /* 0.11 s */, si_stime=48 /* 0.48 s */} --- [pid 5824] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5824] umount2("./30", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5824] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [ 147.617939][ T5966] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 147.638695][ T57] XFS (loop3): Unmount and run xfs_repair [ 147.652234][ T5966] XFS (loop4): Unmount and run xfs_repair [ 147.660312][ T57] XFS (loop3): First 128 bytes of corrupted metadata buffer: [pid 5824] umount2("./30/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./30/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./30/cgroup") = 0 [pid 5824] umount2("./30/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./30/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./30/cgroup.cpu") = 0 [pid 5824] umount2("./30/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./30/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./30/cgroup.net") = 0 [pid 5824] umount2("./30/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./30/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./30/binderfs") = 0 [ 147.666646][ T29] audit: type=1800 audit(1733456445.106:149): pid=7153 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop4" ino=41 res=0 errno=0 [ 147.671646][ T5966] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 147.704150][ T5824] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 147.713270][ T57] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 147.722820][ T57] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 147.731936][ T5966] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 147.740841][ T5966] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 147.749770][ T57] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 147.758691][ T5966] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 147.767766][ T57] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 147.776705][ T5966] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 147.785564][ T5966] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 147.794473][ T57] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 147.803377][ T57] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 147.812281][ T5966] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 147.821205][ T57] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 147.830105][ T5966] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 147.839067][ T57] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 147.847968][ T5966] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 147.857456][ T7151] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [pid 5824] umount2("./30/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7167] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 7156] <... write resumed>) = 33554432 [ 147.869351][ T7153] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [pid 7156] munmap(0x7fbaaaa00000, 138412032 [pid 7153] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 7153] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000) = -1 EFAULT (Bad address) [pid 7153] close(3) = 0 [pid 7153] close(4) = 0 [pid 7153] close(5) = -1 EBADF (Bad file descriptor) [pid 7153] close(6) = -1 EBADF (Bad file descriptor) [pid 7153] close(7) = -1 EBADF (Bad file descriptor) [pid 7153] close(8) = -1 EBADF (Bad file descriptor) [pid 7153] close(9) = -1 EBADF (Bad file descriptor) [pid 7153] close(10) = -1 EBADF (Bad file descriptor) [pid 7153] close(11) = -1 EBADF (Bad file descriptor) [pid 7153] close(12) = -1 EBADF (Bad file descriptor) [pid 7153] close(13) = -1 EBADF (Bad file descriptor) [pid 7153] close(14) = -1 EBADF (Bad file descriptor) [pid 7153] close(15) = -1 EBADF (Bad file descriptor) [pid 7153] close(16) = -1 EBADF (Bad file descriptor) [pid 7153] close(17) = -1 EBADF (Bad file descriptor) [pid 7153] close(18) = -1 EBADF (Bad file descriptor) [pid 7153] close(19) = -1 EBADF (Bad file descriptor) [pid 7153] close(20) = -1 EBADF (Bad file descriptor) [pid 7153] close(21) = -1 EBADF (Bad file descriptor) [pid 7153] close(22) = -1 EBADF (Bad file descriptor) [pid 7153] close(23) = -1 EBADF (Bad file descriptor) [pid 7153] close(24) = -1 EBADF (Bad file descriptor) [pid 7153] close(25) = -1 EBADF (Bad file descriptor) [pid 7153] close(26) = -1 EBADF (Bad file descriptor) [pid 7153] close(27) = -1 EBADF (Bad file descriptor) [pid 7153] close(28) = -1 EBADF (Bad file descriptor) [pid 7153] close(29) = -1 EBADF (Bad file descriptor) [pid 7153] exit_group(0) = ? [pid 7153] +++ exited with 0 +++ [ 147.901686][ T7151] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 147.916479][ T7153] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 147.942624][ T7153] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=29, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=51 /* 0.51 s */} --- [pid 5826] umount2("./27", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5826] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5826] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5826] umount2("./27/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./27/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./27/cgroup") = 0 [pid 5826] umount2("./27/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./27/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./27/cgroup.cpu") = 0 [pid 5826] umount2("./27/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./27/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./27/cgroup.net") = 0 [pid 5826] umount2("./27/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./27/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./27/binderfs") = 0 [pid 5826] umount2("./27/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7151] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 7151] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000) = -1 EFAULT (Bad address) [pid 7151] close(3) = 0 [pid 7151] close(4) = 0 [pid 7151] close(5) = -1 EBADF (Bad file descriptor) [pid 7151] close(6) = -1 EBADF (Bad file descriptor) [pid 7151] close(7) = -1 EBADF (Bad file descriptor) [pid 7151] close(8) = -1 EBADF (Bad file descriptor) [ 148.009329][ T7151] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 148.018616][ T5826] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 7151] close(9) = -1 EBADF (Bad file descriptor) [pid 7151] close(10) = -1 EBADF (Bad file descriptor) [pid 7151] close(11) = -1 EBADF (Bad file descriptor) [pid 7151] close(12) = -1 EBADF (Bad file descriptor) [pid 7151] close(13) = -1 EBADF (Bad file descriptor) [pid 7151] close(14) = -1 EBADF (Bad file descriptor) [pid 7151] close(15) = -1 EBADF (Bad file descriptor) [pid 7151] close(16) = -1 EBADF (Bad file descriptor) [pid 7151] close(17) = -1 EBADF (Bad file descriptor) [pid 7151] close(18) = -1 EBADF (Bad file descriptor) [pid 7151] close(19) = -1 EBADF (Bad file descriptor) [pid 7151] close(20) = -1 EBADF (Bad file descriptor) [pid 7151] close(21) = -1 EBADF (Bad file descriptor) [pid 7151] close(22) = -1 EBADF (Bad file descriptor) [pid 7151] close(23) = -1 EBADF (Bad file descriptor) [pid 7151] close(24) = -1 EBADF (Bad file descriptor) [pid 7151] close(25) = -1 EBADF (Bad file descriptor) [pid 7151] close(26) = -1 EBADF (Bad file descriptor) [pid 7151] close(27) = -1 EBADF (Bad file descriptor) [pid 7151] close(28) = -1 EBADF (Bad file descriptor) [pid 7151] close(29) = -1 EBADF (Bad file descriptor) [pid 7151] exit_group(0) = ? [pid 7151] +++ exited with 0 +++ [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=31, si_uid=0, si_status=0, si_utime=12 /* 0.12 s */, si_stime=44 /* 0.44 s */} --- [pid 5825] umount2("./29", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5825] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5825] umount2("./29/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./29/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./29/cgroup") = 0 [pid 5825] umount2("./29/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./29/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./29/cgroup.cpu") = 0 [pid 5825] umount2("./29/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./29/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./29/cgroup.net") = 0 [pid 5825] umount2("./29/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./29/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./29/binderfs") = 0 [pid 5825] umount2("./29/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7167] <... write resumed>) = 33554432 [pid 7156] <... munmap resumed>) = 0 [pid 5824] <... umount2 resumed>) = 0 [pid 5824] umount2("./30/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./30/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] umount2("./30/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7167] munmap(0x7fbaaaa00000, 138412032 [pid 7156] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./30/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5824] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(4, 0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5824] getdents64(4, 0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5824] close(4) = 0 [pid 5824] rmdir("./30/file0") = 0 [pid 5824] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 7156] <... openat resumed>) = 4 [pid 5824] close(3) = 0 [pid 5824] rmdir("./30") = 0 [pid 5824] mkdir("./31", 0777) = 0 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5824] ioctl(3, LOOP_CLR_FD) = 0 [pid 5824] close(3 [ 148.103850][ T5825] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 7156] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5826] <... umount2 resumed>) = 0 [pid 5826] umount2("./27/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./27/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] umount2("./27/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7156] close(3 [pid 5826] openat(AT_FDCWD, "./27/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7156] <... close resumed>) = 0 [pid 7156] close(4 [pid 5826] <... openat resumed>) = 4 [pid 5825] <... umount2 resumed>) = 0 [pid 5826] newfstatat(4, "", [pid 7156] <... close resumed>) = 0 [pid 5825] umount2("./29/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7156] mkdir("./file0", 0777 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 7156] <... mkdir resumed>) = 0 [pid 5826] getdents64(4, [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... getdents64 resumed>0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 7156] mount("/dev/loop2", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 5825] newfstatat(AT_FDCWD, "./29/file0", [pid 5826] getdents64(4, 0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7167] <... munmap resumed>) = 0 [pid 5826] close(4 [pid 5825] umount2("./29/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7167] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5826] <... close resumed>) = 0 [ 148.148309][ T7156] loop2: detected capacity change from 0 to 65536 [pid 5826] rmdir("./27/file0") = 0 [pid 5826] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5826] close(3) = 0 [pid 5826] rmdir("./27" [pid 5825] openat(AT_FDCWD, "./29/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] <... rmdir resumed>) = 0 [pid 5825] <... openat resumed>) = 4 [pid 7167] <... openat resumed>) = 4 [pid 5826] mkdir("./28", 0777 [pid 5825] newfstatat(4, "", [pid 5826] <... mkdir resumed>) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5826] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5825] getdents64(4, [pid 5826] <... openat resumed>) = 3 [pid 5825] <... getdents64 resumed>0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5826] ioctl(3, LOOP_CLR_FD [pid 5825] getdents64(4, [pid 5826] <... ioctl resumed>) = 0 [pid 5825] <... getdents64 resumed>0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5826] close(3 [pid 5825] close(4) = 0 [pid 7167] ioctl(4, LOOP_SET_FD, 3 [pid 5825] rmdir("./29/file0") = 0 [pid 5825] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5825] close(3) = 0 [pid 5825] rmdir("./29") = 0 [pid 5825] mkdir("./30", 0777) = 0 [pid 5825] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5825] ioctl(3, LOOP_CLR_FD) = 0 [pid 5825] close(3 [pid 5826] <... close resumed>) = 0 [ 148.384437][ T7156] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 148.404527][ T7167] loop0: detected capacity change from 0 to 65536 [pid 7167] <... ioctl resumed>) = 0 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7167] close(3) = 0 [pid 5826] <... clone resumed>, child_tidptr=0x55558159a650) = 30 [pid 7167] close(4) = 0 [pid 7167] mkdir("./file0", 0777) = 0 [pid 7167] mount("/dev/loop0", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 5824] <... close resumed>) = 0 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7187 attached ./strace-static-x86_64: Process 7186 attached , child_tidptr=0x55558159a650) = 33 [pid 7187] set_robust_list(0x55558159a660, 24 [pid 7186] set_robust_list(0x55558159a660, 24 [pid 7187] <... set_robust_list resumed>) = 0 [pid 7186] <... set_robust_list resumed>) = 0 [pid 7187] chdir("./31") = 0 [pid 7186] chdir("./28" [pid 7187] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7186] <... chdir resumed>) = 0 [pid 7187] <... prctl resumed>) = 0 [pid 7186] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7187] setpgid(0, 0 [pid 7186] <... prctl resumed>) = 0 [pid 7187] <... setpgid resumed>) = 0 [pid 7186] setpgid(0, 0 [pid 7187] symlink("/syzcgroup/unified/syz1", "./cgroup" [pid 7186] <... setpgid resumed>) = 0 [pid 7187] <... symlink resumed>) = 0 [pid 7186] symlink("/syzcgroup/unified/syz4", "./cgroup" [pid 7187] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu" [pid 7186] <... symlink resumed>) = 0 [pid 7187] <... symlink resumed>) = 0 [pid 7186] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu" [pid 7187] symlink("/syzcgroup/net/syz1", "./cgroup.net" [pid 7186] <... symlink resumed>) = 0 [pid 7187] <... symlink resumed>) = 0 [pid 7186] symlink("/syzcgroup/net/syz4", "./cgroup.net") = 0 [pid 7187] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7186] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7187] <... openat resumed>) = 3 [pid 7186] <... openat resumed>) = 3 [pid 7186] write(3, "1000", 4) = 4 [pid 7187] write(3, "1000", 4 [pid 7186] close(3 [pid 7187] <... write resumed>) = 4 [pid 7186] <... close resumed>) = 0 [pid 7187] close(3 [pid 7186] symlink("/dev/binderfs", "./binderfs" [pid 7187] <... close resumed>) = 0 [pid 7186] <... symlink resumed>) = 0 executing program [pid 7186] write(1, "executing program\n", 18 [pid 7187] symlink("/dev/binderfs", "./binderfs" [pid 7186] <... write resumed>) = 18 [pid 7186] memfd_create("syzkaller", 0 [pid 7187] <... symlink resumed>) = 0 [pid 5825] <... close resumed>) = 0 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558159a650) = 32 [pid 7186] <... memfd_create resumed>) = 3 [pid 7186] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 7192 attached [pid 7187] write(1, "executing program\n", 18 [pid 7186] <... mmap resumed>) = 0x7fbaaaa00000 executing program [pid 7192] set_robust_list(0x55558159a660, 24 [pid 7187] <... write resumed>) = 18 [pid 7192] <... set_robust_list resumed>) = 0 [pid 7187] memfd_create("syzkaller", 0 [pid 7192] chdir("./30" [pid 7187] <... memfd_create resumed>) = 3 [pid 7192] <... chdir resumed>) = 0 [pid 7187] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7192] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7187] <... mmap resumed>) = 0x7fbaaaa00000 [pid 7192] <... prctl resumed>) = 0 [pid 7192] setpgid(0, 0) = 0 [pid 7192] symlink("/syzcgroup/unified/syz3", "./cgroup") = 0 [pid 7192] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu") = 0 [pid 7156] <... mount resumed>) = 0 [pid 7192] symlink("/syzcgroup/net/syz3", "./cgroup.net" [pid 7156] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7192] <... symlink resumed>) = 0 [pid 7192] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7156] <... openat resumed>) = 3 [pid 7156] chdir("./file0" [pid 7192] <... openat resumed>) = 3 [ 148.611147][ T7167] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 148.645090][ T7156] XFS (loop2): Ending clean mount [pid 7192] write(3, "1000", 4) = 4 [pid 7156] <... chdir resumed>) = 0 [pid 7192] close(3) = 0 [pid 7192] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 7156] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7192] write(1, "executing program\n", 18) = 18 [pid 7156] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7192] memfd_create("syzkaller", 0 [pid 7156] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 7192] <... memfd_create resumed>) = 3 [pid 7187] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 7192] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaaaa00000 [pid 7186] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 7156] <... open resumed>) = 4 [ 148.946728][ T29] audit: type=1800 audit(1733456446.426:150): pid=7156 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop2" ino=41 res=0 errno=0 [ 148.977461][ T5966] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 148.990202][ T5966] XFS (loop2): Unmount and run xfs_repair [ 148.995957][ T5966] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 149.026728][ T5966] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 149.056593][ T5966] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 149.077629][ T5966] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 149.086521][ T5966] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [pid 7156] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 7187] <... write resumed>) = 33554432 [pid 7187] munmap(0x7fbaaaa00000, 138412032 [pid 7167] <... mount resumed>) = 0 [pid 7167] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7167] chdir("./file0") = 0 [ 149.126621][ T5966] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 149.135531][ T5966] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 149.160055][ T5966] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 149.169575][ T7167] XFS (loop0): Ending clean mount [pid 7167] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7167] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 4 [ 149.176596][ T5966] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 149.185716][ T29] audit: type=1800 audit(1733456446.676:151): pid=7167 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop0" ino=41 res=0 errno=0 [ 149.188247][ T8] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [pid 7167] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 7187] <... munmap resumed>) = 0 [pid 7187] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 7187] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7187] close(3) = 0 [pid 7187] close(4) = 0 [pid 7187] mkdir("./file0", 0777) = 0 [pid 7187] mount("/dev/loop1", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [ 149.223414][ T8] XFS (loop0): Unmount and run xfs_repair [ 149.230006][ T8] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 149.240093][ T7187] loop1: detected capacity change from 0 to 65536 [ 149.261313][ T8] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 149.274427][ T7156] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 149.276354][ T8] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 149.296912][ T8] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 149.305795][ T8] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 149.317069][ T8] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 149.326068][ T8] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 149.336745][ T8] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 149.346641][ T8] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 149.355565][ T7167] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 149.369385][ T7167] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 149.384156][ T7167] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [pid 7192] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 7167] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 7156] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 7167] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000 [pid 7156] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000 [pid 7167] <... openat resumed>) = -1 EFAULT (Bad address) [pid 7156] <... openat resumed>) = -1 EFAULT (Bad address) [pid 7167] close(3 [pid 7156] close(3 [pid 7167] <... close resumed>) = 0 [pid 7156] <... close resumed>) = 0 [pid 7167] close(4 [pid 7156] close(4 [pid 7167] <... close resumed>) = 0 [pid 7156] <... close resumed>) = 0 [pid 7167] close(5 [pid 7156] close(5 [pid 7167] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7156] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7167] close(6 [pid 7156] close(6 [pid 7167] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7156] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7167] close(7 [pid 7156] close(7 [pid 7167] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7156] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7167] close(8 [pid 7156] close(8 [pid 7167] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7156] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7167] close(9 [pid 7156] close(9 [pid 7167] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7156] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7167] close(10 [pid 7156] close(10 [pid 7167] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7156] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7167] close(11 [pid 7156] close(11 [pid 7167] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7156] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7167] close(12 [pid 7156] close(12 [pid 7167] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7156] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7167] close(13 [pid 7156] close(13) = -1 EBADF (Bad file descriptor) [pid 7167] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7156] close(14 [pid 7167] close(14) = -1 EBADF (Bad file descriptor) [pid 7156] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7167] close(15 [pid 7156] close(15 [pid 7167] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7167] close(16) = -1 EBADF (Bad file descriptor) [pid 7156] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7167] close(17 [pid 7156] close(16 [pid 7167] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7156] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7167] close(18 [pid 7156] close(17 [pid 7167] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7156] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7156] close(18 [pid 7167] close(19 [pid 7156] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7167] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7156] close(19 [pid 7167] close(20 [pid 7156] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7167] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7156] close(20) = -1 EBADF (Bad file descriptor) [pid 7167] close(21 [pid 7156] close(21 [pid 7167] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7167] close(22 [pid 7156] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7167] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7156] close(22 [pid 7167] close(23 [pid 7156] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7167] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7156] close(23 [pid 7167] close(24 [pid 7156] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7167] <... close resumed>) = -1 EBADF (Bad file descriptor) [ 149.477170][ T7156] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 149.492299][ T7156] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [pid 7156] close(24 [pid 7167] close(25 [pid 7156] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7192] <... write resumed>) = 33554432 [pid 7167] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7156] close(25 [pid 7192] munmap(0x7fbaaaa00000, 138412032 [pid 7156] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7192] <... munmap resumed>) = 0 [pid 7167] close(26 [pid 7156] close(26 [pid 7192] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7186] <... write resumed>) = 33554432 [pid 7167] <... close resumed>) = -1 EBADF (Bad file descriptor) [ 149.570002][ T7187] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 7186] munmap(0x7fbaaaa00000, 138412032 [pid 7192] <... openat resumed>) = 4 [pid 7192] ioctl(4, LOOP_SET_FD, 3 [pid 7187] <... mount resumed>) = 0 [pid 7186] <... munmap resumed>) = 0 [pid 7167] close(27 [pid 7156] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7186] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 7186] ioctl(4, LOOP_SET_FD, 3 [pid 7192] <... ioctl resumed>) = 0 [pid 7187] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7167] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7156] close(27 [pid 7192] close(3 [pid 7187] <... openat resumed>) = 3 [pid 7167] close(28 [pid 7156] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7192] <... close resumed>) = 0 [pid 7187] chdir("./file0" [pid 7186] <... ioctl resumed>) = 0 [pid 7167] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7156] close(28 [pid 7192] close(4 [pid 7187] <... chdir resumed>) = 0 [pid 7186] close(3 [pid 7167] close(29 [pid 7156] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7186] <... close resumed>) = 0 [pid 7186] close(4) = 0 [pid 7186] mkdir("./file0", 0777) = 0 [pid 7186] mount("/dev/loop4", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 7192] <... close resumed>) = 0 [pid 7187] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7167] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7156] close(29 [pid 7192] mkdir("./file0", 0777 [pid 7156] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7192] <... mkdir resumed>) = 0 [pid 7187] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7167] exit_group(0 [pid 7187] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 7167] <... exit_group resumed>) = ? [pid 7156] exit_group(0 [pid 7192] mount("/dev/loop3", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 7167] +++ exited with 0 +++ [pid 7156] <... exit_group resumed>) = ? [pid 7187] <... open resumed>) = 4 [pid 7156] +++ exited with 0 +++ [pid 7187] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=31, si_uid=0, si_status=0, si_utime=11 /* 0.11 s */, si_stime=42 /* 0.42 s */} --- [pid 5821] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=32, si_uid=0, si_status=0, si_utime=13 /* 0.13 s */, si_stime=44 /* 0.44 s */} --- [ 149.617216][ T7187] XFS (loop1): Ending clean mount [ 149.623413][ T7192] loop3: detected capacity change from 0 to 65536 [ 149.624329][ T7186] loop4: detected capacity change from 0 to 65536 [pid 5823] umount2("./29", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] umount2("./30", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5821] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5821] <... openat resumed>) = 3 [pid 5823] newfstatat(3, "", [pid 5821] newfstatat(3, "", [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5821] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(3, [pid 5821] getdents64(3, [pid 5823] <... getdents64 resumed>0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5821] <... getdents64 resumed>0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5823] umount2("./29/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] umount2("./30/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./29/cgroup", [pid 5821] newfstatat(AT_FDCWD, "./30/cgroup", [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./29/cgroup" [pid 5821] unlink("./30/cgroup" [pid 5823] <... unlink resumed>) = 0 [pid 5821] <... unlink resumed>) = 0 [pid 5823] umount2("./29/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] umount2("./30/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./29/cgroup.cpu", [pid 5821] newfstatat(AT_FDCWD, "./30/cgroup.cpu", [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./29/cgroup.cpu" [pid 5821] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] <... unlink resumed>) = 0 [pid 5821] unlink("./30/cgroup.cpu" [pid 5823] umount2("./29/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] <... unlink resumed>) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5821] umount2("./30/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] newfstatat(AT_FDCWD, "./29/cgroup.net", [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] newfstatat(AT_FDCWD, "./30/cgroup.net", [pid 5823] unlink("./29/cgroup.net" [pid 5821] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] <... unlink resumed>) = 0 [pid 5821] unlink("./30/cgroup.net") = 0 [pid 5821] umount2("./30/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./30/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] unlink("./30/binderfs") = 0 [ 149.686952][ T8] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 149.698281][ T8] XFS (loop1): Unmount and run xfs_repair [ 149.704774][ T8] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 149.705175][ T5821] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 149.712266][ T8] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [pid 5821] umount2("./30/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] umount2("./29/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./29/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./29/binderfs") = 0 [ 149.729710][ T8] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 149.738686][ T8] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 149.747803][ T8] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 149.756917][ T8] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 149.766523][ T5823] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 149.768106][ T8] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 149.781665][ T7186] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 149.784181][ T8] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 149.801665][ T8] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 149.810759][ T7187] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 149.818888][ T7192] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 5823] umount2("./29/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] <... umount2 resumed>) = 0 [pid 7187] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 7187] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000) = -1 EFAULT (Bad address) [pid 7186] <... mount resumed>) = 0 [pid 5821] umount2("./30/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7187] close(3 [pid 7186] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7187] <... close resumed>) = 0 [pid 7186] <... openat resumed>) = 3 [pid 7187] close(4 [pid 7186] chdir("./file0" [pid 7187] <... close resumed>) = 0 [pid 7186] <... chdir resumed>) = 0 [pid 7187] close(5 [pid 7186] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7187] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7186] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7187] close(6 [pid 7186] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 7187] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5823] <... umount2 resumed>) = 0 [pid 5821] newfstatat(AT_FDCWD, "./30/file0", [pid 7186] <... open resumed>) = 4 [pid 7187] close(7 [pid 5823] umount2("./29/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7186] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5821] umount2("./30/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] openat(AT_FDCWD, "./30/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] newfstatat(AT_FDCWD, "./29/file0", [pid 5821] <... openat resumed>) = 4 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 149.824330][ T7187] XFS (loop1): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 149.845918][ T7187] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 149.853180][ T7186] XFS (loop4): Ending clean mount [ 149.877707][ T29] kauditd_printk_skb: 1 callbacks suppressed [pid 5821] newfstatat(4, "", [pid 7187] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7187] close(8) = -1 EBADF (Bad file descriptor) [pid 7187] close(9) = -1 EBADF (Bad file descriptor) [pid 7187] close(10) = -1 EBADF (Bad file descriptor) [pid 7187] close(11) = -1 EBADF (Bad file descriptor) [pid 7187] close(12) = -1 EBADF (Bad file descriptor) [pid 7187] close(13) = -1 EBADF (Bad file descriptor) [pid 7187] close(14) = -1 EBADF (Bad file descriptor) [pid 7187] close(15) = -1 EBADF (Bad file descriptor) [pid 7187] close(16) = -1 EBADF (Bad file descriptor) [pid 7187] close(17) = -1 EBADF (Bad file descriptor) [pid 7187] close(18) = -1 EBADF (Bad file descriptor) [pid 7187] close(19) = -1 EBADF (Bad file descriptor) [pid 7187] close(20) = -1 EBADF (Bad file descriptor) [pid 7187] close(21) = -1 EBADF (Bad file descriptor) [pid 7187] close(22) = -1 EBADF (Bad file descriptor) [pid 7187] close(23) = -1 EBADF (Bad file descriptor) [pid 7187] close(24) = -1 EBADF (Bad file descriptor) [pid 7187] close(25) = -1 EBADF (Bad file descriptor) [pid 7187] close(26) = -1 EBADF (Bad file descriptor) [pid 7187] close(27) = -1 EBADF (Bad file descriptor) [pid 7187] close(28) = -1 EBADF (Bad file descriptor) [pid 7187] close(29) = -1 EBADF (Bad file descriptor) [pid 7187] exit_group(0) = ? [pid 7187] +++ exited with 0 +++ [pid 5823] umount2("./29/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=33, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=53 /* 0.53 s */} --- [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5821] getdents64(4, [pid 5823] openat(AT_FDCWD, "./29/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5821] <... getdents64 resumed>0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5824] umount2("./31", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] getdents64(4, [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] <... openat resumed>) = 4 [pid 5821] <... getdents64 resumed>0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5824] <... openat resumed>) = 3 [pid 5824] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5824] umount2("./31/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./31/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./31/cgroup") = 0 [pid 5824] umount2("./31/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./31/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 149.877724][ T29] audit: type=1800 audit(1733456447.366:153): pid=7186 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop4" ino=41 res=0 errno=0 [ 149.888052][ T5966] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 149.918094][ T5966] XFS (loop4): Unmount and run xfs_repair [ 149.924935][ T5966] XFS (loop4): First 128 bytes of corrupted metadata buffer: [pid 5824] unlink("./31/cgroup.cpu") = 0 [pid 5823] newfstatat(4, "", [pid 5821] close(4 [pid 5824] umount2("./31/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./31/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./31/cgroup.net") = 0 [pid 5824] umount2("./31/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./31/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./31/binderfs" [pid 5821] <... close resumed>) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 7192] <... mount resumed>) = 0 [pid 5824] <... unlink resumed>) = 0 [pid 5821] rmdir("./30/file0" [pid 5824] umount2("./31/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] getdents64(4, 0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5823] getdents64(4, 0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5823] close(4 [pid 5821] <... rmdir resumed>) = 0 [pid 7192] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5823] <... close resumed>) = 0 [pid 5823] rmdir("./29/file0") = 0 [pid 5823] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5823] close(3) = 0 [pid 5823] rmdir("./29") = 0 [pid 5823] mkdir("./30", 0777) = 0 [pid 5823] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5823] ioctl(3, LOOP_CLR_FD) = 0 [pid 5823] close(3 [pid 7192] <... openat resumed>) = 3 [pid 5821] getdents64(3, [pid 7192] chdir("./file0" [pid 5821] <... getdents64 resumed>0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5821] close(3 [pid 7192] <... chdir resumed>) = 0 [pid 5821] <... close resumed>) = 0 [pid 7192] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5821] rmdir("./30") = 0 [pid 7192] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5821] mkdir("./31", 0777) = 0 [pid 5821] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 7192] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 5821] ioctl(3, LOOP_CLR_FD) = 0 [ 149.945412][ T7192] XFS (loop3): Ending clean mount [ 149.953828][ T5966] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 149.963550][ T5824] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 5821] close(3 [pid 7192] <... open resumed>) = 4 [ 150.009320][ T29] audit: type=1800 audit(1733456447.506:154): pid=7192 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop3" ino=41 res=0 errno=0 [ 150.024313][ T5966] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [pid 7192] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5824] <... umount2 resumed>) = 0 [pid 5824] umount2("./31/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./31/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] umount2("./31/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./31/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5824] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(4, 0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5824] getdents64(4, 0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5824] close(4) = 0 [pid 5824] rmdir("./31/file0") = 0 [pid 5824] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5824] close(3) = 0 [pid 5824] rmdir("./31") = 0 [pid 5824] mkdir("./32", 0777) = 0 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5824] ioctl(3, LOOP_CLR_FD) = 0 [ 150.058390][ T57] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 150.106597][ T57] XFS (loop3): Unmount and run xfs_repair [ 150.112577][ T5966] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 150.121541][ T57] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 150.137368][ T57] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 150.166655][ T5966] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 150.176038][ T5966] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 150.186721][ T57] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 150.195604][ T57] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 150.216776][ T5966] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 150.225672][ T5966] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 150.236591][ T57] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 150.245473][ T57] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 150.266615][ T5966] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 150.286658][ T57] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 150.295625][ T7186] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 150.312491][ T57] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 150.328714][ T7186] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 150.346595][ T57] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 150.355527][ T7192] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [pid 5824] close(3 [pid 7186] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 7186] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000) = -1 EFAULT (Bad address) [pid 7186] close(3) = 0 [pid 7186] close(4) = 0 [pid 7186] close(5) = -1 EBADF (Bad file descriptor) [pid 7186] close(6) = -1 EBADF (Bad file descriptor) [pid 7186] close(7) = -1 EBADF (Bad file descriptor) [pid 7186] close(8) = -1 EBADF (Bad file descriptor) [pid 7186] close(9) = -1 EBADF (Bad file descriptor) [pid 7186] close(10) = -1 EBADF (Bad file descriptor) [pid 7186] close(11) = -1 EBADF (Bad file descriptor) [pid 7186] close(12) = -1 EBADF (Bad file descriptor) [pid 7186] close(13) = -1 EBADF (Bad file descriptor) [pid 7186] close(14) = -1 EBADF (Bad file descriptor) [pid 7186] close(15) = -1 EBADF (Bad file descriptor) [pid 7186] close(16) = -1 EBADF (Bad file descriptor) [ 150.386813][ T7186] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 150.389459][ T7192] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [pid 7186] close(17) = -1 EBADF (Bad file descriptor) [pid 7186] close(18) = -1 EBADF (Bad file descriptor) [pid 7186] close(19) = -1 EBADF (Bad file descriptor) [pid 7186] close(20) = -1 EBADF (Bad file descriptor) [pid 7186] close(21) = -1 EBADF (Bad file descriptor) [pid 7186] close(22) = -1 EBADF (Bad file descriptor) [pid 7186] close(23) = -1 EBADF (Bad file descriptor) [pid 7186] close(24) = -1 EBADF (Bad file descriptor) [pid 7186] close(25) = -1 EBADF (Bad file descriptor) [pid 7186] close(26) = -1 EBADF (Bad file descriptor) [pid 7186] close(27) = -1 EBADF (Bad file descriptor) [pid 7186] close(28) = -1 EBADF (Bad file descriptor) [pid 7186] close(29) = -1 EBADF (Bad file descriptor) [pid 7186] exit_group(0) = ? [pid 7192] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 7186] +++ exited with 0 +++ [pid 7192] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000 [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=30, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=50 /* 0.50 s */} --- [pid 7192] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5826] umount2("./28", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5826] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5826] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5826] umount2("./28/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./28/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7192] close(3 [pid 5826] unlink("./28/cgroup" [pid 7192] <... close resumed>) = 0 [pid 7192] close(4 [pid 5826] <... unlink resumed>) = 0 [pid 7192] <... close resumed>) = 0 [pid 5826] umount2("./28/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7192] close(5) = -1 EBADF (Bad file descriptor) [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7192] close(6) = -1 EBADF (Bad file descriptor) [pid 5826] newfstatat(AT_FDCWD, "./28/cgroup.cpu", [pid 7192] close(7 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7192] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7192] close(8 [pid 5826] unlink("./28/cgroup.cpu" [pid 7192] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7192] close(9 [pid 5826] <... unlink resumed>) = 0 [pid 7192] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5826] umount2("./28/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7192] close(10) = -1 EBADF (Bad file descriptor) [pid 7192] close(11) = -1 EBADF (Bad file descriptor) [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... close resumed>) = 0 [pid 7192] close(12) = -1 EBADF (Bad file descriptor) [pid 5826] newfstatat(AT_FDCWD, "./28/cgroup.net", [pid 7192] close(13) = -1 EBADF (Bad file descriptor) [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7192] close(14) = -1 EBADF (Bad file descriptor) [pid 7192] close(15 [pid 5826] unlink("./28/cgroup.net" [pid 7192] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7192] close(16 [pid 5826] <... unlink resumed>) = 0 [pid 5826] umount2("./28/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7192] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7192] close(17 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7192] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5826] newfstatat(AT_FDCWD, "./28/binderfs", [pid 7192] close(18) = -1 EBADF (Bad file descriptor) [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7192] close(19) = -1 EBADF (Bad file descriptor) [pid 5826] unlink("./28/binderfs" [pid 7192] close(20) = -1 EBADF (Bad file descriptor) [pid 5826] <... unlink resumed>) = 0 [pid 7192] close(21) = -1 EBADF (Bad file descriptor) [ 150.428223][ T7192] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [pid 5826] umount2("./28/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7192] close(22 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5821] <... close resumed>) = 0 [pid 7192] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7192] close(23) = -1 EBADF (Bad file descriptor) [pid 7192] close(24) = -1 EBADF (Bad file descriptor) [pid 7192] close(25 [pid 5821] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7192] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7192] close(26) = -1 EBADF (Bad file descriptor) ./strace-static-x86_64: Process 7224 attached [pid 7192] close(27 [pid 5824] <... close resumed>) = 0 [pid 7192] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5823] <... clone resumed>, child_tidptr=0x55558159a650) = 32 [pid 5821] <... clone resumed>, child_tidptr=0x55558159a650) = 33 [pid 7224] set_robust_list(0x55558159a660, 24 [pid 7192] close(28) = -1 EBADF (Bad file descriptor) [pid 7192] close(29) = -1 EBADF (Bad file descriptor) [pid 7192] exit_group(0) = ? ./strace-static-x86_64: Process 7225 attached [pid 7224] <... set_robust_list resumed>) = 0 [pid 7192] +++ exited with 0 +++ [pid 7224] chdir("./31" [pid 7225] set_robust_list(0x55558159a660, 24 [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=32, si_uid=0, si_status=0, si_utime=13 /* 0.13 s */, si_stime=43 /* 0.43 s */} --- [pid 7225] <... set_robust_list resumed>) = 0 [pid 7224] <... chdir resumed>) = 0 [pid 5825] umount2("./30", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7224] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7225] chdir("./32" [pid 7224] <... prctl resumed>) = 0 [pid 5825] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7224] setpgid(0, 0 [pid 5825] <... openat resumed>) = 3 [pid 5824] <... clone resumed>, child_tidptr=0x55558159a650) = 34 [pid 7225] <... chdir resumed>) = 0 [pid 7224] <... setpgid resumed>) = 0 [pid 5825] newfstatat(3, "", [pid 7224] symlink("/syzcgroup/unified/syz0", "./cgroup" [pid 7225] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 7225] <... prctl resumed>) = 0 ./strace-static-x86_64: Process 7223 attached [pid 7225] setpgid(0, 0 [pid 7224] <... symlink resumed>) = 0 [pid 5825] getdents64(3, [pid 7223] set_robust_list(0x55558159a660, 24 [pid 5826] <... umount2 resumed>) = 0 [pid 7223] <... set_robust_list resumed>) = 0 [pid 7223] chdir("./30") = 0 [pid 7223] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7223] setpgid(0, 0) = 0 [pid 7225] <... setpgid resumed>) = 0 [pid 7224] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu" [pid 5826] umount2("./28/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... getdents64 resumed>0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./28/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] umount2("./28/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] openat(AT_FDCWD, "./28/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5826] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5826] getdents64(4, 0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5826] getdents64(4, 0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5826] close(4) = 0 [pid 5826] rmdir("./28/file0") = 0 [pid 5826] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5826] close(3) = 0 [pid 5826] rmdir("./28") = 0 [pid 5826] mkdir("./29", 0777) = 0 [pid 5826] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [ 150.474760][ T5826] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 5826] ioctl(3, LOOP_CLR_FD) = 0 [pid 5826] close(3 [pid 7225] symlink("/syzcgroup/unified/syz1", "./cgroup" [pid 7224] <... symlink resumed>) = 0 [pid 7223] symlink("/syzcgroup/unified/syz2", "./cgroup" [pid 5825] umount2("./30/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7225] <... symlink resumed>) = 0 [pid 7224] symlink("/syzcgroup/net/syz0", "./cgroup.net" [pid 7223] <... symlink resumed>) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7225] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu" [pid 7224] <... symlink resumed>) = 0 [pid 7223] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu" [pid 5825] newfstatat(AT_FDCWD, "./30/cgroup", [pid 7225] <... symlink resumed>) = 0 [pid 7224] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7223] <... symlink resumed>) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7225] symlink("/syzcgroup/net/syz1", "./cgroup.net" [pid 7224] <... openat resumed>) = 3 [pid 7223] symlink("/syzcgroup/net/syz2", "./cgroup.net" [pid 5825] unlink("./30/cgroup" [pid 7225] <... symlink resumed>) = 0 [pid 7224] write(3, "1000", 4 [pid 7223] <... symlink resumed>) = 0 [pid 5825] <... unlink resumed>) = 0 [pid 7225] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7224] <... write resumed>) = 4 [pid 7223] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5825] umount2("./30/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7225] <... openat resumed>) = 3 [pid 7224] close(3 [pid 7223] <... openat resumed>) = 3 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7225] write(3, "1000", 4 [pid 7224] <... close resumed>) = 0 [pid 7223] write(3, "1000", 4 [pid 5825] newfstatat(AT_FDCWD, "./30/cgroup.cpu", [pid 7225] <... write resumed>) = 4 [pid 7224] symlink("/dev/binderfs", "./binderfs" [pid 7223] <... write resumed>) = 4 [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7225] close(3 [pid 7224] <... symlink resumed>) = 0 [pid 7223] close(3 [pid 5825] unlink("./30/cgroup.cpu" [pid 7225] <... close resumed>) = 0 executing program [pid 7224] write(1, "executing program\n", 18 [pid 7223] <... close resumed>) = 0 [pid 5825] <... unlink resumed>) = 0 [pid 7225] symlink("/dev/binderfs", "./binderfs" [pid 7224] <... write resumed>) = 18 [pid 7223] symlink("/dev/binderfs", "./binderfs" [pid 5825] umount2("./30/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7225] <... symlink resumed>) = 0 [pid 7224] memfd_create("syzkaller", 0 [pid 7223] <... symlink resumed>) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7225] write(1, "executing program\n", 18 [pid 7224] <... memfd_create resumed>) = 3 executing program [pid 7223] write(1, "executing program\n", 18 [pid 5825] newfstatat(AT_FDCWD, "./30/cgroup.net", executing program [pid 7225] <... write resumed>) = 18 [pid 7224] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7223] <... write resumed>) = 18 [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7224] <... mmap resumed>) = 0x7fbaaaa00000 [pid 7223] memfd_create("syzkaller", 0 [pid 5825] unlink("./30/cgroup.net" [pid 7225] memfd_create("syzkaller", 0 [pid 7223] <... memfd_create resumed>) = 3 [pid 5825] <... unlink resumed>) = 0 [pid 7223] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaaaa00000 [pid 5825] umount2("./30/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./30/binderfs", [pid 7225] <... memfd_create resumed>) = 3 [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7225] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5825] unlink("./30/binderfs" [pid 7225] <... mmap resumed>) = 0x7fbaaaa00000 [pid 5825] <... unlink resumed>) = 0 [pid 5825] umount2("./30/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5825] umount2("./30/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./30/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] umount2("./30/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./30/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5825] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(4, 0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5825] getdents64(4, 0x5555815a3730 /* 0 entries */, 32768) = 0 [ 150.608306][ T5825] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 5825] close(4) = 0 [pid 5825] rmdir("./30/file0") = 0 [pid 5825] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5825] close(3) = 0 [pid 5825] rmdir("./30") = 0 [pid 5825] mkdir("./31", 0777) = 0 [pid 5825] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5825] ioctl(3, LOOP_CLR_FD) = 0 [pid 5825] close(3 [pid 5826] <... close resumed>) = 0 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7226 attached , child_tidptr=0x55558159a650) = 31 [pid 7226] set_robust_list(0x55558159a660, 24) = 0 [pid 7226] chdir("./29") = 0 [pid 7226] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7226] setpgid(0, 0) = 0 [pid 7226] symlink("/syzcgroup/unified/syz4", "./cgroup") = 0 [pid 7226] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu") = 0 [pid 7226] symlink("/syzcgroup/net/syz4", "./cgroup.net") = 0 [pid 7226] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7226] write(3, "1000", 4) = 4 [pid 7226] close(3) = 0 [pid 7226] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5825] <... close resumed>) = 0 [pid 7226] write(1, "executing program\n", 18) = 18 [pid 7226] memfd_create("syzkaller", 0) = 3 [pid 7226] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaaaa00000 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7227 attached [pid 7227] set_robust_list(0x55558159a660, 24) = 0 [pid 5825] <... clone resumed>, child_tidptr=0x55558159a650) = 33 [pid 7227] chdir("./31") = 0 [pid 7227] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7227] setpgid(0, 0) = 0 [pid 7227] symlink("/syzcgroup/unified/syz3", "./cgroup") = 0 [pid 7227] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu") = 0 [pid 7227] symlink("/syzcgroup/net/syz3", "./cgroup.net") = 0 [pid 7227] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7227] write(3, "1000", 4) = 4 [pid 7227] close(3) = 0 [pid 7227] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 7227] write(1, "executing program\n", 18) = 18 [pid 7227] memfd_create("syzkaller", 0) = 3 [pid 7227] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaaaa00000 [pid 7223] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 7224] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 7225] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432) = 33554432 [pid 7225] munmap(0x7fbaaaa00000, 138412032) = 0 [pid 7225] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7227] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 7225] <... openat resumed>) = 4 [pid 7225] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7225] close(3) = 0 [pid 7225] close(4) = 0 [pid 7225] mkdir("./file0", 0777) = 0 [pid 7226] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [ 151.707616][ T7225] loop1: detected capacity change from 0 to 65536 [pid 7225] mount("/dev/loop1", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 7223] <... write resumed>) = 33554432 [ 151.788851][ T7225] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 7223] munmap(0x7fbaaaa00000, 138412032 [pid 7225] <... mount resumed>) = 0 [pid 7223] <... munmap resumed>) = 0 [pid 7223] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 7223] ioctl(4, LOOP_SET_FD, 3 [pid 7225] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7223] <... ioctl resumed>) = 0 [pid 7223] close(3) = 0 [pid 7223] close(4 [pid 7225] <... openat resumed>) = 3 [pid 7223] <... close resumed>) = 0 [pid 7223] mkdir("./file0", 0777) = 0 [pid 7223] mount("/dev/loop2", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 7225] chdir("./file0") = 0 [pid 7224] <... write resumed>) = 33554432 [pid 7224] munmap(0x7fbaaaa00000, 138412032 [pid 7225] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [ 151.858527][ T7225] XFS (loop1): Ending clean mount [ 151.868136][ T7223] loop2: detected capacity change from 0 to 65536 [pid 7225] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 4 [ 151.914727][ T29] audit: type=1800 audit(1733456449.406:155): pid=7225 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop1" ino=41 res=0 errno=0 [ 151.938264][ T57] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 151.950869][ T57] XFS (loop1): Unmount and run xfs_repair [pid 7225] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 7224] <... munmap resumed>) = 0 [pid 7224] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7224] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7224] close(3) = 0 [pid 7224] close(4) = 0 [ 151.961525][ T7223] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 151.967374][ T57] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 151.978117][ T57] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 151.982460][ T7224] loop0: detected capacity change from 0 to 65536 [ 151.995188][ T57] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [pid 7224] mkdir("./file0", 0777) = 0 [ 152.016173][ T57] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 152.040207][ T57] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 152.049181][ T57] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 152.058077][ T57] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 152.067045][ T57] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 152.075912][ T57] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 152.084935][ T7225] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [pid 7224] mount("/dev/loop0", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 7227] <... write resumed>) = 33554432 [pid 7227] munmap(0x7fbaaaa00000, 138412032) = 0 [ 152.219977][ T7225] XFS (loop1): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [pid 7226] <... write resumed>) = 33554432 [pid 7227] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 7227] ioctl(4, LOOP_SET_FD, 3 [pid 7226] munmap(0x7fbaaaa00000, 138412032 [pid 7223] <... mount resumed>) = 0 [pid 7223] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7223] chdir("./file0") = 0 [pid 7223] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7223] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 7223] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 7225] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 7227] <... ioctl resumed>) = 0 [pid 7227] close(3) = 0 [pid 7227] close(4) = 0 [pid 7227] mkdir("./file0", 0777) = 0 [ 152.280338][ T7223] XFS (loop2): Ending clean mount [ 152.287760][ T7227] loop3: detected capacity change from 0 to 65536 [ 152.288579][ T7225] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 152.303711][ T9] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [pid 7227] mount("/dev/loop3", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 7226] <... munmap resumed>) = 0 [pid 7225] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000 [pid 7226] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7225] <... openat resumed>) = -1 EFAULT (Bad address) [pid 7226] <... openat resumed>) = 4 [pid 7225] close(3) = 0 [pid 7226] ioctl(4, LOOP_SET_FD, 3 [pid 7225] close(4) = 0 [ 152.303919][ T29] audit: type=1800 audit(1733456449.796:156): pid=7223 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop2" ino=41 res=0 errno=0 [ 152.330277][ T9] XFS (loop2): Unmount and run xfs_repair [ 152.342274][ T9] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 152.349741][ T9] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 152.361835][ T7226] loop4: detected capacity change from 0 to 65536 [ 152.362467][ T9] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [pid 7226] <... ioctl resumed>) = 0 [pid 7225] close(5) = -1 EBADF (Bad file descriptor) [pid 7226] close(3) = 0 [pid 7225] close(6) = -1 EBADF (Bad file descriptor) [pid 7226] close(4 [ 152.378744][ T7224] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 152.390626][ T9] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 152.399881][ T9] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 152.408857][ T9] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 152.418132][ T9] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [pid 7225] close(7 [pid 7226] <... close resumed>) = 0 [pid 7225] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7226] mkdir("./file0", 0777 [pid 7225] close(8 [pid 7226] <... mkdir resumed>) = 0 [pid 7225] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7226] mount("/dev/loop4", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 7225] close(9) = -1 EBADF (Bad file descriptor) [pid 7225] close(10) = -1 EBADF (Bad file descriptor) [pid 7225] close(11) = -1 EBADF (Bad file descriptor) [pid 7225] close(12) = -1 EBADF (Bad file descriptor) [pid 7225] close(13) = -1 EBADF (Bad file descriptor) [ 152.427499][ T9] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 152.438528][ T9] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 152.451544][ T7223] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 152.469350][ T7224] XFS (loop0): Ending clean mount [pid 7225] close(14) = -1 EBADF (Bad file descriptor) [pid 7224] <... mount resumed>) = 0 [pid 7225] close(15 [pid 7224] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7225] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7224] <... openat resumed>) = 3 [pid 7225] close(16 [pid 7224] chdir("./file0" [pid 7225] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7224] <... chdir resumed>) = 0 [pid 7225] close(17 [pid 7224] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7225] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7224] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7225] close(18 [pid 7224] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 7225] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7225] close(19) = -1 EBADF (Bad file descriptor) [pid 7225] close(20 [pid 7224] <... open resumed>) = 4 [pid 7225] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7224] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 7225] close(21) = -1 EBADF (Bad file descriptor) [pid 7225] close(22) = -1 EBADF (Bad file descriptor) [pid 7225] close(23) = -1 EBADF (Bad file descriptor) [pid 7225] close(24) = -1 EBADF (Bad file descriptor) [pid 7225] close(25) = -1 EBADF (Bad file descriptor) [pid 7225] close(26) = -1 EBADF (Bad file descriptor) [pid 7225] close(27) = -1 EBADF (Bad file descriptor) [ 152.469754][ T7223] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 152.477497][ T7226] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 152.492016][ T7227] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 152.498695][ T7223] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 152.513504][ T9] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [pid 7225] close(28) = -1 EBADF (Bad file descriptor) [pid 7225] close(29) = -1 EBADF (Bad file descriptor) [pid 7225] exit_group(0) = ? [pid 7225] +++ exited with 0 +++ [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=34, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=50 /* 0.50 s */} --- [pid 5824] restart_syscall(<... resuming interrupted clone ...> [pid 7223] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 5824] <... restart_syscall resumed>) = 0 [pid 7223] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000) = -1 EFAULT (Bad address) [pid 7223] close(3 [pid 5824] umount2("./32", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7223] <... close resumed>) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7223] close(4 [pid 5824] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7223] <... close resumed>) = 0 [pid 5824] <... openat resumed>) = 3 [pid 7223] close(5 [pid 5824] newfstatat(3, "", [pid 7223] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 7223] close(6 [pid 5824] getdents64(3, [pid 7223] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] <... getdents64 resumed>0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 7223] close(7 [pid 5824] umount2("./32/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7223] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7223] close(8 [pid 5824] newfstatat(AT_FDCWD, "./32/cgroup", [pid 7223] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7223] close(9 [pid 5824] unlink("./32/cgroup" [pid 7223] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] <... unlink resumed>) = 0 [pid 7223] close(10 [pid 5824] umount2("./32/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7223] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7223] close(11 [pid 5824] newfstatat(AT_FDCWD, "./32/cgroup.cpu", [pid 7223] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7223] close(12 [pid 5824] unlink("./32/cgroup.cpu" [pid 7223] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] <... unlink resumed>) = 0 [pid 7223] close(13 [pid 5824] umount2("./32/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7223] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7223] close(14) = -1 EBADF (Bad file descriptor) [pid 5824] newfstatat(AT_FDCWD, "./32/cgroup.net", [ 152.515036][ T29] audit: type=1800 audit(1733456450.006:157): pid=7224 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop0" ino=41 res=0 errno=0 [ 152.537103][ T9] XFS (loop0): Unmount and run xfs_repair [ 152.553096][ T9] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 152.563005][ T9] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 152.572398][ T9] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [pid 7223] close(15 [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7227] <... mount resumed>) = 0 [pid 7223] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7227] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7223] close(16 [pid 7227] <... openat resumed>) = 3 [pid 7223] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7227] chdir("./file0" [pid 7223] close(17 [pid 7227] <... chdir resumed>) = 0 [pid 7223] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7227] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7223] close(18 [pid 7227] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7223] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7227] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 7223] close(19) = -1 EBADF (Bad file descriptor) [pid 7223] close(20) = -1 EBADF (Bad file descriptor) [pid 7223] close(21) = -1 EBADF (Bad file descriptor) [pid 7223] close(22) = -1 EBADF (Bad file descriptor) [pid 7223] close(23) = -1 EBADF (Bad file descriptor) [pid 7223] close(24) = -1 EBADF (Bad file descriptor) [pid 7223] close(25) = -1 EBADF (Bad file descriptor) [ 152.581805][ T9] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 152.587553][ T7227] XFS (loop3): Ending clean mount [ 152.591183][ T9] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 152.600619][ T7226] XFS (loop4): Ending clean mount [ 152.605011][ T9] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [pid 7227] <... open resumed>) = 4 [pid 7223] close(26 [pid 5824] unlink("./32/cgroup.net" [pid 7227] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 7223] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7223] close(27) = -1 EBADF (Bad file descriptor) [pid 7223] close(28 [pid 5824] <... unlink resumed>) = 0 [pid 7223] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] umount2("./32/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7223] close(29 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7223] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] newfstatat(AT_FDCWD, "./32/binderfs", [pid 7223] exit_group(0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7223] <... exit_group resumed>) = ? [pid 5824] unlink("./32/binderfs" [pid 7223] +++ exited with 0 +++ [pid 5824] <... unlink resumed>) = 0 [pid 5824] umount2("./32/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=32, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=49 /* 0.49 s */} --- [pid 5823] restart_syscall(<... resuming interrupted clone ...> [pid 7226] <... mount resumed>) = 0 [pid 7226] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7226] chdir("./file0") = 0 [pid 7226] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [ 152.616255][ T29] audit: type=1800 audit(1733456450.106:158): pid=7227 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop3" ino=41 res=0 errno=0 [ 152.619289][ T9] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 152.642565][ T57] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 152.648051][ T9] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 152.668311][ T9] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [pid 7226] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 7226] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5823] <... restart_syscall resumed>) = 0 [pid 5823] umount2("./30", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 152.678384][ T7224] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 152.679871][ T5824] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 152.690478][ T29] audit: type=1800 audit(1733456450.176:159): pid=7226 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop4" ino=41 res=0 errno=0 [ 152.700936][ T5966] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [pid 5823] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5823] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5823] umount2("./30/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./30/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./30/cgroup") = 0 [pid 5823] umount2("./30/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./30/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./30/cgroup.cpu") = 0 [pid 5823] umount2("./30/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./30/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./30/cgroup.net") = 0 [pid 5823] umount2("./30/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./30/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./30/binderfs") = 0 [pid 5823] umount2("./30/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7224] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 7224] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000) = -1 EFAULT (Bad address) [pid 7224] close(3) = 0 [pid 7224] close(4) = 0 [pid 7224] close(5) = -1 EBADF (Bad file descriptor) [pid 7224] close(6) = -1 EBADF (Bad file descriptor) [pid 7224] close(7) = -1 EBADF (Bad file descriptor) [pid 7224] close(8) = -1 EBADF (Bad file descriptor) [pid 7224] close(9) = -1 EBADF (Bad file descriptor) [pid 7224] close(10) = -1 EBADF (Bad file descriptor) [pid 7224] close(11) = -1 EBADF (Bad file descriptor) [pid 7224] close(12) = -1 EBADF (Bad file descriptor) [pid 7224] close(13) = -1 EBADF (Bad file descriptor) [pid 7224] close(14) = -1 EBADF (Bad file descriptor) [pid 7224] close(15) = -1 EBADF (Bad file descriptor) [pid 7224] close(16) = -1 EBADF (Bad file descriptor) [pid 7224] close(17) = -1 EBADF (Bad file descriptor) [pid 7224] close(18) = -1 EBADF (Bad file descriptor) [pid 7224] close(19) = -1 EBADF (Bad file descriptor) [pid 7224] close(20) = -1 EBADF (Bad file descriptor) [pid 7224] close(21) = -1 EBADF (Bad file descriptor) [pid 7224] close(22) = -1 EBADF (Bad file descriptor) [pid 7224] close(23) = -1 EBADF (Bad file descriptor) [pid 7224] close(24) = -1 EBADF (Bad file descriptor) [pid 7224] close(25) = -1 EBADF (Bad file descriptor) [pid 7224] close(26) = -1 EBADF (Bad file descriptor) [pid 7224] close(27) = -1 EBADF (Bad file descriptor) [pid 7224] close(28) = -1 EBADF (Bad file descriptor) [pid 7224] close(29) = -1 EBADF (Bad file descriptor) [pid 7224] exit_group(0) = ? [ 152.731321][ T7224] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 152.746183][ T7224] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 152.750363][ T57] XFS (loop3): Unmount and run xfs_repair [ 152.760532][ T57] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 152.765038][ T5823] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 152.767990][ T5966] XFS (loop4): Unmount and run xfs_repair [pid 7224] +++ exited with 0 +++ [pid 5821] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=33, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=56 /* 0.56 s */} --- [pid 5821] umount2("./31", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5821] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5821] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5821] umount2("./31/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./31/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] unlink("./31/cgroup") = 0 [pid 5821] umount2("./31/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./31/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] unlink("./31/cgroup.cpu") = 0 [pid 5821] umount2("./31/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./31/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] unlink("./31/cgroup.net") = 0 [pid 5821] umount2("./31/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] newfstatat(AT_FDCWD, "./31/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] unlink("./31/binderfs") = 0 [ 152.768008][ T5966] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 152.791286][ T57] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 152.801311][ T57] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 152.810285][ T5966] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 152.820717][ T57] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 152.830209][ T5966] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 152.830823][ T5821] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 152.839499][ T57] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 152.856716][ T5966] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 152.865619][ T5966] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 152.875090][ T57] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 152.884100][ T5966] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 152.893073][ T57] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 152.902007][ T5966] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 152.910966][ T57] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 152.920235][ T5966] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [pid 5821] umount2("./31/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... umount2 resumed>) = 0 [pid 5821] <... umount2 resumed>) = 0 [pid 5824] umount2("./32/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./32/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] umount2("./32/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] umount2("./31/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] openat(AT_FDCWD, "./32/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... openat resumed>) = 4 [pid 5821] newfstatat(AT_FDCWD, "./31/file0", [pid 5824] newfstatat(4, "", [pid 5821] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5821] umount2("./31/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] getdents64(4, [pid 5823] <... umount2 resumed>) = 0 [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... getdents64 resumed>0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5821] openat(AT_FDCWD, "./31/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] getdents64(4, [pid 5821] <... openat resumed>) = 4 [pid 5824] <... getdents64 resumed>0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5821] newfstatat(4, "", [pid 5824] close(4 [pid 5821] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5824] <... close resumed>) = 0 [pid 5821] getdents64(4, [pid 5824] rmdir("./32/file0" [pid 5821] <... getdents64 resumed>0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5824] <... rmdir resumed>) = 0 [pid 5821] getdents64(4, [pid 5824] getdents64(3, [pid 5821] <... getdents64 resumed>0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5824] <... getdents64 resumed>0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5821] close(4 [pid 5824] close(3 [pid 5821] <... close resumed>) = 0 [pid 5824] <... close resumed>) = 0 [pid 5821] rmdir("./31/file0" [pid 5824] rmdir("./32" [pid 5821] <... rmdir resumed>) = 0 [pid 5824] <... rmdir resumed>) = 0 [pid 5821] getdents64(3, [pid 5824] mkdir("./33", 0777 [pid 5821] <... getdents64 resumed>0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5824] <... mkdir resumed>) = 0 [pid 5823] umount2("./30/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] close(3 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5821] <... close resumed>) = 0 [pid 5824] <... openat resumed>) = 3 [pid 5823] newfstatat(AT_FDCWD, "./30/file0", [pid 5821] rmdir("./31" [pid 5824] ioctl(3, LOOP_CLR_FD [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] <... rmdir resumed>) = 0 [pid 5824] <... ioctl resumed>) = 0 [pid 5823] umount2("./30/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] mkdir("./32", 0777 [ 152.929169][ T57] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 152.938097][ T5966] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 152.947216][ T7227] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 152.958476][ T7226] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [pid 5824] close(3 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5821] <... mkdir resumed>) = 0 [pid 7226] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 7226] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000) = -1 EFAULT (Bad address) [pid 5823] openat(AT_FDCWD, "./30/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [ 152.973199][ T7226] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 152.988099][ T7226] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 152.999576][ T7227] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 153.025826][ T7227] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [pid 5821] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7226] close(3 [pid 5823] <... openat resumed>) = 4 [pid 5821] <... openat resumed>) = 3 [pid 5823] newfstatat(4, "", [pid 5821] ioctl(3, LOOP_CLR_FD [pid 7226] <... close resumed>) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5821] <... ioctl resumed>) = 0 [pid 7226] close(4 [pid 5823] getdents64(4, [pid 5821] close(3 [pid 5823] <... getdents64 resumed>0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 7226] <... close resumed>) = 0 [pid 7226] close(5) = -1 EBADF (Bad file descriptor) [pid 7226] close(6) = -1 EBADF (Bad file descriptor) [pid 7226] close(7) = -1 EBADF (Bad file descriptor) [pid 7226] close(8) = -1 EBADF (Bad file descriptor) [pid 7226] close(9) = -1 EBADF (Bad file descriptor) [pid 7226] close(10) = -1 EBADF (Bad file descriptor) [pid 7226] close(11) = -1 EBADF (Bad file descriptor) [pid 7226] close(12) = -1 EBADF (Bad file descriptor) [pid 7226] close(13) = -1 EBADF (Bad file descriptor) [pid 7226] close(14) = -1 EBADF (Bad file descriptor) [pid 7226] close(15) = -1 EBADF (Bad file descriptor) [pid 7226] close(16) = -1 EBADF (Bad file descriptor) [pid 7226] close(17) = -1 EBADF (Bad file descriptor) [pid 7226] close(18) = -1 EBADF (Bad file descriptor) [pid 7226] close(19) = -1 EBADF (Bad file descriptor) [pid 7226] close(20) = -1 EBADF (Bad file descriptor) [pid 7226] close(21) = -1 EBADF (Bad file descriptor) [pid 7226] close(22) = -1 EBADF (Bad file descriptor) [pid 7226] close(23) = -1 EBADF (Bad file descriptor) [pid 7226] close(24) = -1 EBADF (Bad file descriptor) [pid 7226] close(25) = -1 EBADF (Bad file descriptor) [pid 7226] close(26) = -1 EBADF (Bad file descriptor) [pid 7226] close(27) = -1 EBADF (Bad file descriptor) [pid 7226] close(28) = -1 EBADF (Bad file descriptor) [pid 7226] close(29) = -1 EBADF (Bad file descriptor) [pid 7226] exit_group(0) = ? [pid 7226] +++ exited with 0 +++ [pid 7227] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 7227] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000 [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=31, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=51 /* 0.51 s */} --- [pid 5823] getdents64(4, [pid 5826] umount2("./29", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5826] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5826] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5826] umount2("./29/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./29/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./29/cgroup") = 0 [pid 5826] umount2("./29/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./29/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./29/cgroup.cpu") = 0 [pid 5826] umount2("./29/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./29/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./29/cgroup.net") = 0 [pid 5826] umount2("./29/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... getdents64 resumed>0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] close(4 [pid 5826] newfstatat(AT_FDCWD, "./29/binderfs", [pid 5823] <... close resumed>) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] rmdir("./30/file0" [pid 5826] unlink("./29/binderfs" [pid 5823] <... rmdir resumed>) = 0 [pid 5826] <... unlink resumed>) = 0 [pid 5823] getdents64(3, [pid 5826] umount2("./29/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] <... getdents64 resumed>0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5823] close(3) = 0 [pid 5823] rmdir("./30") = 0 [pid 5823] mkdir("./31", 0777) = 0 [pid 5823] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 7227] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5823] ioctl(3, LOOP_CLR_FD [pid 7227] close(3 [pid 5823] <... ioctl resumed>) = 0 [pid 7227] <... close resumed>) = 0 [pid 5823] close(3executing program [pid 7227] close(4 [pid 5824] <... close resumed>) = 0 [pid 5823] <... close resumed>) = 0 [pid 5821] <... close resumed>) = 0 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5821] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7269 attached ./strace-static-x86_64: Process 7268 attached [pid 7269] set_robust_list(0x55558159a660, 24 [pid 7268] set_robust_list(0x55558159a660, 24 [pid 5824] <... clone resumed>, child_tidptr=0x55558159a650) = 35 [pid 5821] <... clone resumed>, child_tidptr=0x55558159a650) = 34 [pid 7268] <... set_robust_list resumed>) = 0 [pid 7268] chdir("./32") = 0 [pid 7268] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7268] setpgid(0, 0) = 0 [pid 7268] symlink("/syzcgroup/unified/syz0", "./cgroup" [pid 7269] <... set_robust_list resumed>) = 0 [pid 7268] <... symlink resumed>) = 0 [pid 7269] chdir("./33" [pid 7268] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7269] <... chdir resumed>) = 0 [pid 7269] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7269] setpgid(0, 0 [pid 7268] symlink("/syzcgroup/net/syz0", "./cgroup.net" [pid 7269] <... setpgid resumed>) = 0 [pid 7268] <... symlink resumed>) = 0 [pid 7268] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7268] write(3, "1000", 4) = 4 [pid 7268] close(3) = 0 [pid 7268] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7268] write(1, "executing program\n", 18) = 18 [pid 7268] memfd_create("syzkaller", 0) = 3 [pid 7268] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaaaa00000 [pid 7269] symlink("/syzcgroup/unified/syz1", "./cgroup") = 0 [pid 7269] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu") = 0 [pid 7227] <... close resumed>) = 0 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7269] symlink("/syzcgroup/net/syz1", "./cgroup.net") = 0 [pid 7269] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 7270 attached [pid 7227] close(5 [pid 7270] set_robust_list(0x55558159a660, 24 [pid 7227] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5823] <... clone resumed>, child_tidptr=0x55558159a650) = 33 [pid 7269] <... openat resumed>) = 3 [pid 7269] write(3, "1000", 4) = 4 [pid 7269] close(3) = 0 [pid 7269] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7269] write(1, "executing program\n", 18executing program ) = 18 [pid 7270] <... set_robust_list resumed>) = 0 [pid 7269] memfd_create("syzkaller", 0 [pid 7270] chdir("./31" [pid 7269] <... memfd_create resumed>) = 3 [pid 7269] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaaaa00000 [ 153.353358][ T5826] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 7270] <... chdir resumed>) = 0 [pid 7227] close(6 [pid 7270] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7227] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7270] <... prctl resumed>) = 0 [pid 7227] close(7 [pid 7270] setpgid(0, 0 [pid 7227] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7270] <... setpgid resumed>) = 0 [pid 7227] close(8 [pid 7270] symlink("/syzcgroup/unified/syz2", "./cgroup" [pid 7227] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7270] <... symlink resumed>) = 0 [pid 7227] close(9 [pid 7270] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu" [pid 7227] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7270] <... symlink resumed>) = 0 [pid 7227] close(10 [pid 7270] symlink("/syzcgroup/net/syz2", "./cgroup.net" [pid 7227] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7270] <... symlink resumed>) = 0 [pid 7227] close(11 [pid 7270] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7227] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7270] <... openat resumed>) = 3 [pid 7227] close(12 [pid 7270] write(3, "1000", 4 [pid 7227] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7270] <... write resumed>) = 4 [pid 7227] close(13 [pid 5826] <... umount2 resumed>) = 0 [pid 7270] close(3 [pid 7227] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5826] umount2("./29/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7270] <... close resumed>) = 0 [pid 7227] close(14 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7270] symlink("/dev/binderfs", "./binderfs" [pid 7227] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5826] newfstatat(AT_FDCWD, "./29/file0", [pid 7270] <... symlink resumed>) = 0 [pid 7227] close(15executing program [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7270] write(1, "executing program\n", 18 [pid 7227] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7270] <... write resumed>) = 18 [pid 7227] close(16 [pid 7270] memfd_create("syzkaller", 0 [pid 7269] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 7227] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7227] close(17) = -1 EBADF (Bad file descriptor) [pid 7227] close(18) = -1 EBADF (Bad file descriptor) [pid 7227] close(19) = -1 EBADF (Bad file descriptor) [pid 7227] close(20) = -1 EBADF (Bad file descriptor) [pid 7227] close(21) = -1 EBADF (Bad file descriptor) [pid 7227] close(22) = -1 EBADF (Bad file descriptor) [pid 7227] close(23) = -1 EBADF (Bad file descriptor) [pid 7227] close(24) = -1 EBADF (Bad file descriptor) [pid 7227] close(25) = -1 EBADF (Bad file descriptor) [pid 7227] close(26) = -1 EBADF (Bad file descriptor) [pid 7227] close(27) = -1 EBADF (Bad file descriptor) [pid 7227] close(28) = -1 EBADF (Bad file descriptor) [pid 7227] close(29) = -1 EBADF (Bad file descriptor) [pid 7227] exit_group(0) = ? [pid 7227] +++ exited with 0 +++ [pid 5826] umount2("./29/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] openat(AT_FDCWD, "./29/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=33, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=46 /* 0.46 s */} --- [pid 5825] restart_syscall(<... resuming interrupted clone ...> [pid 5826] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5826] getdents64(4, 0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5826] getdents64(4, 0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5825] <... restart_syscall resumed>) = 0 [pid 5826] close(4) = 0 [pid 5825] umount2("./31", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] rmdir("./29/file0" [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... rmdir resumed>) = 0 [pid 5825] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] getdents64(3, [pid 5825] <... openat resumed>) = 3 [pid 5826] <... getdents64 resumed>0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5825] newfstatat(3, "", [pid 5826] close(3 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5826] <... close resumed>) = 0 [pid 5825] getdents64(3, [pid 5826] rmdir("./29" [pid 5825] <... getdents64 resumed>0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5826] <... rmdir resumed>) = 0 [pid 5825] umount2("./31/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] mkdir("./30", 0777 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... mkdir resumed>) = 0 [pid 5825] newfstatat(AT_FDCWD, "./31/cgroup", [pid 5826] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] <... openat resumed>) = 3 [pid 5825] unlink("./31/cgroup" [pid 5826] ioctl(3, LOOP_CLR_FD [pid 5825] <... unlink resumed>) = 0 [pid 5826] <... ioctl resumed>) = 0 [pid 5825] umount2("./31/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] close(3 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./31/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./31/cgroup.cpu") = 0 [pid 5825] umount2("./31/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./31/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./31/cgroup.net") = 0 [pid 5825] umount2("./31/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./31/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./31/binderfs") = 0 [pid 5825] umount2("./31/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7270] <... memfd_create resumed>) = 3 [pid 7270] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaaaa00000 [ 153.600270][ T5825] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 5826] <... close resumed>) = 0 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7271 attached [pid 7271] set_robust_list(0x55558159a660, 24 [pid 5826] <... clone resumed>, child_tidptr=0x55558159a650) = 32 [pid 7271] <... set_robust_list resumed>) = 0 [pid 7271] chdir("./30") = 0 [pid 7271] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7271] setpgid(0, 0 [pid 5825] <... umount2 resumed>) = 0 [pid 7271] <... setpgid resumed>) = 0 [pid 5825] umount2("./31/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7271] symlink("/syzcgroup/unified/syz4", "./cgroup") = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7271] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu") = 0 [pid 5825] newfstatat(AT_FDCWD, "./31/file0", [pid 7271] symlink("/syzcgroup/net/syz4", "./cgroup.net" [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7271] <... symlink resumed>) = 0 [pid 5825] umount2("./31/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7271] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7271] <... openat resumed>) = 3 [pid 7271] write(3, "1000", 4) = 4 [pid 7271] close(3 [pid 5825] openat(AT_FDCWD, "./31/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7271] <... close resumed>) = 0 [pid 7271] symlink("/dev/binderfs", "./binderfs" [pid 5825] <... openat resumed>) = 4 [pid 5825] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(4, 0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 5825] getdents64(4, 0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5825] close(4 [pid 7271] <... symlink resumed>) = 0 [pid 5825] <... close resumed>) = 0 [pid 5825] rmdir("./31/file0") = 0 [pid 5825] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5825] close(3) = 0 [pid 5825] rmdir("./31"executing program [pid 7271] write(1, "executing program\n", 18 [pid 5825] <... rmdir resumed>) = 0 [pid 7271] <... write resumed>) = 18 [pid 5825] mkdir("./32", 0777) = 0 [pid 7271] memfd_create("syzkaller", 0) = 3 [pid 5825] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7271] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5825] <... openat resumed>) = 3 [pid 7271] <... mmap resumed>) = 0x7fbaaaa00000 [pid 5825] ioctl(3, LOOP_CLR_FD) = 0 [pid 5825] close(3 [pid 7268] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 5825] <... close resumed>) = 0 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7272 attached [pid 7272] set_robust_list(0x55558159a660, 24 [pid 5825] <... clone resumed>, child_tidptr=0x55558159a650) = 34 [pid 7272] <... set_robust_list resumed>) = 0 [pid 7272] chdir("./32") = 0 [pid 7272] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7272] setpgid(0, 0) = 0 [pid 7272] symlink("/syzcgroup/unified/syz3", "./cgroup") = 0 [pid 7272] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu") = 0 [pid 7272] symlink("/syzcgroup/net/syz3", "./cgroup.net") = 0 [pid 7272] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7272] write(3, "1000", 4) = 4 [pid 7272] close(3) = 0 [pid 7272] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7272] write(1, "executing program\n", 18executing program ) = 18 [pid 7272] memfd_create("syzkaller", 0) = 3 [pid 7272] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaaaa00000 [pid 7270] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 7269] <... write resumed>) = 33554432 [pid 7269] munmap(0x7fbaaaa00000, 138412032) = 0 [pid 7269] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 7269] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7269] close(3) = 0 [pid 7269] close(4) = 0 [pid 7269] mkdir("./file0", 0777) = 0 [pid 7269] mount("/dev/loop1", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [ 154.352578][ T7269] loop1: detected capacity change from 0 to 65536 [pid 7271] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 7272] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x73\x48\xe5\x2f\xa0\x41\xa5\x95\x26\xc5\x3a\x67\x8b\x01\xf3\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432 [pid 7270] <... write resumed>) = 33554432 [pid 7270] munmap(0x7fbaaaa00000, 138412032 [pid 7268] <... write resumed>) = 33554432 [pid 7268] munmap(0x7fbaaaa00000, 138412032 [pid 7270] <... munmap resumed>) = 0 [pid 7270] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [ 154.729128][ T7269] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 7270] ioctl(4, LOOP_SET_FD, 3 [pid 7268] <... munmap resumed>) = 0 [pid 7270] <... ioctl resumed>) = 0 [pid 7268] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7268] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7268] close(3) = 0 [pid 7268] close(4) = 0 [pid 7270] close(3 [pid 7269] <... mount resumed>) = 0 [pid 7268] mkdir("./file0", 0777) = 0 [pid 7268] mount("/dev/loop0", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 7270] <... close resumed>) = 0 [pid 7269] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7269] chdir("./file0") = 0 [pid 7269] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7269] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 4 [ 154.792341][ T7270] loop2: detected capacity change from 0 to 65536 [ 154.807489][ T7268] loop0: detected capacity change from 0 to 65536 [ 154.817226][ T7269] XFS (loop1): Ending clean mount [pid 7269] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [ 154.855966][ T9] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 154.869811][ T9] XFS (loop1): Unmount and run xfs_repair [ 154.875576][ T9] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 154.877341][ T29] audit: type=1800 audit(1733456452.346:160): pid=7269 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop1" ino=41 res=0 errno=0 [ 154.883032][ T9] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 154.911773][ T9] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 154.920718][ T9] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 154.929621][ T9] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 154.938584][ T9] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 154.947485][ T9] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [pid 7270] close(4 [pid 7271] <... write resumed>) = 33554432 [pid 7270] <... close resumed>) = 0 [pid 7270] mkdir("./file0", 0777 [pid 7271] munmap(0x7fbaaaa00000, 138412032 [pid 7270] <... mkdir resumed>) = 0 [ 154.956350][ T9] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 154.965277][ T9] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 154.975040][ T7269] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [pid 7270] mount("/dev/loop2", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 7271] <... munmap resumed>) = 0 [pid 7269] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 7271] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7269] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000 [pid 7271] <... openat resumed>) = 4 [pid 7269] <... openat resumed>) = -1 EFAULT (Bad address) [pid 7271] ioctl(4, LOOP_SET_FD, 3 [pid 7269] close(3) = 0 [pid 7269] close(4) = 0 [pid 7269] close(5) = -1 EBADF (Bad file descriptor) [pid 7269] close(6) = -1 EBADF (Bad file descriptor) [pid 7269] close(7) = -1 EBADF (Bad file descriptor) [pid 7269] close(8) = -1 EBADF (Bad file descriptor) [ 155.002263][ T7268] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 155.013944][ T7269] XFS (loop1): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 155.029693][ T7269] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [pid 7269] close(9) = -1 EBADF (Bad file descriptor) [pid 7269] close(10) = -1 EBADF (Bad file descriptor) [pid 7269] close(11) = -1 EBADF (Bad file descriptor) [pid 7269] close(12) = -1 EBADF (Bad file descriptor) [pid 7269] close(13) = -1 EBADF (Bad file descriptor) [pid 7269] close(14) = -1 EBADF (Bad file descriptor) [pid 7269] close(15) = -1 EBADF (Bad file descriptor) [pid 7269] close(16) = -1 EBADF (Bad file descriptor) [pid 7269] close(17) = -1 EBADF (Bad file descriptor) [pid 7269] close(18) = -1 EBADF (Bad file descriptor) [pid 7269] close(19) = -1 EBADF (Bad file descriptor) [pid 7269] close(20) = -1 EBADF (Bad file descriptor) [pid 7269] close(21) = -1 EBADF (Bad file descriptor) [pid 7269] close(22) = -1 EBADF (Bad file descriptor) [pid 7269] close(23) = -1 EBADF (Bad file descriptor) [pid 7269] close(24) = -1 EBADF (Bad file descriptor) [pid 7269] close(25) = -1 EBADF (Bad file descriptor) [pid 7269] close(26) = -1 EBADF (Bad file descriptor) [pid 7269] close(27) = -1 EBADF (Bad file descriptor) [pid 7269] close(28) = -1 EBADF (Bad file descriptor) [pid 7269] close(29) = -1 EBADF (Bad file descriptor) [pid 7269] exit_group(0) = ? [pid 7269] +++ exited with 0 +++ [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=35, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=49 /* 0.49 s */} --- [pid 7271] <... ioctl resumed>) = 0 [pid 5824] umount2("./33", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7271] close(3 [pid 7268] <... mount resumed>) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7271] <... close resumed>) = 0 [pid 5824] openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7271] close(4 [pid 7268] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7271] <... close resumed>) = 0 [pid 7268] <... openat resumed>) = 3 [pid 5824] <... openat resumed>) = 3 [pid 7271] mkdir("./file0", 0777 [pid 7268] chdir("./file0" [pid 5824] newfstatat(3, "", [pid 7271] <... mkdir resumed>) = 0 [pid 7268] <... chdir resumed>) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 7268] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5824] getdents64(3, [pid 7268] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5824] <... getdents64 resumed>0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 7268] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 5824] umount2("./33/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./33/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 155.054686][ T7271] loop4: detected capacity change from 0 to 65536 [ 155.062068][ T7270] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 155.075765][ T7268] XFS (loop0): Ending clean mount [pid 5824] unlink("./33/cgroup" [pid 7268] <... open resumed>) = 4 [pid 7268] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5824] <... unlink resumed>) = 0 [pid 7271] mount("/dev/loop4", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 5824] umount2("./33/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 155.097899][ T29] audit: type=1800 audit(1733456452.596:161): pid=7268 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop0" ino=41 res=0 errno=0 [ 155.123665][ T8] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 155.135289][ T8] XFS (loop0): Unmount and run xfs_repair [pid 5824] newfstatat(AT_FDCWD, "./33/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./33/cgroup.cpu") = 0 [pid 5824] umount2("./33/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./33/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./33/cgroup.net") = 0 [ 155.142053][ T8] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 155.153566][ T7271] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 155.153752][ T8] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 155.173252][ T8] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 155.183600][ T8] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [pid 5824] umount2("./33/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./33/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./33/binderfs") = 0 [ 155.194052][ T8] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 155.203356][ T8] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 155.213831][ T8] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 155.224082][ T8] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 155.234341][ T8] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [pid 5824] umount2("./33/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7270] <... mount resumed>) = 0 [pid 7270] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7270] chdir("./file0") = 0 [pid 7270] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7270] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 7271] <... mount resumed>) = 0 [pid 7271] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7271] chdir("./file0") = 0 [pid 7270] <... open resumed>) = 4 [pid 7271] openat(AT_FDCWD, "/dev/loop4", O_RDWR [ 155.247074][ T5824] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 155.257152][ T7270] XFS (loop2): Ending clean mount [ 155.266323][ T7271] XFS (loop4): Ending clean mount [ 155.268175][ T7268] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [pid 7270] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 7271] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 155.285626][ T29] audit: type=1800 audit(1733456452.786:162): pid=7270 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop2" ino=41 res=0 errno=0 [ 155.311462][ T8] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 155.324075][ T8] XFS (loop2): Unmount and run xfs_repair [ 155.330040][ T8] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 155.337665][ T8] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [pid 7271] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 4 [ 155.346731][ T8] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 155.355992][ T8] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 155.356010][ T29] audit: type=1800 audit(1733456452.846:163): pid=7271 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor345" name="bus" dev="loop4" ino=41 res=0 errno=0 [ 155.364896][ T8] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [pid 7271] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5824] <... umount2 resumed>) = 0 [ 155.388237][ T7271] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x6 [ 155.393739][ T8] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 155.404866][ T7268] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 155.413621][ T8] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 155.413639][ T8] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [pid 7272] <... write resumed>) = 33554432 [pid 7268] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [ 155.413654][ T8] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 155.426647][ T7271] XFS (loop4): Unmount and run xfs_repair [ 155.432912][ T7268] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 155.437947][ T7270] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [ 155.455382][ T7271] XFS (loop4): First 128 bytes of corrupted metadata buffer: [pid 5824] umount2("./33/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7272] munmap(0x7fbaaaa00000, 138412032 [pid 7268] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7270] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 7270] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000) = -1 EFAULT (Bad address) [pid 7270] close(3) = 0 [pid 7270] close(4) = 0 [pid 7270] close(5) = -1 EBADF (Bad file descriptor) [pid 7270] close(6) = -1 EBADF (Bad file descriptor) [pid 7270] close(7) = -1 EBADF (Bad file descriptor) [pid 7270] close(8) = -1 EBADF (Bad file descriptor) [pid 7270] close(9) = -1 EBADF (Bad file descriptor) [pid 7270] close(10) = -1 EBADF (Bad file descriptor) [pid 7270] close(11) = -1 EBADF (Bad file descriptor) [pid 7270] close(12) = -1 EBADF (Bad file descriptor) [pid 7270] close(13) = -1 EBADF (Bad file descriptor) [pid 7270] close(14) = -1 EBADF (Bad file descriptor) [pid 7270] close(15) = -1 EBADF (Bad file descriptor) [pid 7270] close(16) = -1 EBADF (Bad file descriptor) [pid 7270] close(17) = -1 EBADF (Bad file descriptor) [pid 7270] close(18) = -1 EBADF (Bad file descriptor) [pid 7270] close(19) = -1 EBADF (Bad file descriptor) [pid 7270] close(20) = -1 EBADF (Bad file descriptor) [pid 7270] close(21) = -1 EBADF (Bad file descriptor) [pid 7270] close(22) = -1 EBADF (Bad file descriptor) [pid 7270] close(23) = -1 EBADF (Bad file descriptor) [pid 7270] close(24) = -1 EBADF (Bad file descriptor) [pid 7270] close(25) = -1 EBADF (Bad file descriptor) [pid 7270] close(26) = -1 EBADF (Bad file descriptor) [pid 7270] close(27) = -1 EBADF (Bad file descriptor) [pid 7270] close(28) = -1 EBADF (Bad file descriptor) [pid 7270] close(29) = -1 EBADF (Bad file descriptor) [pid 7270] exit_group(0) = ? [pid 7270] +++ exited with 0 +++ [pid 7268] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5824] newfstatat(AT_FDCWD, "./33/file0", [ 155.463933][ T7270] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 155.470587][ T7271] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 155.480351][ T7270] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 155.488251][ T7271] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 155.540631][ T7271] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [pid 7268] close(3) = 0 [pid 7272] <... munmap resumed>) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=33, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=49 /* 0.49 s */} --- [pid 7272] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5823] restart_syscall(<... resuming interrupted clone ...> [pid 7272] <... openat resumed>) = 4 [pid 5823] <... restart_syscall resumed>) = 0 [pid 7272] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7268] close(4 [pid 5824] umount2("./33/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7272] close(3 [pid 5823] umount2("./31", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7272] <... close resumed>) = 0 [pid 5823] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7272] close(4 [pid 5823] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7272] <... close resumed>) = 0 [pid 5823] <... openat resumed>) = 3 [pid 7272] mkdir("./file0", 0777 [pid 5823] newfstatat(3, "", [pid 7272] <... mkdir resumed>) = 0 [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 7272] mount("/dev/loop3", "./file0", "xfs", MS_NOSUID|MS_MANDLOCK|MS_RELATIME|MS_LAZYTIME, ",nouuid" [pid 5823] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5823] umount2("./31/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./31/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./31/cgroup") = 0 [pid 5823] umount2("./31/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./31/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./31/cgroup.cpu") = 0 [pid 5823] umount2("./31/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./31/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 155.549856][ T7271] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 155.559227][ T7271] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 155.565390][ T7272] loop3: detected capacity change from 0 to 65536 [ 155.568767][ T7271] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [pid 7268] <... close resumed>) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] unlink("./31/cgroup.net") = 0 [pid 5823] umount2("./31/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] newfstatat(AT_FDCWD, "./31/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5823] unlink("./31/binderfs") = 0 [pid 5823] umount2("./31/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7268] close(5 [pid 5824] openat(AT_FDCWD, "./33/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7268] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] <... openat resumed>) = 4 [pid 7268] close(6 [pid 5824] newfstatat(4, "", [pid 7268] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7268] close(7 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [ 155.594544][ T7271] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 155.603866][ T5823] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 155.604252][ T7271] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 155.617539][ T7272] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 155.622247][ T7271] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x6 len 2 error 74 [pid 7268] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] getdents64(4, [pid 7268] close(8 [pid 5824] <... getdents64 resumed>0x5555815a3730 /* 2 entries */, 32768) = 48 [pid 7268] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7268] close(9) = -1 EBADF (Bad file descriptor) [pid 7268] close(10) = -1 EBADF (Bad file descriptor) [pid 7268] close(11) = -1 EBADF (Bad file descriptor) [pid 7268] close(12) = -1 EBADF (Bad file descriptor) [pid 7268] close(13) = -1 EBADF (Bad file descriptor) [pid 7268] close(14) = -1 EBADF (Bad file descriptor) [pid 7268] close(15) = -1 EBADF (Bad file descriptor) [pid 7268] close(16) = -1 EBADF (Bad file descriptor) [pid 7268] close(17) = -1 EBADF (Bad file descriptor) [pid 7268] close(18) = -1 EBADF (Bad file descriptor) [pid 7268] close(19) = -1 EBADF (Bad file descriptor) [pid 7268] close(20) = -1 EBADF (Bad file descriptor) [pid 7268] close(21) = -1 EBADF (Bad file descriptor) [pid 7268] close(22) = -1 EBADF (Bad file descriptor) [pid 7268] close(23) = -1 EBADF (Bad file descriptor) [pid 7268] close(24) = -1 EBADF (Bad file descriptor) [pid 7268] close(25) = -1 EBADF (Bad file descriptor) [pid 7268] close(26) = -1 EBADF (Bad file descriptor) [pid 7268] close(27) = -1 EBADF (Bad file descriptor) [pid 7268] close(28) = -1 EBADF (Bad file descriptor) [pid 7268] close(29) = -1 EBADF (Bad file descriptor) [pid 7268] exit_group(0) = ? [pid 5824] getdents64(4, 0x5555815a3730 /* 0 entries */, 32768) = 0 [pid 5824] close(4) = 0 [pid 5824] rmdir("./33/file0") = 0 [pid 5824] getdents64(3, 0x55558159b6f0 /* 0 entries */, 32768) = 0 [pid 5824] close(3) = 0 [pid 5824] rmdir("./33") = 0 [pid 5824] mkdir("./34", 0777 [pid 7268] +++ exited with 0 +++ [pid 5824] <... mkdir resumed>) = 0 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5821] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=34, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=47 /* 0.47 s */} --- [pid 5824] ioctl(3, LOOP_CLR_FD) = 0 [pid 5824] close(3 [pid 5821] umount2("./32", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 155.677142][ T7271] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 155.692712][ T7271] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [pid 5821] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7271] <... mknod resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 7271] openat(AT_FDCWD, NULL, O_RDONLY|O_CREAT|O_DIRECT|O_LARGEFILE, 000) = -1 EFAULT (Bad address) [pid 7271] close(3) = 0 [pid 7271] close(4) = 0 [pid 7271] close(5) = -1 EBADF (Bad file descriptor) [pid 7271] close(6) = -1 EBADF (Bad file descriptor) [pid 7271] close(7) = -1 EBADF (Bad file descriptor) [pid 7271] close(8) = -1 EBADF (Bad file descriptor) [pid 7271] close(9) = -1 EBADF (Bad file descriptor) [pid 7271] close(10) = -1 EBADF (Bad file descriptor) [pid 7271] close(11) = -1 EBADF (Bad file descriptor) [pid 7271] close(12) = -1 EBADF (Bad file descriptor) [pid 7271] close(13) = -1 EBADF (Bad file descriptor) [pid 7271] close(14) = -1 EBADF (Bad file descriptor) [pid 7271] close(15) = -1 EBADF (Bad file descriptor) [pid 7271] close(16) = -1 EBADF (Bad file descriptor) [pid 7271] close(17) = -1 EBADF (Bad file descriptor) [pid 7271] close(18) = -1 EBADF (Bad file descriptor) [pid 7271] close(19) = -1 EBADF (Bad file descriptor) [pid 7271] close(20) = -1 EBADF (Bad file descriptor) [pid 7271] close(21) = -1 EBADF (Bad file descriptor) [pid 7271] close(22) = -1 EBADF (Bad file descriptor) [pid 7271] close(23) = -1 EBADF (Bad file descriptor) [pid 7271] close(24) = -1 EBADF (Bad file descriptor) [pid 7271] close(25) = -1 EBADF (Bad file descriptor) [pid 7271] close(26) = -1 EBADF (Bad file descriptor) [pid 7271] close(27) = -1 EBADF (Bad file descriptor) [pid 7271] close(28) = -1 EBADF (Bad file descriptor) [pid 7271] close(29) = -1 EBADF (Bad file descriptor) [pid 7271] exit_group(0) = ? [pid 7271] +++ exited with 0 +++ [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=32, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=65 /* 0.65 s */} --- [pid 5826] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5826] umount2("./30", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5826] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5826] getdents64(3, 0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 5826] umount2("./30/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./30/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./30/cgroup") = 0 [pid 5826] umount2("./30/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./30/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./30/cgroup.cpu") = 0 [pid 5826] umount2("./30/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./30/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./30/cgroup.net") = 0 [pid 5826] umount2("./30/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./30/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./30/binderfs") = 0 [pid 5826] umount2("./30/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] <... openat resumed>) = 3 [pid 5824] <... close resumed>) = 0 [ 155.773928][ T5826] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [pid 5821] newfstatat(3, "", [pid 7272] <... mount resumed>) = 0 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5821] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 7272] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY./strace-static-x86_64: Process 7313 attached ) = 3 [pid 5821] getdents64(3, [pid 7313] set_robust_list(0x55558159a660, 24 [pid 7272] chdir("./file0" [pid 5824] <... clone resumed>, child_tidptr=0x55558159a650) = 36 [pid 5821] <... getdents64 resumed>0x55558159b6f0 /* 7 entries */, 32768) = 208 [pid 7313] <... set_robust_list resumed>) = 0 [pid 7272] <... chdir resumed>) = 0 [pid 5821] umount2("./32/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7313] chdir("./34" [pid 7272] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7313] <... chdir resumed>) = 0 [pid 7272] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5821] newfstatat(AT_FDCWD, "./32/cgroup", [pid 7313] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7272] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 5821] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7313] <... prctl resumed>) = 0 [pid 5821] unlink("./32/cgroup") = 0 [pid 7313] setpgid(0, 0 [ 155.833789][ T7304] ================================================================== [ 155.841903][ T7304] BUG: KASAN: slab-use-after-free in xfs_inode_item_push+0x293/0x2e0 [ 155.843729][ T7272] XFS (loop3): Ending clean mount [ 155.849972][ T7304] Read of size 8 at addr ffff888077d1d030 by task xfsaild/loop4/7304 [ 155.849990][ T7304] [ 155.850026][ T7304] CPU: 0 UID: 0 PID: 7304 Comm: xfsaild/loop4 Not tainted 6.13.0-rc1-syzkaller-00036-g5076001689e4 #0 [ 155.876402][ T7304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 155.886493][ T7304] Call Trace: [ 155.889786][ T7304] [ 155.892712][ T7304] dump_stack_lvl+0x241/0x360 [ 155.897387][ T7304] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.902577][ T7304] ? __pfx__printk+0x10/0x10 [ 155.907157][ T7304] ? _printk+0xd5/0x120 [ 155.911302][ T7304] ? __virt_addr_valid+0x183/0x530 [ 155.916402][ T7304] ? __virt_addr_valid+0x183/0x530 [ 155.921503][ T7304] print_report+0x169/0x550 [ 155.925995][ T7304] ? __virt_addr_valid+0x183/0x530 [ 155.931096][ T7304] ? __virt_addr_valid+0x183/0x530 [ 155.936193][ T7304] ? __virt_addr_valid+0x45f/0x530 [ 155.941294][ T7304] ? __phys_addr+0xba/0x170 [ 155.945786][ T7304] ? xfs_inode_item_push+0x293/0x2e0 [ 155.951059][ T7304] kasan_report+0x143/0x180 [ 155.955548][ T7304] ? xfs_iflush_cluster+0xe3e/0x11f0 [ 155.960821][ T7304] ? xfs_inode_item_push+0x293/0x2e0 [ 155.966098][ T7304] xfs_inode_item_push+0x293/0x2e0 [ 155.971199][ T7304] xfsaild+0x1125/0x2dc0 [ 155.975439][ T7304] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 155.981340][ T7304] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 155.987660][ T7304] ? xfsaild+0x236/0x2dc0 [ 155.992153][ T7304] ? __pfx_xfsaild+0x10/0x10 [ 155.996733][ T7304] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 156.002617][ T7304] ? __kthread_parkme+0x169/0x1d0 [ 156.007630][ T7304] ? __pfx_xfsaild+0x10/0x10 [ 156.012211][ T7304] kthread+0x2f0/0x390 [ 156.016270][ T7304] ? __pfx_xfsaild+0x10/0x10 [ 156.020950][ T7304] ? __pfx_kthread+0x10/0x10 [ 156.025526][ T7304] ret_from_fork+0x4b/0x80 [ 156.029926][ T7304] ? __pfx_kthread+0x10/0x10 [ 156.034505][ T7304] ret_from_fork_asm+0x1a/0x30 [ 156.039265][ T7304] [ 156.042269][ T7304] [ 156.044586][ T7304] Allocated by task 7271: [ 156.048896][ T7304] kasan_save_track+0x3f/0x80 [ 156.053565][ T7304] __kasan_slab_alloc+0x66/0x80 [ 156.058423][ T7304] kmem_cache_alloc_noprof+0x1d9/0x380 [ 156.063876][ T7304] xfs_inode_item_init+0x33/0xc0 [ 156.068799][ T7304] xfs_trans_ijoin+0xeb/0x130 [ 156.073474][ T7304] xfs_create+0x8a0/0xf50 [ 156.077793][ T7304] xfs_generic_create+0x5d5/0xf50 [ 156.082803][ T7304] path_openat+0x1c03/0x3590 [ 156.087388][ T7304] do_filp_open+0x27f/0x4e0 [ 156.091880][ T7304] do_sys_openat2+0x13e/0x1d0 [ 156.096544][ T7304] __x64_sys_open+0x225/0x270 [ 156.101209][ T7304] do_syscall_64+0xf3/0x230 [ 156.105703][ T7304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.111589][ T7304] [ 156.113899][ T7304] Freed by task 24: [ 156.117687][ T7304] kasan_save_track+0x3f/0x80 [ 156.122354][ T7304] kasan_save_free_info+0x40/0x50 [ 156.127363][ T7304] __kasan_slab_free+0x59/0x70 [ 156.132117][ T7304] kmem_cache_free+0x195/0x410 [ 156.136865][ T7304] xfs_inode_free_callback+0x152/0x1d0 [ 156.142308][ T7304] rcu_core+0xaaa/0x17a0 [ 156.146537][ T7304] handle_softirqs+0x2d4/0x9b0 [ 156.151303][ T7304] run_ksoftirqd+0xca/0x130 [ 156.155790][ T7304] smpboot_thread_fn+0x544/0xa30 [ 156.160720][ T7304] kthread+0x2f0/0x390 [ 156.164772][ T7304] ret_from_fork+0x4b/0x80 [ 156.169174][ T7304] ret_from_fork_asm+0x1a/0x30 [ 156.173930][ T7304] [ 156.176241][ T7304] The buggy address belongs to the object at ffff888077d1d000 [ 156.176241][ T7304] which belongs to the cache xfs_ili of size 264 [ 156.189931][ T7304] The buggy address is located 48 bytes inside of [ 156.189931][ T7304] freed 264-byte region [ffff888077d1d000, ffff888077d1d108) [ 156.203641][ T7304] [ 156.205973][ T7304] The buggy address belongs to the physical page: [ 156.212399][ T7304] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x77d1d [ 156.221169][ T7304] ksm flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 156.228643][ T7304] page_type: f5(slab) [ 156.232618][ T7304] raw: 00fff00000000000 ffff88801bb3edc0 ffffea0001af8880 0000000000000003 [ 156.241195][ T7304] raw: 0000000000000000 00000000800c000c 00000001f5000000 0000000000000000 [ 156.249765][ T7304] page dumped because: kasan: bad access detected [ 156.256175][ T7304] page_owner tracks the page as allocated [ 156.261878][ T7304] page last allocated via order 0, migratetype Reclaimable, gfp_mask 0x52c50(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_RECLAIMABLE), pid 5969, tgid 5969 (syz-executor345), ts 74389899184, free_ts 16768254642 [ 156.282960][ T7304] post_alloc_hook+0x1f3/0x230 [ 156.287717][ T7304] get_page_from_freelist+0x3651/0x37a0 [ 156.293256][ T7304] __alloc_pages_noprof+0x292/0x710 [ 156.298446][ T7304] alloc_pages_mpol_noprof+0x3e8/0x680 [ 156.303889][ T7304] alloc_slab_page+0x6a/0x140 [ 156.308555][ T7304] allocate_slab+0x5a/0x2f0 [ 156.313047][ T7304] ___slab_alloc+0xcd1/0x14b0 [ 156.317710][ T7304] __slab_alloc+0x58/0xa0 [ 156.322025][ T7304] kmem_cache_alloc_noprof+0x268/0x380 [ 156.327476][ T7304] xfs_inode_item_init+0x33/0xc0 [ 156.332407][ T7304] xfs_trans_ijoin+0xeb/0x130 [ 156.337072][ T7304] xfs_icreate+0x13a/0x1f0 [ 156.341479][ T7304] xfs_create+0x858/0xf50 [ 156.345795][ T7304] xfs_generic_create+0x5d5/0xf50 [ 156.350815][ T7304] vfs_create+0x23c/0x3d0 [ 156.355133][ T7304] do_mknodat+0x447/0x5b0 [ 156.359453][ T7304] page last free pid 1 tgid 1 stack trace: [ 156.365264][ T7304] free_unref_page+0xde3/0x1130 [ 156.370131][ T7304] free_contig_range+0x152/0x550 [ 156.375066][ T7304] destroy_args+0x92/0x910 [ 156.379478][ T7304] debug_vm_pgtable+0x4be/0x550 [ 156.384327][ T7304] do_one_initcall+0x248/0x870 [ 156.389089][ T7304] do_initcall_level+0x157/0x210 [ 156.394043][ T7304] do_initcalls+0x3f/0x80 [ 156.398373][ T7304] kernel_init_freeable+0x435/0x5d0 [ 156.403563][ T7304] kernel_init+0x1d/0x2b0 [ 156.407882][ T7304] ret_from_fork+0x4b/0x80 [ 156.412285][ T7304] ret_from_fork_asm+0x1a/0x30 [ 156.417040][ T7304] [ 156.419350][ T7304] Memory state around the buggy address: [ 156.424962][ T7304] ffff888077d1cf00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 156.433010][ T7304] ffff888077d1cf80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 156.441063][ T7304] >ffff888077d1d000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 156.449105][ T7304] ^ [ 156.454717][ T7304] ffff888077d1d080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 156.462773][ T7304] ffff888077d1d100: fb fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb [ 156.470818][ T7304] ================================================================== [ 156.480438][ T7304] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 156.487644][ T7304] CPU: 0 UID: 0 PID: 7304 Comm: xfsaild/loop4 Not tainted 6.13.0-rc1-syzkaller-00036-g5076001689e4 #0 [ 156.498655][ T7304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 156.508697][ T7304] Call Trace: [ 156.511966][ T7304] [ 156.514888][ T7304] dump_stack_lvl+0x241/0x360 [ 156.519560][ T7304] ? __pfx_dump_stack_lvl+0x10/0x10 [ 156.524753][ T7304] ? __pfx__printk+0x10/0x10 [ 156.529333][ T7304] ? preempt_schedule+0xe1/0xf0 [ 156.534180][ T7304] ? vscnprintf+0x5d/0x90 [ 156.538500][ T7304] panic+0x349/0x880 [ 156.542388][ T7304] ? check_panic_on_warn+0x21/0xb0 [ 156.547494][ T7304] ? __pfx_panic+0x10/0x10 [ 156.551902][ T7304] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 156.557884][ T7304] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 156.564218][ T7304] ? print_report+0x502/0x550 [ 156.568893][ T7304] check_panic_on_warn+0x86/0xb0 [ 156.573830][ T7304] ? xfs_inode_item_push+0x293/0x2e0 [ 156.579115][ T7304] end_report+0x77/0x160 [ 156.583351][ T7304] kasan_report+0x154/0x180 [ 156.587848][ T7304] ? xfs_iflush_cluster+0xe3e/0x11f0 [ 156.593122][ T7304] ? xfs_inode_item_push+0x293/0x2e0 [ 156.598408][ T7304] xfs_inode_item_push+0x293/0x2e0 [ 156.603511][ T7304] xfsaild+0x1125/0x2dc0 [ 156.607758][ T7304] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 156.613648][ T7304] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 156.619964][ T7304] ? xfsaild+0x236/0x2dc0 [ 156.624287][ T7304] ? __pfx_xfsaild+0x10/0x10 [ 156.628867][ T7304] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 156.634754][ T7304] ? __kthread_parkme+0x169/0x1d0 [ 156.639775][ T7304] ? __pfx_xfsaild+0x10/0x10 [ 156.644353][ T7304] kthread+0x2f0/0x390 [ 156.648417][ T7304] ? __pfx_xfsaild+0x10/0x10 [ 156.652997][ T7304] ? __pfx_kthread+0x10/0x10 [ 156.657584][ T7304] ret_from_fork+0x4b/0x80 [ 156.661989][ T7304] ? __pfx_kthread+0x10/0x10 [ 156.666566][ T7304] ret_from_fork_asm+0x1a/0x30 [ 156.671326][ T7304] [ 156.674593][ T7304] Kernel Offset: disabled [ 156.678903][ T7304] Rebooting in 86400 seconds..